last executing test programs: 5.942501263s ago: executing program 1 (id=439): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = io_uring_setup(0x3bb3, &(0x7f0000000600)={0x0, 0x653f, 0x80, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) 5.540498945s ago: executing program 3 (id=440): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00060000000c009b12f4"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, 0x0, &(0x7f0000000400)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}}], 0x1, 0x102, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 4.546816692s ago: executing program 1 (id=443): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000500), 0x4) 4.546252654s ago: executing program 3 (id=444): r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) sendto$llc(0xffffffffffffffff, &(0x7f0000000640)="bf0cf2ed670f130a55a79aca9659b17e9f7c36e06a7544ed5f73a77a9f01107e2618db34bf512fa431d687bf662c48baf592521b49d3c2", 0x37, 0x20000850, &(0x7f0000000680)={0x1a, 0x303, 0x1, 0x81, 0x0, 0xfd}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="01000000030000000411c6f7a6b29a79d6000100f102dcf29effae15cd000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = memfd_secret(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8090, 0x40, 0x7b, 0x5, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x65, 0x0, 0xfa, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x7, 0x1, 0x8, [{@remote, 0x400}, {@empty, 0x7}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x7fffffff}]}]}}}}}) r5 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000002c0)={0x9, 0x1, 0x0, "db201651a16fd018782c71f2c08187822d55b056383c3edeb939d255e9e4bb90"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pi6 \x00'}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x30000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4, 0x1, 0x9, 0x0, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x4, 0x61f, 0x10}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[r6], &(0x7f0000000a40)=[{0x4, 0x2, 0x8, 0xa}, {0x5, 0x3, 0xa, 0x5}, {0x2, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x1, 0x4}, {0x2, 0x1, 0xc}, {0x0, 0x2, 0x6, 0xb}, {0x3, 0x4, 0xc}], 0x10, 0x1ff}, 0x94) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x2010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1100000004000000ff00000004000000c8300000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ffff0000000000004200b2bc04e24764531256ce4979ad67e95abe55"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x2, 0x7, {0xffffffffffffffff}, {}, 0x6, 0x2}) syz_open_procfs(r9, &(0x7f0000000340)='net/rt_cache\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000040000f2ffffff000700000085100000fbffffff186400000300000000000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r10 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000540)="8a3689191813dc9001f1b00d57173be69912c162550e1da84fa6fd2d189f3741eea6fb262f0492ef4566a429ca137c0640fc249c6359185e39963b79967c2061a8b6da673da63a6ba0a13b64c362d80d467b0714c32f043a0c7c74ca74761a3942ff01aa4aab9f71c83752dca7f0556fb2adee56349fdb00d9b60bf8d86cfb3ceda0ad90cb5411d00f80aef2199360a6f98346137bbaa352154b6808b0967d9ef56629128d5b24eca807dec24b582fa09d99f2226870ad26fe2681469c90c4adccae", 0xc2, r10) 3.930548262s ago: executing program 1 (id=445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @remote, 0x80000001}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e71cc7172c856b141e3f5e87e6ab615ea37c452b4043f3c0bbf0138f5f33e33eae79f3e12b1380800c30a1c48cdff0300f64800"}, 0xd8) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_pwait(r10, &(0x7f00000002c0)=[{}], 0x1, 0x8001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x30000011}) sendmsg$nl_route_sched(r8, 0x0, 0x20000400) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x946}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e9870000084d020000280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800e7"], 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) bind(r5, &(0x7f00000000c0)=@can={0x1d, r12}, 0x80) 3.912239704s ago: executing program 2 (id=446): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000280)) mmap(&(0x7f00003c9000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a"], 0x0, 0xc07c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='thermal_power_allocator\x00', r4, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r6, &(0x7f0000000000)={0x0, 0x8ec0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 3.837527831s ago: executing program 3 (id=447): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12180, 0x60) close(r0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x4d800000, "b7f00c9da4b663ba82564a092ded61e4a5089a9a08ad860672d882427b728e15", 0x8, 0x0, 0x0, 0x4, 0x3}) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r1 = socket(0x1a, 0x80006, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/179, 0xb3}], 0x9}, 0x9}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/30, 0x1e}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/82, 0x52}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/43, 0x2b}], 0x5, &(0x7f0000000bc0)=""/72, 0x48}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/20, 0x14}, {&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/56, 0x38}, {&(0x7f0000000ec0)=""/253, 0xfd}], 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/27, 0x1b}, 0x3}, {{&(0x7f00000011c0)=@l2tp6, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/130, 0x82}, {&(0x7f0000001300)=""/147, 0x93}], 0x2, &(0x7f0000001400)=""/205, 0xcd}, 0x7fff}, {{&(0x7f0000001500)=@nl=@proc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001580)=""/134, 0x86}, {&(0x7f0000001640)=""/97, 0x61}, {&(0x7f00000016c0)=""/239, 0xef}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/1, 0x1}], 0xa}, 0x3}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/34, 0x22}, {&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/9, 0x9}, {&(0x7f0000001e40)=""/35, 0x23}], 0x7, &(0x7f0000001ec0)=""/240, 0xf0}, 0x4e736620}], 0x7, 0x100, &(0x7f00000020c0)={0x0, 0x989680}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002100)={0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000002180)={0x38, 0x6, 0x2, 0xa, 0x5ef, 0x3, 0xff, 0xfff, 0x0, 0x7}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000021c0)={0x400, 0xe665, 0x7b, 0xdd9, 0x2, "ba946ea749b05aa99d7ca27aad26835c0190a8", 0xfffffff9, 0x101}) socket$inet(0x2, 0x80000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000002200), 0x18100, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x10c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x75c}, {0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4850}, 0x480d4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000002540)={0x6, 0x118, 0xfa00, {{0x8, 0x4, "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", 0xdb, 0xa, 0x2, 0x9b, 0x1, 0x9, 0x9}, r7}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000002680)={{0x1d, 0x7}, 'port0\x00', 0x0, 0x1000, 0x4, 0x6, 0xd9, 0x0, 0x400, 0x0, 0x3, 0x4e}) connect$tipc(r1, &(0x7f0000002740)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000027c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xac, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000005}, 0x84) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002940), 0x400800, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000002980)=0x4f) 3.756904999s ago: executing program 3 (id=448): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000400)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000500), 0x4) 3.418710244s ago: executing program 3 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3000000040000100fcff0700040000000100000004004880100001800c001080080002001000000008000200", @ANYRES32, @ANYBLOB="fedb58fa20d5e3a12847cd2a772a2b06f68d17ab77eeb099f31af4b5e7b8486d5243180636700ece9f672d4c72f3c863571fd1015c24522c1fae652e67552c5c4bd6ee7059dd72"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000228bd7000ffdbdf2503000000140002007465616d5f736c6176655f30000000001400020067656e6576653000000000000000000005000400020000000900030073797a31000000000900010073797a320000000014000200626174616476300000000000000000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4080) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000002440)) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000040)="96", 0x1}], 0x1) syz_usb_control_io(r5, &(0x7f00000004c0)={0x18, &(0x7f0000000280)={0x0, 0x0, 0x2, {0x2, 0x23}}, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x1c, 0x6, "a3760409", "6af356dd"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0xe, 0xe, 0xfa, 0x8, 0x50f0}}}, 0x0) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040), &(0x7f00000000c0)={'U+', 0xffffffffffffffde}, 0x16, 0x4) fsmount(r8, 0x0, 0x0) r9 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000500)=""/253) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x18, &(0x7f0000000700)={0x40, 0x1, 0xfa, {0xfa, 0xa, "ebba492681b24c786082c1b125b983f6a53ee234b3a3585117aa2704d5193b0c3a46b4fc4d7732d815a12d3edcc8705f95657aa9b17fe7336d41f62f489f663acba2c0f6ccbd9ea4b3a9eca9c4a6d14309daa3f4419c8d7e55fc22fd230a274f515b5dd8537c6b170331b1a78733091b6fc0c194ffcd5b9d222597bef3450db7e2d5f497e4125858545bbb91ba37fe520716f3e9ff52f3fb2334dfd7244f4a2e50e7629f22bbfc144ecad75c5e631c716f6f60cfa220a23fd63d388723ef9a83c67c9db75db1f6199c3493a76a8c3c3aea381c86b9d4e1fe71281027a06a9af0a538fa2eee0288139ec9427dd2dadf7ef93d26fe761b58ee"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000240)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "8932d5a057dba7c5ed6105856cef7395"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x2, 0x1, 0xffff}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1a, 0x4, 0xb, 0x0, 'z\vLx', '%*2H'}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x1, 0x8, 0x9, 0x0, 0xefd3, 0x9}}}, &(0x7f0000000c40)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x140, 0x20, [0xf0f]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x14}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "6dbc"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "ed44"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x6}}) get_mempolicy(&(0x7f00000006c0), 0x0, 0x5, &(0x7f0000ffc000/0x1000)=nil, 0x4) 2.954953916s ago: executing program 1 (id=451): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = io_uring_setup(0x3bb3, &(0x7f0000000600)={0x0, 0x653f, 0x80, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) 2.954436545s ago: executing program 2 (id=452): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) userfaultfd(0x80001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendto$netrom(r1, &(0x7f0000000100), 0x0, 0x4000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r4 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x799b, 0xcca2, 0x44, 0x0, 0x0) 2.567184387s ago: executing program 2 (id=453): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e8000008517884621000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) (async) futex_waitv(&(0x7f0000001840), 0x0, 0x0, &(0x7f0000002100)={0x77359400}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r7, @ANYBLOB="010026bd7000ffdbdf255a0000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) 2.470839277s ago: executing program 2 (id=454): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000500), 0x4) 2.197465483s ago: executing program 0 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1f, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.143072097s ago: executing program 0 (id=456): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12180, 0x60) close(r0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x4d800000, "b7f00c9da4b663ba82564a092ded61e4a5089a9a08ad860672d882427b728e15", 0x8, 0x0, 0x0, 0x4, 0x3}) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r1 = socket(0x1a, 0x80006, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/179, 0xb3}], 0x9}, 0x9}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/30, 0x1e}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/82, 0x52}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/43, 0x2b}], 0x5, &(0x7f0000000bc0)=""/72, 0x48}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/20, 0x14}, {&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/56, 0x38}, {&(0x7f0000000ec0)=""/253, 0xfd}], 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/27, 0x1b}, 0x3}, {{&(0x7f00000011c0)=@l2tp6, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/130, 0x82}, {&(0x7f0000001300)=""/147, 0x93}], 0x2, &(0x7f0000001400)=""/205, 0xcd}, 0x7fff}, {{&(0x7f0000001500)=@nl=@proc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001580)=""/134, 0x86}, {&(0x7f0000001640)=""/97, 0x61}, {&(0x7f00000016c0)=""/239, 0xef}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/1, 0x1}], 0xa}, 0x3}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/34, 0x22}, {&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/9, 0x9}, {&(0x7f0000001e40)=""/35, 0x23}], 0x7, &(0x7f0000001ec0)=""/240, 0xf0}, 0x4e736620}], 0x7, 0x100, &(0x7f00000020c0)={0x0, 0x989680}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002100)={0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000002180)={0x38, 0x6, 0x2, 0xa, 0x5ef, 0x3, 0xff, 0xfff, 0x0, 0x7}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000021c0)={0x400, 0xe665, 0x7b, 0xdd9, 0x2, "ba946ea749b05aa99d7ca27aad26835c0190a8", 0xfffffff9, 0x101}) socket$inet(0x2, 0x80000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000002200), 0x18100, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x10c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x75c}, {0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4850}, 