last executing test programs: 3m38.107106752s ago: executing program 0 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd4d24", 0xe}}, 0xee) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffff8000, 0x6000000000000, 0x80000001}, 0x3}, 0x20, 0x1, 0x0) 3m16.043101557s ago: executing program 0 (id=113): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xe4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x3f, 0x0, 0x0}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000180)="024dfc7b58623401", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aa0045000030006500000021907800000000ffffffff050390"], 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) utimensat(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c0001"], 0x110}], 0x1}, 0x80) 3m16.032610689s ago: executing program 0 (id=119): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101940) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x480000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x9) getgroups(0xfffffffffffffd39, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffb, 0x1, 0x3ff}}) 3m16.019681865s ago: executing program 0 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r2, &(0x7f0000000000)=""/83, 0x53) read(r2, 0x0, 0x0) ioctl$TCSETS(r1, 0x89f3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xfffffffd, 0x8, 0x8000, 0x5, 0xd, "3e6d1a00be1f2dd31c7708f8aac15f58910bef"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) r4 = open(0x0, 0x145142, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000013c0)={{0x0, 0x8, 0x9, 0xd, 0x8, 0x2876ab2c, 0xe, 0x7, 0x2, 0x1000, 0x7e, 0x4, 0x1965, 0x2, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002840)={r5, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000c69c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000c6bc0)={0x0, 0x0, "de8967bf7fa6c3335fca2399ce12a7a7765c3d7e7a130e2565bf3c62f9ddaef7e6097f439444f0363ac2aac1b7a0f516711761fdd7d18b0f710b0470250436b712fe61e37cab65ca657668a50308418c69a4e428796d1ab55994187cd8b2ce7a8103fd0ce3f247f33e18ff516aca8141e81f19390362c6ff0499aa2fe4294d17209f4dcb911ec4a8ad1ee05acee91a9242c6ac764b9658ea42aa22b53627eb64944578b8a2b7f1ad8d0c583d73fe82857386fd5ab6d4b8e045db7cadd72a5df1c4135523684e793920af34f8a8542969fc8fb58d64223a7c15cdc6db292272973612558c366c76b2663efd328d02a8812196b589e5712ef6364cd4c336a2b95b", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000c7bc0)={{0x0, 0x800, 0x7fffffffffffffff, 0x9365, 0xa, 0xfff, 0x0, 0x98, 0x5a8, 0x2, 0x3, 0x7, 0x9, 0x4, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000c8bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "8048b196783a65"}) r18 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r18, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r18, 0x81e8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002840)={r20, r19, "bc1e0855a365eaa1acdc81db33f78a587097283425ab6de4227dcb959789ff3c8ed15b17016b3f3b23346bccc60450fcd3b8bf538f741d514e43bcd624167635a0fb63b70cb50c132e8dbfb48c12d36eff686e7af8300f832f9781d766f0be2913eca2371c091683575c07000000c96cbcfdf7010b3d8df676fdbc6c68a5a2d377829b75beafaf379b9d1fe8219824e09d0124fb4b4719d8cee69e75b669f74ab5d06b388286f6b5b1c45f97b465bf757eca2322a6fad8c6f7672d159e728e8308c252ae680b0f56aa696a64f88818069c220b8a50223fdbfc7f20146e3c540100", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c9bc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "5d45a447020b29"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000cabc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cbbc0)={0xb1e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e661b469f854fd"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ccbc0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r28}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r29}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {r24}, {}, {0x0, r16}, {}, {0x0, r5}, {r7, r8}, {r9, r12}, {r19, r22}, {r25, r27}], 0x3, "c919de6949c3c4"}) r30 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r30, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00008035bb7b5a50803a4c49a85047110cbbbbbbbbbb1f000000000086dd65363ce7001406002001000000000000000000000000000100000000000000000000ffff0a0101014e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000090780028"], 0x4e) 3m14.306522079s ago: executing program 0 (id=126): r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x4002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000040)={0x100, r1, 0x80000}) r3 = syz_clone(0x202000, &(0x7f0000000080)="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", 0x1000, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="70a322921313d43fb5c2da1d10044392f29bdbd6f230aa9e473ce344b24d2aa85c") process_vm_readv(r3, &(0x7f0000001200)=[{&(0x7f0000001140)=""/6, 0x6}, {&(0x7f0000001180)=""/85, 0x55}], 0x2, &(0x7f0000002380)=[{&(0x7f0000001240)=""/13, 0xd}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/224, 0xe0}], 0x3, 0x0) fstat(r2, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000002440)=@md0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nsfs\x00', 0x101a002, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002500)=@filename='./file0\x00', r4, &(0x7f0000002540)={0x0, 0x80000001, 0xb7, 0xfffffffffffffff9, 0x10001, 0x80000001, 0xffff, 0x2, 0x7}) r5 = socket(0x2a, 0x800, 0xa3dc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x60, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x770}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000002700)={r2}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002740)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000002780)={{0x1, 0x1, 0x18, r1, {0x8, 0x101}}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x1010, r6, 0x9bad8000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000027c0)={0x0, @in6={{0xa, 0x4e20, 0xff, @private0, 0x7}}, 0x2f6d1fa2, 0x9dc, 0x17f, 0xef2, 0x40, 0x5, 0x9}, &(0x7f0000002880)=0x9c) setxattr$trusted_overlay_origin(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), &(0x7f0000002940), 0x2, 0x2) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x110, r2, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x10000000) r9 = syz_open_dev$cec(&(0x7f0000002980), 0x0, 0x6000) syz_io_uring_submit(r7, r8, &(0x7f00000029c0)=@IORING_OP_FSYNC={0x3, 0x1a, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) r10 = syz_open_dev$cec(&(0x7f0000002a00), 0x0, 0x1850a0) ioctl$FICLONE(r9, 0x40049409, r10) write$FUSE_WRITE(r6, &(0x7f0000002a40)={0x18, 0x0, 0x0, {0x3}}, 0x18) r11 = openat$sequencer2(0xffffff9c, &(0x7f0000002a80), 0x8800, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) connect$l2tp6(r2, &(0x7f0000002ac0)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x1}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000002b00)={{0x7, 0x3, 0x0, 0x0, '\x00', 0x74c}, 0x1, [0x7, 0x0, 0xfc34e23, 0x3, 0x2, 0x5, 0x7fff, 0x8000, 0x123f1f05, 0x40, 0x8, 0x1, 0x4, 0x3, 0xd, 0x1ff, 0x3, 0x4, 0x3, 0xa7, 0x3, 0x1, 0x5, 0x9, 0x7, 0x7fff, 0x3, 0x1000, 0x9, 0x3, 0xd287, 0x9, 0xc579, 0x101, 0x9dcc, 0xfffffffd, 0x6, 0xffff, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x4, 0x0, 0xff, 0x1ff, 0x1000, 0x7, 0xffff6b11, 0x38, 0xff, 0x5, 0x2, 0x2, 0x9, 0xec, 0x9, 0xff98, 0x10, 0x400, 0x7, 0xb, 0x3, 0x0, 0x6, 0x8000, 0x7, 0x80000001, 0x3, 0xbb, 0x4, 0x1, 0x2, 0x10000, 0x8, 0x1, 0x100, 0xc8, 0x4, 0x6, 0x8100, 0x7c, 0xffffffff, 0x5c6a, 0x1, 0x101, 0x2, 0x9, 0x12e, 0x0, 0xffff27d7, 0xf, 0xe, 0x81, 0x100, 0x3, 0x1200000, 0xef7, 0x400, 0x3, 0x676a, 0x4, 0xfffffffb, 0x7, 0xfffffffc, 0x7c, 0x1, 0x300000, 0x0, 0xfffffffc, 0xe426, 0x2, 0x6, 0x6, 0xffffffff, 0x8, 0xfffffe01, 0xd1e0, 0x85, 0x8, 0x9, 0x5, 0xc82c, 0x0, 0x5, 0x6, 0x3, 0x2]}) userfaultfd(0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000002e00)={'ip6gretap0\x00', 0x6}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002e40)={'bridge_slave_0\x00'}) 3m13.728072458s ago: executing program 0 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) clock_gettime(0x0, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0xe626f0375ed2a9c}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x7d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x69, 0x0, @opaque="faa7d48fdb1bd8c45b3fd77ad58563533523aca33b2aca994e0474bf1c4ac91eadc56d846732d395f58d5efab30c1d2fe62ae58851f3e388d48291dfcc2d0335c714880622ea25e8983fa2aab15acb3bd8883cf411ea099518a8790969c85614e3"}}}, 0x8b) 2m58.439137449s ago: executing program 32 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) clock_gettime(0x0, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0xe626f0375ed2a9c}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x7d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x69, 0x0, @opaque="faa7d48fdb1bd8c45b3fd77ad58563533523aca33b2aca994e0474bf1c4ac91eadc56d846732d395f58d5efab30c1d2fe62ae58851f3e388d48291dfcc2d0335c714880622ea25e8983fa2aab15acb3bd8883cf411ea099518a8790969c85614e3"}}}, 0x8b) 2m15.074348673s ago: executing program 4 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x600, 0x0, 0xfa5}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x44}}, 0x1) 2m14.943228921s ago: executing program 4 (id=267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x44e23b74, 0x25, 0xfffffffd, 0x200, 0x10003}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x0, 0x6}, 0x100, './file1\x00'}) 2m14.666919372s ago: executing program 4 (id=270): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB], 0xf2) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r0 = socket(0x2a, 0x1, 0x1) syz_usb_connect$hid(0x3, 0xffffffffffffff46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) (async, rerun: 64) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) (async) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xa9f78000) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) (async, rerun: 32) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) (async) socket$inet6(0xa, 0x3, 0xff) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xb, 0x5}]}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71ba, @void, @value}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) r3 = eventfd(0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a00)={0x2, 0x0, [{0x0, 0xd3, &(0x7f0000000a80)=""/211}, {0xeeeeb000, 0x51, &(0x7f0000000880)=""/81}]}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x800, 0x10000000000, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m14.460665424s ago: executing program 4 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)}], 0x2) 2m14.215783268s ago: executing program 4 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000200)) 2m13.470140415s ago: executing program 4 (id=278): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x0, 0x1, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3fc, 0x0, 0x0, 0x8051, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7c5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = io_uring_setup(0x23ec, &(0x7f0000000480)={0x0, 0x122b, 0x400, 0x0, 0x272}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r3, &(0x7f0000000180)=""/52, 0xfffffdef) getpeername(r3, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280), 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000200), 0x4) fsopen(0x0, 0x0) 1m58.312228593s ago: executing program 33 (id=278): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x0, 0x1, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3fc, 0x0, 0x0, 0x8051, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7c5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = io_uring_setup(0x23ec, &(0x7f0000000480)={0x0, 0x122b, 0x400, 0x0, 0x272}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r3, &(0x7f0000000180)=""/52, 0xfffffdef) getpeername(r3, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280), 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[], 0x10) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000200), 0x4) fsopen(0x0, 0x0) 1m32.403907758s ago: executing program 1 (id=398): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e08004500007400000000000190780a010101ac1414aa05009078e00000e0460003000000000000110000ac1414aa00000004830302070300443c00030a0101840000000000000000000000000000000000000000ac1414bb000000007f00000100000000e000000100000000640101000000"], 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e08004500007400000000000190780a010101ac1414aa05009078e00000e0460003000000000000110000ac1414aa00000004830302070300443c00030a0101840000000000000000000000000000000000000000ac1414bb000000007f00000100000000e000000100000000640101000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xd9, 0x4, 0x30, @mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8, 0x7800, 0x0, 0x1ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xd9, 0x4, 0x30, @mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8, 0x7800, 0x0, 0x1ff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1d000000feffffffb8ffffff0500000005000100", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="02000000040000000100"/24, @ANYRES32, @ANYBLOB="782dcc987dc7448c580655c0e63424e886b59ca30b52219f7387b9916e83495c93eeaf024a36b96eb9ee"], 0x50) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1m32.168025431s ago: executing program 1 (id=401): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) inotify_init1(0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x60400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1m31.060397934s ago: executing program 1 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x842, 0x23456}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff000}, {0x6}]}, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}], 0x1) 1m30.634783796s ago: executing program 1 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x80, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000003c0)={0x6, 0x401}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, {"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", 0x1000}}, 0x1006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) r3 = syz_io_uring_setup(0x7487, &(0x7f0000000c00)={0x0, 0x2, 0x1}, &(0x7f0000000300), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000380)="c9", 0x1) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0xee34, 0x80, 0x10000000}, &(0x7f0000000340), 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m28.714154114s ago: executing program 1 (id=414): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x6, 0x0) write$dsp(r1, &(0x7f0000000140)="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", 0xfc) 1m27.970406171s ago: executing program 1 (id=417): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigqueueinfo(0x0, 0x2, &(0x7f00000001c0)={0x82, 0xff, 0xffffff09}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x8c031, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_dev$midi(&(0x7f00000000c0), 0x5, 0x42) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x10001, 0xffffffff}) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 1m27.694658536s ago: executing program 34 (id=417): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigqueueinfo(0x0, 0x2, &(0x7f00000001c0)={0x82, 0xff, 0xffffff09}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x8c031, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_dev$midi(&(0x7f00000000c0), 0x5, 0x42) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x10001, 0xffffffff}) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 3.297608531s ago: executing program 5 (id=952): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x5, 0x2e, &(0x7f0000000000)="d1fd567885e059c6a4d9523beda6c1abb2821169796fa7ea787db5a132828d27452fba40e1d3de174170954639e7") ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x3, 0x9, 0xacaf}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)=""/69, 0x5f, 0x45, 0x0, 0x1, 0x10000, @value}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) setresuid(0x0, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504020000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b5264f00000000cd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6a582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 1.919180102s ago: executing program 2 (id=960): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) brk(0x80ffd000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r0, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x42400, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}], [{@fowner_lt={'fowner<', r4}}, {@appraise_type}, {@appraise}]}}) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) (async) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 1.919065006s ago: executing