last executing test programs: 4m3.724664046s ago: executing program 3 (id=8382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000000001000000090001"], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 4m2.214150946s ago: executing program 3 (id=8384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@dev, @multicast1, 0x0}, &(0x7f0000000400)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x48a, &(0x7f0000000100)={0x0, 0xd3df, 0x10000, 0x2, 0x3bf, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000300)) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m1.207066219s ago: executing program 3 (id=8386): unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={{0x0, 0x2710}, {0x77359400}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000114010025bd7000fedbdf2508001d5207a70082"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) r7 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r7, 0x20, &(0x7f0000000000)=[r7], 0x1) r8 = syz_open_dev$sg(0x0, 0x0, 0x20c02) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) read(r8, &(0x7f0000001400)=""/4076, 0xfffffeea) 3m57.66302966s ago: executing program 3 (id=8398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3m57.052602908s ago: executing program 3 (id=8401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba2930", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf25010000000500040004000000080011000000000005"], 0x44}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 3m55.569679167s ago: executing program 3 (id=8406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001500)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000840)="be6ff6c5e032c07a2ee66166cf50557c1f8b6e1cccc6e224136b3774b1dd1bb73ad9812d1b56e6707d965cce93967fe2842fb53c41df78b0e47a15def844731f1cc89ef03096ec01cbd73b57b981afd6b039b9c6e079991991613dd6ba96c9f4510ce049f833a6a391be0b2ac496bdfb0b90d40da9ccaf3dfd69e4dab201c049f895683242c9943560fdd1e8617f44956a0afdd988fa567d1636aa4aeab2cfff7d379289aa630c8f147fb6283eac86f096a19d0aa6c484984bfc68ee9a1abd51db8be6c1bc6ecb8bfb0f0ec4c0a47de86bb362b8fd99e8d2cb95001de02a4ff3d8b293496a5a5b9fda9a", 0xea}, {&(0x7f0000000540)="86624717f0c7fc79cf8f230183fdc0c6c150aa97d0c1fe9ac4f9e0f2fc26fb6f8bc6032cbda67aa71fcc5550714b94428a50b135d33cba0a13db462f001e32e97b8171678563437214f79f9dbe48f4215f82b0dcce89e7cc55be78a5f272fa61abdbd6137b8829f6758118768aede0dcc8b16f4d68e1fbfdffb6a42dd776bd691e258aae2a75c10a51bedc8a4d36713f85b2862f7896441a8b75a9c141ccfea9dc4df8b77b312859d7a74c69999204d7e859", 0xb2}, {&(0x7f0000000640)="d90dc1fce80024f0347efa9528aa9cd8b247d604a8872e285dc3378eb638c986164ecffa3bcc8168f72ab290fb77754ba7102813e1953bc341e6215a76d64c9a3e519e6ec172be07bc8f5b2a3bba0e739f365d47092b3dbcebe8c6b4c7bba6ef63d0eaa2326378c489ad0f209519afbbf8ab5316e5d76dd09d9549dc50a7aa041139d636558220e94d05314676dbec6a641a653e516478b5f70d54a12c74461d956c77439c0ecb02e9453de180f25b5982e1a7277a63e610c65ae5cbd778a4c32d10bb9eb886c55dae0b21744065ce8ef0060ab6d001fde1aa38cb4637be0516dcc7", 0xe2}, {&(0x7f00000007c0)="01e7421d0744aeab0bb9ef795667f6aa92461a197fa90892dba57c2b533d91c359fde5b98981c2e3f4f3ffef07a2806cdec60522f5f9287b8a116c2907c3f58f16a4fbef3fe74bfaeead7b", 0x4b}], 0x4, &(0x7f0000000a40)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x70, 0x4}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000e40)="5f98469f0f90069d8089de2a2c135e4d8a6d94268d93f646f7cf9806a1d9770227975f848c02cd74a0147206abd605ce0df487d723c53d9c7a4a7a2ce6d4a316e35a4f1d7e4d4050de20825313fff67d4f4959fc7dd6e383092a209889cc9b142e8bd9f144bcfe05cd494b8bc8e8e988456b0cc42e2474b6da330c51c8acf1567c50254c23476204f00d0c69e0f2ff40d8b0063ee8fda3deaa40bf63ec313c6fc21776f3a84cb58cd227109e22515fc33a4ab54a883f314533cef25c77f30f98c07d42770c9003648dcd52f638", 0xcd}, {&(0x7f0000000f40)="495f89bcbec2d153522bf2a8c0e281f82097b9f2f6e7168615f1f33f8a2572dd13e2da57e55e004bdc4a6d5075d098a8c24175c22e1587928e600ee2e61ae2ee2f33a14512fa5a47c42d2ddef52b15d55c4de4610482cf2423b7b5fc5b112e5b075f458c3c9702b33f6ea624b419e253df28abf3bfe4bc9c63f0eed516023a71d1082541f8e3c10d058e71d24377149b80875350bc3daba4b4b0af8d488a2e7f7161e0e0bd1693fecbd51b8d9ae3f67096a274e4e1368755951b9e6da6690c780f60c60fca9332363963517e78fa019c18726b8ca070870f0b774aa6695d3486", 0xe0}, {&(0x7f000000a280)="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", 0x1000}, {&(0x7f0000000c80)="03aba5fecfebbda4b2fabda6c1e58be69467c0d776944707f3836693e5b50ec1a9d75b44d93e6660ac4685962039a7c5395f56ba9cc09c08886a6c7018e2bb094d18c9250b30f34467a2779a200861baec9f0f9a4dc39a28eb298b2843ea512ba15b9704d2", 0x65}], 0x4, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x14, 0x4000040}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="861f43a6b0fe805f0d6eaecf3329ae76606c926beff3fd9640f9ef58fcab024de0861d825fa735209d694224de84668c6ce05c499515f013a5915fdbfa6015bc422a39df3a392f64adaa53b93c5c559806f5482d3869be237acc0ff7b4766d5278927799c0c288e28fe72ebca1540860e16df5494c17", 0x76}, {&(0x7f0000001140)="bb1816858eb64a18f84eec2b5c35c88fa9b8b2c95ab930f07d9191ac772900ef46e098713eb93e4fb390102901a12f1a6c4073b35830a8c95ae886b7b7c9c2af91aca02007edaf54f8abe629f2820d3fb3", 0x51}, {&(0x7f00000011c0)="9094618dbf5daf35dd4663356cfcf072349005b1d1f2f409471e01d718d1df3eae0a04ebd9e0350916c90b03b61434f600c40950e4ff048ce6dcb83c1e4d542dd2adbc3bd77990b2d56290a7400e9111f7e56b4548600d8bb7369c0681acbdc47344294f706c619d586e661d8ece7acc2c5bbd520c50ae7adc3f9f48e536dd087bd17e92e19d2e0b49d137ea1063271674f9da6844271ea55fe7600846dfc95a08bb484d62a10237bee3c867a85c5252be55248247403ce84e6a0348e49dd70e1abbf5408ff4f41885b1fb2948426733624f88ce", 0xd4}, {&(0x7f0000000940)="2c8e55326d40dd123d1193fd9de6f665b6c9f70868e5fbb59d64a32a55b31cd7e2416b96c37461320524b293ad23e3688adbed3fb301995e4368f854390454a5b62960acf71a220bb11c0cec498a0f5954b58da497f75178a4780d60bf889a7d3e9280367c1c99d03e44188e2e5b14f248f38854535d27ae0e1a72bc56889b13b89effedb9ea2b60bcb2537c70174847f24c77999882fdb11f392e7fa1b5202458b6c39f83a82ce541e03460bbb3a00ed43023ab308699075059f1579ed6884e2d8ca8dea598e09650c5ea5a47fbaf1612a2f52859f79edb755d569bce6be501aa", 0xe1}], 0x4, &(0x7f0000001300), 0x0, 0xc080}}], 0x3, 0x20000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000300), 0x4003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x9, r4}, 0x38) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() openat$rdma_cm(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000001600)=""/4106, 0x100a) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYBLOB="37142faf08d29229d95f5105351ec3d103740e2213f4b03547b7af1fc6dd54489837ebd9db5da289d9194aa90d0cdb4fc421a024d128bb346ed81f5de735d62dcbbb02c96385a98921bd692f78829dcd9fc0dffd81af46fe429f278a0bc83c2fb91157b133ba3324b28992a03cd37455708bd7128908", @ANYRES8=r0], 0x20}}, 0x48014) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/unix\x00') 3m39.713077363s ago: executing program 32 (id=8406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001500)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000840)="be6ff6c5e032c07a2ee66166cf50557c1f8b6e1cccc6e224136b3774b1dd1bb73ad9812d1b56e6707d965cce93967fe2842fb53c41df78b0e47a15def844731f1cc89ef03096ec01cbd73b57b981afd6b039b9c6e079991991613dd6ba96c9f4510ce049f833a6a391be0b2ac496bdfb0b90d40da9ccaf3dfd69e4dab201c049f895683242c9943560fdd1e8617f44956a0afdd988fa567d1636aa4aeab2cfff7d379289aa630c8f147fb6283eac86f096a19d0aa6c484984bfc68ee9a1abd51db8be6c1bc6ecb8bfb0f0ec4c0a47de86bb362b8fd99e8d2cb95001de02a4ff3d8b293496a5a5b9fda9a", 0xea}, {&(0x7f0000000540)="86624717f0c7fc79cf8f230183fdc0c6c150aa97d0c1fe9ac4f9e0f2fc26fb6f8bc6032cbda67aa71fcc5550714b94428a50b135d33cba0a13db462f001e32e97b8171678563437214f79f9dbe48f4215f82b0dcce89e7cc55be78a5f272fa61abdbd6137b8829f6758118768aede0dcc8b16f4d68e1fbfdffb6a42dd776bd691e258aae2a75c10a51bedc8a4d36713f85b2862f7896441a8b75a9c141ccfea9dc4df8b77b312859d7a74c69999204d7e859", 0xb2}, {&(0x7f0000000640)="d90dc1fce80024f0347efa9528aa9cd8b247d604a8872e285dc3378eb638c986164ecffa3bcc8168f72ab290fb77754ba7102813e1953bc341e6215a76d64c9a3e519e6ec172be07bc8f5b2a3bba0e739f365d47092b3dbcebe8c6b4c7bba6ef63d0eaa2326378c489ad0f209519afbbf8ab5316e5d76dd09d9549dc50a7aa041139d636558220e94d05314676dbec6a641a653e516478b5f70d54a12c74461d956c77439c0ecb02e9453de180f25b5982e1a7277a63e610c65ae5cbd778a4c32d10bb9eb886c55dae0b21744065ce8ef0060ab6d001fde1aa38cb4637be0516dcc7", 0xe2}, {&(0x7f00000007c0)="01e7421d0744aeab0bb9ef795667f6aa92461a197fa90892dba57c2b533d91c359fde5b98981c2e3f4f3ffef07a2806cdec60522f5f9287b8a116c2907c3f58f16a4fbef3fe74bfaeead7b", 0x4b}], 0x4, &(0x7f0000000a40)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x70, 0x4}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000e40)="5f98469f0f90069d8089de2a2c135e4d8a6d94268d93f646f7cf9806a1d9770227975f848c02cd74a0147206abd605ce0df487d723c53d9c7a4a7a2ce6d4a316e35a4f1d7e4d4050de20825313fff67d4f4959fc7dd6e383092a209889cc9b142e8bd9f144bcfe05cd494b8bc8e8e988456b0cc42e2474b6da330c51c8acf1567c50254c23476204f00d0c69e0f2ff40d8b0063ee8fda3deaa40bf63ec313c6fc21776f3a84cb58cd227109e22515fc33a4ab54a883f314533cef25c77f30f98c07d42770c9003648dcd52f638", 0xcd}, {&(0x7f0000000f40)="495f89bcbec2d153522bf2a8c0e281f82097b9f2f6e7168615f1f33f8a2572dd13e2da57e55e004bdc4a6d5075d098a8c24175c22e1587928e600ee2e61ae2ee2f33a14512fa5a47c42d2ddef52b15d55c4de4610482cf2423b7b5fc5b112e5b075f458c3c9702b33f6ea624b419e253df28abf3bfe4bc9c63f0eed516023a71d1082541f8e3c10d058e71d24377149b80875350bc3daba4b4b0af8d488a2e7f7161e0e0bd1693fecbd51b8d9ae3f67096a274e4e1368755951b9e6da6690c780f60c60fca9332363963517e78fa019c18726b8ca070870f0b774aa6695d3486", 