0x480d4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000002540)={0x6, 0x118, 0xfa00, {{0x8, 0x4, "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", 0xdb, 0xa, 0x2, 0x9b, 0x1, 0x9, 0x9}, r7}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000002680)={{0x1d, 0x7}, 'port0\x00', 0x0, 0x1000, 0x4, 0x6, 0xd9, 0x0, 0x400, 0x0, 0x3, 0x4e}) connect$tipc(r1, &(0x7f0000002740)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000027c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xac, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000005}, 0x84) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002940), 0x400800, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000002980)=0x4f) 2.017806059s ago: executing program 0 (id=457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a3100000000090003007379"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000340)={0x82, 0xbd5, 0x0, 0x0, 0xffffffffffffff9b, 0x47}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r6, &(0x7f00000000c0)='./cgroup\x00', r6, &(0x7f0000000440)='./cgroup\x00', 0x2) io_uring_enter(r2, 0xcb1, 0xdab2, 0xa, &(0x7f0000000040)={[0x3, 0x8]}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x1c) getpeername(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 2.011170494s ago: executing program 0 (id=458): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000400)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000500), 0x4) 1.537426182s ago: executing program 2 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @remote, 0x80000001}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e71cc7172c856b141e3f5e87e6ab615ea37c452b4043f3c0bbf0138f5f33e33eae79f3e12b1380800c30a1c48cdff0300f64800"}, 0xd8) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_pwait(r10, &(0x7f00000002c0)=[{}], 0x1, 0x8001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x30000011}) sendmsg$nl_route_sched(r8, 0x0, 0x20000400) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x946}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e9870000084d020000280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800e7"], 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) bind(r5, &(0x7f00000000c0)=@can={0x1d, r12}, 0x80) 1.064685227s ago: executing program 1 (id=460): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00060000000c009b12f4"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, 0x0, &(0x7f0000000400)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}}], 0x1, 0x102, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.054447982s ago: executing program 0 (id=461): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) userfaultfd(0x80001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendto$netrom(r1, &(0x7f0000000100), 0x0, 0x4000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r4 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x799b, 0xcca2, 0x44, 0x0, 0x0) 415.688249ms ago: executing program 2 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (fail_nth: 6) 158.071868ms ago: executing program 3 (id=463): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 139.789366ms ago: executing program 1 (id=464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @remote, 0x80000001}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e71cc7172c856b141e3f5e87e6ab615ea37c452b4043f3c0bbf0138f5f33e33eae79f3e12b1380800c30a1c48cdff0300f64800"}, 0xd8) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_pwait(r10, &(0x7f00000002c0)=[{}], 0x1, 0x8001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44851}, 0x20000400) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x946}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e9870000084d020000280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800e7"], 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) bind(r5, &(0x7f00000000c0)=@can={0x1d, r12}, 0x80) 0s ago: executing program 0 (id=465): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12180, 0x60) close(r0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x4d800000, "b7f00c9da4b663ba82564a092ded61e4a5089a9a08ad860672d882427b728e15", 0x8, 0x0, 0x0, 0x4, 0x3}) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r1 = socket(0x1a, 0x80006, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/179, 0xb3}], 0x9}, 0x9}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/30, 0x1e}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/82, 0x52}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/43, 0x2b}], 0x5, &(0x7f0000000bc0)=""/72, 0x48}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/20, 0x14}, {&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/56, 0x38}, {&(0x7f0000000ec0)=""/253, 0xfd}], 0x6}, 0x6}, {{&(0x7f0000001000)=@generic, 0x80, 0x0, 0x0, &(0x7f0000001180)=""/27, 0x1b}, 0x3}, {{&(0x7f00000011c0)=@l2tp6, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/130, 0x82}, {&(0x7f0000001300)=""/147, 0x93}], 0x2, &(0x7f0000001400)=""/205, 0xcd}, 0x7fff}, {{&(0x7f0000001500)=@nl=@proc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001580)=""/134, 0x86}, {&(0x7f0000001640)=""/97, 0x61}, {&(0x7f00000016c0)=""/239, 0xef}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/1, 0x1}], 0xa}, 0x3}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/34, 0x22}, {&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/9, 0x9}, {&(0x7f0000001e40)=""/35, 0x23}], 0x7, &(0x7f0000001ec0)=""/240, 0xf0}, 0x4e736620}], 0x7, 0x100, &(0x7f00000020c0)={0x0, 0x989680}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002100)={0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000002180)={0x38, 0x6, 0x2, 0xa, 0x5ef, 0x3, 0xff, 0xfff, 0x0, 0x7}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000021c0)={0x400, 0xe665, 0x7b, 0xdd9, 0x2, "ba946ea749b05aa99d7ca27aad26835c0190a8", 0xfffffff9, 0x101}) socket$inet(0x2, 0x80000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000002200), 0x18100, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x10c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x75c}, {0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4850}, 0x480d4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000002540)={0x6, 0x118, 0xfa00, {{0x8, 0x4, "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", 0xdb, 0xa, 0x2, 0x9b, 0x1, 0x9, 0x9}, r7}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000002680)={{0x1d, 0x7}, 'port0\x00', 0x0, 0x1000, 0x4, 0x6, 0xd9, 0x0, 0x400, 0x0, 0x3, 0x4e}) connect$tipc(r1, &(0x7f0000002740)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000027c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xac, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000005}, 0x84) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002940), 0x400800, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000002980)=0x4f) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53128' (ED25519) to the list of known hosts. [ 48.337184][ T5850] cgroup: Unknown subsys name 'net' [ 48.509291][ T5850] cgroup: Unknown subsys name 'cpuset' [ 48.516091][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.559114][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.208559][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.211249][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.214200][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.217735][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.220440][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.221083][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.221495][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.222138][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.222174][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.222925][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.223737][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.224283][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.227089][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.227214][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.228812][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.229797][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.230293][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.230537][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.232354][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.264597][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.483646][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.507829][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 53.555915][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 53.655115][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.685837][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.688488][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.690899][ T5938] bridge_slave_0: entered allmulticast mode [ 53.693813][ T5938] bridge_slave_0: entered promiscuous mode [ 53.703232][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.705654][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.707912][ T5938] bridge_slave_1: entered allmulticast mode [ 53.710584][ T5938] bridge_slave_1: entered promiscuous mode [ 53.723516][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.725931][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.728188][ T5944] bridge_slave_0: entered allmulticast mode [ 53.730939][ T5944] bridge_slave_0: entered promiscuous mode [ 53.734610][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.737102][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.739393][ T5944] bridge_slave_1: entered allmulticast mode [ 53.742050][ T5944] bridge_slave_1: entered promiscuous mode [ 53.784794][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.826061][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.831245][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.849571][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.884793][ T5944] team0: Port device team_slave_0 added [ 53.886900][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.895258][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.897846][ T5948] bridge_slave_0: entered allmulticast mode [ 53.900551][ T5948] bridge_slave_0: entered promiscuous mode [ 53.914465][ T5944] team0: Port device team_slave_1 added [ 53.942475][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.944708][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.952763][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.958893][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.961216][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.963633][ T5948] bridge_slave_1: entered allmulticast mode [ 53.966440][ T5948] bridge_slave_1: entered promiscuous mode [ 53.976257][ T5938] team0: Port device team_slave_0 added [ 53.978880][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.981111][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.989121][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.003865][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.006818][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.009159][ T5939] bridge_slave_0: entered allmulticast mode [ 54.012320][ T5939] bridge_slave_0: entered promiscuous mode [ 54.017304][ T5938] team0: Port device team_slave_1 added [ 54.026359][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.029484][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.032486][ T5939] bridge_slave_1: entered allmulticast mode [ 54.036574][ T5939] bridge_slave_1: entered promiscuous mode [ 54.059976][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.079561][ T5944] hsr_slave_0: entered promiscuous mode [ 54.082454][ T5944] hsr_slave_1: entered promiscuous mode [ 54.085590][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.087793][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.095910][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.100674][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.116799][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.120075][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.122322][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.130910][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.146359][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.150237][ T5948] team0: Port device team_slave_0 added [ 54.153513][ T5948] team0: Port device team_slave_1 added [ 54.192382][ T5939] team0: Port device team_slave_0 added [ 54.195728][ T5939] team0: Port device team_slave_1 added [ 54.227250][ T5938] hsr_slave_0: entered promiscuous mode [ 54.229550][ T5938] hsr_slave_1: entered promiscuous mode [ 54.232265][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 54.234696][ T5938] Cannot create hsr debugfs directory [ 54.237986][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.240940][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.252242][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.271661][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.274650][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.285887][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.289778][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.291673][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.300012][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.304308][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.306592][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.314606][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.372006][ T5948] hsr_slave_0: entered promiscuous mode [ 54.374325][ T5948] hsr_slave_1: entered promiscuous mode [ 54.376693][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 