program 2 (id=961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000830700006f0500009a91000002000000", @ANYRES32=r1, @ANYBLOB="d100000000004f69ccb0485dbcb400000000000000c00000000000008b380481263a5623ec2e32560e2f76f66d3b50c8bb3e146af5b66619d137ceb17805491a66dd01146f7ae326302b0ba4764dfe3f2ecd0e8fdf0c03934f3162e3a2d14927e454a76e9028fc0f8f95d700225a41d4e5d8ed49da77ac243d908f9fefd1bd5ae5d8ddf1ef289d7f8663fff2e8ee5de3", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000010000000200"/28], 0x50) 1.790189248s ago: executing program 3 (id=965): socket(0x2b, 0x3, 0x1) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup3(r1, r0, 0x80000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x10000401, 0x6}, 0x0, {}, 0x1, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187014, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0xf000, 0x0) 1.730293078s ago: executing program 3 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2) 1.72381706s ago: executing program 3 (id=967): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x20, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x8, r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xd, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a]}}, 0x5c) 1.723354852s ago: executing program 5 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)}], 0x2) 1.65518497s ago: executing program 3 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000b40)={0x1, @vbi={0x0, 0x0, 0x0, 0x32525942, [0x7, 0x9], [0xffff, 0x8], 0x108}}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x800, 0x6c6, 0xb, 0x10, 0xffff}, 0x20) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001900210800000000000000001d0100001500030000000000000000003eb675574356033206000000150004000000000000000000755f7b98b27b7e3f9f"], 0x44}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x84a00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000200)=""/198, &(0x7f0000000040)=0xc6) 1.644838596s ago: executing program 5 (id=971): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close(r0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='iso9660\x00', 0x10, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1e}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000780)="f0a29fc03b1d75b45d700d973709d11fee8eaf32981a52a3b815ebbb06b0394de9831807b3d0a3ea180a85278c00a7f0ddaed2c310142f5857860331930b9bbf157cfb6fce33686de894a25fa9f409438619d25b368a789b83ea1350007974c06464717159a013d16367c5d114792b89246750285d201dfa28d0d79851078704154f69ed2b275d6de25419", 0x8b}], 0x1}}], 0x2, 0x4008040) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x2200, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="20000000040000000200000000000000010200003315664f3a5810b65f80f76966df52fecdcc25e2aecba4e07fd20785bd112dfe536b884160", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc1105511, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x111b, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40009, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40040000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5494]}) 1.560343803s ago: executing program 3 (id=972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x3c, r7, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000040)={0xfffffffc, 0xd, 0x2, {0xb, @win={{0x0, 0x4, 0x7, 0x4}, 0x8, 0x6cb, 0x0, 0xfffffffd, 0x0}}, 0x1}) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0600000000000000e76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b99cb9fb96d225d092392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r9, 0x358, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.485113027s ago: executing program 3 (id=974): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x140, 0x30, 0x1, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "b329440a28cc74c15f62fdae94f9efc2"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xe8, 0x12, 0x0, 0x0, {{0xd}, {0x4}, {0xb8, 0x6, "f499dcf302d54e3bdb1fa62f26a49b17c9bbbe68ae8b794f1d12edd4d1e259033f17bda86765cba2eb77e4963fb892c5474536066340750cb77160cacec614d3d4bd5e4e532e24c5b3d9aea356de50e260af96c5fb166910e4bccabbf0fe5a175de1424fc92892784e7f4b970150fb879379fb9c31a23de159d69fb29010336a0403668510e468aa67f4062a4b6894b44590446880b0fd7d919931d16107c230f3e145aec18ca37fba24536eab4dd41aa02490e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x1, &(0x7f00000000c0)={0x1ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() chdir(&(0x7f0000000300)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() setrlimit(0xe, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x20, 0x4, @thr={&(0x7f0000000240)="332d9648931ba38a99206653db996e76159b72a09b4966568d6eb323455a3d8ec0f6d3f10ac259edcac3f2fa1d6bc10d6931fa20098ad32f31ef5d3321ff819e9af02c679f35da4c3e8320b6411085bf78d834e345220b83b75aa0a5893996140f4f", &(0x7f00000003c0)="76b7fe583cf219b23d60742f4c28d16c2e60808be1254c396a49dbdf60077b11b84b311f8bb0c32fc3d0c5e5778f0eb4d845cac0c176018bfc01968d7c568c687950c6a4c70e819b19ff887f8c7f1f1f46a382a01db1a690b9d4c15b62ac6b"}}, &(0x7f0000bbdffc)) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fchdir(0xffffffffffffffff) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dont_apprakse,fsuuid=6625dcd7-bbd-24668\a9a,\x00']) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) 1.028556186s ago: executing program 6 (id=977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x81, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x0, @generic=0xfc}) r3 = syz_io_uring_setup(0x235, &(0x7f00000000c0)={0x0, 0xa91a, 0x10, 0x3, 0x0, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x98edb7d0c74f95a6, 0x0, 0x0, 0xffffffff, &(0x7f0000000180)=[r2, r0, r2, r0, r2, r3, r1, 0xffffffffffffffff, r0, r0], 0xa, 0x0, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000300), 0x800000000000339, 0x40040d1) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) r9 = syz_open_procfs(r6, &(0x7f0000000040)='smaps\x00') r10 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000001000/0x3000)=nil) shmat(r10, &(0x7f0000000000/0x1000)=nil, 0xffffffffffffcfff) lseek(r9, 0x289e04b5, 0x0) recvmmsg(r7, &(0x7f0000000180), 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0xd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.025728987s ago: executing program 2 (id=978): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)={0x20, 0xe}, 0x0, 0x0}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b12, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000000000003d65571c65970b4445270d0d7606ba6d828d377bb6bb18e7465bcdc48e615d0349866b15ea8f2e4d0742fa286306735d2926a17096208a3d5ad8389c11a934a1b9fa36f4a5c74e37ecad7cf137d09f7dcad56d0fe6fce3763a0e9362b561a4078c4246918a89cc3f9c3bdd3d8b17cdd3d5ac8741b59f5a5cc459a10937249c82344d9d3efbac0b1672d043d2426f9a39f653effd85aa649c02bce2bb6cd8da550113d86e95521a494ffd02a05fbb34a1076fde5672b74b073a9cb9cc2586d0c4d9a22a7ea89f5e04c903471aeb4e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) (async) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r5 = syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) creat(&(0x7f0000000140)='./file1\x00', 0x48) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180)=0x6, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r7}, 0x38) 720.079873ms ago: executing program 5 (id=979): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)}], 0x2) 640.554872ms ago: executing program 5 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/132, 0x84}], 0x1}, 0x1}], 0x1, 0x102, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffdcf, 0x2004c000, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x9a832000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 539.74844ms ago: executing program 5 (id=981): madvise(&(0x7f00006c8000/0x4000)=nil, 0x4000, 0xf) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xc2, 0x100, 0x800, 0x4, 0x2, "5f730000a9003f00"}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500042800000000fd06907864010101ac1014aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000290780000"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x80000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x12, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='mm_migrate_pages\x00', r4, 0x0, 0x7ffc}, 0xf) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 316.004072ms ago: executing program 6 (id=982): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) 313.808222ms ago: executing program 6 (id=983): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x241}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 298.541473ms ago: executing program 6 (id=984): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) timer_create(0xf53272654adca2a9, &(0x7f0000000240)={0x0, 0x25, 0x0, @thr={&(0x7f0000000080)="f9a7ef2f18535ba7acfbaffdc3d8b971ca1fe2c5e1fb9d85d13a2c1f420c7210aedd57f268eea192abcff2789d1754d40847a512", &(0x7f0000000140)="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"}}, &(0x7f0000000280)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[], 0x1a8}}, 0x0) 230.557765ms ago: executing program 2 (id=985): r0 = socket(0x400000000010, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) inotify_init() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) (async) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) mmap$snddsp_status(&(0x7f0000068000/0x4000)=nil, 0x1000, 0x2000008, 0x89050, r3, 0x82000000) 220.596934ms ago: executing program 6 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00160000030001001c0012800b00010062726964676500000c0002800600270003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8884) 218.411508ms ago: executing program 6 (id=987): timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x0, 0x3, {0x0}, {0xee01}, 0x7, 0x5}) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2a, 0x1, @tid=r1}) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001300010025bd700000dcdf25647262675f6e6f70725f6374725f616573323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/224], 0xe0}}, 0x0) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000300)=0x402) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) (async) syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10000, 0x0, 0x201}, &(0x7f0000000200), &(0x7f0000000280)) (async) io_submit(r3, 0xfe60, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_gettime(r0, &(0x7f0000000000)) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000100)=0x4) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65773064656661756c7420747275737465643a913873895820303030303030303030303030303030303430393300"], 0x2f, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 150.304139ms ago: executing program 2 (id=988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x80002, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba073b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0xfffffe95) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000040)={0x0, {0x8, 0x5}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x9, 0xf23, 0xa57, 0x4, 0x3, 0x7, 0x3}}) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f00000004c0)=""/95, 0x5f}], 0x5, &(0x7f0000000580)=""/44, 0x2c}, 0x9}, {{&(0x7f00000005c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/199, 0xc7}], 0x2}, 0xf}, {{&(0x7f0000000880)=@nl, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)=""/16, 0x10}, {&(0x7f0000000940)=""/1, 0x1}], 0x2, &(0x7f00000009c0)=""/225, 0xe1}, 0x8}], 0x3, 0x40002062, &(0x7f0000000b40)={0x77359400}) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000b80)={0x10000, 0x7, "72a1ebf8ee24dd4b736a4b0c49fc97b57152df6fd2889a2d6092686259c08d52", 0x81, 0x9, 0x800, 0x1, 0x238}) ioctl$sock_ifreq(r5, 0x8916, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000c80)=0xfffffff0, 0x4) r6 = openat$vnet(0xffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000d00)={0x0, 0xbd, ""/189}) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000e00), 0x430000, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000e40)) ioctl$CDROM_NEXT_WRITABLE(r7, 0x5394, &(0x7f0000000e80)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000ec0)={0x8f, 0x3ff, 0x3, "2f625651619fc03f5d65539e6a62bf7a9fde1dc3ce7177d9b035927184d0ab9b87c49166f62d37ae2526c96ee058cec7bee73b96f3f32d3c8faaff5b55c3bb8887c9e7e0ecb97fa1e98a8f3e083cf28d630ca1bd7aaa8d45e82ae2ba9e1c696efb3071703f25736e3cf8aece24f02f19461ea0485b2f306c73ea93155d5acf82fd0e2d1b138eaaa5e310c4039497d5"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000f80)={0x0, @bt={0xcd, 0x80000001, 0x0, 0x3, 0x6, 0x1, 0x9, 0xc, 0x14000, 0xffff8000, 0x7, 0x6, 0x7, 0x6, 0x1a, 0x0, {0x800, 0x3}, 0xe, 0xb0}}) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000001040)=0x1000) r8 = syz_open_dev$sg(&(0x7f0000001080), 0xb, 0x48000) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f00000010c0)) socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001100)={'wg2\x00'}) 0s ago: executing program 2 (id=989): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000001c0)={0x3, 0x2, @raw_data=[0x3, 0x4, 0x0, 0x9, 0x8001, 0xe6, 0x3, 0x7, 0x2, 0x48a0, 0x2993, 0x7, 0xa1, 0x8, 0x1ff, 0xd7]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000cc0)={0x44, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000000), 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x2100, 0x115) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8}) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x0, 0x4002011, r3, 0x0) write$6lowpan_control(r2, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0xffffffff, 0x10000, 0x1, 0xfffffffd}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb70300008918a2e2b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = dup(r4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={&(0x7f0000000040), 0x7, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) chdir(&(0x7f0000000c80)='./file1\x00') r8 = openat(r6, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x42) copy_file_range(r8, 0x0, r8, 0x0, 0x9, 0x0) kernel console output (not intermixed with test programs): _adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.123028][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.127456][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.176815][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.190600][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.206345][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.217035][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.261975][ T6631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.265483][ T6631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.273390][ T6631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.293005][ T6631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.937230][ T5296] Bluetooth: hci4: command tx timeout [ 179.044127][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.047464][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.084691][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.088469][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.865880][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 179.885588][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 180.166821][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 180.325591][ T60] usb 9-1: config 1 interface 0 altsetting 35 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.336001][ T60] usb 9-1: config 1 interface 0 has no altsetting 0 [ 180.371412][ T60] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.394765][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.401629][ T60] usb 9-1: SerialNumber: syz [ 180.658640][ T60] cdc_ether 9-1:1.0: skipping garbage [ 180.663881][ T60] usb 9-1: bad CDC descriptors [ 180.980097][ T5972] Bluetooth: hci4: command tx timeout [ 182.845396][ T60] usb 9-1: USB disconnect, device number 2 [ 183.052372][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 183.101084][ T6729] netlink: 'syz.2.190': attribute type 21 has an invalid length. [ 183.152052][ T40] audit: type=1800 audit(1745781430.060:64): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 183.657808][ T40] audit: type=1800 audit(1745781430.560:65): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.193" name="file0" dev="overlay" ino=40 res=0 errno=0 [ 183.738489][ T6739] syz.2.192: attempt to access beyond end of device [ 183.738489][ T6739] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 184.004146][ T1207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.130335][ T40] audit: type=1326 audit(1745781431.050:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.194" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x0 [ 