0xe0}, {&(0x7f000000a280)="9d3789b51b7a174d50f239413a09fc65f3be97b4c9ee1317a5c777db58899161e744d4dab19cde8a915ae12227acba443ce605fde8cf3203fca42cc76da63545bd2521cd953e23239313f04c0684e31ba492b36c9cf548ed0f94a6560e14e00abb19cbd70cbc91623de6e90648f0decf53d6a6cfafa73e4cb94256c88838e4ff9af7f8acab8d0779e6a61e27bbf40651faa61db9ae4731d3c604db4c763468725a20fe7a9a62490be06e71cf9a0a17a735d2ff814297e3b99ee5a2c49f0814ade1e4b383a2734db75166bf8c5617d1e56ce28b8b33133edcc7649fb103651e7998aa1fd2019f0f4884414980f0d25f7d455c0ae31057bbb7647e6e7851e6726ee96284f491392b10d47305716212f56f3059368e8365c5a21538dcc187a615c09418334e8efcfa65df51b9ce58a9afde842ea6d9cbbea8486a845a21fbd8b2f82d398ae4a8298e95f02ee19c89841c28ee09daad9fbd4fc245e572b386503a2ea3e3c3f89f6be7a56502a33f168c5757164b1c2f65d90f879aeae8ca4fa8799b8d16a7fa22db9ae70c9cc44ee920f1d7f5810e7ec29c8046030c19fc3b9dcf5e3758a76896f9b58248979c840eb7aa2aa170a89109fb712bf2fb505ffecdab5dba302c46456fc4c2aec9fa7820eded76b163b3d7a65a28491362951a94b55c5d2104e53ecaa2b96290e046f2912b1011387d66bb36f18ee45e867cbb51f8f8a076281e17e89ec88dfadb930af8d83ac22a260d28a941e9b8585fa284e3c3f2d62c46ec345a5881533df82e4d58291bfaa2ca9f88e3aa9b670b495d31deb86fbfa81760dc122e1027c06585f63a6d433e999dc19aef207335ff4d6367b80770ba6077bef628b70a9fb57e26adbd83b62eec3b978ce6b3828d6ddddefcc9a8ee3e9ceb26cecc4463a1e17b0c0f7609edb582931490c954de968b396331f41e66aefc164ea3bde6bf1459f3581f801eb874f0eac4435edfe7c516efedab98efc165436c47b44e9a5eaf12dc019950dd9cff346000dbee84bc7e05059183b005ec886ea9105e65add30ff0318a510f9b0656033ebd9486fb7580666c2dbc27f99e6a3137f8011e7ffd6f53d05616c669a02e7275a960aecc5766739da032130c851ba6deaab09cf6f83a1f18ecf89cb4a95fb9b8d22048983448b7dcaa32b376a2b3a4c19da127f2f31fa955c94d043d35b51bb2fb7134cde675a52fddd6ddaddb2da11e9252d31b3048a804bfc57aae76a1149606415bee591fd79240ae54d2444a461f892689e11862de26ac36a57986726d42c4f18d758dcd253c9d08e728021aef0c77bcb958eacec56cd5edb6114654b8d6c4ee600ca904f9cca7df70ba4d5c58b3e364af46844cc8b92f0438f047d8b1609bad8d5d21f999faa65142ca792915db5b22b7886bc91ac9547aa4a2dce20a7c28d2fbe6f4d61b092ec5efdff93eafaaa7548d3c7dbe1703f03b74d2233fdbd9c801fc90abef6aa43055e372c65a5f9ebcefcf738f06306d15c11f0183367e5ab5510ac5400b9db43380adf912ca639ef79cc301fac529fdcf3b5ec387db300a7dd493b6d751a625111b46fddeacdd39c9e40ffc5be1513839d5ae17700654ae473b93bcd389a74a89a2896c84a3e801cb609add41971706e098d76fcce615e5a86cd1254924ac3c588aef15382e8ace1fd6209d9c4d32aa33d8752b679cb8b0a667dc2d8de91c28d48ef427cca6cc76cceca56aab5f832079646226e83997f040ca1732d3f12aa6b6f9ac262fe3c3d82e68f2f0ff0374a6091c5b2f7ffbbc296c2577951ff6027efb49990a50d9f95820e6b8bafa4eca7329aee4a853e92874ee0633750193ae05ae892b363866ac228d169b5a3fbecc6c3e80338071fbbb5f7aaa738cf1940cc1f1c6c70b89f1e08eb91afeded4303d2805421cb44f160921327e973882613256baf634fc2eb912280b9c5490252b22fd3cd784e62b5121879a78b16763ce7ef16a4de2333216e4fe5fe3318cf7f3a19442255733cc3e5cba2113f9cf25f973c138930f7a2270a8b387d05fc445f27975895cc825cb54e0863f53a40712417d10811085515808ba4a027a820d7636eddbee4e3c6bc8e03dd2b828daff8a83f1c3cecd37a6712f592017caab3094b118d6dd5c7233999d2587cabbdd7fbe243f12aef1455d496f0734e6257d6164e562d86bb25be05f08afbe4781f262bff41a71529a693104ab9d0cd89e4cb7c2c94ddd09e77a720eeac648d01b74bd53d8b872be804aaca986d616823133de550b5e603c9568a3ee936e0961b501f3b5ef3a6bedf52215f2fec1b175c0ba14f79a6423922ec9583c0993db29082cff8090d0525320494b418af0dd7669eb406e933c94b3894e666ab1719a4f6aa9719895a7d414f01e69fd30dc5356e415f3954ff643fc96569756537b26871a863716eb188a91cf5aa7d1a88eaa6a4f50ffe86379b7e62f27f557acb70285963756971d80777d78bbc10fb1e1083352051c96a189d15ba63d048d8714018ce8eff45440ee7060cc71ab61246b455dea5979cdf1ce73ea241dacfa011fae9bc3520b4b810e376660d927872b7f7caaecec9ec1421594d6b5c1526b9b9cded6f0d01fa8ec7003d6b60da955d1c2f5b0c30b73c0c87fc28f19b0caa766b0433bf9c752d5578a59a9d5a0b97ce7ec8fef1a70fb427f636419d29d75ff1b72afb7a935bca8a59f13adbd6401bee82c21f1c5636cbd4cfd0fd286a0ba46fcea6a88eaf6dcd57a552d5a7a95d8574a402bb54e487da2d5bdad1730a46e7f07520fd2ee1d9855c7a5b13a31938550697b87c2dbabab6238e9546215b686f8f23028231bb6b3cd6655e304c9635a0c3cab16e6b6232e4939b2c39cd5ab87ff6b6b021c2c222b150a63c2646b205f74353a9cd1ecad34e7cdb677cd29f23dff42aaab9901f16cba4a014f836f7575b4b54b22281ed1c841385cfc85a2cba207c4fe37a585ec7622b205e3620d5c3281c4bcb3a8822065d1c1c24d5f49e9a7467b588cb18d42ca9700db2db4d476fa39af9b9668b95a2c383830f50b04b500c12ca53310e27c2ff05cf1b5fe8304a1219c284b4d0460f785f583a8fa272f73ec8531fd3c6582b74576bfbb901d324a411d136c9cbbc94be833da91c3c21e836bc653a1e1b642fd6ddd40aba23946976d41b9c8cf8c031532baea37e00389cf8ee444a58fefdb2b3c338a3c75ac61f711e8d0a7920e5c244709fb096d522fcd0b7ed6fa808f28bbc4f10ec6b3bb3ea9b8dbbfc2e73220b77a0c4d6058bb0277b2f05cc1b65823c3200058484727d0c3e58ded15fae901dad03401e87fab65cd226bb7d1b95f7468e6c2b0da754164da53e8cd328aaba28217ab8461899f11e9b996c6499b987774a6bf31231ad1f44accb2c0b6770a0710bb6673c651d18071fb595e375abbc5a6ad466f9655e52b3c2c41a85020fc803d7205f1c76bbfd56f3dbd7afe3b1e2309e4f5f9595e08d08544ae7ae1c048d84380c4384ed540e8dab1f2604f65640e9ea3728c8466647b9a6b585543bb51b1847cd0425a7d40af45b3e0f070710548abbad1cd97f5450548b8bb05356bf35b99783a425dc21566a7f3fb53599188eb319e9c365584032a87184ba98b49c80dcb91819f25f7582abeb10aeb91b005ca757e20bd8791eb4153e02e771e9d610486fb0a55bb5dfdadc9b616b61030b09dce41251806b1e2057109cd819e88dc8ebea298854caf21c96346bfebea5eacd6b78c7a6ee9cdaafe861ff432983549cd5e425c37ff4c0c0ef38d765d59b86976c15bbcb6f735c7473526477b86562b8306de0a42f539218733002a794ed60c72a2f078e953d5c7f25734f97023805c83f5caa64359a347b017009c3b2b6f021270445bf1ec234b3a218a4c89c808c09046d6d36898891c643dc7118c66253781a2e06e8640dd81e2d1e1db2b3e74d2fdcea13d7ac8bf24b8f1cee9b8429beeaaa00f38f5d27bf55fa8c50667ef145ad4d464792dfa18a287964d6ced8a418bc67aa9d12c425f3eef97ff6ad2ba1eb31afc3069589d8a1bbbcf3724d4070e798d40ba8646ca67bef5beb187bd481f8dd5e4d73c2f8558e0b011efe0c8022db19852afb05f3908eecb813f0581d31c7f6451c4dadac7a5cf21b1777bb5e8f0580cee5f9ba47f261dcff4817a8b5743b94347f55da535a29b9469a0dd1934e6ca946ac98ee5b8369dfcda1bce5c03f9788f8a4e75da73f2e7b0acedfb430cbbf7d029b5fcc95d2b97927cc9c053b2367613cdd6b82143bda4bd367ae884e384cd663e8c466abe7db558907e7062ac62a675f3a7d236f100b3f11f8f5cd9675c98dbe1c49b97d9d190a9fca049cb788a74312a644886ca1363d0119a2556cd5322f87847f1fe945f933df2efa3afa8dcf30f424aeb2caa820f83a277f0db44c0675ed5cefe014de29064748b3d5a40fa6912057afce409e0cd66e9ba05e04ed10bbe73810e91b3888367c85d996c11cb3a7c29d44fd6579132ac7c8c2a9731d8e6f5e27282616cb2e62301e0ef9a534af5df08f8b456027dd4e6860a378bbc08e087846d0d635618a70c9e37227ba111758936034fdb95daff01429907b8bbb0d0301c04bd5ea71df16dd0a01f93785588561386ecfb166a3a8b1ff3271a0b1cad386e8a8daf570a05d9e37ef66fda0f07d44548cf3ba3df04e859bbf7be39b9d549666c90250bb8f30a2519007f5ac3e08ea68707f43b2182a7aa99db753b7b9de476865635aa164e845a5d24ee5e8ee469cf4baf8a87b1c3d104047b09d4e05d96f0b1d02c0a2b64e0657da32f5016bd35001349c6c0729b81335d4380f52ea50a223e70cf5ffe40762bf022f4f4a8a5df23edaf09a955101ab5344a24ae9d91b425fb0091369580caace75fe5b6e5f2e3254cca1fec886eb65b26b5f6a8ccd735998f3e7fbdc17293980dc880aa4addc55fc09c93bc37c8b8fb7f0025a952a9c839e66288e483a58140481bdad53a1422f5f6df8404773fa2e54b560884d16276b5ae2b6c2234392e0c997e7f5dc45ff42ecb2fc351f29f6e7ac0972b56a5a3729ed42e887241dbdf042818fbb7b1495f98db460317f3699ff7205d0c3a52940943a251651fd2b3fe716aec8dabb18e6bba2ea89af34ed384ff43e207722cf523f515b56d073c0954507567286c7a55513dc2e7c22dbd1c846fc1570a8ce9f29ff99bab2298501c97227c29bc0b6960cf6f6bc53be3c2ce51115146ef4817a11d2615eb43683d93030959e4f300a2acd3ff1127aa13451923419dc2a3a51d44c7b2234e18027cede2419980f5f112deddb09673475f8b285b4d9ded1651b50951466d52501c3f9f911694eb11f0e3cfd39c88bdba1a1730220d6be04cb2bb2ff79477574c37ea9a4183d4e6a9527ab16b6e6a042de9f61bc03944243b873e4be4613b2f86dbf9ff3ea69c3c383ccb2ed975edb0c36272421d780be0d4ac87e26564553aee210961394017b4d562c3a9a78f309e68cf595dd2f19985f7a959eafdf548de00a4f828b602f5b2bc167a013a6bc551594c0c2563104733a0e241c3bbbdcee8f37b20c8429e6f41b2cd6c7798260190e6431af8c630fdf16438a84dd656c6a06f52314729ae3540a47e2d807069d69f73f42c0f98078562b8d35d389d85d03d31d678267ea1e4cc13b9635344dafbea0e8b9dfe204085197523961d011b2166d2469f01534b6f92e2bff7952c3ef577fca62c5a54c660b899af8198f5ce9d19f34f9be1dd096c519632a59f55445f9643d5a5a0f66738ca8f752ab04afaade9c1ef5c8ab3cd01c5", 0x1000}, {&(0x7f0000000c80)="03aba5fecfebbda4b2fabda6c1e58be69467c0d776944707f3836693e5b50ec1a9d75b44d93e6660ac4685962039a7c5395f56ba9cc09c08886a6c7018e2bb094d18c9250b30f34467a2779a200861baec9f0f9a4dc39a28eb298b2843ea512ba15b9704d2", 0x65}], 0x4, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x14, 0x4000040}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="861f43a6b0fe805f0d6eaecf3329ae76606c926beff3fd9640f9ef58fcab024de0861d825fa735209d694224de84668c6ce05c499515f013a5915fdbfa6015bc422a39df3a392f64adaa53b93c5c559806f5482d3869be237acc0ff7b4766d5278927799c0c288e28fe72ebca1540860e16df5494c17", 0x76}, {&(0x7f0000001140)="bb1816858eb64a18f84eec2b5c35c88fa9b8b2c95ab930f07d9191ac772900ef46e098713eb93e4fb390102901a12f1a6c4073b35830a8c95ae886b7b7c9c2af91aca02007edaf54f8abe629f2820d3fb3", 