54.378788][ T5948] Cannot create hsr debugfs directory [ 54.411045][ T5939] hsr_slave_0: entered promiscuous mode [ 54.413381][ T5939] hsr_slave_1: entered promiscuous mode [ 54.415538][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.417345][ T5939] Cannot create hsr debugfs directory [ 54.591546][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.603368][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.608802][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.624349][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.652779][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.658151][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.669642][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.674402][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.717008][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.727301][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.735410][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.750070][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.786156][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.792705][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.798303][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.805279][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.821524][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.844351][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.849820][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.861188][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.863570][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.888528][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.890854][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.899510][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.918832][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.921118][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.954968][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.958452][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.021263][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.059613][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.082767][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.088315][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.094875][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.097368][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.104510][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.106912][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.113226][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.115750][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.126160][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.128515][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.198546][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.231813][ T5944] veth0_vlan: entered promiscuous mode [ 55.238107][ T5944] veth1_vlan: entered promiscuous mode [ 55.242425][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.245977][ T65] Bluetooth: hci0: command tx timeout [ 55.246367][ T5953] Bluetooth: hci3: command tx timeout [ 55.264723][ T5944] veth0_macvtap: entered promiscuous mode [ 55.276692][ T5944] veth1_macvtap: entered promiscuous mode [ 55.316886][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.322465][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.325708][ T5953] Bluetooth: hci2: command tx timeout [ 55.325887][ T65] Bluetooth: hci1: command tx timeout [ 55.326528][ T5938] veth0_vlan: entered promiscuous mode [ 55.336599][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.343568][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.362420][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.366642][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.373061][ T5938] veth1_vlan: entered promiscuous mode [ 55.377642][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.380475][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.409084][ T5938] veth0_macvtap: entered promiscuous mode [ 55.428199][ T5938] veth1_macvtap: entered promiscuous mode [ 55.477754][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.488023][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.491806][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.492417][ T5939] veth0_vlan: entered promiscuous mode [ 55.498102][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.502703][ T5948] veth0_vlan: entered promiscuous mode [ 55.512586][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.516491][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.529918][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.532943][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.543875][ T5939] veth1_vlan: entered promiscuous mode [ 55.550169][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.552713][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.559398][ T5948] veth1_vlan: entered promiscuous mode [ 55.596035][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.620507][ T5948] veth0_macvtap: entered promiscuous mode [ 55.638109][ T5948] veth1_macvtap: entered promiscuous mode [ 55.655940][ T5939] veth0_macvtap: entered promiscuous mode [ 55.659410][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.662539][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.681554][ T5939] veth1_macvtap: entered promiscuous mode [ 55.700057][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.717366][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.720588][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.728178][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.729835][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.730582][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.740729][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.744582][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.747592][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.750345][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.756980][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.759745][ T1178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.762524][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.771535][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.833480][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.844240][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.855530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.858386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.861198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.864352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.875474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.878126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.880732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.883469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.886294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.888984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.109322][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.130611][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.148074][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.172157][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.316071][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.319495][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.325281][ T65] Bluetooth: hci0: command tx timeout [ 57.335481][ T65] Bluetooth: hci3: command tx timeout [ 57.415402][ T5953] Bluetooth: hci1: command tx timeout [ 57.417187][ T65] Bluetooth: hci2: command tx timeout [ 59.005366][ T53] IPVS: starting estimator thread 0... [ 59.014366][ T65] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 59.014394][ T65] Bluetooth: hci3: adv larger than maximum supported [ 59.036481][ T65] Bluetooth: hci3: Malformed LE Event: 0x0d [ 59.105288][ T6083] IPVS: using max 41 ests per chain, 98400 per kthread [ 59.172417][ T6086] ======================================================= [ 59.172417][ T6086] WARNING: The mand mount option has been deprecated and [ 59.172417][ T6086] and is ignored by this kernel. Remove the mand [ 59.172417][ T6086] option from the mount to silence this warning. [ 59.172417][ T6086] ======================================================= [ 59.313695][ T6086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.402589][ T6086] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 59.406779][ T6086] overlayfs: failed to look up (tracing) for ino (-66) [ 59.412336][ T65] Bluetooth: hci3: command tx timeout [ 59.414491][ T65] Bluetooth: hci0: command tx timeout [ 59.485352][ T65] Bluetooth: hci1: command tx timeout [ 59.488184][ T5953] Bluetooth: hci2: command tx timeout [ 60.858088][ T6103] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 60.916323][ T6103] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 60.930676][ T6103] overlayfs: failed to look up (tracing) for ino (-66) [ 61.495546][ T65] Bluetooth: hci3: command tx timeout [ 61.497421][ T5953] Bluetooth: hci0: command tx timeout [ 61.566745][ T65] Bluetooth: hci1: command tx timeout [ 61.569227][ T5953] Bluetooth: hci2: command tx timeout [ 61.649162][ T6108] fuse: Invalid rootmode [ 62.895431][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.345303][ T60] IPVS: starting estimator thread 0... [ 63.445751][ T6127] IPVS: using max 22 ests per chain, 52800 per kthread [ 63.463165][ T6129] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 63.541134][ T6129] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 63.547736][ T6129] overlayfs: failed to look up (tracing) for ino (-66) [ 63.756855][ T6133] input: syz0 as /devices/virtual/input/input5 [ 63.762446][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.766111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.769752][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.774787][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.778685][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.783867][ T9] usb 5-1: config 0 descriptor?? [ 64.087036][ T6137] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.172800][ T6137] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 64.176019][ T6137] overlayfs: failed to look up (tracing) for ino (-66) [ 64.263495][ T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xe [ 64.267086][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 64.328653][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 64.585415][ T53] IPVS: starting estimator thread 0... [ 64.701439][ T6142] IPVS: using max 41 ests per chain, 98400 per kthread [ 64.708000][ T6147] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.744243][ T6147] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 64.747532][ T6147] overlayfs: failed to look up (tracing) for ino (-66) [ 64.904092][ T6149] input: syz0 as /devices/virtual/input/input6 [ 65.205807][ T29] usb 5-1: USB disconnect, device number 2 [ 66.985597][ T6174] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.047455][ T6174] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 67.050937][ T6174] overlayfs: failed to look up (tracing) for ino (-66) [ 68.650657][ T6198] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.704561][ T6198] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 68.708935][ T6198] overlayfs: failed to look up (tracing) for ino (-66) [ 68.875914][ T6206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.902109][ T6206] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 68.905338][ T6206] overlayfs: failed to look up (tracing) for ino (-66) [ 69.393455][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 69.393485][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 69.401635][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 69.708254][ T5953] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 69.708295][ T5953] Bluetooth: hci0: adv larger than maximum supported [ 69.711084][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0d [ 70.360842][ T6007] IPVS: starting estimator thread 0... [ 70.475462][ T6228] IPVS: using max 41 ests per chain, 98400 per kthread [ 70.613802][ T6232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.675708][ T6231] No buffer was provided with the request [ 70.714844][ T6232] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 70.718237][ T6232] overlayfs: failed to look up (tracing) for ino (-66) [ 72.757812][ T6263] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 72.907061][ T6255] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.934176][ T6255] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 72.937846][ T6255] overlayfs: failed to look up (tracing) for ino (-66) [ 73.475243][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.640919][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 73.659192][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.669291][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.674189][ T53] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 73.682330][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.719200][ T53] usb 7-1: config 0 descriptor?? [ 73.809948][ T53] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 74.298927][ T6279] capability: warning: `syz.0.56' uses deprecated v2 capabilities in a way that may be insecure [ 74.301069][ T6274] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.361004][ T6274] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 74.366543][ T6274] overlayfs: failed to look up (tracing) for ino (-66) [ 74.490929][ T6281] input: syz0 as /devices/virtual/input/input7 [ 74.776844][ T6291] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 