184.315053][ T1207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.515339][ T1207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.802326][ T1207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.833556][ T6762] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 184.836777][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 184.869574][ T6766] netlink: 140 bytes leftover after parsing attributes in process `syz.4.199'. [ 185.011495][ T6762] team0: Port device geneve0 added [ 185.035748][ T6766] netlink: 6 bytes leftover after parsing attributes in process `syz.4.199'. [ 185.561995][ T6023] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 185.700591][ T1207] bridge_slave_1: left allmulticast mode [ 185.703976][ T1207] bridge_slave_1: left promiscuous mode [ 185.707927][ T1207] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.753614][ T6783] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 185.758211][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'. [ 185.804116][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 185.833761][ T1207] bridge_slave_0: left allmulticast mode [ 185.836439][ T1207] bridge_slave_0: left promiscuous mode [ 185.839718][ T1207] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.103620][ T6793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.505621][ T40] audit: type=1326 audit(1745781433.410:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.3.207" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 186.535662][ C3] vkms_vblank_simulate: vblank timer overrun [ 186.567397][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 186.699225][ C3] vkms_vblank_simulate: vblank timer overrun [ 186.805466][ C3] vkms_vblank_simulate: vblank timer overrun [ 186.879237][ T40] audit: type=1800 audit(1745781433.770:68): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file0" dev="overlay" ino=285 res=0 errno=0 [ 186.880432][ C3] vkms_vblank_simulate: vblank timer overrun [ 186.919964][ C3] vkms_vblank_simulate: vblank timer overrun [ 187.094130][ T6023] IPVS: starting estimator thread 0... [ 187.198189][ T6834] IPVS: using max 32 ests per chain, 76800 per kthread [ 187.310196][ T1207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.338866][ T1207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.396418][ T1207] bond0 (unregistering): Released all slaves [ 187.426242][ T6783] batadv0: entered promiscuous mode [ 187.430701][ T6783] batadv0: entered allmulticast mode [ 187.433706][ T6783] bridge0: port 3(batadv0) entered blocking state [ 187.462713][ T6783] bridge0: port 3(batadv0) entered disabled state [ 187.474630][ T6783] bridge0: port 3(batadv0) entered blocking state [ 187.478754][ T6783] bridge0: port 3(batadv0) entered forwarding state [ 187.528688][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 187.550605][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 187.607685][ C3] vkms_vblank_simulate: vblank timer overrun [ 187.679701][ C3] vkms_vblank_simulate: vblank timer overrun [ 188.030968][ T40] audit: type=1400 audit(1745781434.940:69): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6850 comm="syz.4.217" [ 188.078882][ T40] audit: type=1400 audit(1745781434.960:70): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6850 comm="syz.4.217" [ 188.110970][ T40] audit: type=1400 audit(1745781434.970:71): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6850 comm="syz.4.217" [ 188.118293][ T40] audit: type=1400 audit(1745781434.970:72): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6850 comm="syz.4.217" [ 188.118481][ T6854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.148769][ T40] audit: type=1400 audit(1745781434.970:73): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6850 comm="syz.4.217" [ 188.576036][ C3] vkms_vblank_simulate: vblank timer overrun [ 188.608843][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 188.608863][ T40] audit: type=1800 audit(1745781435.520:102): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file0" dev="overlay" ino=305 res=0 errno=0 [ 188.803680][ C3] vkms_vblank_simulate: vblank timer overrun [ 188.839846][ C3] vkms_vblank_simulate: vblank timer overrun [ 189.175678][ C3] vkms_vblank_simulate: vblank timer overrun [ 189.231695][ C3] vkms_vblank_simulate: vblank timer overrun [ 189.507815][ T1207] hsr_slave_0: left promiscuous mode [ 189.511629][ T1207] hsr_slave_1: left promiscuous mode [ 189.514542][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.517650][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.527995][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.536313][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.659435][ T1207] veth1_macvtap: left promiscuous mode [ 189.663191][ T1207] veth0_macvtap: left promiscuous mode [ 189.684329][ T1207] veth1_vlan: left promiscuous mode [ 189.687233][ T1207] veth0_vlan: left promiscuous mode [ 189.819725][ C3] vkms_vblank_simulate: vblank timer overrun [ 190.246901][ C3] vkms_vblank_simulate: vblank timer overrun [ 191.129190][ C3] vkms_vblank_simulate: vblank timer overrun [ 192.209168][ T1207] team0 (unregistering): Port device team_slave_1 removed [ 192.517639][ T1207] team0 (unregistering): Port device team_slave_0 removed [ 204.988057][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.990921][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.872016][ T6995] syz.1.222: vmalloc error: size 2147483616, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 209.896548][ T6995] CPU: 3 UID: 0 PID: 6995 Comm: syz.1.222 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 209.896572][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.896581][ T6995] Call Trace: [ 209.896587][ T6995] [ 209.896593][ T6995] dump_stack_lvl+0x16c/0x1f0 [ 209.896626][ T6995] warn_alloc+0x248/0x3a0 [ 209.896647][ T6995] ? __pfx_warn_alloc+0x10/0x10 [ 209.896662][ T6995] ? lock_acquire+0x179/0x350 [ 209.896689][ T6995] ? mark_held_locks+0x49/0x80 [ 209.896709][ T6995] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 209.896727][ T6995] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.896745][ T6995] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 209.896769][ T6995] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 209.896796][ T6995] ? kasan_save_stack+0x42/0x60 [ 209.896811][ T6995] ? kasan_save_stack+0x33/0x60 [ 209.896826][ T6995] ? kasan_save_track+0x14/0x30 [ 209.896841][ T6995] ? kasan_save_free_info+0x3b/0x60 [ 209.896863][ T6995] ? kfree+0x2b6/0x4d0 [ 209.896884][ T6995] ? vfree+0x316/0x960 [ 209.896905][ T6995] ? compat_do_replace+0x4fc/0x7c0 [ 209.896922][ T6995] ? do_ebt_set_ctl+0x2f5/0x3c0 [ 209.896939][ T6995] ? nf_setsockopt+0x8a/0xf0 [ 209.896954][ T6995] ? ip_setsockopt+0xcb/0xf0 [ 209.896973][ T6995] ? do_replace_finish+0xe6/0x22c0 [ 209.896989][ T6995] ? __ia32_sys_setsockopt+0xbc/0x160 [ 209.897014][ T6995] ? __do_fast_syscall_32+0x73/0x120 [ 209.897033][ T6995] ? do_fast_syscall_32+0x32/0x80 [ 209.897051][ T6995] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.897074][ T6995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.897104][ T6995] ? do_replace_finish+0xe6/0x22c0 [ 209.897120][ T6995] vmalloc_noprof+0x6b/0x90 [ 209.897140][ T6995] ? do_replace_finish+0xe6/0x22c0 [ 209.897155][ T6995] do_replace_finish+0xe6/0x22c0 [ 209.897174][ T6995] ? find_held_lock+0x2b/0x80 [ 209.897189][ T6995] ? compat_do_replace+0x506/0x7c0 [ 209.897209][ T6995] ? __pfx_do_replace_finish+0x10/0x10 [ 209.897229][ T6995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.897251][ T6995] ? vfree+0x316/0x960 [ 209.897275][ T6995] ? compat_do_replace+0x390/0x7c0 [ 209.897297][ T6995] compat_do_replace+0x51b/0x7c0 [ 209.897317][ T6995] ? __pfx_compat_do_replace+0x10/0x10 [ 209.897334][ T6995] ? aa_get_newest_label+0x375/0x680 [ 209.897352][ T6995] ? __pfx_aa_get_newest_label+0x10/0x10 [ 209.897378][ T6995] ? bpf_lsm_capable+0x9/0x10 [ 209.897393][ T6995] ? security_capable+0x7e/0x260 [ 209.897421][ T6995] do_ebt_set_ctl+0x2f5/0x3c0 [ 209.897441][ T6995] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 209.897461][ T6995] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 209.897486][ T6995] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 209.897505][ T6995] nf_setsockopt+0x8a/0xf0 [ 209.897523][ T6995] ip_setsockopt+0xcb/0xf0 [ 209.897545][ T6995] raw_setsockopt+0xb7/0x2a0 [ 209.897567][ T6995] ? __pfx_raw_setsockopt+0x10/0x10 [ 209.897588][ T6995] ? sock_common_setsockopt+0x2e/0xf0 [ 209.897607][ T6995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 209.897632][ T6995] do_sock_setsockopt+0x221/0x470 [ 209.897650][ T6995] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 209.897678][ T6995] __sys_setsockopt+0x120/0x1a0 [ 209.897701][ T6995] __ia32_sys_setsockopt+0xbc/0x160 [ 209.897721][ T6995] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.897735][ T6995] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 209.897751][ T6995] __do_fast_syscall_32+0x73/0x120 [ 209.897769][ T6995] do_fast_syscall_32+0x32/0x80 [ 209.897786][ T6995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.897804][ T6995] RIP: 0023:0xf709e579 [ 209.897816][ T6995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 209.897829][ T6995] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 209.897844][ T6995] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000 [ 209.897854][ T6995] RDX: 0000000000000080 RSI: 0000000080000000 RDI: 00000000000000e0 [ 209.897863][ T6995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.897871][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.897879][ T6995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.897900][ T6995] [ 209.897906][ T6995] Mem-Info: [ 209.951500][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 209.970931][ T6995] active_anon:4893 inactive_anon:1 isolated_anon:0 [ 209.970931][ T6995] active_file:12030 inactive_file:34920 isolated_file:0 [ 209.970931][ T6995] unevictable:1768 dirty:142 writeback:0 [ 209.970931][ T6995] slab_reclaimable:9467 slab_unreclaimable:60237 [ 209.970931][ T6995] mapped:23922 shmem:2289 pagetables:842 [ 209.970931][ T6995] sec_pagetables:306 bounce:0 [ 209.970931][ T6995] kernel_misc_reclaimable:0 [ 209.970931][ T6995] free:58334 free_pcp:967 free_cma:0 [ 209.970979][ T6995] Node 0 active_anon:1788kB inactive_anon:0kB active_file:768kB inactive_file:164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1952kB dirty:28kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9528kB pagetables:1084kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 209.971019][ T6995] Node 1 active_anon:17784kB inactive_anon:4kB active_file:47352kB inactive_file:139516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93736kB dirty:540kB writeback:0kB shmem:5572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2516kB pagetables:2284kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB [ 209.971057][ T6995] Node 0 DMA free:2992kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:100kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 209.971099][ T6995] lowmem_reserve[]: 0 293 293 293 293 [ 209.971131][ T6995] Node 0 DMA32 free:19844kB boost:2048kB min:15496kB low:18856kB high:22216kB reserved_highatomic:4096KB active_anon:1688kB inactive_anon:0kB active_file:768kB inactive_file:164kB unevictable:3536kB writepending:28kB present:1032196kB managed:300272kB mlocked:0kB bounce:0kB free_pcp:1236kB local_pcp:268kB free_cma:0kB [ 209.971172][ T6995] lowmem_reserve[]: 0 0 0 0 0 [ 209.971200][ T6995] Node 1 DMA32 free:210500kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:17784kB inactive_anon:4kB active_file:47352kB inactive_file:139516kB unevictable:3536kB writepending:540kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:2520kB local_pcp:556kB free_cma:0kB [ 209.971240][ T6995] lowmem_reserve[]: 0 0 0 0 0 [ 209.971271][ T6995] Node 0 DMA: 41*4kB (UME) 32*8kB (UME) 9*16kB (UME) 27*32kB (UME) 9*64kB (UME) 4*128kB (ME) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3028kB [ 209.971428][ T6995] Node 0 DMA32: 31*4kB (UMEH) 26*8kB (UMEH) 37*16kB (UEH) 117*32kB (UMEH) 43*64kB (UME) 17*128kB (UMH) 12*256kB (MEH) 4*512kB (M) 5*1024kB (UM) 0*2048kB 0*4096kB = 19836kB [ 209.971551][ T6995] Node 1 DMA32: 83*4kB (UME) 543*8kB (UME) 440*16kB (UME) 334*32kB (UME) 268*64kB (UME) 78*128kB (UME) 42*256kB (UME) 37*512kB (UM) 20*1024kB (UM) 14*2048kB (UME) 20*4096kB (UM) = 210308kB [ 209.971683][ T6995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.971696][ T6995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 209.971707][ T6995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.971719][ T6995] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 209.971731][ T6995] 49503 total pagecache pages [ 209.971738][ T6995] 264 pages in swap cache [ 209.971743][ T6995] Free swap = 120272kB [ 209.971749][ T6995] Total swap = 124996kB [ 209.971756][ T6995] 524155 pages RAM [ 209.971761][ T6995] 0 pages HighMem/MovableOnly [ 209.971767][ T6995] 208176 pages reserved [ 209.971772][ T6995] 0 pages cma reserved [ 210.086518][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 210.099263][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 210.187033][ T40] audit: type=1326 audit(1745781457.070:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.194988][ T7001] netlink: 'syz.3.225': attribute type 5 has an invalid length. [ 210.745455][ T40] audit: type=1326 audit(1745781457.070:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.769150][ T40] audit: type=1326 audit(1745781457.090:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.794440][ T40] audit: type=1326 audit(1745781457.090:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.909759][ T40] audit: type=1326 audit(1745781457.090:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.964049][ T40] audit: type=1326 audit(1745781457.090:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 210.974982][ T7024] overlayfs: missing 'workdir' [ 211.001369][ T40] audit: type=1326 audit(1745781457.090:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 211.048370][ T40] audit: type=1326 audit(1745781457.090:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 211.096308][ T40] audit: type=1326 audit(1745781457.090:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 211.123195][ T40] audit: type=1326 audit(1745781457.090:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.226" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 211.922024][ T7049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.099493][ C2] vkms_vblank_simulate: vblank timer overrun [ 212.227441][ C2] vkms_vblank_simulate: vblank timer overrun [ 212.367508][ C2] vkms_vblank_simulate: vblank timer overrun [ 212.766481][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 212.782664][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'. [ 212.797598][ T7073] netlink: 'syz.4.240': attribute type 5 has an invalid length. [ 212.923203][ C2] vkms_vblank_simulate: vblank timer overrun [ 213.023510][ T7080] overlayfs: missing 'workdir' [ 213.400531][ C2] vkms_vblank_simulate: vblank timer overrun [ 213.687451][ C2] vkms_vblank_simulate: vblank timer overrun [ 213.844877][ T7099] random: crng reseeded on system resumption [ 214.032799][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.248993][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.624113][ T7110] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 214.655210][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 215.022584][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.199465][ C2] vkms_vblank_simulate: vblank timer overrun [ 215.230480][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.263728][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.267107][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.289014][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.322762][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.336458][ T7135] netlink: 5 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.353245][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 215.544154][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 215.604317][ T40] kauditd_printk_skb: 1378 callbacks suppressed [ 215.604330][ T40] audit: type=1800 audit(1745781462.520:1491): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.263" name="file0" dev="overlay" ino=437 res=0 errno=0 [ 215.731073][ T7157] program syz.4.