0x51}, {&(0x7f00000011c0)="9094618dbf5daf35dd4663356cfcf072349005b1d1f2f409471e01d718d1df3eae0a04ebd9e0350916c90b03b61434f600c40950e4ff048ce6dcb83c1e4d542dd2adbc3bd77990b2d56290a7400e9111f7e56b4548600d8bb7369c0681acbdc47344294f706c619d586e661d8ece7acc2c5bbd520c50ae7adc3f9f48e536dd087bd17e92e19d2e0b49d137ea1063271674f9da6844271ea55fe7600846dfc95a08bb484d62a10237bee3c867a85c5252be55248247403ce84e6a0348e49dd70e1abbf5408ff4f41885b1fb2948426733624f88ce", 0xd4}, {&(0x7f0000000940)="2c8e55326d40dd123d1193fd9de6f665b6c9f70868e5fbb59d64a32a55b31cd7e2416b96c37461320524b293ad23e3688adbed3fb301995e4368f854390454a5b62960acf71a220bb11c0cec498a0f5954b58da497f75178a4780d60bf889a7d3e9280367c1c99d03e44188e2e5b14f248f38854535d27ae0e1a72bc56889b13b89effedb9ea2b60bcb2537c70174847f24c77999882fdb11f392e7fa1b5202458b6c39f83a82ce541e03460bbb3a00ed43023ab308699075059f1579ed6884e2d8ca8dea598e09650c5ea5a47fbaf1612a2f52859f79edb755d569bce6be501aa", 0xe1}], 0x4, &(0x7f0000001300), 0x0, 0xc080}}], 0x3, 0x20000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000300), 0x4003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x9, r4}, 0x38) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() openat$rdma_cm(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000001600)=""/4106, 0x100a) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYBLOB="37142faf08d29229d95f5105351ec3d103740e2213f4b03547b7af1fc6dd54489837ebd9db5da289d9194aa90d0cdb4fc421a024d128bb346ed81f5de735d62dcbbb02c96385a98921bd692f78829dcd9fc0dffd81af46fe429f278a0bc83c2fb91157b133ba3324b28992a03cd37455708bd7128908", @ANYRES8=r0], 0x20}}, 0x48014) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/unix\x00') 1m59.594625458s ago: executing program 4 (id=8634): r0 = gettid() r1 = getpid() kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd66) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000540)={r7, 0x0, 0x4, "a68d14fd"}, 0xc) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x2fc6, {0x1, 0x7, 0x0, '\x00', {0x1, 0x38c, 0x1, 0x8, r4, r5, 0x0, '\x00', 0xe, 0xfffffffffffff2e0, 0x7, 0x6, {0x1006, 0x6}, {0x20000000000005}, {0xa, 0x8fc}, {0xd, 0xa04}, 0x7, 0x80000c, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) close(0x3) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x3}}}}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)={{r11, 0x2, 0xb, 0x10000, 0x2, 0x2, 0x4, 0x1, 0x6, 0xd, 0x8, 0x8, 0x1, 0x1, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m58.527562763s ago: executing program 4 (id=8640): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, 0x0, 0x78) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r8}, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000280)=""/117) 1m54.595457295s ago: executing program 4 (id=8642): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) 1m48.047507855s ago: executing program 4 (id=8652): ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d51}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) init_module(0x0, 0xfffd8, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) removexattr(0x0, &(0x7f0000000240)=@known='system.posix_acl_access\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 1m47.231177573s ago: executing program 4 (id=8655): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg$unix(r0, &(0x7f0000002700)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000880)=""/239, 0xef}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000002a00)=""/4110, 0x100e}, {&(0x7f0000000140)=""/17, 0x11}], 0x4, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000002900)=""/211, 0xd3}, {&(0x7f0000001b40)=""/120, 0x78}, {&(0x7f0000001bc0)=""/205, 0xcd}, {&(0x7f0000001d80)=""/248, 0xf8}], 0x5, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x84}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000000a80), 0x0, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)}}], 0x4, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0x28040680) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x200900) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x28002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x24000000) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x4000, &(0x7f00000004c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m43.335264133s ago: executing program 4 (id=8665): socket(0x10, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1c}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) connect$inet6(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f7c000001300000000000000010000bb7f1a00bb00feff0000000a95000000fd000000"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 1m28.033583217s ago: executing program 33 (id=8665): socket(0x10, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1c}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) connect$inet6(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f7c000001300000000000000010000bb7f1a00bb00feff0000000a95000000fd000000"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 1m1.411645504s ago: executing program 5 (id=8686): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000280)={0x0, 0x8, [0x2, 0x0, 0x5, 0x8, 0x4, 0x2]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r12 = getpgrp(0xffffffffffffffff) sched_setattr(r12, &(0x7f0000000180)={0x38, 0x0, 0x20, 0x4, 0x800, 0x453, 0x5, 0x5, 0x4, 0x81}, 0x0) 1m0.326670415s ago: executing program 5 (id=8723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d000000000000180012800800687372000c00028008000200", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000004c0)={0x4, @sliced={0x1, [0xc, 0xffff, 0xffff, 0x101, 0xe, 0xfffe, 0xfe00, 0x5, 0x2, 0xe49, 0x6, 0x0, 0xb117, 0x5, 0x5, 0xed6, 0x1a5, 0xbe, 0x2, 0x0, 0x7, 0x1, 0x3ff, 0x1, 0x1, 0x3, 0x33d3, 0xb8, 0x1, 0x101, 0x7e1, 0x1, 0x8, 0xa, 0x200, 0x3ff, 0x7fff, 0x4, 0x1, 0x1ff, 0x81, 0x6000, 0x1, 0x1da, 0x1, 0x7, 0x10, 0x1], 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1m0.194069918s ago: executing program 5 (id=8726): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x2000000c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 59.654197386s ago: executing program 5 (id=8729): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) 41.894944768s ago: executing program 34 (id=8735): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) 13.172200065s ago: executing program 2 (id=8825): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) fstatat64(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x400) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="bce011481a18ed203cfe2210df02cb8e8d9085804651e6a992504ce7f89d6cc1656a0576d9361f7a23e325c0fd7f46c302e41d279351c4b20e65f1cb31d2f9b56f6e97f220f911d63c", 0x49, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6c01000017000d090000000000000000ffffffff0000000000000000000000000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000e208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044001000e000000200"/192], 0x16c}}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) splice(r3, &(0x7f00000005c0)=0x6, r5, &(0x7f0000000600)=0x10, 0x80, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000007c0)={&(0x7f0000000640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/166, 0xa6}], 0x1}, 0x40002020) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) munmap(&(0x7f0000456000/0x2000)=nil, 0x2000) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) unshare(0x6a040000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, r0, 0xffffffff, 0x77, r1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x21c4840, 0x0) 13.066562981s ago: executing program 6 (id=8826): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x228302, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x800334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0x7ffffffe, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r5, 0x7277, 0x4000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000100)=0x8, 0x4) 11.965452438s ago: executing program 6 (id=8827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@dev, @multicast1, 0x0}, &(0x7f0000000400)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x48a, &(0x7f0000000100)={0x0, 0xd3df, 0x10000, 0x2, 0x3bf, 0x0, r2}, &(0x7f0000000180), 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.468621148s ago: executing program 0 (id=8828): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/543, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x22b) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a178", 0x4}], 0x1}}], 0x1, 0x20000001) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="66854692", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x200000000000022e, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xb8, 0xa, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1248, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0xfdaff804fd864d3f, 0x1cd0, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb41, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4ca, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19ad}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1eb6, 0x8}}]}, {0x44, 0x6, "8d3b9ec69e04af55ba5ee2e0ef639998df5468a9d198b07dbb9249c73c54a8405a959a844a145b3ebdfa5fb904be6f4fc16c53be6b51a50699e6655b5b0c153f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000340)='\x00', 