74.780762][ T6291] netlink: 244 bytes leftover after parsing attributes in process `syz.2.52'. [ 74.827829][ T6293] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.893185][ T6293] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 74.897979][ T6293] overlayfs: failed to look up (tracing) for ino (-66) [ 75.987354][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.989702][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.122184][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 76.122203][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 76.124430][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 76.236694][ T6254] usb 7-1: USB disconnect, device number 2 [ 76.333945][ T6312] No buffer was provided with the request [ 76.755109][ T6323] input: syz0 as /devices/virtual/input/input8 [ 77.386388][ T6336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.417192][ T6328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.419081][ T6336] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 77.422821][ T6336] overlayfs: failed to look up (tracing) for ino (-66) [ 77.473083][ T6328] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 77.477450][ T6328] overlayfs: failed to look up (tracing) for ino (-66) [ 78.129504][ T6348] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.163849][ T6348] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 78.167246][ T6348] overlayfs: failed to look up (tracing) for ino (-66) [ 78.215402][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.365331][ T63] usb 8-1: Using ep0 maxpacket: 16 [ 79.085466][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.089188][ T63] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.094020][ T63] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 79.097132][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.139175][ T63] usb 8-1: config 0 descriptor?? [ 79.142991][ T63] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 80.049604][ T6371] netlink: 'syz.3.73': attribute type 2 has an invalid length. [ 80.052130][ T6371] netlink: 244 bytes leftover after parsing attributes in process `syz.3.73'. [ 81.083519][ T6078] usb 8-1: USB disconnect, device number 2 [ 81.173667][ T6388] overlayfs: failed to resolve './file1': -2 [ 81.192109][ T6389] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.244052][ T6389] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 81.247788][ T6389] overlayfs: failed to look up (tracing) for ino (-66) [ 82.143206][ T6402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.167739][ T6402] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 82.170959][ T6402] overlayfs: failed to look up (tracing) for ino (-66) [ 84.202181][ T6421] input: syz0 as /devices/virtual/input/input9 [ 85.865242][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.280755][ T76] cfg80211: failed to load regulatory.db [ 86.809442][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.812826][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.816019][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.820029][ T63] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.822865][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.829498][ T63] usb 6-1: config 0 descriptor?? [ 86.886557][ T6471] input: syz0 as /devices/virtual/input/input10 [ 86.892123][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 86.892141][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 86.894466][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 87.258346][ T63] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xe [ 87.261154][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 87.262654][ T6486] fuse: Bad value for 'user_id' [ 87.265496][ T6486] fuse: Bad value for 'user_id' [ 87.321587][ T63] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 87.617400][ T29] usb 6-1: USB disconnect, device number 2 [ 88.608596][ T6509] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.710743][ T6509] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.714286][ T6509] overlayfs: failed to look up (tracing) for ino (-66) [ 89.748559][ T6528] input: syz0 as /devices/virtual/input/input11 [ 89.847459][ T6529] input: syz0 as /devices/virtual/input/input12 [ 91.269789][ T5953] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 91.269819][ T5953] Bluetooth: hci1: adv larger than maximum supported [ 91.272366][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0d [ 91.362023][ T6547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 91.364488][ T6547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.370641][ T6547] vhci_hcd vhci_hcd.0: Device attached [ 91.425243][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 91.577173][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.580701][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.584842][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.589310][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.592394][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.601267][ T29] usb 8-1: config 0 descriptor?? [ 91.606615][ T6024] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 91.720808][ T6548] vhci_hcd: connection reset by peer [ 91.724061][ T6120] vhci_hcd vhci_hcd.1: stop threads [ 91.728117][ T6120] vhci_hcd vhci_hcd.1: release socket [ 91.731017][ T6120] vhci_hcd vhci_hcd.1: disconnect device [ 92.013390][ T29] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xe [ 92.015933][ T29] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 92.022492][ T29] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.432252][ T6006] usb 8-1: USB disconnect, device number 3 [ 92.600131][ T6561] fuse: Bad value for 'user_id' [ 92.602314][ T6561] fuse: Bad value for 'user_id' [ 93.473039][ T6575] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.517578][ T6575] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 93.524746][ T6575] overlayfs: failed to look up (tracing) for ino (-66) [ 96.380898][ T6619] fuse: Bad value for 'fd' [ 96.810845][ T6024] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 96.973358][ T6629] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 96.976041][ T6629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.983102][ T6629] vhci_hcd vhci_hcd.0: Device attached [ 97.263458][ T34] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 97.409361][ T6630] vhci_hcd: connection reset by peer [ 97.418526][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 97.425284][ T1140] vhci_hcd vhci_hcd.0: release socket [ 97.427566][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 97.636783][ T6642] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.700941][ T6642] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 97.720354][ T6642] overlayfs: failed to look up (tracing) for ino (-66) [ 98.602958][ T6649] input: syz0 as /devices/virtual/input/input13 [ 98.629942][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 98.629960][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 98.632510][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 100.198153][ T6681] input: syz0 as /devices/virtual/input/input14 [ 100.446942][ T6685] input: syz0 as /devices/virtual/input/input15 [ 101.224513][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 101.224532][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 101.235243][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 101.750524][ T6705] input: syz0 as /devices/virtual/input/input16 [ 102.244058][ T6716] input: syz0 as /devices/virtual/input/input17 [ 102.445757][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 102.709377][ T6722] input: syz0 as /devices/virtual/input/input18 [ 103.025324][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 103.212582][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.219001][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.233759][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.256826][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.280431][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.323908][ T24] usb 7-1: config 0 descriptor?? [ 103.500580][ T6736] input: syz0 as /devices/virtual/input/input19 [ 104.001766][ T24] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 104.004213][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 104.708151][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.803748][ T6756] input: syz0 as /devices/virtual/input/input20 [ 104.885119][ T24] usb 7-1: USB disconnect, device number 3 [ 104.942614][ T6759] input: syz0 as /devices/virtual/input/input21 [ 105.385356][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.576411][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.582073][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.592164][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.600416][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.604232][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.642015][ T24] usb 5-1: config 0 descriptor?? [ 106.297107][ T24] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xe [ 106.307502][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 106.321911][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.436648][ T6782] 9pnet_virtio: no channels available for device syz [ 106.583822][ T24] usb 5-1: USB disconnect, device number 3 [ 106.672395][ T6778] fido_id[6778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 107.210111][ T6793] input: syz0 as /devices/virtual/input/input22 [ 107.377220][ T6798] Zero length message leads to an empty skb [ 107.713147][ T5953] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 107.713174][ T5953] Bluetooth: hci3: adv larger than maximum supported [ 107.723922][ T5953] Bluetooth: hci3: Malformed LE Event: 0x0d [ 107.953979][ T6814] input: syz0 as /devices/virtual/input/input23 [ 109.209949][ T6831] input: syz0 as /devices/virtual/input/input24 [ 109.555263][ T6005] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 109.738904][ T6005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.742521][ T6005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.749283][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.753377][ T6005] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.757163][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.761542][ T6005] usb 8-1: config 0 descriptor?? [ 109.767956][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 109.767973][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 109.770262][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 110.472501][ T6005] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe [ 110.664551][ T6005] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.672370][ T6005] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 110.680438][ T6005] usb 8-1: USB disconnect, device number 4 [ 110.704914][ T6858] fido_id[6858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 110.854801][ T6860] input: syz0 as /devices/virtual/input/input25 [ 112.793799][ T6885] 9pnet_virtio: no channels available for device syz [ 113.217168][ T6899] input: syz0 as /devices/virtual/input/input26 [ 113.808935][ T6254] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 113.996582][ T6254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.000183][ T6254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.006119][ T6254] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.011089][ T6254] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.014784][ T6254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.023562][ T6254] usb 7-1: config 0 descriptor?? [ 114.545706][ T6254] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe [ 114.548297][ T6254] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 114.554086][ T6254] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.868035][ T34] usb 7-1: USB disconnect, device number 4 [ 114.976331][ T6922] input: syz0 as /devices/virtual/input/input27 [ 115.451461][ T5953] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 115.451486][ T5953] Bluetooth: hci1: adv larger than maximum supported [ 115.454500][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.829710][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 115.829730][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 115.832033][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 116.715454][ T6947] input: syz0 as /devices/virtual/input/input28 [ 118.259844][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 118.259862][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 118.262385][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 118.425718][ T6969] input: syz0 as /devices/virtual/input/input29 [ 118.427150][ T5953] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 118.427755][ T5953] Bluetooth: hci3: adv larger than maximum supported [ 118.430943][ T5953] Bluetooth: hci3: Malformed LE Event: 0x0d [ 118.725231][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 118.895324][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 118.898178][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.903503][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.906798][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.910826][ T60] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 118.913704][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.922048][ T60] usb 8-1: config 0 descriptor?? [ 119.335544][ T60] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 119.339107][ T60] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 119.341731][ T60] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 119.344029][ T60] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 119.346309][ T60] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 119.350563][ T60] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 119.388374][ T60] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 119.391954][ T60] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 119.533324][ T6254] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 119.538053][ T24] usb 8-1: USB disconnect, device number 5 [ 119.544241][ T6254] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 119.551141][ T6254] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 119.554760][ T6254] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 120.225301][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.376452][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.379789][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.382673][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.386621][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.389293][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.393396][ T24] usb 6-1: config 0 descriptor?? [ 120.800984][ T24] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xe [ 120.803224][ T24] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 120.811715][ T24] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 121.109418][ T24] usb 6-1: USB disconnect, device number 3 [ 122.041297][ T5953] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 122.041325][ T5953] Bluetooth: hci0: adv larger than maximum supported [ 122.050132][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0d [ 123.015299][ T6005] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.185337][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 123.192054][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.196682][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.199646][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 123.203661][ T6005] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 123.206862][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.210614][ T6005] usb 6-1: config 0 descriptor?? [ 123.335272][ T6024] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.507831][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.635316][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.640421][ T6024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.641351][ T6005] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 123.645060][ T6024] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.655279][ T6005] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 123.656862][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.658371][ T6005] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 123.662619][ T6024] usb 5-1: config 0 descriptor?? [ 123.668551][ T6005] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 123.673538][ T6005] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 123.695899][ T6005] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 123.700485][ T6005] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 123.841324][ T6201] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.846305][ T6201] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.854264][ T6201] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.861388][ T143] usb 6-1: USB disconnect, device number 4 [ 123.864175][ T6201] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 123.938455][ T7046] netlink: 264 bytes leftover after parsing attributes in process `syz.2.250'. [ 124.085766][ T6024] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xe [ 124.096424][ T6024] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.391511][ T6024] usb 5-1: USB disconnect, device number 4 [ 124.407838][ T5953] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 124.407870][ T5953] Bluetooth: hci3: adv larger than maximum supported [ 124.410875][ T5953] Bluetooth: hci3: Malformed LE Event: 0x0d [ 125.198297][ T7073] input: syz0 as /devices/virtual/input/input32 [ 126.825270][ T6024] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.958637][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 126.962704][ T7101] FAULT_INJECTION: forcing a failure. [ 126.962704][ T7101] name failslab, interval 1, probability 0, space 0, times 1 [ 126.968627][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 126.968651][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.968662][ T7101] Call Trace: [ 126.968668][ T7101] [ 126.968675][ T7101] dump_stack_lvl+0x16c/0x1f0 [ 126.968790][ T7101] should_fail_ex+0x512/0x640 [ 126.968841][ T7101] ? __kvmalloc_node_noprof+0x129/0xa40 [ 126.968869][ T7101] should_failslab+0xc2/0x120 [ 126.968897][ T7101] __kvmalloc_node_noprof+0x14a/0xa40 [ 126.968923][ T7101] ? xfrm_user_rcv_msg_compat+0x372/0x1390 [ 126.968956][ T7101] ? xfrm_user_rcv_msg_compat+0x372/0x1390 [ 126.968982][ T7101] xfrm_user_rcv_msg_compat+0x372/0x1390 [ 126.969014][ T7101] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 126.969040][ T7101] ? __kasan_check_byte+0x13/0x50 [ 126.969067][ T7101] ? is_bpf_text_address+0x8a/0x1a0 [ 126.969116][ T7101] ? find_held_lock+0x2b/0x80 [ 126.969140][ T7101] ? xfrm_get_translator+0xeb/0x290 [ 126.969167][ T7101] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 126.969201][ T7101] xfrm_user_rcv_msg+0x283/0xb60 [ 126.969229][ T7101] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 126.969252][ T7101] ? lockdep_unlock+0x64/0xd0 [ 126.969272][ T7101] ? mark_lock+0x40d/0x9f0 [ 126.969319][ T7101] ? rcu_is_watching+0x12/0xc0 [ 126.969344][ T7101] ? trace_contention_end+0xdd/0x110 [ 126.969363][ T7101] ? __mutex_lock+0x27b/0x1ca0 [ 126.969394][ T7101] netlink_rcv_skb+0x158/0x420 [ 126.969416][ T7101] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 126.969440][ T7101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.969479][ T7101] xfrm_netlink_rcv+0x71/0x90 [ 126.969500][ T7101] netlink_unicast+0x5aa/0x870 [ 126.969525][ T7101] ? __pfx_netlink_unicast+0x10/0x10 [ 126.969557][ T7101] netlink_sendmsg+0x8c8/0xdd0 [ 126.969582][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.969607][ T7101] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 126.969637][ T7101] ____sys_sendmsg+0xa5d/0xc30 [ 126.969664][ T7101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.969687][ T7101] ? get_compat_msghdr+0x11a/0x170 [ 126.969716][ T7101] ___sys_sendmsg+0x134/0x1d0 [ 126.969736][ T7101] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.969767][ T7101] ? find_held_lock+0x2b/0x80 [ 126.969806][ T7101] __sys_sendmsg+0x16d/0x220 [ 126.969825][ T7101] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.969853][ T7101] ? do_user_addr_fault+0x843/0x1370 [ 126.969880][ T7101] __do_fast_syscall_32+0xe8/0x680 [ 126.969907][ T7101] do_fast_syscall_32+0x32/0x80 [ 126.969930][ T7101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.969952][ T7101] RIP: 0023:0xf7ff6579 [ 126.969966][ T7101] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 126.969983][ T7101] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 126.970000][ T7101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 126.970010][ T7101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.970019][ T7101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.970029][ T7101] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 126.970039][ T7101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.970063][ T7101] [ 127.105267][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 127.107808][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 127.107831][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 127.108269][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.110698][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 127.112750][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.122484][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.127843][ T6024] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 127.130628][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.134282][ T6024] usb 6-1: config 0 descriptor?? [ 127.335656][ T6201] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.556646][ T6201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.560025][ T6201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.562100][ T6024] hid_parser_main: 2 callbacks suppressed [ 127.562112][ T6024] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 127.562937][ T6201] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.564739][ T6024] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 127.567350][ T6201] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.576314][ T6201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.581778][ T6024] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 127.591928][ T6024] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 127.592860][ T6201] usb 7-1: config 0 descriptor?? [ 127.597594][ T6024] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 127.601020][ T6024] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 127.620172][ T6024] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 127.622699][ T6024] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 127.762794][ T6078] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 127.766791][ T59] usb 6-1: USB disconnect, device number 5 [ 127.771039][ T6078] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 127.774360][ T6078] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 127.781604][ T6078] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 128.008863][ T6201] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xe [ 128.011933][ T6201] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 128.022120][ T6201] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.330377][ T6615] usb 7-1: USB disconnect, device number 5 [ 128.565944][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.725243][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 128.728132][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.731865][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.734911][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.739419][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 128.742344][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.749994][ T24] usb 5-1: config 0 descriptor?? [ 129.289255][ T7135] netlink: 264 bytes leftover after parsing attributes in process `syz.1.273'. [ 129.383218][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 129.705292][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 129.713612][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 129.729125][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 129.733580][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 129.744396][ T24] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 129.749702][ T24] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 129.805547][ T6254] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 129.809878][ T6254] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 129.814892][ T24] usb 5-1: USB disconnect, device number 5 [ 129.819654][ T6254] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 129.823574][ T6254] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 130.776016][ T5953] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 130.776035][ T5953] Bluetooth: hci0: adv larger than maximum supported [ 130.778270][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0d [ 134.287700][ T7189] input: syz0 as /devices/virtual/input/input35 [ 134.301035][ T6494] udevd[6494]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 134.314658][ T7199] netlink: zone id is out of range [ 134.335238][ T6078] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.370085][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 134.450426][ T7202] netlink: 264 bytes leftover after parsing attributes in process `syz.2.294'. [ 134.485285][ T6078] usb 5-1: Using ep0 maxpacket: 16 [ 134.489103][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.493864][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.499184][ T6078] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.503469][ T6078] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 134.506554][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.516879][ T6078] usb 5-1: config 0 descriptor?? [ 134.926123][ T6078] hid_parser_main: 1 callbacks suppressed [ 134.926141][ T6078] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 134.930938][ T6078] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 134.933487][ T6078] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 134.998193][ T6078] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 135.032739][ T6078] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 135.037319][ T6078] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 135.059094][ T6078] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 135.061771][ T6078] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 135.136536][ T59] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.141550][ T59] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.147192][ T6078] usb 5-1: USB disconnect, device number 6 [ 135.154761][ T59] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.160804][ T59] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.230357][ T7208] binder: 7207:7208 ioctl c0046209 0 returned -22 [ 135.240516][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 137.408037][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.410221][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.798932][ T7260] random: crng reseeded on system resumption [ 139.808494][ T7260] Restarting