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.748488][ C2] vkms_vblank_simulate: vblank timer overrun [ 215.956105][ T7163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.974037][ T7166] netlink: 'syz.1.265': attribute type 11 has an invalid length. [ 215.999462][ C2] vkms_vblank_simulate: vblank timer overrun [ 216.414479][ T40] audit: type=1800 audit(1745781463.320:1492): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.273" name="file0" dev="overlay" ino=199 res=0 errno=0 [ 216.931451][ C2] vkms_vblank_simulate: vblank timer overrun [ 216.967525][ C2] vkms_vblank_simulate: vblank timer overrun [ 216.999015][ C2] vkms_vblank_simulate: vblank timer overrun [ 217.042572][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 217.379757][ T7199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.613843][ T7203] netlink: 204 bytes leftover after parsing attributes in process `syz.2.279'. [ 218.653727][ T7219] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 218.699408][ T40] audit: type=1800 audit(1745781465.610:1493): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.283" name="file0" dev="overlay" ino=504 res=0 errno=0 [ 218.702747][ T7219] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 218.978604][ T7231] netlink: 'syz.2.286': attribute type 11 has an invalid length. [ 219.543859][ T7239] 9pnet: Could not find request transport: xen [ 219.932429][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.937685][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.047444][ T40] audit: type=1800 audit(1745781466.960:1494): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.293" name="file0" dev="overlay" ino=484 res=0 errno=0 [ 220.162597][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 220.340879][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.387665][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.393876][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.399942][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.419981][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.427099][ T34] usb 8-1: config 0 descriptor?? [ 220.888251][ T7256] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 220.908130][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.922790][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.927942][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.940855][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.948992][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.958375][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 220.967736][ T34] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 221.015890][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 221.686331][ T7259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.429811][ T5296] Bluetooth: hci1: command 0x0406 tx timeout [ 222.965161][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 222.968943][ T7277] netlink: 'syz.1.301': attribute type 5 has an invalid length. [ 222.972686][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 222.996016][ T7277] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 223.003404][ T7277] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 223.007056][ T7277] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 223.010953][ T7277] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 223.014540][ T7277] geneve2: entered promiscuous mode [ 223.017562][ T7277] geneve2: entered allmulticast mode [ 223.275509][ T29] usb 8-1: USB disconnect, device number 2 [ 223.995542][ T40] audit: type=1800 audit(1745781470.900:1495): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.303" name="file0" dev="overlay" ino=530 res=0 errno=0 [ 224.239947][ T840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 224.454550][ T840] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.460442][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.465487][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.495068][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 224.501255][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.519981][ T40] audit: type=1326 audit(1745781471.420:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 224.523230][ T840] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.538656][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.560715][ T840] usb 7-1: config 0 descriptor?? [ 224.611526][ T40] audit: type=1326 audit(1745781471.420:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 225.017977][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.047348][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.059190][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.079298][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.102710][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.116044][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.119297][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.141039][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.151725][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.156208][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.162409][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.167581][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.174707][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.180579][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.186270][ T840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 225.192187][ T840] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 225.220038][ T840] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 225.316493][ T34] usb 7-1: USB disconnect, device number 2 [ 225.678928][ T7310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.739106][ T7312] capability: warning: `syz.3.309' uses deprecated v2 capabilities in a way that may be insecure [ 227.542816][ T5975] Bluetooth: hci2: command 0x0406 tx timeout [ 227.542950][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 227.943839][ T40] audit: type=1326 audit(1745781474.850:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.3.310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7fc00000 [ 228.491350][ C2] vkms_vblank_simulate: vblank timer overrun [ 228.614696][ C2] vkms_vblank_simulate: vblank timer overrun [ 228.644048][ T7326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.802429][ C2] vkms_vblank_simulate: vblank timer overrun [ 228.806423][ T7326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.941707][ T7326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.088336][ T7326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.306765][ C2] vkms_vblank_simulate: vblank timer overrun [ 229.427645][ T7326] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.450907][ T7326] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.504131][ T7326] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.541802][ T7326] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.769894][ C2] vkms_vblank_simulate: vblank timer overrun [ 229.923311][ C2] vkms_vblank_simulate: vblank timer overrun [ 229.994773][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 230.607757][ C2] vkms_vblank_simulate: vblank timer overrun [ 230.689492][ C2] vkms_vblank_simulate: vblank timer overrun [ 231.161101][ C2] vkms_vblank_simulate: vblank timer overrun [ 231.235075][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 231.922746][ C2] vkms_vblank_simulate: vblank timer overrun [ 232.198329][ T7369] FAULT_INJECTION: forcing a failure. [ 232.198329][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.213298][ T40] audit: type=1800 audit(1745781479.110:1499): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.322" name="file0" dev="overlay" ino=511 res=0 errno=0 [ 232.223342][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.2.322 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 232.223366][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.223382][ T7369] Call Trace: [ 232.223390][ T7369] [ 232.223397][ T7369] dump_stack_lvl+0x16c/0x1f0 [ 232.223421][ T7369] should_fail_ex+0x512/0x640 [ 232.223447][ T7369] _copy_to_user+0x32/0xd0 [ 232.223471][ T7369] simple_read_from_buffer+0xcb/0x170 [ 232.223497][ T7369] proc_fail_nth_read+0x197/0x270 [ 232.223520][ T7369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.223545][ T7369] ? rw_verify_area+0xcf/0x680 [ 232.223568][ T7369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.223589][ T7369] vfs_read+0x1de/0xc70 [ 232.223607][ T7369] ? __pfx___mutex_lock+0x10/0x10 [ 232.223625][ T7369] ? __pfx_vfs_read+0x10/0x10 [ 232.223646][ T7369] ? __fget_files+0x20e/0x3c0 [ 232.223677][ T7369] ksys_read+0x12a/0x240 [ 232.223691][ T7369] ? __pfx_ksys_read+0x10/0x10 [ 232.223707][ T7369] ? rcu_is_watching+0x12/0xc0 [ 232.223726][ T7369] __do_fast_syscall_32+0x73/0x120 [ 232.223749][ T7369] do_fast_syscall_32+0x32/0x80 [ 232.223771][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.223791][ T7369] RIP: 0023:0xf712e579 [ 232.223805][ T7369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.223819][ T7369] RSP: 002b:00000000f511e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 232.223835][ T7369] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f511e620 [ 232.223845][ T7369] RDX: 000000000000000f RSI: 00000000f7492ff4 RDI: 0000000000000000 [ 232.223854][ T7369] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 232.223862][ T7369] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 232.223870][ T7369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.223890][ T7369] [ 232.248208][ C2] vkms_vblank_simulate: vblank timer overrun [ 232.658883][ C2] vkms_vblank_simulate: vblank timer overrun [ 232.773276][ C2] vkms_vblank_simulate: vblank timer overrun [ 233.149357][ T5296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.173054][ T5296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.216001][ T5296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.231666][ T5296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.234928][ T5296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.798624][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.053686][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.467943][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.515882][ T7383] chnl_net:caif_netlink_parms(): no params data found [ 234.794501][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.079820][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.085872][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.095062][ T7383] bridge_slave_0: entered allmulticast mode [ 235.099212][ T40] audit: type=1326 audit(1745781482.010:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.119393][ T40] audit: type=1326 audit(1745781482.030:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.121594][ T7383] bridge_slave_0: entered promiscuous mode [ 235.152895][ T40] audit: type=1326 audit(1745781482.030:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.183730][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 235.187508][ T40] audit: type=1326 audit(1745781482.030:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.204921][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.219946][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.223532][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.235310][ T7383] bridge_slave_1: entered allmulticast mode [ 235.243550][ T7383] bridge_slave_1: entered promiscuous mode [ 235.279731][ T40] audit: type=1326 audit(1745781482.030:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.304865][ T40] audit: type=1326 audit(1745781482.030:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.332234][ T40] audit: type=1326 audit(1745781482.030:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.340814][ T5296] Bluetooth: hci0: command tx timeout [ 235.342963][ T7417] fuse: Bad value for 'fd' [ 235.346296][ T40] audit: type=1326 audit(1745781482.030:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.359470][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 235.365424][ T40] audit: type=1326 audit(1745781482.030:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 235.955825][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.964963][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.460382][ T7383] team0: Port device team_slave_0 added [ 236.574067][ T7383] team0: Port device team_slave_1 added [ 236.788221][ T66] bridge_slave_1: left allmulticast mode [ 236.794417][ T66] bridge_slave_1: left promiscuous mode [ 236.797497][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.992780][ T66] bridge_slave_0: left allmulticast mode [ 236.996243][ T66] bridge_slave_0: left promiscuous mode [ 237.006715][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.399357][ T5296] Bluetooth: hci0: command tx timeout [ 237.545167][ T839] IPVS: starting estimator thread 0... [ 237.695745][ T7452] IPVS: using max 22 ests per chain, 52800 per kthread [ 238.352330][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.376786][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.385316][ T66] bond0 (unregistering): Released all slaves [ 238.446964][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.337'. [ 238.450586][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.337'. [ 238.498262][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.553359][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.572332][ T7383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.613481][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.616340][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.649560][ T7383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.928406][ T7469] netlink: 196 bytes leftover after parsing attributes in process `syz.1.345'. [ 239.066013][ T7383] hsr_slave_0: entered promiscuous mode [ 239.089478][ T7383] hsr_slave_1: entered promiscuous mode [ 239.393501][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 239.393515][ T40] audit: type=1800 audit(1745781486.310:1575): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.348" name="file0" dev="overlay" ino=624 res=0 errno=0 [ 239.480938][ T5296] Bluetooth: hci0: command tx timeout [ 239.491130][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.499728][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.510362][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.515168][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.518861][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.536178][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.539840][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.544072][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.548084][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.583394][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.586587][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.613256][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.617539][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.645043][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.649022][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.651956][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.654641][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.659157][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.669418][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.672844][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.676059][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.679262][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.685280][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.688417][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.691602][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.694762][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.698880][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.703928][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.714277][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.722100][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.726829][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.732694][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.736494][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.741084][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.745359][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 239.746811][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.764295][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.809287][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.812790][ T7490] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 239.813133][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.821848][ T7490] macvtap1: entered promiscuous mode [ 239.823593][ T7494] IPVS: length: 78 != 8 [ 239.834202][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.839434][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.842081][ T7490] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 239.844488][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844512][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844530][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844552][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844571][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844586][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844604][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844620][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844638][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844654][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844672][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844688][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.844706][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 239.854307][ T1025] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 240.008590][ T7491] netem: incorrect ge model size [ 240.038525][ T7491] netem: change failed [ 240.282009][ T66] hsr_slave_0: left promiscuous mode [ 240.287908][ T66] hsr_slave_1: left promiscuous mode [ 240.350875][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.354567][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.381753][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.386903][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.568563][ T66] veth1_macvtap: left promiscuous mode [ 240.578219][ T66] veth0_macvtap: left promiscuous mode [ 240.587931][ T66] veth1_vlan: left promiscuous mode [ 240.598276][ T66] veth0_vlan: left promiscuous mode [ 240.908850][ T1025] Process accounting resumed [ 241.521413][ T7514] overlayfs: missing 'workdir' [ 241.559749][ T5296] Bluetooth: hci0: command tx timeout [ 242.586115][ T7527] syz.1.358 (7527): /proc/7524/oom_adj is deprecated, please use /proc/7524/oom_score_adj instead. [ 244.009487][ T66] team0 (unregistering): Port device team_slave_1 removed [ 244.461214][ T66] team0 (unregistering): Port device team_slave_0 removed [ 245.463863][ T7546] SET target dimension over the limit! [ 247.085823][ T7516] syz_tun: entered allmulticast mode [ 247.090000][ T7516] syz_tun: left allmulticast mode [ 247.277093][ T7383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.339558][ T7383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.385111][ T7383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.434796][ T7383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.672691][ T40] audit: type=1804 audit(1745781494.580:1576): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.366" name="/newroot/89/file0" dev="tmpfs" ino=587 res=1 errno=0 [ 247.853293][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.086517][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.137979][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.147827][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.206787][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.212338][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.723800][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.389334][ T7383] veth0_vlan: entered promiscuous mode [ 249.405941][ T7383] veth1_vlan: entered promiscuous mode [ 249.451698][ T7383] veth0_macvtap: entered promiscuous mode [ 249.458687][ T7383] veth1_macvtap: entered promiscuous mode [ 249.489211][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.497221][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.508722][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.519272][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.533008][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.538030][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.567658][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.586312][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.608452][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.625005][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.632772][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.637467][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.670584][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.696131][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.723779][ T7383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.737375][ T7383] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.742761][ T7383] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.749883][ T7383] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.767461][ T7616] 9pnet_virtio: no channels available for device syz [ 249.936378][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.948242][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.032481][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.040996][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.353655][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 250.818660][ T7641] 9pnet_virtio: no channels available for device syz [ 251.530205][ T40] audit: type=1326 audit(1745781498.430:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7fc00000 [ 252.109504][ T6024] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 252.288918][ T6024] usb 10-1: Using ep0 maxpacket: 8 [ 252.312132][ T6024] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 252.325136][ T6024] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.336312][ T6024] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.340821][ T6024] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.344893][ T6024] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.351745][ T6024] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.370632][ T6024] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.584667][ T6024] usb 10-1: usb_control_msg returned -32 [ 252.589494][ T6024] usbtmc 10-1:16.0: can't read capabilities [ 253.331698][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.375'. [ 253.731130][ T7705] overlayfs: failed to resolve './file1': -2 [ 254.558188][ T7711] Device name cannot be null; rc = [-22] [ 256.783165][ T7736] openvswitch: netlink: IPv6 tunnel dst address is zero [ 256.902765][ T7742] netlink: 'syz.3.390': attribute type 12 has an invalid length. [ 257.041148][ T7740] bridge0: entered promiscuous mode [ 257.071092][ T7740] macvlan2: entered promiscuous mode [ 257.179104][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 257.187068][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 257.259548][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 257.876359][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.027276][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.067061][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.236226][ T40] audit: type=1800 audit(1745781505.140:1578): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.395" name="file0" dev="overlay" ino=692 res=0 errno=0 [ 258.445066][ T7698] usbtmc 10-1:16.0: usb_control_msg returned -110 [ 258.464543][ T840] usb 10-1: USB disconnect, device number 2 [ 259.178095][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.313645][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.770249][ T7811] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 259.869999][ T7811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.054671][ T40] audit: type=1800 audit(1745781506.950:1579): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.406" name="file0" dev="overlay" ino=805 res=0 errno=0 [ 260.551986][ T7826] ======================================================= [ 260.551986][ T7826] WARNING: The mand mount option has been deprecated and [ 260.551986][ T7826] and is ignored by this kernel. Remove the mand [ 260.551986][ T7826] option from the mount to silence this warning. [ 260.551986][ T7826] ======================================================= [ 261.073722][ T7826] lo speed is unknown, defaulting to 1000 [ 261.079407][ T7826] lo speed is unknown, defaulting to 1000 [ 261.090828][ T7826] lo speed is unknown, defaulting to 1000 [ 261.164777][ T7837] 9pnet_virtio: no channels available for device syz [ 261.231136][ T7835] SET target dimension over the limit! [ 261.269524][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 261.284053][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 261.336313][ T7836] netlink: 34 bytes leftover after parsing attributes in process `syz.3.411'. [ 261.444774][ T7826] infiniband sz1: set active [ 261.450405][ T7826] infiniband sz1: added lo [ 261.457841][ T7826] sz1: rxe_create_cq: returned err = -12 [ 261.465442][ T7826] infiniband sz1: Couldn't create ib_mad CQ [ 261.471222][ T7826] infiniband sz1: Couldn't open port 1 [ 261.512791][ T7826] RDS/IB: sz1: added [ 261.515030][ T7826] smc: adding ib device sz1 with port count 1 [ 261.517895][ T7826] smc: ib device sz1 port 1 has pnetid [ 261.561941][ T1025] lo speed is unknown, defaulting to 1000 [ 261.585676][ T6004] lo speed is unknown, defaulting to 1000 [ 261.602493][ T7826] lo speed is unknown, defaulting to 1000 [ 262.140375][ T7826] lo speed is unknown, defaulting to 1000 [ 262.240230][ T7854] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.244541][ T7854] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.249201][ T7854] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.254981][ T7854] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.435107][ T5356] udevd[5356]: worker [7782] terminated by signal 33 (Unknown signal 33) [ 262.447138][ T5356] udevd[5356]: worker [7782] failed while handling '/devices/virtual/bluetooth/hci2/rfkill7' [ 262.592746][ T7826] lo speed is unknown, defaulting to 1000 [ 262.820859][ T40] audit: type=1800 audit(1745781509.720:1580): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.416" name="file0" dev="overlay" ino=739 res=0 errno=0 [ 263.064644][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.070853][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 263.171073][ T7826] lo speed is unknown, defaulting to 1000 [ 263.462472][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.479535][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 263.704601][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.707820][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.725486][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.735190][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 263.742049][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.755791][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.770271][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.803743][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 263.846847][ T7883] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 263.859739][ T7883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.973027][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.979334][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 264.049302][ T7891] lo speed is unknown, defaulting to 1000 [ 264.448506][ T66] bridge0: port 3(batadv0) entered disabled state [ 264.572729][ T66] bridge_slave_1: left allmulticast mode [ 264.577044][ T66] bridge_slave_1: left promiscuous mode [ 264.600079][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.691852][ T66] bridge_slave_0: left allmulticast mode [ 264.693995][ T66] bridge_slave_0: left promiscuous mode [ 264.696217][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.870410][ T840] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 265.476375][ T66] team0: Port device geneve0 removed [ 265.694191][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 265.860295][ T5296] Bluetooth: hci2: command tx timeout [ 265.862038][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 265.884999][ T60] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 265.968797][ T60] usb 8-1: config 0 has no interface number 0 [ 265.986228][ T60] usb 8-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 265.993371][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.997969][ T60] usb 8-1: Product: syz [ 265.999480][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.001995][ T60] usb 8-1: Manufacturer: syz [ 266.008709][ T60] usb 8-1: SerialNumber: syz [ 266.020595][ T60] usb 8-1: config 0 descriptor?? [ 266.097537][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.107126][ T66] bond0 (unregistering): Released all slaves [ 266.263734][ T60] usb 8-1: USB disconnect, device number 3 [ 266.425616][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.428671][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.663502][ T7891] chnl_net:caif_netlink_parms(): no params data found [ 267.064734][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.073000][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.077938][ T7891] bridge_slave_0: entered allmulticast mode [ 267.085045][ T7891] bridge_slave_0: entered promiscuous mode [ 267.096873][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.101166][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.107497][ T7891] bridge_slave_1: entered allmulticast mode [ 267.112175][ T7891] bridge_slave_1: entered promiscuous mode [ 267.274628][ T7891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.288408][ T7891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.521908][ T7891] team0: Port device team_slave_0 added [ 267.537761][ T7891] team0: Port device team_slave_1 added [ 267.578365][ T6004] hid-generic 0034:0002:0004.0005: unexpected long global item [ 267.583754][ T6004] hid-generic 0034:0002:0004.0005: probe with driver hid-generic failed with error -22 [ 267.664840][ T7984] Bluetooth: MGMT ver 1.23 [ 267.941756][ T5296] Bluetooth: hci2: command tx timeout [ 268.198652][ T7998] netlink: 'syz.5.438': attribute type 5 has an invalid length. [ 268.272010][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.280551][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.303688][ T7891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.319235][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.324092][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.363569][ T7891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.720566][ T7891] hsr_slave_0: entered promiscuous mode [ 268.769989][ T7891] hsr_slave_1: entered promiscuous mode [ 268.773755][ T7891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.777861][ T7891] Cannot create hsr debugfs directory [ 269.766750][ T66] hsr_slave_0: left promiscuous mode [ 269.803249][ T66] hsr_slave_1: left promiscuous mode [ 269.808947][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.969784][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.030668][ T5296] Bluetooth: hci2: command tx timeout [ 270.188471][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.191940][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.231048][ T66] veth1_macvtap: left promiscuous mode [ 270.249462][ T66] veth0_macvtap: left promiscuous mode [ 270.267821][ T66] veth1_vlan: left promiscuous mode [ 270.270565][ T66] veth0_vlan: left promiscuous mode [ 270.321633][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 270.382340][ T8021] exFAT-fs (nullb0): invalid boot record signature [ 270.387609][ T8021] exFAT-fs (nullb0): failed to read boot sector [ 270.398780][ T8021] exFAT-fs (nullb0): failed to recognize exfat type [ 272.111332][ T840] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 272.122145][ T5296] Bluetooth: hci2: command tx timeout [ 272.891075][ T66] team0 (unregistering): Port device team_slave_1 removed [ 273.110980][ T66] team0 (unregistering): Port device team_slave_0 removed [ 273.710554][ T60] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 275.338201][ T8047] netlink: 176 bytes leftover after parsing attributes in process `syz.2.448'. [ 275.630959][ C2] vkms_vblank_simulate: vblank timer overrun [ 275.694862][ C2] vkms_vblank_simulate: vblank timer overrun [ 275.806898][ T8061] wg1: entered promiscuous mode [ 275.809136][ T8061] wg1: entered allmulticast mode [ 275.836778][ T7891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.890919][ C2] vkms_vblank_simulate: vblank timer overrun [ 275.920691][ T7891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.075247][ T7891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.127980][ T7891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.323687][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.340484][ T7891] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.368000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.377468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.574964][ T8074] tipc: Started in network mode [ 276.582480][ T8074] tipc: Node identity ffffffff, cluster identity 4711 [ 276.586057][ T8074] tipc: Node number set to 4294967295 [ 276.597190][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.607554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.823072][ T8075] lo speed is unknown, defaulting to 1000 [ 276.834894][ C2] vkms_vblank_simulate: vblank timer overrun [ 276.906882][ C2] vkms_vblank_simulate: vblank timer overrun [ 276.954790][ T7891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.960933][ T7891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.194909][ C2] vkms_vblank_simulate: vblank timer overrun [ 277.203676][ T66] IPVS: stop unused estimator thread 0... [ 277.227054][ C2] vkms_vblank_simulate: vblank timer overrun [ 277.451168][ C2] vkms_vblank_simulate: vblank timer overrun [ 277.775250][ T7891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.803603][ T8095] fuse: Bad value for 'fd' [ 278.254579][ T7891] veth0_vlan: entered promiscuous mode [ 278.320201][ T7891] veth1_vlan: entered promiscuous mode [ 278.443938][ T7891] veth0_macvtap: entered promiscuous mode [ 278.474807][ C2] vkms_vblank_simulate: vblank timer overrun [ 278.522408][ T7891] veth1_macvtap: entered promiscuous mode [ 278.535057][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.571756][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.577187][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.583890][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.587652][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.592761][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605442][ T7891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.718944][ C2] vkms_vblank_simulate: vblank timer overrun [ 278.746068][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.753877][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.772222][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.795654][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.812069][ T7891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.824106][ T7891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.840585][ T7891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.852749][ T7891] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.880021][ T7891] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.886669][ T7891] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.948697][ T7891] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.964637][ T8123] netlink: 56 bytes leftover after parsing attributes in process `syz.5.458'. [ 279.258945][ C2] vkms_vblank_simulate: vblank timer overrun [ 279.275191][ T8120] batman_adv: batadv0: Adding interface: ip6gretap1 [ 279.334698][ T8120] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.375932][ T8120] batman_adv: batadv0: Interface activated: ip6gretap1 [ 279.491090][ C2] vkms_vblank_simulate: vblank timer overrun [ 279.822897][ C2] vkms_vblank_simulate: vblank timer overrun [ 279.907331][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.911715][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.915077][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.918083][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.941135][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.945301][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.951284][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.960346][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.981407][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 279.983559][ T8131] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 280.014234][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.028801][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.074929][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.078136][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.092650][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.097283][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.121070][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.125468][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.128574][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.137724][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.142927][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.145928][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.157359][ T588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.160695][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.163308][ T588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.169009][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.183286][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.204154][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.207553][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.210554][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.213404][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.239066][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.241733][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.244072][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.246406][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.274647][ C2] vkms_vblank_simulate: vblank timer overrun [ 280.290952][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.291160][ T626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.298888][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.298915][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.298934][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.318105][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.324538][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.341616][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.346877][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.355135][ T626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.356162][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.373878][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.377145][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.390345][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.400482][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.403587][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.407160][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.418488][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.423216][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.427969][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.434171][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.440016][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.441946][ T5296] Bluetooth: hci3: Dropping invalid advertising data [ 280.446293][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.449456][ T5296] Bluetooth: hci3: Malformed LE Event: 0x02 [ 280.453774][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.459166][ T5296] Bluetooth: hci3: Dropping invalid advertising data [ 280.472664][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472693][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472712][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472731][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472750][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472769][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472788][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472808][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472827][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472846][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472864][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472883][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472902][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472920][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472939][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472958][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472977][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.472997][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.473015][ T840] hid-generic 0001:0001:009E.0006: unknown main item tag 0x0 [ 280.514870][ T840] hid-generic 0001:0001:009E.0006: hidraw1: HID v0.0d Device [syz1] on syz0 [ 280.516459][ T5296] Bluetooth: hci3: Malformed LE Event: 0x02 [ 281.049041][ T8153] netlink: 'syz.3.464': attribute type 11 has an invalid length. [ 281.090812][ T8172] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 282.323055][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.466'. [ 284.095599][ T8226] bridge0: port 3(netdevsim0) entered blocking state [ 284.121948][ T8226] bridge0: port 3(netdevsim0) entered disabled state [ 284.140548][ T8226] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 284.150951][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 284.158955][ T8226] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 284.267609][ T8226] bridge0: port 3(netdevsim0) entered blocking state [ 284.271338][ T8226] bridge0: port 3(netdevsim0) entered forwarding state [ 284.992865][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.5.477'. [ 285.810665][ T8262] warning: `syz.5.482' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.918029][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.503684][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.558904][ C2] vkms_vblank_simulate: vblank timer overrun [ 287.086213][ C2] vkms_vblank_simulate: vblank timer overrun [ 287.462914][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.180401][ T8280] syz.2.487: attempt to access beyond end of device [ 288.180401][ T8280] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 288.209065][ T8280] SQUASHFS error: Failed to read block 0x0: -5 [ 288.214270][ T8280] unable to read squashfs_super_block [ 288.294860][ C2] vkms_vblank_simulate: vblank timer overrun [ 288.895171][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.665181][ T8340] overlayfs: workdir and upperdir must be separate subtrees [ 290.130834][ C2] vkms_vblank_simulate: vblank timer overrun [ 290.880668][ C2] vkms_vblank_simulate: vblank timer overrun [ 291.115631][ T40] audit: type=1326 audit(1745781538.000:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.2.500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 291.697091][ T8382] netlink: 52 bytes leftover after parsing attributes in process `syz.3.505'. [ 291.747443][ T8385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.502'. [ 291.757263][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 291.771410][ T8382] lo speed is unknown, defaulting to 1000 [ 291.837153][ T8385] vlan2: entered allmulticast mode [ 291.848663][ T8385] bridge1: entered allmulticast mode [ 291.869038][ T8385] bridge1: port 1(vlan2) entered blocking state [ 291.884490][ T8385] bridge1: port 1(vlan2) entered disabled state [ 292.034838][ C2] vkms_vblank_simulate: vblank timer overrun [ 293.008082][ T8394] Falling back ldisc for ttyprintk. [ 293.082869][ C2] vkms_vblank_simulate: vblank timer overrun [ 293.095689][ T8391] lo speed is unknown, defaulting to 1000 [ 293.510793][ C2] vkms_vblank_simulate: vblank timer overrun [ 293.674017][ T8404] overlayfs: failed to resolve './file0': -2 [ 295.512706][ T8441] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 295.822266][ T8445] netlink: 'syz.5.516': attribute type 2 has an invalid length. [ 295.825790][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 295.878690][ T8453] overlayfs: failed to resolve './file1': -2 [ 295.897762][ T8445] : entered promiscuous mode [ 296.029299][ T8462] overlayfs: failed to resolve './file1': -2 [ 296.233220][ T8470] IPv6: Can't replace route, no match found [ 296.846081][ T8505] overlayfs: failed to resolve './file1': -2 [ 297.067885][ T40] audit: type=1800 audit(1745781543.980:1582): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.529" name="file0" dev="overlay" ino=148 res=0 errno=0 [ 297.129656][ T8500] overlayfs: conflicting lowerdir path [ 297.578790][ C2] vkms_vblank_simulate: vblank timer overrun [ 297.608872][ C2] vkms_vblank_simulate: vblank timer overrun [ 297.678655][ C2] vkms_vblank_simulate: vblank timer overrun [ 297.749827][ C2] vkms_vblank_simulate: vblank timer overrun [ 298.158237][ C2] vkms_vblank_simulate: vblank timer overrun [ 298.583292][ T8541] netlink: 60 bytes leftover after parsing attributes in process `syz.5.535'. [ 298.922408][ C2] vkms_vblank_simulate: vblank timer overrun [ 299.568571][ T8551] overlayfs: failed to resolve './file1': -2 [ 299.603640][ T8548] overlayfs: failed to resolve './file1': -2 [ 299.725013][ T8549] netlink: 'syz.6.536': attribute type 10 has an invalid length. [ 299.750657][ T8549] netlink: 40 bytes leftover after parsing attributes in process `syz.6.536'. [ 299.794162][ T8546] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.963884][ T8549] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 299.968844][ T8549] team0: Failed to send options change via netlink (err -105) [ 299.974676][ T8549] team0: Port device geneve0 added [ 300.091286][ T8546] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.478146][ C2] vkms_vblank_simulate: vblank timer overrun [ 300.512259][ T8546] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.719078][ T8546] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.904945][ T8546] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.918964][ T8546] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.965869][ T8546] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.015351][ T8546] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.658077][ T40] audit: type=1800 audit(1745781548.570:1583): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.549" name="file0" dev="overlay" ino=179 res=0 errno=0 [ 302.928316][ T8610] can0: slcan on ttyS3. [ 303.174244][ T8610] can0 (unregistered): slcan off ttyS3. [ 303.671644][ T840] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 303.841236][ T840] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.857864][ T840] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.881347][ T840] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.900541][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.930142][ T8622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.967155][ T840] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.214463][ T840] usb 7-1: USB disconnect, device number 4 [ 304.287905][ T8035] udevd[8035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.442840][ T8644] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 304.476368][ T8644] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.060518][ T8667] netlink: 'syz.3.564': attribute type 2 has an invalid length. [ 305.070588][ T8667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.092122][ T40] audit: type=1800 audit(1745781552.010:1584): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.564" name="file0" dev="overlay" ino=1030 res=0 errno=0 [ 305.147536][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 305.160448][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 305.182980][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 305.724245][ T8678] 9pnet_fd: Insufficient options for proto=fd [ 306.608230][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 306.788689][ T8681] wireguard0: entered promiscuous mode [ 306.839736][ T8681] wireguard0: entered allmulticast mode [ 308.048589][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.6.573'. [ 309.297326][ T840] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 309.310045][ T8710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.101551][ T8745] 9pnet_virtio: no channels available for device syz [ 310.615250][ T8757] overlayfs: missing 'lowerdir' [ 310.847526][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 310.877109][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 312.367170][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 313.799343][ T8807] openvswitch: netlink: Key type 16144 is out of range max 32 [ 314.790909][ T8817] netlink: 'syz.2.607': attribute type 10 has an invalid length. [ 314.794377][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 314.860960][ T8817] team0: Port device geneve0 added [ 316.834660][ T8861] overlay: Unknown parameter 'uid<00000000000000000000' [ 317.072349][ T8884] random: crng reseeded on system resumption [ 317.153378][ T8889] netlink: 'syz.2.625': attribute type 8 has an invalid length. [ 317.624163][ T8903] 9pnet_fd: Insufficient options for proto=fd [ 317.829698][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 317.979821][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 317.983770][ T59] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.989929][ T59] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.993142][ T59] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.995679][ T59] usb 8-1: Product: syz [ 317.997106][ T59] usb 8-1: Manufacturer: syz [ 317.999046][ T59] usb 8-1: SerialNumber: syz [ 318.011761][ T59] usb 8-1: config 0 descriptor?? [ 318.014239][ T8907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 318.245049][ T8928] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.637'. [ 318.277382][ T59] usb 8-1: USB disconnect, device number 4 [ 318.512175][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.638'. [ 318.840970][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.639'. [ 318.915818][ T8943] overlayfs: missing 'lowerdir' [ 319.117724][ T8971] 9pnet_virtio: no channels available for device 127.0.0.1 [ 319.308902][ T8973] CIFS: VFS: Malformed UNC in devname [ 319.332159][ T8982] overlayfs: missing 'lowerdir' [ 319.385310][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.653'. [ 319.388604][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.653'. [ 319.393895][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.653'. [ 319.400864][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.653'. [ 319.577890][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 319.583207][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.655'. [ 319.586506][ T8993] netlink: 'syz.5.655': attribute type 5 has an invalid length. [ 319.708305][ T8994] openvswitch: netlink: Message has 16 unknown bytes. [ 320.005377][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.008622][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.013329][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.019088][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.024870][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.030718][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.035102][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.038959][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.045730][ T9009] batadv_slave_0: entered promiscuous mode [ 320.049454][ T9009] batadv_slave_0: left promiscuous mode [ 320.219251][ T9018] overlayfs: missing 'lowerdir' [ 320.256537][ T9020] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 320.259570][ T9020] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 320.264295][ T9020] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 320.267336][ T9020] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 320.709470][ T5296] Bluetooth: hci1: unexpected event for opcode 0x202a [ 320.734548][ T9043] overlayfs: missing 'lowerdir' [ 320.954509][ T60] kernel read not supported for file /dsp (pid: 60 comm: kworker/3:1) [ 321.122005][ T9066] cgroup: subsys name conflicts with all [ 321.124691][ T9066] overlayfs: missing 'lowerdir' [ 321.149365][ T9069] tmpfs: Bad value for 'mpol' [ 321.156867][ T9069] tmpfs: Bad value for 'mpol' [ 321.158499][ T9069] tmpfs: Bad value for 'mpol' [ 321.160405][ T9069] tmpfs: Bad value for 'mpol' [ 321.162199][ T9069] tmpfs: Bad value for 'mpol' [ 321.163841][ T9069] tmpfs: Bad value for 'mpol' [ 321.165869][ T9069] tmpfs: Bad value for 'mpol' [ 321.168229][ T9069] tmpfs: Bad value for 'mpol' [ 321.173067][ T9069] tmpfs: Bad value for 'mpol' [ 321.174763][ T9069] tmpfs: Bad value for 'mpol' [ 321.176464][ T9069] tmpfs: Bad value for 'mpol' [ 321.178128][ T9069] tmpfs: Bad value for 'mpol' [ 321.180061][ T9069] tmpfs: Bad value for 'mpol' [ 321.189853][ T9069] tmpfs: Bad value for 'mpol' [ 321.191481][ T9069] tmpfs: Bad value for 'mpol' [ 321.192993][ T9069] tmpfs: Bad value for 'mpol' [ 321.194569][ T9069] tmpfs: Bad value for 'mpol' [ 321.196096][ T9069] tmpfs: Bad value for 'mpol' [ 321.197630][ T9069] tmpfs: Bad value for 'mpol' [ 321.199186][ T9069] tmpfs: Bad value for 'mpol' [ 321.201266][ T9069] tmpfs: Bad value for 'mpol' [ 321.202924][ T9069] tmpfs: Bad value for 'mpol' [ 321.204502][ T9069] tmpfs: Bad value for 'mpol' [ 321.206099][ T9069] tmpfs: Bad value for 'mpol' [ 321.207639][ T9069] tmpfs: Bad value for 'mpol' [ 321.209242][ T9069] tmpfs: Bad value for 'mpol' [ 321.211397][ T9069] tmpfs: Bad value for 'mpol' [ 321.212998][ T9069] tmpfs: Bad value for 'mpol' [ 321.214957][ T9069] tmpfs: Bad value for 'mpol' [ 321.217281][ T9069] tmpfs: Bad value for 'mpol' [ 321.219057][ T9069] tmpfs: Bad value for 'mpol' [ 321.221561][ T9069] tmpfs: Bad value for 'mpol' [ 321.232925][ T9069] tmpfs: Bad value for 'mpol' [ 321.234600][ T9069] tmpfs: Bad value for 'mpol' [ 321.236155][ T9069] tmpfs: Bad value for 'mpol' [ 321.237695][ T9069] tmpfs: Bad value for 'mpol' [ 321.390964][ T9083] overlayfs: missing 'lowerdir' [ 321.484826][ T9088] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 321.526516][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 321.879719][ T9103] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 321.882448][ T9103] syz_tun: entered promiscuous mode [ 321.887726][ T9103] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 321.986713][ T9111] overlayfs: missing 'lowerdir' [ 322.081219][ T9116] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.252666][ T9119] lo speed is unknown, defaulting to 1000 [ 323.263363][ T9151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 323.267081][ T9151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 323.610285][ T9180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 323.613184][ T9180] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 323.868723][ T9188] usb 2-1: USB disconnect, device number 2 [ 324.089139][ T9187] lo speed is unknown, defaulting to 1000 [ 324.446567][ T9214] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.449273][ T9214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 324.715196][ T9239] __nla_validate_parse: 1 callbacks suppressed [ 324.715274][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'. [ 324.733438][ T9239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 324.737243][ T9239] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 325.056923][ T9226] syz.3.725 (9226) used greatest stack depth: 20616 bytes left [ 325.235403][ T9250] delete_channel: no stack [ 325.267225][ T9255] overlayfs: missing 'lowerdir' [ 325.809984][ T9287] overlayfs: missing 'lowerdir' [ 325.898218][ T9290] netlink: 196 bytes leftover after parsing attributes in process `syz.3.744'. [ 326.217401][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.747'. [ 326.395888][ T9313] overlayfs: missing 'lowerdir' [ 326.566368][ T9319] netlink: 196 bytes leftover after parsing attributes in process `syz.2.754'. [ 326.834135][ T9326] 9pnet_virtio: no channels available for device syz [ 327.870204][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.872830][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.155146][ T9346] overlayfs: missing 'workdir' [ 329.515768][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 330.317355][ T9389] hpfs: Bad magic ... probably not HPFS [ 331.106590][ T841] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 331.229734][ T40] audit: type=1326 audit(1745781578.140:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.236007][ T40] audit: type=1326 audit(1745781578.140:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.243599][ T40] audit: type=1326 audit(1745781578.140:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.250023][ T40] audit: type=1326 audit(1745781578.140:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.256315][ T40] audit: type=1326 audit(1745781578.140:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.264105][ T40] audit: type=1326 audit(1745781578.140:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.270980][ T40] audit: type=1326 audit(1745781578.140:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.277469][ T40] audit: type=1326 audit(1745781578.140:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.289696][ T40] audit: type=1326 audit(1745781578.140:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.296438][ T40] audit: type=1326 audit(1745781578.140:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 331.303289][ T841] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.307092][ T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.310635][ T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.313848][ T841] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.317954][ T841] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.321479][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.339251][ T841] usb 10-1: config 0 descriptor?? [ 331.608564][ T9412] fuse: Bad value for 'fd' [ 331.609884][ T9413] fuse: Bad value for 'fd' [ 331.677391][ T9412] sd 0:0:0:0: PR command failed: 1026 [ 331.679142][ T9412] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 331.681721][ T9412] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 331.760249][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.763456][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.765914][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.768330][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.770787][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.773659][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.775421][ T9415] netlink: 56 bytes leftover after parsing attributes in process `syz.3.783'. [ 331.776112][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.781292][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.784134][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.786587][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.788966][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.791556][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.793971][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.796398][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.798810][ T841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.801537][ T841] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 331.807587][ T841] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 331.975171][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 332.025704][ T841] usb 10-1: USB disconnect, device number 3 [ 332.292757][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 332.372580][ T9448] loop8: detected capacity change from 0 to 7 [ 332.377877][ T9448] Dev loop8: unable to read RDB block 7 [ 332.381788][ T9448] loop8: unable to read partition table [ 332.383630][ T9448] loop8: partition table beyond EOD, truncated [ 332.385694][ T9448] loop_reread_partitions: partition scan of loop8 (被x^>& 2t) failed (rc=-5) [ 332.480437][ T9451] syzkaller0: entered promiscuous mode [ 332.482513][ T9451] syzkaller0: entered allmulticast mode [ 332.487571][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.795'. [ 332.573885][ T9453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 332.595455][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.598389][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.641911][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.829835][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 332.999765][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 333.003273][ T59] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 333.005927][ T59] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.008993][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.012124][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.015193][ T59] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.019180][ T59] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.022100][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.400766][ T59] usb 8-1: usb_control_msg returned -71 [ 333.403513][ T59] usbtmc 8-1:16.0: can't read capabilities [ 333.411613][ T59] usb 8-1: USB disconnect, device number 5 [ 333.709748][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 333.859678][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 333.863723][ T34] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 333.867385][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 333.872440][ T34] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.40 [ 333.876247][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.879753][ T34] usb 7-1: Product: ц [ 333.881474][ T34] usb 7-1: Manufacturer: ࡔ䪍ᇂ⪙流츉鷋粖吮ᗹ⎛뎫띨訵՗饮틫ᖮഝ､㦾ธ햎븟凢曝屍큙╏䙕륨卦㰸襕팢룝ﲔ [ 333.886817][ T34] usb 7-1: SerialNumber: В [ 333.946294][ T9474] fuse: Bad value for 'fd' [ 334.650181][ T34] usbhid 7-1:1.0: can't add hid device: -71 [ 334.652298][ T34] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 334.658826][ T34] usb 7-1: USB disconnect, device number 5 [ 335.052090][ T9490] loop6: detected capacity change from 0 to 524287999 [ 335.134277][ T5296] block nbd0: Receive control failed (result -32) [ 335.864349][ T9520] futex_wake_op: syz.6.814 tries to shift op by 144; fix this program [ 336.449819][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 336.487808][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.823'. [ 336.490705][ T9550] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 336.533033][ T9558] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 336.535520][ T9558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.826'. [ 336.540822][ T9558] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 336.584984][ T9558] input: syz1 as /devices/virtual/input/input7 [ 336.609675][ T841] usb 8-1: Using ep0 maxpacket: 8 [ 336.612678][ T841] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 336.615580][ T841] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 336.618238][ T841] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 336.621369][ T841] usb 8-1: config 250 has no interface number 0 [ 336.623347][ T841] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 336.627051][ T841] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 336.631190][ T841] usb 8-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 336.635355][ T841] usb 8-1: config 250 interface 228 has no altsetting 0 [ 336.640524][ T841] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 336.691004][ T841] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 336.716554][ T841] usb 8-1: Product: syz [ 336.733123][ T841] usb 8-1: SerialNumber: syz [ 336.882975][ T841] hub 8-1:250.228: bad descriptor, ignoring hub [ 336.885609][ T841] hub 8-1:250.228: probe with driver hub failed with error -5 [ 337.166401][ T9584] fuse: Invalid rootmode [ 337.570169][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 337.647360][ T9588] bond0: (slave bond_slave_0): Releasing backup interface [ 337.738270][ T9598] team0: Port device bridge3 added [ 337.751054][ T9598] team0: Port device bridge4 added [ 337.820385][ T9593] xt_TCPMSS: Only works on TCP SYN packets [ 337.906999][ T9602] Invalid option length (600) for dns_resolver key [ 338.610473][ T9633] netfs: Couldn't get user pages (rc=-14) [ 338.949483][ T9643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.845'. [ 339.173357][ T9645] netlink: 14 bytes leftover after parsing attributes in process `syz.3.846'. [ 339.215175][ T9650] sctp: [Deprecated]: syz.3.847 (pid 9650) Use of int in max_burst socket option deprecated. [ 339.215175][ T9650] Use struct sctp_assoc_value instead [ 339.300259][ T841] usb 8-1: USB disconnect, device number 6 [ 339.320531][ T9658] 9pnet_virtio: no channels available for device syz [ 339.705092][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 339.705103][ T40] audit: type=1800 audit(1745781586.620:1614): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.853" name="file0" dev="overlay" ino=612 res=0 errno=0 [ 339.781658][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.856'. [ 339.939729][ T5296] Bluetooth: hci2: command tx timeout [ 340.701412][ T9700] lo speed is unknown, defaulting to 1000 [ 340.942319][ T40] audit: type=1800 audit(1745781587.860:1615): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.863" name="file0" dev="overlay" ino=1569 res=0 errno=0 [ 341.540748][ T9780] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 341.639320][ T9780] netlink: 2 bytes leftover after parsing attributes in process `syz.3.869'. [ 341.651293][ T9780] netlink: 'syz.3.869': attribute type 10 has an invalid length. [ 341.653788][ T9780] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 341.658943][ T9780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 341.681237][ T40] audit: type=1800 audit(1745781588.600:1616): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.872" name="file0" dev="overlay" ino=609 res=0 errno=0 [ 341.738733][ T40] audit: type=1326 audit(1745781588.650:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.6.873" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 342.204277][ T9797] hpfs: Bad magic ... probably not HPFS [ 342.346063][ T9799] fuse: Bad value for 'group_id' [ 342.347878][ T9799] fuse: Bad value for 'group_id' [ 342.615512][ T9803] netlink: 80 bytes leftover after parsing attributes in process `syz.6.877'. [ 342.635988][ T9803] netlink: 'syz.6.877': attribute type 10 has an invalid length. [ 342.646523][ T9803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 342.698817][ T9809] netlink: 44 bytes leftover after parsing attributes in process `syz.6.879'. [ 342.789446][ T40] audit: type=1800 audit(1745781589.700:1618): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.881" name="file0" dev="overlay" ino=646 res=0 errno=0 [ 343.144436][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 343.334708][ T40] audit: type=1800 audit(1745781590.250:1619): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.890" name="file0" dev="overlay" ino=677 res=0 errno=0 [ 343.581590][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 343.731780][ T40] audit: type=1326 audit(1745781590.650:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9856 comm="syz.6.