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x28, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 10.955266606s ago: executing program 6 (id=8829): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 9.487267303s ago: executing program 6 (id=8831): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4, 0x0, r2}, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000005c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x161) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r6, @ANYBLOB="050000006e6e4a8bb7202e0d79597b441fc8781cceffc10c277600fd406da43551b71da629454ca7c926f7233cfe591e2b15c1d5", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xd, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x6, 0x3, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x3, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0x0, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xf4, 0xde, 0x2}, {0x4, 0xeeef5000, 0xe, 0xe, 0x2, 0x4, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0x6000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x5, 0x0, 0x2, 0x7, 0xe6, 0x8}, {0x2, 0xaa6d}, {0x6000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566085, 0x8, 0x2801, 0xeeef0000, [0x0, 0x3, 0x80000000, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000013800010326bd7002fadbdf2506000000"], 0x14}}, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 8.079064409s ago: executing program 2 (id=8833): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000280)={0x0, 0x8, [0x2, 0x0, 0x5, 0x8, 0x4, 0x2]}) 7.946019009s ago: executing program 0 (id=8834): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4, 0x0, r2}, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000005c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x161) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xd, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x6, 0x3, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x3, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0x0, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xf4, 0xde, 0x2}, {0x4, 0xeeef5000, 0xe, 0xe, 0x2, 0x4, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0x6000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x5, 0x0, 0x2, 0x7, 0xe6, 0x8}, {0x2, 0xaa6d}, {0x6000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566085, 0x8, 0x2801, 0xeeef0000, [0x0, 0x3, 0x80000000, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 7.464478499s ago: executing program 2 (id=8835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x89) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffff9c, &(0x7f0000000380), 0x82400, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r5 = eventfd(0x80000) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009005000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014080008400000000114000000110001000000000000000000008400"], 0x6c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d80)={0x9, 0x0, [{0xdddd1000, 0xa6, &(0x7f0000000900)=""/166}, {0x0, 0x7b, &(0x7f00000009c0)=""/123}, {0xeeee0000, 0xe, &(0x7f0000000300)=""/14}, {0xeeee0000, 0x11, &(0x7f0000000780)=""/17}, {0x4, 0xf3, &(0x7f0000000a80)=""/243}, {0x3000, 0x58, &(0x7f0000000b80)=""/88}, {0x4000, 0x40, &(0x7f0000000c00)=""/64}, {0xd000, 0xaa, &(0x7f0000000c40)=""/170}, {0x80a0000, 0x4d, &(0x7f0000000d00)=""/77}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a3000000000050004000000000005"], 0x60}}, 0x0) 6.121688762s ago: executing program 6 (id=8836): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f000001a240)=""/102391, 0x18ff7, 0x41e) r1 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x470e6, 0x100, 0x0, 0x1fa}) io_uring_setup(0x2746, &(0x7f0000000500)={0x0, 0x465e, 0x2, 0x2, 0x58, 0x0, r1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000400)=[0xe758, 0x7fffffff], 0x2) r2 = socket(0xa, 0x800, 0xff) io_uring_enter(r1, 0x2a0f, 0x43f4, 0x4, &(0x7f0000000380)={[0x4df4]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002500)=[{{&(0x7f0000000300)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)='P', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x77}, 0x1c, &(0x7f0000000f00)=[{&(0x7f00000002c0)="abe8a6f1b625", 0x6}], 0x1}}], 0x2, 0x24004001) shutdown(r3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000851}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x8}}, 0x20) sendto$ax25(r0, &(0x7f0000000280)="6f6ef6a12676c38aae103713a90cd0ebb452e7cc5279ebf3db7a64563edabd5abea1c31eba1b6950f734d996e12739f1c45d7793d7e3167a55e1fbe3c425", 0x3e, 0x8000, &(0x7f0000000440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="25b80000180c", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "475cfbcdae09c4723086e5215b8b056cd495721502b6a9b5", "70e01c7f0c0dce5d4a6e924e0680e0395eaf37b60e9797f4c6b67410989e9ad1"}}}}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={r6, 0x1c5, "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"}, &(0x7f0000000100)=0x1cd) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x5}, &(0x7f00000000c0)=0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012"], 0x4c}}, 0x20000000) 4.302311415s ago: executing program 1 (id=8840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d6673"]) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) 4.066459686s ago: executing program 2 (id=8842): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xff20) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 3.900128305s ago: executing program 2 (id=8843): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000280)={0x0, 0x8, [0x2, 0x0, 0x5, 0x8, 0x4, 0x2]}) 3.8277532s ago: executing program 2 (id=8844): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4, 0x0, r2}, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000005c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x161) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r6, @ANYBLOB="050000006e6e4a8bb7202e0d79597b441fc8781cceffc10c277600fd406da43551b71da629454ca7c926f7233cfe591e2b15c1d5", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xd, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x6, 0x3, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x3, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0x0, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xf4, 0xde, 0x2}, {0x4, 0xeeef5000, 0xe, 0xe, 0x2, 0x4, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0x6000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x5, 0x0, 0x2, 0x7, 0xe6, 0x8}, {0x2, 0xaa6d}, {0x6000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566085, 0x8, 0x2801, 0xeeef0000, [0x0, 0x3, 0x80000000, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000013800010326bd7002fadbdf2506000000"], 0x14}}, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 3.005675003s ago: executing program 0 (id=8845): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010040000008000000e6ffedfde90000007b00000095", @ANYRES32=r0, @ANYRES32, @ANYRES16=r2, @ANYRES64=r0, @ANYRES8=r1, @ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0xc00, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) socket(0x10, 0x803, 0x0) eventfd(0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) getdents(r2, &(0x7f00000002c0)=""/91, 0x5b) 3.00549468s ago: executing program 1 (id=8846): mkdir(&(0x7f0000000080)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x8500, 0x160) r1 = open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x680, 0x185) symlinkat(&(0x7f0000000280)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00') unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x200481, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e) 2.77818384s ago: executing program 1 (id=8847): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000010001000000", @ANYRES32=r3], 0x10}, 0x0) recvmmsg$unix(r3, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xa8}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, &(0x7f0000000fc0)=[@rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}], 0x12c}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/28, 0x1c}], 0x1, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x78}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/99, 0x63}, {0x0}, {&(0x7f0000000d00)=""/224, 0xe0}, {&(0x7f0000000640)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}], 0x8, &(0x7f0000000e80)=[@rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x60}}], 0x4, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x1}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r8 = syz_io_uring_setup(0x522e, &(0x7f00000000c0)={0x0, 0x97db, 0x4000, 0x2, 0x3aa}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000180)=[0x9, 0xfffffffd], 0x2) setreuid(0xffffffffffffffff, 0xee00) 2.679149876s ago: executing program 0 (id=8848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000004080)="611cad", 0x3, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x240}}, 0xfffffe5c) 1.786106323s ago: executing program 0 (id=8849): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.523577762s ago: executing program 0 (id=8850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x40000) fanotify_mark(r4, 0x1, 0x48000003, r3, 0x0) r5 = syz_io_uring_setup(0x538b, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, &(0x7f0000000bc0), 0x0, 