kernel threads ... [ 139.810707][ T7260] Done restarting kernel threads. [ 140.717429][ T5953] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 140.717460][ T5953] Bluetooth: hci1: adv larger than maximum supported [ 140.720501][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0d [ 144.001579][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 144.143631][ T7301] binder: 7300:7301 ioctl c0046209 0 returned -22 [ 144.286154][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 146.277511][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 146.282086][ T7329] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 146.284145][ T7329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.286912][ T7329] vhci_hcd vhci_hcd.0: Device attached [ 146.296348][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 146.300360][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 146.533281][ T60] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 147.068368][ T7330] vhci_hcd: connection reset by peer [ 147.072249][ T1139] vhci_hcd vhci_hcd.0: stop threads [ 147.074814][ T1139] vhci_hcd vhci_hcd.0: release socket [ 147.077502][ T1139] vhci_hcd vhci_hcd.0: disconnect device [ 147.901569][ T5953] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 147.901588][ T5953] Bluetooth: hci2: adv larger than maximum supported [ 147.904342][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 149.498983][ T7370] FAULT_INJECTION: forcing a failure. [ 149.498983][ T7370] name failslab, interval 1, probability 0, space 0, times 0 [ 149.502993][ T7370] CPU: 2 UID: 0 PID: 7370 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 149.503008][ T7370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.503014][ T7370] Call Trace: [ 149.503019][ T7370] [ 149.503023][ T7370] dump_stack_lvl+0x16c/0x1f0 [ 149.503042][ T7370] should_fail_ex+0x512/0x640 [ 149.503059][ T7370] ? __kmalloc_noprof+0xca/0x910 [ 149.503073][ T7370] should_failslab+0xc2/0x120 [ 149.503090][ T7370] __kmalloc_noprof+0xeb/0x910 [ 149.503101][ T7370] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 149.503120][ T7370] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 149.503136][ T7370] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 149.503154][ T7370] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 149.503171][ T7370] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 149.503199][ T7370] ? genl_get_cmd+0x194/0x580 [ 149.503216][ T7370] ? bpf_lsm_capable+0x9/0x10 [ 149.503230][ T7370] ? security_capable+0x7e/0x260 [ 149.503246][ T7370] ? ns_capable+0xd7/0x110 [ 149.503261][ T7370] genl_rcv_msg+0x55c/0x800 [ 149.503277][ T7370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.503292][ T7370] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 149.503303][ T7370] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 149.503314][ T7370] ? __pfx_nl80211_post_doit+0x10/0x10 [ 149.503329][ T7370] netlink_rcv_skb+0x158/0x420 [ 149.503342][ T7370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.503358][ T7370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.503376][ T7370] ? netlink_deliver_tap+0x1ae/0xd30 [ 149.503389][ T7370] genl_rcv+0x28/0x40 [ 149.503402][ T7370] netlink_unicast+0x5aa/0x870 [ 149.503416][ T7370] ? __pfx_netlink_unicast+0x10/0x10 [ 149.503434][ T7370] netlink_sendmsg+0x8c8/0xdd0 [ 149.503449][ T7370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.503463][ T7370] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 149.503481][ T7370] ____sys_sendmsg+0xa5d/0xc30 [ 149.503495][ T7370] ? btrfs_backref_error_cleanup+0x4f0/0xd70 [ 149.503512][ T7370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.503526][ T7370] ? get_compat_msghdr+0x11a/0x170 [ 149.503542][ T7370] ___sys_sendmsg+0x134/0x1d0 [ 149.503554][ T7370] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.503571][ T7370] ? find_held_lock+0x2b/0x80 [ 149.503594][ T7370] __sys_sendmsg+0x16d/0x220 [ 149.503605][ T7370] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.503624][ T7370] __do_fast_syscall_32+0xe8/0x680 [ 149.503640][ T7370] do_fast_syscall_32+0x32/0x80 [ 149.503654][ T7370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.503668][ T7370] RIP: 0023:0xf7ff6579 [ 149.503676][ T7370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.503686][ T7370] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 149.503713][ T7370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 149.503728][ T7370] RDX: 0000000004004090 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.503735][ T7370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.503740][ T7370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.503747][ T7370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.503760][ T7370] [ 149.846192][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 149.850876][ T7380] tmpfs: Unknown parameter 'grpquota' [ 149.891955][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.906161][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.938287][ T5953] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 149.938305][ T5953] Bluetooth: hci3: adv larger than maximum supported [ 149.940424][ T5953] Bluetooth: hci3: Malformed LE Event: 0x0d [ 150.226174][ T7395] FAULT_INJECTION: forcing a failure. [ 150.226174][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 150.230662][ T7395] CPU: 0 UID: 0 PID: 7395 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 150.230678][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.230685][ T7395] Call Trace: [ 150.230690][ T7395] [ 150.230694][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 150.230712][ T7395] should_fail_ex+0x512/0x640 [ 150.230728][ T7395] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 150.230744][ T7395] should_failslab+0xc2/0x120 [ 150.230761][ T7395] kmem_cache_alloc_noprof+0x83/0x770 [ 150.230774][ T7395] ? skb_clone+0x190/0x3f0 [ 150.230788][ T7395] ? skb_clone+0x190/0x3f0 [ 150.230797][ T7395] skb_clone+0x190/0x3f0 [ 150.230808][ T7395] netlink_deliver_tap+0xabd/0xd30 [ 150.230824][ T7395] netlink_unicast+0x64c/0x870 [ 150.230838][ T7395] ? __pfx_netlink_unicast+0x10/0x10 [ 150.230851][ T7395] ? __pfx___might_resched+0x10/0x10 [ 150.230870][ T7395] netlink_sendmsg+0x8c8/0xdd0 [ 150.230885][ T7395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.230900][ T7395] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 150.230933][ T7395] ____sys_sendmsg+0xa5d/0xc30 [ 150.230950][ T7395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.230963][ T7395] ? get_compat_msghdr+0x11a/0x170 [ 150.230981][ T7395] ___sys_sendmsg+0x134/0x1d0 [ 150.230993][ T7395] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.231010][ T7395] ? find_held_lock+0x2b/0x80 [ 150.231032][ T7395] __sys_sendmsg+0x16d/0x220 [ 150.231044][ T7395] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.231060][ T7395] ? do_user_addr_fault+0x843/0x1370 [ 150.231151][ T7395] __do_fast_syscall_32+0xe8/0x680 [ 150.231169][ T7395] do_fast_syscall_32+0x32/0x80 [ 150.231182][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.231196][ T7395] RIP: 0023:0xf700d579 [ 150.231204][ T7395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.231215][ T7395] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 150.231226][ T7395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 150.231232][ T7395] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.231238][ T7395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.231244][ T7395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.231250][ T7395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.231263][ T7395] [ 150.650742][ T7400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 150.653532][ T7400] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.666371][ T7400] vhci_hcd vhci_hcd.0: Device attached [ 150.723522][ T7400] process 'syz.2.347' launched '/dev/fd/13' with NULL argv: empty string added [ 150.966004][ T6615] usb 42-1: SetAddress Request (2) to port 0 [ 150.973907][ T6615] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 151.111232][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 151.169099][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 151.212734][ T7401] vhci_hcd: connection reset by peer [ 151.215047][ T1139] vhci_hcd vhci_hcd.2: stop threads [ 151.217355][ T1139] vhci_hcd vhci_hcd.2: release socket [ 151.219284][ T1139] vhci_hcd vhci_hcd.2: disconnect device [ 151.635271][ T60] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 151.805364][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 151.809729][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 151.814084][ T7425] FAULT_INJECTION: forcing a failure. [ 151.814084][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 151.820820][ T7425] CPU: 3 UID: 0 PID: 7425 Comm: syz.2.354 Not tainted syzkaller #0 PREEMPT(full) [ 151.820844][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.820855][ T7425] Call Trace: [ 151.820861][ T7425] [ 151.820869][ T7425] dump_stack_lvl+0x16c/0x1f0 [ 151.820897][ T7425] should_fail_ex+0x512/0x640 [ 151.820929][ T7425] should_failslab+0xc2/0x120 [ 151.820956][ T7425] kmem_cache_alloc_node_noprof+0x86/0x800 [ 151.820978][ T7425] ? __alloc_skb+0x156/0x410 [ 151.821011][ T7425] ? __alloc_skb+0x156/0x410 [ 151.821035][ T7425] __alloc_skb+0x156/0x410 [ 151.821059][ T7425] ? __alloc_skb+0x35d/0x410 [ 151.821086][ T7425] ? __pfx___alloc_skb+0x10/0x10 [ 151.821113][ T7425] ? netlink_has_listeners+0x200/0x430 [ 151.821134][ T7425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.821167][ T7425] ctnetlink_conntrack_event+0x3b7/0x16c0 [ 151.821200][ T7425] ? __pfx_ctnetlink_conntrack_event+0x10/0x10 [ 151.821236][ T7425] __nf_conntrack_eventmask_report+0x1a3/0x560 [ 151.821269][ T7425] nf_conntrack_eventmask_report+0x2b2/0x460 [ 151.821298][ T7425] ? __pfx_nf_conntrack_eventmask_report+0x10/0x10 [ 151.821335][ T7425] nf_ct_delete+0x27c/0x730 [ 151.821362][ T7425] nf_ct_gc_expired.part.0+0x1a2/0x1f0 [ 151.821382][ T7425] __nf_conntrack_find_get+0x486/0xd00 [ 151.821406][ T7425] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 151.821430][ T7425] nf_conntrack_find_get+0xfb/0x350 [ 151.821455][ T7425] ctnetlink_new_conntrack+0x2e3/0x1080 [ 151.821476][ T7425] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 151.821495][ T7425] ? __pfx___mutex_lock+0x10/0x10 [ 151.821519][ T7425] ? find_held_lock+0x2b/0x80 [ 151.821542][ T7425] nfnetlink_rcv_msg+0x9fc/0x1200 [ 151.821569][ T7425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.821592][ T7425] ? kfree_skbmem+0x1a4/0x1f0 [ 151.821609][ T7425] ? kfree_skbmem+0x1a4/0x1f0 [ 151.821645][ T7425] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.821668][ T7425] netlink_rcv_skb+0x158/0x420 [ 151.821684][ T7425] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.821711][ T7425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.821736][ T7425] ? ns_capable+0xd7/0x110 [ 151.821755][ T7425] nfnetlink_rcv+0x1b3/0x430 [ 151.821775][ T7425] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 151.821795][ T7425] ? netlink_deliver_tap+0x1ae/0xd30 [ 151.821814][ T7425] netlink_unicast+0x5aa/0x870 [ 151.821832][ T7425] ? __pfx_netlink_unicast+0x10/0x10 [ 151.821855][ T7425] netlink_sendmsg+0x8c8/0xdd0 [ 151.821874][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.821905][ T7425] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 151.821929][ T7425] ____sys_sendmsg+0xa5d/0xc30 [ 151.821954][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.821976][ T7425] ? get_compat_msghdr+0x11a/0x170 [ 151.822005][ T7425] ___sys_sendmsg+0x134/0x1d0 [ 151.822025][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.822055][ T7425] ? find_held_lock+0x2b/0x80 [ 151.822093][ T7425] __sys_sendmsg+0x16d/0x220 [ 151.822111][ T7425] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.822139][ T7425] ? do_user_addr_fault+0x843/0x1370 [ 151.822167][ T7425] __do_fast_syscall_32+0xe8/0x680 [ 151.822192][ T7425] do_fast_syscall_32+0x32/0x80 [ 151.822216][ T7425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.822240][ T7425] RIP: 0023:0xf700d579 [ 151.822254][ T7425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.822270][ T7425] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 151.822289][ T7425] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 151.822301][ T7425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.822311][ T7425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.822321][ T7425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.822332][ T7425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.822356][ T7425] [ 151.938078][ T7428] netlink: 92 bytes leftover after parsing attributes in process `syz.0.353'. [ 154.225235][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 154.383201][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.392610][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.395231][ T24] usb 6-1: Product: syz [ 154.396839][ T24] usb 6-1: Manufacturer: syz [ 154.398643][ T24] usb 6-1: SerialNumber: syz [ 154.407883][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.595671][ T60] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.390004][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.393770][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.647904][ T60] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 155.652545][ T60] ath9k_htc: Failed to initialize the device [ 155.673847][ T60] usb 6-1: ath9k_htc: USB layer deinitialized [ 155.682475][ T143] usb 6-1: USB disconnect, device number 6 [ 155.865458][ T7463] netlink: 244 bytes leftover after parsing attributes in process `syz.2.365'. [ 