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 343.738453][ T40] audit: type=1326 audit(1745781590.650:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9856 comm="syz.6.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 343.745659][ T40] audit: type=1326 audit(1745781590.670:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9856 comm="syz.6.895" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 343.751591][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 343.752597][ T40] audit: type=1326 audit(1745781590.670:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9856 comm="syz.6.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 343.756153][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.772030][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.776001][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 343.778774][ T24] usb 7-1: Product: syz [ 343.785013][ T9859] Illegal XDP return value 81141760 on prog (id 192) dev N/A, expect packet loss! [ 343.789565][ T24] usb 7-1: Manufacturer: syz [ 343.791075][ T24] usb 7-1: SerialNumber: syz [ 343.793807][ T24] usb 7-1: config 0 descriptor?? [ 343.799003][ T24] usb 7-1: selecting invalid altsetting 0 [ 343.888871][ T9865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 343.906491][ T9865] kvm: pic: non byte read [ 343.921568][ T9865] kvm: pic: level sensitive irq not supported [ 343.922662][ T9865] kvm: pic: non byte read [ 344.005921][ T841] usb 7-1: USB disconnect, device number 6 [ 344.133198][ T9879] trusted_key: encrypted_key: master key parameter 'rusted:8sX' is invalid [ 344.137741][ T9879] trusted_key: encrypted_key: master key parameter 'rusted:8sX' is invalid [ 344.190053][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 344.228647][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 344.235711][ T9885] [U] ]-3*eE)t#aZ>=sOz |0!!FVKcR [ 344.239106][ T9885] [U] IlotOJRrfuk`ч[Kۜsũl*>Zw}G (, Ŋ~"Qfj流yk׼e~K"UObpbDμIq-fo^*/ۯ+c*#:vB!]4ueݳ) mM}4cqMJX>p PzvBݍz1,v$oAj91AurԤwؕ3Q [ 344.247105][ T9885] [U] W)؟s8*KPK13Pfo 8 v߄@ 1sl)azFcI{S!hګ #Qҕ% [ 344.250788][ T9885] [U] V 0wL #;>/Bdt|\aD̈#A [ 344.253298][ T9885] [U] $v]z{aG1< .:כC^lZ(u/z]%4@TH):5:xfϣkN6 Irvd [ 344.257038][ T9885] [U] 5O"sª2ʘD;;s?Ifà6(M)hۭ/7>X)կYWtc<928 [ 344.260959][ T9885] [U] RZpXڪG3!FHtLct7#ESs࿵!6 eo @0b^!6&ӏ|# [ 344.275324][ T9885] [U] ;}>̡@/H@)թO~{d!ߪ6k֯>(^ '^EHQ{y :5cweON+fXx$v~t!޺FC_yjLiVV-"l.-0n [ 344.281223][ T9885] [U] P5( [ 344.282450][ T9885] [U] Bߑ$5T"xiS20m4LI ϗ*߮ l')v.MI!_6;Tox$?4nf;`G%|g [ 344.366030][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.369305][ T9885] [U] SDյG~Am7aXk@J'@/n0Yɴ9,0ڻv*v9=BeZ]S#[km6*ݟ I^pY'؂ ")B&P!)Oâ^?՗mM,-{S@"c(1T< \a֋DJo1efYuE} [(0][|Y`S,}5 [ 344.371762][ T29] usb 10-1: Product: syz [ 344.379366][ T9885] [U] Eog^ʺq" [ 344.379640][ T9885] [U] K _n~C6ɶ/!>e߅n- c0O'Nj!ױ`݂忍]kMXpT J[:V,ǯ`)Br̈?s@ [ 344.380887][ T29] usb 10-1: Manufacturer: syz [ 344.382216][ T9885] [U] GZ @!)ZdZMr22jWRz7ӫ捚p'[/Zu`G¾.(0 ЇVÏG$X;ٰ73))_a (QztgxpZU$('y›.xmI4+э~I35<10TG1~}c™T€H%:o̍ы*wOpDp|eȩjPpnNP9nOraS [ 344.385965][ T29] usb 10-1: SerialNumber: syz [ 344.387622][ T9885] [U] 1(BT[o>l [ 344.399574][ T9885] [U]  >}r [ 344.400872][ T9885] [U] td:~=ǜb'QNx^; T^@jAwv/`?Q!mh(ުO}8͵J_aGZ [ 344.401867][ T29] r8152-cfgselector 10-1: Unknown version 0x0000 [ 344.404673][ T9885] [U] .>ԗw9GU .7E-C|ʨ8X [ 344.404695][ T9885] [U] q!Rq+DfSH9 8N8]V?sꡞ [ 344.404709][ T9885] [U] ~5 HWM2)ZaPx*&Ȃk..jK^f]h^0 uSvj=ݚp+FMlnrT L [ 344.404725][ T9885] [U] j+u ć&gKZ]eJ3,HweރļV.|9۰ux-YWu1G3 [ 344.406827][ T29] r8152-cfgselector 10-1: config 0 descriptor?? [ 344.409144][ T9885] [U] W>8X\2vetjʱh3L $jն j|9*Y7prDžjLF0{MAҲo2ì-+i*qSH8 [ 344.409155][ T9885] [U]  FKL+7 [ 344.409185][ T9885] [U] 3{`J]{k>Z2U8jP=s},T [ 344.419689][ T6005] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 344.420596][ T9885] [U] >,_bϟ*m(le z< [ 344.432244][ T9885] [U] nS [ 344.433239][ T9885] [U] 0a ;[)õTNWNl'׷I}M [ 344.435245][ T9885] [U] HfG [ 344.436326][ T9885] [U] YSӕ6I}x%WŇf%NWҪ!os/ҋ⌟ [ 344.438707][ T9885] [U] tDط23sH(6Tɧ^<&M@9ԊDJǷl(UY|v頷 iR(/Xg [ 344.442715][ T9885] [U] ߠխA"C!M4߃ꖅĕc(]58k:.7g)̊yƽ^R/ [ 344.445506][ T9885] [U] LCuTKy{Dl;};"32/R({!:o <^/PE@.d3\z|g [ 344.569593][ T6005] usb 11-1: Using ep0 maxpacket: 8 [ 344.576248][ T6005] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.580142][ T6005] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.582988][ T6005] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.587235][ T9881] [U] 8[v^"39gp@2Tn#>о91 a*dnRExzg^PoymBW g$g/j/߬qx`?mS M_2 P+-6 G@EtN*u(G}~|z ^6֮-z]]?wZ`5w$\mmu,z+Cv`Bu;$3| HRAJ07{uWq7?BNQ [ 350.883142][T10160] dump_stack_lvl+0x116/0x1f0 [ 350.883162][T10160] print_report+0xc3/0x670 [ 350.883174][T10160] ? __virt_addr_valid+0x5e/0x590 [ 350.883187][T10160] ? vrealloc_noprof+0x132/0x320 [ 350.883202][T10160] kasan_report+0xe0/0x110 [ 350.883212][T10160] ? vrealloc_noprof+0x132/0x320 [ 350.883228][T10160] kasan_check_range+0xef/0x1a0 [ 350.883241][T10160] __asan_memset+0x23/0x50 [ 350.883256][T10160] vrealloc_noprof+0x132/0x320 [ 350.883271][T10160] push_insn_history+0x2ae/0x6c0 [ 350.883283][T10160] do_check_common+0xbd3/0xc2a0 [ 350.883298][T10160] ? __pfx_do_check_common+0x10/0x10 [ 350.883307][T10160] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.883319][T10160] ? kfree+0x2b6/0x4d0 [ 350.883332][T10160] ? bpf_check+0x6c86/0xb460 [ 350.883341][T10160] ? bpf_check+0x7b2f/0xb460 [ 350.883351][T10160] bpf_check+0x7f51/0xb460 [ 350.883364][T10160] ? __pfx_bpf_check+0x10/0x10 [ 350.883373][T10160] ? pcpu_alloc_noprof+0x949/0x1470 [ 350.883386][T10160] ? __lock_acquire+0xaa4/0x1ba0 [ 350.883401][T10160] ? find_held_lock+0x2b/0x80 [ 350.883411][T10160] ? __asan_memset+0x23/0x50 [ 350.883425][T10160] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 350.883439][T10160] bpf_prog_load+0xe41/0x2490 [ 350.883452][T10160] ? __pfx_bpf_prog_load+0x10/0x10 [ 350.883464][T10160] ? __pfx___futex_wait+0x10/0x10 [ 350.883480][T10160] ? bpf_lsm_bpf+0x9/0x10 [ 350.883490][T10160] __sys_bpf+0x433c/0x4d80 [ 350.883503][T10160] ? __pfx___sys_bpf+0x10/0x10 [ 350.883517][T10160] ? do_futex+0x122/0x350 [ 350.883526][T10160] ? __pfx_do_futex+0x10/0x10 [ 350.883538][T10160] ? xfd_validate_state+0x5d/0x180 [ 350.883553][T10160] ? rcu_is_watching+0x12/0xc0 [ 350.883563][T10160] __ia32_sys_bpf+0x76/0xe0 [ 350.883577][T10160] __do_fast_syscall_32+0x73/0x120 [ 350.883593][T10160] do_fast_syscall_32+0x32/0x80 [ 350.883604][T10160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.883617][T10160] RIP: 0023:0xf712e579 [ 350.883624][T10160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 350.883634][T10160] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 350.883644][T10160] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 350.883650][T10160] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.883656][T10160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.883661][T10160] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 350.883667][T10160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.883675][T10160] [ 350.883679][T10160] [ 350.972150][T10160] The buggy address belongs to the virtual mapping at [ 350.972150][T10160] [ffffc90003c01000, ffffc90003c13000) created by: [ 350.972150][T10160] kvrealloc_noprof+0x7d/0xd0 [ 350.977509][T10160] [ 350.978283][T10160] The buggy address belongs to the physical page: [ 350.980256][T10160] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806e1bb348 pfn:0x6e1bb [ 350.983340][T10160] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 350.985558][T10160] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 350.988203][T10160] raw: ffff88806e1bb348 0000000000000000 00000001ffffffff 0000000000000000 [ 350.990845][T10160] page dumped because: kasan: bad access detected [ 350.992835][T10160] page_owner tracks the page as allocated [ 350.994504][T10160] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 10160, tgid 10159 (syz.2.989), ts 350873552058, free_ts 350469788403 [ 350.999785][T10160] post_alloc_hook+0x181/0x1b0 [ 351.001293][T10160] get_page_from_freelist+0x135c/0x3920 [ 351.003022][T10160] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 351.004863][T10160] alloc_pages_mpol+0x1fb/0x550 [ 351.006392][T10160] alloc_pages_noprof+0x131/0x390 [ 351.008003][T10160] __vmalloc_node_range_noprof+0x732/0x1540 [ 351.009852][T10160] __kvmalloc_node_noprof+0x2ff/0x600 [ 351.011546][T10160] kvrealloc_noprof+0x7d/0xd0 [ 351.013026][T10160] push_insn_history+0x2ae/0x6c0 [ 351.014636][T10160] do_check_common+0xbd3/0xc2a0 [ 351.016164][T10160] bpf_check+0x7f51/0xb460 [ 351.017570][T10160] bpf_prog_load+0xe41/0x2490 [ 351.018996][T10160] __sys_bpf+0x433c/0x4d80 [ 351.020362][T10160] __ia32_sys_bpf+0x76/0xe0 [ 351.020376][T10160] __do_fast_syscall_32+0x73/0x120 [ 351.020389][T10160] do_fast_syscall_32+0x32/0x80 [ 351.020400][T10160] page last free pid 5356 tgid 5356 stack trace: [ 351.020406][T10160] __free_frozen_pages+0x69d/0xff0 [ 351.028790][T10160] tlb_remove_table_rcu+0x116/0x1a0 [ 351.030434][T10160] rcu_core+0x799/0x14e0 [ 351.031784][T10160] handle_softirqs+0x216/0x8e0 [ 351.033288][T10160] __irq_exit_rcu+0x109/0x170 [ 351.034781][T10160] irq_exit_rcu+0x9/0x30 [ 351.036117][T10160] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 351.037882][T10160] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.039774][T10160] [ 351.040544][T10160] Memory state around the buggy address: [ 351.042319][T10160] ffffc90003c10f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.044841][T10160] ffffc90003c10f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.047371][T10160] >ffffc90003c11000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.049846][T10160] ^ [ 351.051457][T10160] ffffc90003c11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.053923][T10160] ffffc90003c11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.056395][T10160] ================================================================== [ 351.068396][T10160] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.070724][T10160] CPU: 2 UID: 0 PID: 10160 Comm: syz.2.989 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 351.074425][T10160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.077773][T10160] Call Trace: [ 351.078851][T10160] [ 351.079802][T10160] dump_stack_lvl+0x3d/0x1f0 [ 351.081265][T10160] panic+0x71c/0x800 [ 351.082529][T10160] ? __pfx_panic+0x10/0x10 [ 351.083953][T10160] ? rcu_is_watching+0x12/0xc0 [ 351.085459][T10160] ? preempt_schedule_thunk+0x16/0x30 [ 351.087162][T10160] ? vrealloc_noprof+0x132/0x320 [ 351.088747][T10160] ? preempt_schedule_common+0x44/0xc0 [ 351.090470][T10160] ? vrealloc_noprof+0x132/0x320 [ 351.092054][T10160] check_panic_on_warn+0xab/0xb0 [ 351.093626][T10160] end_report+0x107/0x170 [ 351.095006][T10160] kasan_report+0xee/0x110 [ 351.096425][T10160] ? vrealloc_noprof+0x132/0x320 [ 351.098022][T10160] kasan_check_range+0xef/0x1a0 [ 351.099574][T10160] __asan_memset+0x23/0x50 [ 351.100993][T10160] vrealloc_noprof+0x132/0x320 [ 351.102522][T10160] push_insn_history+0x2ae/0x6c0 [ 351.104111][T10160] do_check_common+0xbd3/0xc2a0 [ 351.105669][T10160] ? __pfx_do_check_common+0x10/0x10 [ 351.107336][T10160] ? lockdep_hardirqs_on+0x7c/0x110 [ 351.108990][T10160] ? kfree+0x2b6/0x4d0 [ 351.110288][T10160] ? bpf_check+0x6c86/0xb460 [ 351.111754][T10160] ? bpf_check+0x7b2f/0xb460 [ 351.113221][T10160] bpf_check+0x7f51/0xb460 [ 351.114651][T10160] ? __pfx_bpf_check+0x10/0x10 [ 351.116168][T10160] ? pcpu_alloc_noprof+0x949/0x1470 [ 351.117824][T10160] ? __lock_acquire+0xaa4/0x1ba0 [ 351.119404][T10160] ? find_held_lock+0x2b/0x80 [ 351.120892][T10160] ? __asan_memset+0x23/0x50 [ 351.122357][T10160] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 351.123951][T10160] bpf_prog_load+0xe41/0x2490 [ 351.125440][T10160] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.127027][T10160] ? __pfx___futex_wait+0x10/0x10 [ 351.128659][T10160] ? bpf_lsm_bpf+0x9/0x10 [ 351.130026][T10160] __sys_bpf+0x433c/0x4d80 [ 351.131466][T10160] ? __pfx___sys_bpf+0x10/0x10 [ 351.132987][T10160] ? do_futex+0x122/0x350 [ 351.134366][T10160] ? __pfx_do_futex+0x10/0x10 [ 351.135865][T10160] ? xfd_validate_state+0x5d/0x180 [ 351.137485][T10160] ? rcu_is_watching+0x12/0xc0 [ 351.139041][T10160] __ia32_sys_bpf+0x76/0xe0 [ 351.140483][T10160] __do_fast_syscall_32+0x73/0x120 [ 351.142113][T10160] do_fast_syscall_32+0x32/0x80 [ 351.143659][T10160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.145636][T10160] RIP: 0023:0xf712e579 [ 351.146940][T10160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.152889][T10160] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 351.155488][T10160] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 351.157973][T10160] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.160437][T10160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.162907][T10160] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 351.165363][T10160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.167841][T10160] [ 351.169525][T10160] Kernel Offset: disabled [ 351.170906][T10160] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:19:58 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff93a9a860 RBX=ffff88802b323c48 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802b323c48 RBP=0000000000000000 RSP=ffffc90000007c10 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffffffff8e097740 R15=0000000000000000 RIP=ffffffff819784b4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002040 CR3=0000000064906000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=7fffffffffffffff RCX=0000000000000000 RDX=ffff888024218000 RSI=ffffc900032f7bc8 RDI=ffffc900032f7b88 RBP=ffffc900032f7b80 RSP=ffffc900032f79f8 R8 =ffffc900032f7bd0 R9 =fffff5200065ef33 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000002 R14=ffffc900032f7b88 R15=ffff888024218000 RIP=ffffffff8b6b5b55 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080031608 CR3=000000000b789000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854bf6b0 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc90003beee68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366667257 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff35bb9c2 R15=dffffc0000000000 RIP=ffffffff854bf6d7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ce850 CR3=000000005a687000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100000 Opmask01=0000000000000003 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe448c8350 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a2e273538392032 2e61667260206e69 2063687220206e69 2020656e65620000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff9200043bdfe RCX=0000000000000000 RDX=ffff888044fa8000 RSI=ffffffff8228f4ed RDI=ffffc900021df090 RBP=ffff888044fa8000 RSP=ffffc900021deff0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900021df010 R13=0000000000002000 R14=dffffc0000000000 R15=0000000005a601ea RIP=ffffffff8228f4ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73cfb74 CR3=000000005a687000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000