0x2}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$uinput_user_dev(r10, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@\n'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x1c7440) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.339866006s ago: executing program 1 (id=8851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x89) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffff9c, &(0x7f0000000380), 0x82400, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r5 = eventfd(0x80000) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009005000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014080008400000000114000000110001000000000000000000008400"], 0x6c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d80)={0x9, 0x0, [{0xdddd1000, 0xa6, &(0x7f0000000900)=""/166}, {0x0, 0x7b, &(0x7f00000009c0)=""/123}, {0xeeee0000, 0xe, &(0x7f0000000300)=""/14}, {0xeeee0000, 0x11, &(0x7f0000000780)=""/17}, {0x4, 0xf3, &(0x7f0000000a80)=""/243}, {0x3000, 0x58, &(0x7f0000000b80)=""/88}, {0x4000, 0x40, &(0x7f0000000c00)=""/64}, {0xd000, 0xaa, &(0x7f0000000c40)=""/170}, {0x80a0000, 0x4d, &(0x7f0000000d00)=""/77}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a3000000000050004000000000005"], 0x60}}, 0x0) 205.4495ms ago: executing program 1 (id=8852): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000280)={0x0, 0x8, [0x2, 0x0, 0x5, 0x8, 0x4, 0x2]}) 0s ago: executing program 1 (id=8853): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d6673"]) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.003569][ T3456] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1995.003587][ T3456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 1995.003599][ T3456] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000380 [ 1995.003610][ T3456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.003620][ T3456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1995.003631][ T3456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.003656][ T3456] [ 1995.074257][ T3458] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1995.080382][ C2] hpet: Lost 3 RTC interrupts [ 1995.280377][ C2] hpet: Lost 12 RTC interrupts [ 1995.306296][ C2] hpet: Lost 1 RTC interrupts [ 1995.353086][T17468] vhci_hcd: vhci_device speed not set [ 1995.505069][ C2] hpet: Lost 1 RTC interrupts [ 1995.636257][ C2] hpet: Lost 1 RTC interrupts [ 1995.684954][ C2] hpet: Lost 1 RTC interrupts [ 1995.832963][ C2] hpet: Lost 1 RTC interrupts [ 1995.925100][ C2] hpet: Lost 2 RTC interrupts [ 1995.931350][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1995.935034][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1995.961352][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1995.966209][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1995.966803][ T3465] siw: device registration error -23 [ 1996.021074][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 1996.078920][ T3470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1996.130680][ T40] audit: type=1326 audit(1759814563.325:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.0.8396" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0 [ 1996.280584][ T3479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1996.291193][ T3476] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1996.298991][ T3476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1996.304884][ T3476] vhci_hcd vhci_hcd.0: Device attached [ 1996.622329][T17468] usb 37-1: new high-speed USB device number 20 using vhci_hcd [ 1997.598141][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8405'. [ 1997.657455][ T3478] vhci_hcd: connection reset by peer [ 1997.661651][T18115] vhci_hcd: stop threads [ 1997.663558][T18115] vhci_hcd: release socket [ 1997.665678][T18115] vhci_hcd: disconnect device [ 1998.165528][ T3504] siw: device registration error -23 [ 1999.888703][T15340] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1999.891855][ T3523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8414'. [ 2000.082402][T15340] usb 6-1: Using ep0 maxpacket: 16 [ 2000.109849][T15340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.114791][T15340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.402916][T15340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2000.415822][T15340] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2000.434479][T15340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.460547][T15340] usb 6-1: config 0 descriptor?? [ 2000.889198][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.892440][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.940936][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.946000][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.952065][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.957760][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.962475][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.979899][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2000.983772][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2001.000167][T15340] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 2001.034994][T15340] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input28 [ 2001.119656][ T3529] 9pnet_fd: Insufficient options for proto=fd [ 2001.157040][T15340] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2001.296249][T15340] usb 6-1: USB disconnect, device number 40 [ 2001.539066][ T3531] fido_id[3531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 2001.759746][T17468] vhci_hcd: vhci_device speed not set [ 2002.133378][ T3535] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2002.425586][ C2] hpet: Lost 1 RTC interrupts [ 2002.492076][ C2] hpet: Lost 1 RTC interrupts [ 2002.620857][ C2] hpet: Lost 1 RTC interrupts [ 2002.691346][ C2] hpet: Lost 2 RTC interrupts [ 2002.728847][ C2] hpet: Lost 1 RTC interrupts [ 2002.824803][ C2] hpet: Lost 1 RTC interrupts [ 2002.914672][ T40] audit: type=1326 audit(1759814570.115:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3538 comm="syz.0.8417" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0 [ 2002.962966][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2002.968872][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2002.975474][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2002.996611][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2003.028826][T15340] rtc rtc0: __rtc_set_alarm: err=-22 [ 2003.031240][ T3547] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2003.056631][ T3547] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2003.061833][ T3547] vhci_hcd vhci_hcd.0: Device attached [ 2003.339622][T17468] usb 37-1: new high-speed USB device number 21 using vhci_hcd [ 2003.449338][ T3555] siw: device registration error -23 [ 2004.356766][ T3548] vhci_hcd: connection reset by peer [ 2004.381138][T30507] vhci_hcd: stop threads [ 2004.396572][T30507] vhci_hcd: release socket [ 2004.449895][T30507] vhci_hcd: disconnect device [ 2004.655986][ T3565] 9pnet_virtio: no channels available for device syz [ 2005.369770][ T3573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8423'. [ 2005.568242][ T3579] random: crng reseeded on system resumption [ 2006.184076][ T3589] kAFS: No cell specified [ 2006.664994][ T3598] 9pnet_fd: Insufficient options for proto=fd [ 2008.163918][ T40] audit: type=1326 audit(1759814575.365:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3602 comm="syz.2.8430" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 2008.255951][ T3604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2008.260026][ T3604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2008.268149][ T3604] vhci_hcd vhci_hcd.0: Device attached [ 2008.471515][T17468] vhci_hcd: vhci_device speed not set [ 2008.527327][T10809] usb 41-1: new high-speed USB device number 18 using vhci_hcd [ 2009.681044][ T3605] vhci_hcd: connection reset by peer [ 2009.752223][ T1227] vhci_hcd: stop threads [ 2009.819902][ T1227] vhci_hcd: release socket [ 2009.821976][ T1227] vhci_hcd: disconnect device [ 2010.897452][ T3617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8433'. [ 2011.403836][ T3625] kAFS: No cell specified [ 2012.592576][ T3637] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2012.612680][ C2] hpet: Lost 1 RTC interrupts [ 2012.644608][ C2] hpet: Lost 1 RTC interrupts [ 2012.724683][ C2] hpet: Lost 1 RTC interrupts [ 2012.773222][ C2] hpet: Lost 1 RTC interrupts [ 2012.826392][ C2] hpet: Lost 1 RTC interrupts [ 2012.922150][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2013.521834][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2013.538076][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2013.542418][T15340] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2013.635794][T15340] rtc rtc0: __rtc_set_alarm: err=-22 [ 2013.730720][T10809] vhci_hcd: vhci_device speed not set [ 2013.775304][ T3648] 9pnet_fd: Insufficient options for proto=fd [ 2014.138849][T15677] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2014.337515][T15677] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2014.343105][T15677] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2014.447361][T15677] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2014.453526][T15677] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2014.471129][T15677] usb 7-1: Product: syz [ 2014.473056][T15677] usb 7-1: Manufacturer: syz [ 