156.045345][ T6615] usb 42-1: device descriptor read/8, error -110 [ 156.435727][ T6615] usb usb42-port1: attempt power cycle [ 156.625277][ T6024] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 156.775235][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 156.790110][ T6024] usb 6-1: config 1 interface 0 altsetting 229 bulk endpoint 0x1 has invalid maxpacket 32 [ 156.794629][ T6024] usb 6-1: config 1 interface 0 altsetting 229 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.815238][ T6024] usb 6-1: config 1 interface 0 has no altsetting 0 [ 156.820608][ T6024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.824284][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.835314][ T6024] usb 6-1: Product: х [ 156.837348][ T6024] usb 6-1: Manufacturer: 蜰囼寧珖褐屧可넨뇣꾓弔ⓖἙ㟣鲳뫄훕诂㐉阖䩯Ԙ牪䔵혖麃箐Ȝ㞹⋨⡯Ἒῂ쑴댞ᣫラꯟⰯ᥅챕ּ쟈ጋ묎盟᷼貥苑㳛厭ﲧ㫇딓଱ê喞爆粆臨퍔超敗毐 [ 156.853193][ T6024] usb 6-1: SerialNumber: syz [ 156.874228][ T6024] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 156.878397][ T6024] usb 6-1: no configuration chosen from 1 choice [ 157.008290][ T6615] usb usb42-port1: unable to enumerate USB device [ 158.495389][ T7499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.374'. [ 159.340499][ T7505] netlink: 830 bytes leftover after parsing attributes in process `syz.0.376'. [ 159.403327][ T34] usb 6-1: USB disconnect, device number 7 [ 159.441344][ T40] audit: type=1326 audit(1765355556.617:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.1.378" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x0 [ 159.548553][ T7511] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 159.595261][ T6201] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.746967][ T6201] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.750483][ T6201] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.753730][ T6201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.756731][ T6201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.760215][ T6201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.764825][ T6201] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.767779][ T6201] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.770313][ T6201] usb 5-1: Product: syz [ 159.771680][ T6201] usb 5-1: Manufacturer: syz [ 159.776611][ T6201] cdc_wdm 5-1:1.0: skipping garbage [ 159.778237][ T6201] cdc_wdm 5-1:1.0: skipping garbage [ 159.782701][ T6201] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.784584][ T6201] cdc_wdm 5-1:1.0: Unknown control protocol [ 160.893517][ T7527] netlink: 244 bytes leftover after parsing attributes in process `syz.2.383'. [ 160.896607][ T5953] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 160.896623][ T5953] Bluetooth: hci0: adv larger than maximum supported [ 160.899507][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0d [ 160.965351][ T6024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 161.115251][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 161.118733][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.122625][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.125989][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.130918][ T6024] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 161.134488][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.139076][ T6024] usb 6-1: config 0 descriptor?? [ 161.571521][ T6024] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 161.574699][ T6024] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 161.577914][ T6024] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 161.585235][ T6024] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 161.587989][ T6024] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 161.592201][ T6024] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 161.620085][ T6024] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 161.621594][ T7535] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 161.623395][ T6024] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 161.626901][ T7535] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 161.642380][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.644980][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.768939][ T34] usb 6-1: USB disconnect, device number 8 [ 161.830941][ T59] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 161.834446][ T59] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 161.838128][ T59] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 161.841785][ T59] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 163.258271][ T34] usb 5-1: USB disconnect, device number 7 [ 163.506466][ T7562] mkiss: ax0: crc mode is auto. [ 164.317385][ T5953] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 164.317403][ T5953] Bluetooth: hci1: adv larger than maximum supported [ 164.319713][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0d [ 164.655290][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 164.825242][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 164.828157][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.831608][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.834675][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.839487][ T34] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 164.842329][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.846194][ T34] usb 8-1: config 0 descriptor?? [ 165.307502][ T34] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 165.316912][ T34] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 165.319913][ T34] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 165.322682][ T34] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 165.324977][ T34] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 165.371601][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 165.645000][ T7593] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 165.696597][ T34] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 165.715579][ T34] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 165.745246][ T7596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 165.747716][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.753903][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 165.785731][ T6615] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 165.785993][ T6615] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 165.786203][ T6615] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 165.786410][ T6615] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 165.796892][ T34] usb 8-1: USB disconnect, device number 6 [ 165.805987][ T6615] thermal thermal_zone0: Temperature check failed (-19) [ 165.846691][ T7601] netlink: 244 bytes leftover after parsing attributes in process `syz.0.403'. [ 166.035321][ T6201] usb 40-1: SetAddress Request (2) to port 0 [ 166.035370][ T6201] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 166.244953][ T7593] wg2 speed is unknown, defaulting to 1000 [ 166.249278][ T7593] wg2 speed is unknown, defaulting to 1000 [ 166.253631][ T7593] wg2 speed is unknown, defaulting to 1000 [ 166.400724][ T143] wg2 speed is unknown, defaulting to 1000 [ 166.403627][ T7593] infiniband syz2: set active [ 166.406183][ T7593] infiniband syz2: added wg2 [ 166.451467][ T7593] RDS/IB: syz2: added [ 166.456206][ T7593] smc: adding ib device syz2 with port count 1 [ 166.462268][ T7593] smc: ib device syz2 port 1 has no pnetid [ 166.468897][ T59] wg2 speed is unknown, defaulting to 1000 [ 166.477332][ T7593] wg2 speed is unknown, defaulting to 1000 [ 166.529949][ T7597] vhci_hcd: connection reset by peer [ 166.532730][ T1140] vhci_hcd vhci_hcd.1: stop threads [ 166.537500][ T1140] vhci_hcd vhci_hcd.1: release socket [ 166.542818][ T1140] vhci_hcd vhci_hcd.1: disconnect device [ 166.716265][ T7593] wg2 speed is unknown, defaulting to 1000 [ 166.960292][ T7593] wg2 speed is unknown, defaulting to 1000 [ 167.124463][ T7593] wg2 speed is unknown, defaulting to 1000 [ 167.342565][ T5953] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 167.342592][ T5953] Bluetooth: hci0: adv larger than maximum supported [ 167.344850][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0d [ 167.591434][ T7626] lo speed is unknown, defaulting to 1000 [ 167.593911][ T7626] lo speed is unknown, defaulting to 1000 [ 167.601567][ T7626] lo speed is unknown, defaulting to 1000 [ 167.620218][ T7626] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.651862][ T7626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.718385][ T7626] lo speed is unknown, defaulting to 1000 [ 167.721159][ T7626] lo speed is unknown, defaulting to 1000 [ 167.723745][ T7626] lo speed is unknown, defaulting to 1000 [ 167.726485][ T7626] lo speed is unknown, defaulting to 1000 [ 167.788139][ T7628] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.880082][ T5953] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 169.880100][ T5953] Bluetooth: hci1: adv larger than maximum supported [ 169.882439][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0d [ 170.018006][ T7667] syz.3.416 uses obsolete (PF_INET,SOCK_PACKET) [ 170.031259][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 170.056634][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.059067][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.061617][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.064002][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.102323][ T7667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.396195][ T7674] mkiss: ax0: crc mode is auto. [ 170.554639][ T7676] netlink: 244 bytes leftover after parsing attributes in process `syz.2.423'. [ 171.085481][ T6201] usb 40-1: device descriptor read/8, error -110 [ 171.476305][ T6201] usb usb40-port1: attempt power cycle [ 172.046515][ T6201] usb usb40-port1: unable to enumerate USB device [ 172.975833][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 174.219354][ T7732] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 174.233289][ T7732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.335832][ T5953] Bluetooth: hci3: command 0x0406 tx timeout [ 176.620406][ T7773] openvswitch: netlink: IP tunnel TTL not specified. [ 176.885352][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 176.916118][ T7775] 9pnet_virtio: no channels available for device syz [ 177.047922][ T60] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 177.050973][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.053550][ T60] usb 8-1: Product: syz [ 177.054909][ T60] usb 8-1: Manufacturer: syz [ 177.058557][ T60] usb 8-1: SerialNumber: syz [ 177.068758][ T60] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.084581][ T60] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.296608][ T7773] random: crng reseeded on system resumption [ 178.309084][ T60] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 178.374208][ T60] ath9k_htc: Failed to initialize the device [ 178.396881][ T60] usb 8-1: ath9k_htc: USB layer deinitialized [ 179.841021][ T60] usb 8-1: USB disconnect, device number 7 [ 179.900440][ T7819] FAULT_INJECTION: forcing a failure. [ 179.900440][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 179.904476][ T7819] CPU: 0 UID: 0 PID: 7819 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 179.904491][ T7819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.904498][ T7819] Call Trace: [ 179.904502][ T7819] [ 179.904510][ T7819] dump_stack_lvl+0x16c/0x1f0 [ 179.904529][ T7819] should_fail_ex+0x512/0x640 [ 179.904547][ T7819] ? __kmalloc_cache_noprof+0x5f/0x800 [ 179.904561][ T7819] should_failslab+0xc2/0x120 [ 179.904577][ T7819] __kmalloc_cache_noprof+0x80/0x800 [ 179.904589][ T7819] ? qfq_change_class+0xcf8/0x1da0 [ 179.904605][ T7819] ? qfq_change_class+0xcf8/0x1da0 [ 179.904617][ T7819] qfq_change_class+0xcf8/0x1da0 [ 179.904632][ T7819] ? __pfx_qfq_change_class+0x10/0x10 [ 179.904647][ T7819] ? qdisc_match_from_root+0x16f/0x260 [ 179.904661][ T7819] ? __pfx_qfq_change_class+0x10/0x10 [ 179.904674][ T7819] tc_ctl_tclass+0x59d/0x16c0 [ 179.904691][ T7819] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 179.904705][ T7819] ? __mutex_lock+0x27b/0x1ca0 [ 179.904720][ T7819] ? rtnetlink_rcv_msg+0x371/0xe90 [ 179.904733][ T7819] ? __lock_acquire+0x436/0x2890 [ 179.904753][ T7819] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 179.904768][ T7819] rtnetlink_rcv_msg+0x3c9/0xe90 [ 179.904781][ T7819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.904797][ T7819] ? ref_tracker_free+0x37c/0x830 [ 179.904809][ T7819] netlink_rcv_skb+0x158/0x420 [ 179.904822][ T7819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.904835][ T7819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.904852][ T7819] ? netlink_deliver_tap+0x1ae/0xd30 [ 179.904866][ T7819] netlink_unicast+0x5aa/0x870 [ 179.904881][ T7819] ? __pfx_netlink_unicast+0x10/0x10 [ 179.904898][ T7819] netlink_sendmsg+0x8c8/0xdd0 [ 179.904913][ T7819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.904927][ T7819] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 179.904945][ T7819] ____sys_sendmsg+0xa5d/0xc30 [ 179.904961][ T7819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.904975][ T7819] ? get_compat_msghdr+0x11a/0x170 [ 179.904992][ T7819] ___sys_sendmsg+0x134/0x1d0 [ 179.905004][ T7819] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.905021][ T7819] ? find_held_lock+0x2b/0x80 [ 179.905043][ T7819] __sys_sendmsg+0x16d/0x220 [ 179.905054][ T7819] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.905070][ T7819] ? do_user_addr_fault+0x843/0x1370 [ 179.905086][ T7819] __do_fast_syscall_32+0xe8/0x680 [ 179.905101][ T7819] do_fast_syscall_32+0x32/0x80 [ 179.905116][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.905142][ T7819] RIP: 0023:0xf700d579 [ 179.905152][ T7819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.905162][ T7819] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 179.905177][ T7819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 179.905184][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.905190][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.905195][ T7819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.905205][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.905218][ T7819] [ 180.019900][ T7818] ================================================================== [ 180.022658][ T7818] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0x323/0x420 [ 180.025717][ T7818] Read of size 8 at addr ffff888048f81e50 by task syz.2.462/7818 [ 180.029523][ T7818] [ 180.030637][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 180.030657][ T7818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.030667][ T7818] Call Trace: [ 180.030678][ T7818] [ 180.030685][ T7818] dump_stack_lvl+0x116/0x1f0 [ 180.030708][ T7818] print_report+0xcd/0x630 [ 180.030732][ T7818] ? __virt_addr_valid+0x81/0x610 [ 180.030756][ T7818] ? __phys_addr+0xe8/0x180 [ 180.030780][ T7818] ? qfq_reset_qdisc+0x323/0x420 [ 180.030798][ T7818] kasan_report+0xe0/0x110 [ 180.030820][ T7818] ? qfq_reset_qdisc+0x323/0x420 [ 180.030840][ T7818] qfq_reset_qdisc+0x323/0x420 [ 180.030859][ T7818] ? synchronize_rcu_expedited+0x3b9/0x460 [ 180.030877][ T7818] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 180.030895][ T7818] qdisc_reset+0xe0/0x630 [ 180.030920][ T7818] __qdisc_destroy+0xd3/0x4a0 [ 180.030943][ T7818] qdisc_put+0xab/0xe0 [ 180.030966][ T7818] dev_shutdown+0x1d0/0x430 [ 180.030983][ T7818] unregister_netdevice_many_notify+0xb37/0x2590 [ 180.031006][ T7818] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 180.031031][ T7818] unregister_netdevice_queue+0x305/0x3c0 [ 180.031050][ T7818] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 180.031068][ T7818] ? linkwatch_schedule_work+0x181/0x1c0 [ 180.031090][ T7818] ? linkwatch_fire_event+0x6f/0x270 [ 180.031112][ T7818] __tun_detach+0x119c/0x1490 [ 180.031136][ T7818] ? __pfx_tun_chr_close+0x10/0x10 [ 180.031156][ T7818] tun_chr_close+0xc2/0x230 [ 180.031176][ T7818] __fput+0x402/0xb70 [ 180.031194][ T7818] task_work_run+0x150/0x240 [ 180.031211][ T7818] ? __pfx_task_work_run+0x10/0x10 [ 180.031227][ T7818] ? __do_sys_close_range+0x278/0x730 [ 180.031253][ T7818] exit_to_user_mode_loop+0xfb/0x540 [ 180.031275][ T7818] __do_fast_syscall_32+0x4a4/0x680 [ 180.031296][ T7818] do_fast_syscall_32+0x32/0x80 [ 180.031316][ T7818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.031335][ T7818] RIP: 0023:0xf700d579 [ 180.031348][ T7818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.031363][ T7818] RSP: 002b:00000000fffb473c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 180.031378][ T7818] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 180.031388][ T7818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.031397][ T7818] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 180.031406][ T7818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.031436][ T7818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.031453][ T7818] [ 180.031459][ T7818] [ 180.128227][ T7818] Allocated by task 7819: [ 180.129878][ T7818] kasan_save_stack+0x33/0x60 [ 180.131855][ T7818] kasan_save_track+0x14/0x30 [ 180.133826][ T7818] __kasan_kmalloc+0xaa/0xb0 [ 180.135779][ T7818] qfq_change_class+0x2ba/0x1da0 [ 180.137907][ T7818] tc_ctl_tclass+0x59d/0x16c0 [ 180.139935][ T7818] rtnetlink_rcv_msg+0x3c9/0xe90 [ 180.141970][ T7818] netlink_rcv_skb+0x158/0x420 [ 180.143680][ T7818] netlink_unicast+0x5aa/0x870 [ 180.145469][ T7818] netlink_sendmsg+0x8c8/0xdd0 [ 180.147435][ T7818] ____sys_sendmsg+0xa5d/0xc30 [ 180.149405][ T7818] ___sys_sendmsg+0x134/0x1d0 [ 180.151344][ T7818] __sys_sendmsg+0x16d/0x220 [ 180.153226][ T7818] __do_fast_syscall_32+0xe8/0x680 [ 180.155357][ T7818] do_fast_syscall_32+0x32/0x80 [ 180.157357][ T7818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.159916][ T7818] [ 180.160899][ T7818] Freed by task 7819: [ 180.162552][ T7818] kasan_save_stack+0x33/0x60 [ 180.164479][ T7818] kasan_save_track+0x14/0x30 [ 180.166463][ T7818] kasan_save_free_info+0x3b/0x60 [ 180.168536][ T7818] __kasan_slab_free+0x5f/0x80 [ 180.170484][ T7818] kfree+0x2f8/0x6e0 [ 180.172105][ T7818] qfq_change_class+0x1576/0x1da0 [ 180.174147][ T7818] tc_ctl_tclass+0x59d/0x16c0 [ 180.176102][ T7818] rtnetlink_rcv_msg+0x3c9/0xe90 [ 180.178124][ T7818] netlink_rcv_skb+0x158/0x420 [ 180.180073][ T7818] netlink_unicast+0x5aa/0x870 [ 180.182166][ T7818] netlink_sendmsg+0x8c8/0xdd0 [ 180.184002][ T7818] ____sys_sendmsg+0xa5d/0xc30 [ 180.185530][ T7818] ___sys_sendmsg+0x134/0x1d0 [ 180.187023][ T7818] __sys_sendmsg+0x16d/0x220 [ 180.188508][ T7818] __do_fast_syscall_32+0xe8/0x680 [ 180.190142][ T7818] do_fast_syscall_32+0x32/0x80 [ 180.191765][ T7818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.193774][ T7818] [ 180.194565][ T7818] The buggy address belongs to the object at ffff888048f81e00 [ 180.194565][ T7818] which belongs to the cache kmalloc-128 of size 128 [ 180.198992][ T7818] The buggy address is located 80 bytes inside of [ 180.198992][ T7818] freed 128-byte region [ffff888048f81e00, ffff888048f81e80) [ 180.203243][ T7818] [ 180.204066][ T7818] The buggy address belongs to the physical page: [ 180.206097][ T7818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48f81 [ 180.208880][ T7818] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 180.211171][ T7818] page_type: f5(slab) [ 180.212461][ T7818] raw: 04fff00000000000 ffff88801b442a00 ffffea0001b2b380 dead000000000005 [ 180.215169][ T7818] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 180.217890][ T7818] page dumped because: kasan: bad access detected [ 180.219935][ T7818] page_owner tracks the page as allocated [ 180.221780][ T7818] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6348, tgid 6344 (syz.1.71), ts 78142461864, free_ts 69856324014 [ 180.227647][ T7818] post_alloc_hook+0x1af/0x220 [ 180.229196][ T7818] get_page_from_freelist+0xd0b/0x31a0 [ 180.230942][ T7818] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 180.232856][ T7818] alloc_pages_mpol+0x1fb/0x550 [ 180.234418][ T7818] new_slab+0x2c3/0x430 [ 180.235774][ T7818] ___slab_alloc+0xe18/0x1c90 [ 180.237278][ T7818] __slab_alloc.constprop.0+0x63/0x110 [ 180.239041][ T7818] __kmalloc_noprof+0x4fc/0x910 [ 180.240610][ T7818] ovl_cache_entry_new+0x65/0x970 [ 180.242243][ T7818] ovl_fill_merge+0xa91/0xfa0 [ 180.243766][ T7818] dcache_readdir+0x1fa/0x850 [ 180.245277][ T7818] iterate_dir+0x296/0xaf0 [ 180.246707][ T7818] ovl_dir_read_merged+0x37c/0x780 [ 180.248347][ T7818] ovl_iterate+0xb5c/0x1120 [ 180.249811][ T7818] wrap_directory_iterator+0xa2/0xe0 [ 180.251497][ T7818] iterate_dir+0x296/0xaf0 [ 180.252930][ T7818] page last free pid 143 tgid 143 stack trace: [ 180.254881][ T7818] __free_frozen_pages+0x7df/0x1170 [ 180.256545][ T7818] pcpu_free_pages.constprop.0+0x126/0x210 [ 180.258393][ T7818] pcpu_balance_workfn+0x26b/0xe00 [ 180.260042][ T7818] process_one_work+0x9ba/0x1b20 [ 180.261686][ T7818] worker_thread+0x6c8/0xf10 [ 180.263164][ T7818] kthread+0x3c5/0x780 [ 180.264476][ T7818] ret_from_fork+0x983/0xb10 [ 180.265946][ T7818] ret_from_fork_asm+0x1a/0x30 [ 180.267498][ T7818] [ 180.268267][ T7818] Memory state around the buggy address: [ 180.269999][ T7818] ffff888048f81d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 180.272521][ T7818] ffff888048f81d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.275022][ T7818] >ffff888048f81e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.277561][ T7818] ^ [ 180.279676][ T7818] ffff888048f81e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.282227][ T7818] ffff888048f81f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.284749][ T7818] ================================================================== [ 180.290101][ T7818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 180.292432][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 180.295290][ T7818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.298269][ T7818] Call Trace: [ 180.299354][ T7818] [ 180.300317][ T7818] dump_stack_lvl+0x3d/0x1f0 [ 180.301877][ T7818] vpanic+0x640/0x6f0 [ 180.303165][ T7818] panic+0xca/0xd0 [ 180.304387][ T7818] ? __pfx_panic+0x10/0x10 [ 180.305830][ T7818] ? qfq_reset_qdisc+0x323/0x420 [ 180.307430][ T7818] ? preempt_schedule_common+0x44/0xc0 [ 180.309161][ T7818] ? preempt_schedule_thunk+0x16/0x30 [ 180.310874][ T7818] ? check_panic_on_warn+0x1f/0xb0 [ 180.312545][ T7818] check_panic_on_warn+0xab/0xb0 [ 180.314115][ T7818] end_report+0x107/0x160 [ 180.315528][ T7818] kasan_report+0xee/0x110 [ 180.316971][ T7818] ? qfq_reset_qdisc+0x323/0x420 [ 180.318557][ T7818] qfq_reset_qdisc+0x323/0x420 [ 180.320103][ T7818] ? synchronize_rcu_expedited+0x3b9/0x460 [ 180.321993][ T7818] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 180.323690][ T7818] qdisc_reset+0xe0/0x630 [ 180.325085][ T7818] __qdisc_destroy+0xd3/0x4a0 [ 180.326599][ T7818] qdisc_put+0xab/0xe0 [ 180.327933][ T7818] dev_shutdown+0x1d0/0x430 [ 180.329402][ T7818] unregister_netdevice_many_notify+0xb37/0x2590 [ 180.331611][ T7818] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 180.333765][ T7818] unregister_netdevice_queue+0x305/0x3c0 [ 180.335606][ T7818] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 180.337594][ T7818] ? linkwatch_schedule_work+0x181/0x1c0 [ 180.339392][ T7818] ? linkwatch_fire_event+0x6f/0x270 [ 180.341127][ T7818] __tun_detach+0x119c/0x1490 [ 180.342621][ T7818] ? __pfx_tun_chr_close+0x10/0x10 [ 180.344259][ T7818] tun_chr_close+0xc2/0x230 [ 180.345730][ T7818] __fput+0x402/0xb70 [ 180.347034][ T7818] task_work_run+0x150/0x240 [ 180.348575][ T7818] ? __pfx_task_work_run+0x10/0x10 [ 180.350216][ T7818] ? __do_sys_close_range+0x278/0x730 [ 180.351933][ T7818] exit_to_user_mode_loop+0xfb/0x540 [ 180.353624][ T7818] __do_fast_syscall_32+0x4a4/0x680 [ 180.355298][ T7818] do_fast_syscall_32+0x32/0x80 [ 180.356869][ T7818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.358874][ T7818] RIP: 0023:0xf700d579 [ 180.360172][ T7818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.366236][ T7818] RSP: 002b:00000000fffb473c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 180.368888][ T7818] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 180.371428][ T7818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.373931][ T7818] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 180.376438][ T7818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.378936][ T7818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.381471][ T7818] [ 180.383165][ T7818] Kernel Offset: disabled [ 180.384564][ T7818] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:32:57 Registers: info registers vcpu 0 CPU#0 RAX=00000000004f735b RBX=0000000000000000 RCX=ffffffff8b74b6d9 RDX=0000000000000000 RSI=ffffffff8dac806f RDI=ffffffff8bf2a700 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088acd0 R15=0000000000000000 RIP=ffffffff8b749dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097702000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2f5021 CR3=000000002910d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005592afa03c50 00005592afa03c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd078a5400 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030303030203a 3431522030303030 3030303030303030 30303030203a3331 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030203030203030 2030302036322034 6220643820303020 3030203030203030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2036322034622064 3820303920303920 3039203039203363 203935206135203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64353c2030382064 6320343320663020 3565203938203535 2032352031352030 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020303020303020 3030203030203030 2030302030302030 3020303020303020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f7bc5 RDI=ffffffff9aed3220 RBP=ffffffff9aed31e0 RSP=ffffc90004417428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9aed31e0 R15=ffffffff852f7b60 RIP=ffffffff852f7bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097802000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f746747c CR3=0000000052ba3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84b315e9 RDX=0000000000000004 RSI=0000000000000004 RDI=0000000000000001 RBP=ffffffff8bf2cc60 RSP=ffffc90004677170 R8 =0000000000000001 R9 =0000000000000002 R10=0000000000000004 R11=ffff8880288dd4b0 R12=0000000000000004 R13=0000000000000001 R14=0000000000000003 R15=ffffffff8bf2d150 RIP=ffffffff81be3f80 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f38e8c6d300 ffffffff 00c00000 GS =0000 ffff888097902000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c492ff6000 CR3=000000004cdc2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004630b9 RBX=0000000000000003 RCX=ffffffff8b74b6d9 RDX=0000000000000000 RSI=ffffffff8dac806f RDI=ffffffff8bf2a700 RBP=ffffed10039d4000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801cea0b30 R12=0000000000000003 R13=ffff88801cea0000 R14=ffffffff9088acd0 R15=0000000000000000 RIP=ffffffff8b749dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a02000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30ae8f5e9c CR3=000000005655f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020c00000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000