2014.475004][T15677] usb 7-1: SerialNumber: syz [ 2014.535267][T15677] usb 7-1: config 0 descriptor?? [ 2014.843532][T15677] usb 7-1: selecting invalid altsetting 0 [ 2015.032572][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2015.108226][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2015.133638][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2015.151735][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2015.155760][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2015.430208][ T3651] lo speed is unknown, defaulting to 1000 [ 2016.520472][ T3651] chnl_net:caif_netlink_parms(): no params data found [ 2016.763022][T10809] usb 7-1: USB disconnect, device number 46 [ 2017.365002][T28310] Bluetooth: hci3: command tx timeout [ 2017.615407][ T3668] kAFS: No cell specified [ 2017.941870][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.946843][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.974353][ T3651] bridge_slave_0: entered allmulticast mode [ 2018.019737][T20263] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2018.072740][ T3651] bridge_slave_0: entered promiscuous mode [ 2018.084066][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.118314][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.123613][ T3651] bridge_slave_1: entered allmulticast mode [ 2018.134688][ T3651] bridge_slave_1: entered promiscuous mode [ 2018.350418][T20263] usb 6-1: Using ep0 maxpacket: 16 [ 2018.382807][ T3677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8447'. [ 2018.412062][T20263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.465992][T20263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.496310][T20263] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2018.522551][T20263] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2018.534823][T20263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.627644][T20263] usb 6-1: config 0 descriptor?? [ 2019.295071][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2019.426408][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2019.443320][T28310] Bluetooth: hci3: command tx timeout [ 2019.480741][ T3651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2019.549213][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2019.632309][ T3651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2019.876070][ C2] hpet: Lost 1 RTC interrupts [ 2019.924636][ C2] hpet: Lost 1 RTC interrupts [ 2019.931395][ T3689] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2019.931984][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2019.970085][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2019.974834][ T3692] FAULT_INJECTION: forcing a failure. [ 2019.974834][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.060999][ T3692] CPU: 1 UID: 0 PID: 3692 Comm: syz.2.8449 Not tainted syzkaller #0 PREEMPT(full) [ 2020.061029][ T3692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2020.061042][ T3692] Call Trace: [ 2020.061051][ T3692] [ 2020.061060][ T3692] dump_stack_lvl+0x16c/0x1f0 [ 2020.061917][ T3692] should_fail_ex+0x512/0x640 [ 2020.061948][ T3692] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 2020.061982][ T3692] should_failslab+0xc2/0x120 [ 2020.062016][ T3692] __kmalloc_node_noprof+0xe0/0x8a0 [ 2020.062045][ T3692] ? __get_vm_area_node+0x208/0x330 [ 2020.062076][ T3692] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 2020.062119][ T3692] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 2020.062153][ T3692] __vmalloc_node_range_noprof+0x3e5/0x1480 [ 2020.062201][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.062244][ T3692] ? kasan_save_stack+0x42/0x60 [ 2020.062273][ T3692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2020.062306][ T3692] ? xt_alloc_table_info+0x43/0xa0 [ 2020.062342][ T3692] ? do_sock_setsockopt+0xf0/0x1d0 [ 2020.062373][ T3692] ? __sys_setsockopt+0x120/0x1a0 [ 2020.062395][ T3692] ? __ia32_sys_setsockopt+0xbc/0x160 [ 2020.062423][ T3692] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2020.062459][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.062490][ T3692] __vmalloc_node_noprof+0xad/0xf0 [ 2020.062525][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.062562][ T3692] xt_compat_init_offsets+0xe6/0x1f0 [ 2020.062599][ T3692] translate_compat_table+0x1fe/0x1830 [ 2020.062660][ T3692] ? __might_fault+0xe3/0x190 [ 2020.062689][ T3692] ? __pfx_translate_compat_table+0x10/0x10 [ 2020.062759][ T3692] compat_do_replace+0x255/0x3c0 [ 2020.062801][ T3692] ? __pfx_compat_do_replace+0x10/0x10 [ 2020.062845][ T3692] ? rcu_is_watching+0x12/0xc0 [ 2020.062884][ T3692] ? bpf_lsm_capable+0x9/0x10 [ 2020.062915][ T3692] ? security_capable+0x7e/0x260 [ 2020.062952][ T3692] do_ipt_set_ctl+0x55d/0xa60 [ 2020.062976][ T3692] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2020.063011][ T3692] ? find_held_lock+0x2b/0x80 [ 2020.063041][ T3692] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2020.063080][ T3692] ? lockdep_hardirqs_on+0x7c/0x110 [ 2020.063107][ T3692] ? sockopt_release_sock+0x52/0x60 [ 2020.063137][ T3692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2020.063166][ T3692] ? sockopt_release_sock+0x52/0x60 [ 2020.063201][ T3692] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2020.063247][ T3692] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2020.063285][ T3692] nf_setsockopt+0x8d/0xf0 [ 2020.063322][ T3692] ip_setsockopt+0xcb/0xf0 [ 2020.063365][ T3692] tcp_setsockopt+0xa4/0x100 [ 2020.063391][ T3692] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2020.063429][ T3692] do_sock_setsockopt+0xf0/0x1d0 [ 2020.063469][ T3692] __sys_setsockopt+0x120/0x1a0 [ 2020.063503][ T3692] __ia32_sys_setsockopt+0xbc/0x160 [ 2020.063529][ T3692] ? lockdep_hardirqs_on+0x7c/0x110 [ 2020.063555][ T3692] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2020.063585][ T3692] __do_fast_syscall_32+0x7c/0x300 [ 2020.063619][ T3692] do_fast_syscall_32+0x32/0x80 [ 2020.063658][ T3692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2020.063689][ T3692] RIP: 0023:0xf705d579 [ 2020.063712][ T3692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2020.063737][ T3692] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2020.063761][ T3692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2020.063777][ T3692] RDX: 0000000000000040 RSI: 0000000080000980 RDI: 0000000000000b80 [ 2020.063792][ T3692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2020.063805][ T3692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2020.063820][ T3692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2020.063856][ T3692] [ 2020.402473][ T3692] warn_alloc: 1 callbacks suppressed [ 2020.402492][ T3692] syz.2.8449: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2020.419834][ T3692] CPU: 1 UID: 0 PID: 3692 Comm: syz.2.8449 Not tainted syzkaller #0 PREEMPT(full) [ 2020.419862][ T3692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2020.419874][ T3692] Call Trace: [ 2020.419882][ T3692] [ 2020.419889][ T3692] dump_stack_lvl+0x16c/0x1f0 [ 2020.419921][ T3692] warn_alloc+0x248/0x3a0 [ 2020.419941][ T3692] ? __pfx_warn_alloc+0x10/0x10 [ 2020.419957][ T3692] ? dump_stack_lvl+0x1a3/0x1f0 [ 2020.419978][ T3692] ? should_fail_ex+0x354/0x640 [ 2020.420002][ T3692] ? rcu_is_watching+0x12/0xc0 [ 2020.420022][ T3692] ? trace_kmalloc+0x2b/0xd0 [ 2020.420054][ T3692] ? __kmalloc_node_noprof+0x364/0x8a0 [ 2020.420073][ T3692] ? __get_vm_area_node+0x208/0x330 [ 2020.420095][ T3692] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 2020.420124][ T3692] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 2020.420156][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.420187][ T3692] ? kasan_save_stack+0x42/0x60 [ 2020.420209][ T3692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2020.420266][ T3692] ? xt_alloc_table_info+0x43/0xa0 [ 2020.420288][ T3692] ? do_sock_setsockopt+0xf0/0x1d0 [ 2020.420309][ T3692] ? __sys_setsockopt+0x120/0x1a0 [ 2020.420325][ T3692] ? __ia32_sys_setsockopt+0xbc/0x160 [ 2020.420341][ T3692] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2020.420363][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.420383][ T3692] __vmalloc_node_noprof+0xad/0xf0 [ 2020.420404][ T3692] ? xt_compat_init_offsets+0xe6/0x1f0 [ 2020.420429][ T3692] xt_compat_init_offsets+0xe6/0x1f0 [ 2020.420451][ T3692] translate_compat_table+0x1fe/0x1830 [ 2020.420486][ T3692] ? __might_fault+0xe3/0x190 [ 2020.420506][ T3692] ? __pfx_translate_compat_table+0x10/0x10 [ 2020.420548][ T3692] compat_do_replace+0x255/0x3c0 [ 2020.420594][ T3692] ? __pfx_compat_do_replace+0x10/0x10 [ 2020.420624][ T3692] ? rcu_is_watching+0x12/0xc0 [ 2020.420649][ T3692] ? bpf_lsm_capable+0x9/0x10 [ 2020.420672][ T3692] ? security_capable+0x7e/0x260 [ 2020.420699][ T3692] do_ipt_set_ctl+0x55d/0xa60 [ 2020.420714][ T3692] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2020.420740][ T3692] ? find_held_lock+0x2b/0x80 [ 2020.420762][ T3692] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2020.420829][ T3692] ? lockdep_hardirqs_on+0x7c/0x110 [ 2020.420892][ T3692] ? sockopt_release_sock+0x52/0x60 [ 2020.420915][ T3692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2020.420935][ T3692] ? sockopt_release_sock+0x52/0x60 [ 2020.420959][ T3692] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2020.420992][ T3692] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2020.421018][ T3692] nf_setsockopt+0x8d/0xf0 [ 2020.421053][ T3692] ip_setsockopt+0xcb/0xf0 [ 2020.421211][ T3692] tcp_setsockopt+0xa4/0x100 [ 2020.421233][ T3692] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2020.421258][ T3692] do_sock_setsockopt+0xf0/0x1d0 [ 2020.421283][ T3692] __sys_setsockopt+0x120/0x1a0 [ 2020.421306][ T3692] __ia32_sys_setsockopt+0xbc/0x160 [ 2020.421323][ T3692] ? lockdep_hardirqs_on+0x7c/0x110 [ 2020.421342][ T3692] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2020.421363][ T3692] __do_fast_syscall_32+0x7c/0x300 [ 2020.421388][ T3692] do_fast_syscall_32+0x32/0x80 [ 2020.421409][ T3692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2020.421431][ T3692] RIP: 0023:0xf705d579 [ 2020.421446][ T3692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2020.421463][ T3692] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2020.421486][ T3692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2020.421498][ T3692] RDX: 0000000000000040 RSI: 0000000080000980 RDI: 0000000000000b80 [ 2020.421510][ T3692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2020.421521][ T3692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2020.421531][ T3692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2020.421556][ T3692] [ 2020.425358][ T3692] Mem-Info: [ 2020.479352][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2020.494910][ T3692] active_anon:2284 inactive_anon:3518 isolated_anon:0 [ 2020.494910][ T3692] active_file:6784 inactive_file:10727 isolated_file:0 [ 2020.494910][ T3692] unevictable:1768 dirty:172 writeback:0 [ 2020.494910][ T3692] slab_reclaimable:6481 slab_unreclaimable:61517 [ 2020.494910][ T3692] mapped:28549 shmem:3829 pagetables:1416 [ 2020.494910][ T3692] sec_pagetables:349 bounce:0 [ 2020.494910][ T3692] kernel_misc_reclaimable:0 [ 2020.494910][ T3692] free:60199 free_pcp:11735 free_cma:0 [ 2020.494977][ T3692] Node 0 active_anon:0kB inactive_anon:304kB active_file:0kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3020kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8388kB pagetables:1376kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 2020.495024][ T3692] Node 1 active_anon:9136kB inactive_anon:13768kB active_file:27136kB inactive_file:42888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111176kB dirty:684kB writeback:0kB shmem:11780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5608kB pagetables:4288kB sec_pagetables:232kB all_unreclaimable? yes Balloon:0kB [ 2020.495071][ T3692] Node 0 DMA free:2480kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:28kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.495129][ T3692] lowmem_reserve[]: 0 292 292 292 292 [ 2020.495172][ T3692] Node 0 DMA32 free:16808kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:304kB active_file:0kB inactive_file:20kB unevictable:3536kB writepending:4kB zspages:1104kB present:1032196kB managed:299732kB mlocked:0kB bounce:0kB free_pcp:8508kB local_pcp:312kB free_cma:0kB [ 2020.495229][ T3692] lowmem_reserve[]: 0 0 0 0 0 [ 2020.495270][ T3692] Node 1 DMA32 free:221508kB boost:12288kB min:59432kB low:71216kB high:83000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9136kB inactive_anon:13768kB active_file:27136kB inactive_file:42888kB unevictable:3536kB writepending:684kB zspages:3956kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:38432kB local_pcp:4728kB free_cma:0kB [ 2020.495327][ T3692] lowmem_reserve[]: 0 0 0 0 0 [ 2020.495367][ T3692] Node 0 DMA: 66*4kB (U) 41*8kB (U) 8*16kB (U) 5*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2480kB [ 2020.495525][ T3692] Node 0 DMA32: 24*4kB (ME) 25*8kB (E) 12*16kB (E) 162*32kB (UME) 52*64kB (UME) 33*128kB (UME) 12*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16808kB [ 2020.495792][ T3692] Node 1 DMA32: 1787*4kB (UME) 987*8kB (UME) 638*16kB (UME) 725*32kB (UME) 414*64kB (UME) 157*128kB (UME) 76*256kB (ME) 61*512kB (UME) 74*1024kB (M) 0*2048kB 0*4096kB = 221508kB [ 2020.496157][ T3692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.496174][ T3692] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2020.496190][ T3692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.496206][ T3692] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2020.496222][ T3692] 22678 total pagecache pages [ 2020.496258][ T3692] 1336 pages in swap cache [ 2020.496266][ T3692] Free swap = 105688kB [ 2020.496274][ T3692] Total swap = 124996kB [ 2020.496283][ T3692] 524155 pages RAM [ 2020.496291][ T3692] 0 pages HighMem/MovableOnly [ 2020.496299][ T3692] 208327 pages reserved [ 2020.496307][ T3692] 0 pages cma reserved [ 2021.080593][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2021.088480][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2021.105019][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2021.108214][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 2021.111811][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2021.115154][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2021.125810][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2021.131295][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2021.135761][T20263] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2021.209190][T20263] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input29 [ 2021.509890][T28310] Bluetooth: hci3: command tx timeout [ 2021.652649][ T3686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2021.683388][ T3651] team0: Port device team_slave_0 added [ 2021.688495][ T3651] team0: Port device team_slave_1 added [ 2023.388809][ T3706] netlink: 'syz.2.8452': attribute type 1 has an invalid length. [ 2023.442471][ T9217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.480974][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2023.483938][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2023.508990][ T3651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2023.535363][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2023.561882][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2023.574538][ T3651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2023.600541][T28310] Bluetooth: hci3: command tx timeout [ 2023.622076][ T3707] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2023.639148][ T3707] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2023.771235][ T3708] gretap1: entered promiscuous mode [ 2023.781454][ T3708] bond1: (slave gretap1): making interface the new active one [ 2023.792432][ T3708] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2023.839984][ T3706] macvlan2: entered promiscuous mode [ 2023.842569][ T3706] macvlan2: entered allmulticast mode [ 2023.860279][ T3706] bond1: entered promiscuous mode [ 2023.872098][ T3706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2023.929078][ T3706] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2023.995783][ T3706] bond1: left promiscuous mode [ 2024.177571][ T9217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.296357][T20263] microsoft 0003:045E:07DA.0007: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2024.370251][T20263] usb 6-1: USB disconnect, device number 41 [ 2024.459043][ T3716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8454'. [ 2024.486521][ T3719] 9pnet_virtio: no channels available for device syz [ 2024.505515][ T3713] fido_id[3713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 2024.666003][ T3723] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8456'. [ 2028.031126][ T9217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.052523][ T3651] hsr_slave_0: entered promiscuous mode [ 2028.058194][ T3651] hsr_slave_1: entered promiscuous mode [ 2028.064147][ T3651] debugfs: 'hsr0' already exists in 'hsr' [ 2028.086978][ T3651] Cannot create hsr debugfs directory [ 2028.393362][ T9217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.443250][ T3737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8457'. [ 2029.361470][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8460'. [ 2029.532452][ T3745] random: crng reseeded on system resumption [ 2030.043659][ T9217] bridge_slave_1: left allmulticast mode [ 2030.046365][ T9217] bridge_slave_1: left promiscuous mode [ 2030.049289][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.075838][ T9217] bridge_slave_0: left allmulticast mode [ 2030.080130][ T9217] bridge_slave_0: left promiscuous mode [ 2030.085483][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.409211][T23500] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2031.590637][T23500] usb 7-1: Using ep0 maxpacket: 16 [ 2031.925616][T23500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.949930][T23500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.999858][T23500] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2032.042317][T23500] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2032.050966][T23500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.437816][T23500] usb 7-1: config 0 descriptor?? [ 2032.578146][ T9217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.623066][ T9217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2032.751429][ T9217] bond0 (unregistering): Released all slaves [ 2033.007145][ T3651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2033.030009][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.044966][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.062549][ T3760] netlink: 'syz.0.8464': attribute type 1 has an invalid length. [ 2033.070864][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.099764][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.104402][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.119796][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.147128][ T3651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2033.159976][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.162948][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.171371][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.174426][T23500] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 2033.236952][T23500] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input30 [ 2033.327564][ T3761] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2033.334431][ T3761] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2033.358682][T23500] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2033.628493][ T3651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2033.643319][ T3651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2033.659699][ T3762] gretap1: entered promiscuous mode [ 2033.667511][ T3762] bond1: (slave gretap1): making interface the new active one [ 2033.671391][ T3762] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2033.705806][ T3760] macvlan3: entered promiscuous mode [ 2033.708055][ T3760] macvlan3: entered allmulticast mode [ 2033.711328][ T3760] bond1: entered promiscuous mode [ 2033.733354][ T3760] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2033.781080][ T3760] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2033.816737][ T3760] bond1: left promiscuous mode [ 2034.032639][ T3768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2034.123410][ T29] lo speed is unknown, defaulting to 1000 [ 2034.368802][ T3783] 9pnet_virtio: no channels available for device syz [ 2034.554419][T23500] usb 7-1: reset high-speed USB device number 47 using dummy_hcd [ 2034.712484][ T9217] hsr_slave_0: left promiscuous mode [ 2034.755649][ T9217] hsr_slave_1: left promiscuous mode [ 2034.764040][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.777220][ T9217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2034.829373][ T3791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8468'. [ 2034.852365][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2034.871564][ T9217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2035.095235][ T9217] veth1_macvtap: left promiscuous mode [ 2035.111915][ T9217] veth0_macvtap: left promiscuous mode [ 2035.120005][ T9217] veth1_vlan: left promiscuous mode [ 2035.123872][ T9217] veth0_vlan: left promiscuous mode [ 2035.599795][ T3801] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2035.704853][ C2] hpet: Lost 1 RTC interrupts [ 2035.864434][ C2] hpet: Lost 1 RTC interrupts [ 2035.896818][ C2] hpet: Lost 1 RTC interrupts [ 2035.932070][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2035.938522][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2036.470271][T15677] usb 7-1: USB disconnect, device number 47 [ 2036.561341][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2036.567584][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2036.577910][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 2036.841854][ T3807] Cache volume key already in use (9p,syz,) [ 2038.190376][ T3822] siw: device registration error -23 [ 2038.789272][ T3827] kAFS: No cell specified [ 2039.302482][ T3834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8478'. [ 2040.382846][ T3842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8482'. [ 2040.507790][ T3840] F2FS-fs (md0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2040.512413][ T3840] F2FS-fs (md0): Can't find valid F2FS filesystem in 1th superblock [ 2040.592118][ T3840] F2FS-fs (md0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2040.605602][ T3840] F2FS-fs (md0): Can't find valid F2FS filesystem in 2th superblock [ 2042.242053][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.268241][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.284289][ C2] hpet: Lost 2 RTC interrupts [ 2042.319808][ T3858] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2042.356319][ C2] hpet: Lost 1 RTC interrupts [ 2042.448654][ C2] hpet: Lost 1 RTC interrupts [ 2042.504607][ C2] hpet: Lost 1 RTC interrupts [ 2042.531132][ C2] hpet: Lost 1 RTC interrupts [ 2042.560455][ C2] hpet: Lost 1 RTC interrupts [ 2042.620381][ C2] hpet: Lost 1 RTC interrupts [ 2042.720374][ C2] hpet: Lost 1 RTC interrupts [ 2042.933599][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2042.937969][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2042.950182][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2042.956403][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2042.961259][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 2044.650518][ T9217] team0 (unregistering): Port device team_slave_1 removed [ 2045.151399][ T9217] team0 (unregistering): Port device team_slave_0 removed [ 2048.878090][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.922074][ T3651] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.933304][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.937195][T11400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.985734][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.989023][T11400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.995031][ C2] hpet: Lost 1 RTC interrupts [ 2049.208408][ T3651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2049.244325][ C2] hpet: Lost 2 RTC interrupts [ 2049.283743][ T3865] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2049.324490][ C2] hpet: Lost 1 RTC interrupts [ 2049.389334][ C2] hpet: Lost 1 RTC interrupts [ 2049.472255][ C2] hpet: Lost 1 RTC interrupts [ 2049.655797][ C2] hpet: Lost 1 RTC interrupts [ 2049.704518][ C2] hpet: Lost 2 RTC interrupts [ 2049.776353][ C2] hpet: Lost 1 RTC interrupts [ 2049.844288][ C2] hpet: Lost 1 RTC interrupts [ 2049.917787][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2049.928569][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2049.940788][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2049.971063][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2049.974067][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 2050.951545][ T3651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2052.292761][ T3913] FAULT_INJECTION: forcing a failure. [ 2052.292761][ T3913] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.311281][ T3913] CPU: 2 UID: 0 PID: 3913 Comm: syz.0.8493 Not tainted syzkaller #0 PREEMPT(full) [ 2052.311328][ T3913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2052.311348][ T3913] Call Trace: [ 2052.311357][ T3913] [ 2052.311370][ T3913] dump_stack_lvl+0x16c/0x1f0 [ 2052.311411][ T3913] should_fail_ex+0x512/0x640 [ 2052.311446][ T3913] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2052.311479][ T3913] should_failslab+0xc2/0x120 [ 2052.311517][ T3913] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2052.311613][ T3913] ? ptlock_alloc+0x1f/0x70 [ 2052.311723][ T3913] ? ptlock_alloc+0x1f/0x70 [ 2052.311819][ T3913] ptlock_alloc+0x1f/0x70 [ 2052.311914][ T3913] pte_alloc_one+0x84/0x350 [ 2052.312016][ T3913] __pte_alloc+0x6d/0x380 [ 2052.312107][ T3913] ? __pfx___pte_alloc+0x10/0x10 [ 2052.312201][ T3913] ? do_raw_spin_lock+0x12c/0x2b0 [ 2052.312252][ T3913] do_pte_missing+0x282c/0x3ba0 [ 2052.312295][ T3913] ? do_raw_spin_unlock+0x172/0x230 [ 2052.312348][ T3913] ? _raw_spin_unlock+0x28/0x50 [ 2052.312376][ T3913] ? __pmd_alloc+0x64f/0x8b0 [ 2052.312416][ T3913] __handle_mm_fault+0x1556/0x2aa0 [ 2052.312462][ T3913] ? mt_find+0x3e2/0xa20 [ 2052.312499][ T3913] ? __pfx___handle_mm_fault+0x10/0x10 [ 2052.312538][ T3913] ? __pfx_mt_find+0x10/0x10 [ 2052.312693][ T3913] ? find_vma+0xbf/0x140 [ 2052.312712][ T3913] ? __pfx_find_vma+0x10/0x10 [ 2052.312731][ T3913] handle_mm_fault+0x589/0xd10 [ 2052.312760][ T3913] ? trace_raw_output_exceptions+0x141/0x150 [ 2052.312791][ T3913] do_user_addr_fault+0x7a6/0x1370 [ 2052.312808][ T3913] ? rcu_is_watching+0x12/0xc0 [ 2052.312833][ T3913] exc_page_fault+0x64/0xc0 [ 2052.312853][ T3913] asm_exc_page_fault+0x26/0x30 [ 2052.312872][ T3913] RIP: 0010:_copy_from_user+0x93/0xd0 [ 2052.312899][ T3913] Code: c4 13 fd 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 4b 7b fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 25 c0 [ 2052.312918][ T3913] RSP: 0018:ffffc9000d57fd80 EFLAGS: 00050246 [ 2052.312936][ T3913] RAX: 0000000000000001 RBX: 0000000080000180 RCX: 0000000000000010 [ 2052.312947][ T3913] RDX: fffff52001aaffc0 RSI: 0000000080000180 RDI: ffffc9000d57fdf0 [ 2052.312960][ T3913] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52001aaffbf [ 2052.312971][ T3913] R10: ffffc9000d57fdff R11: 0000000000000000 R12: 0000000000000000 [ 2052.312982][ T3913] R13: ffffc9000d57fdf0 R14: 0000000000000010 R15: 0000000000000000 [ 2052.313008][ T3913] move_addr_to_kernel+0x65/0x170 [ 2052.313041][ T3913] __sys_connect+0xb1/0x160 [ 2052.313059][ T3913] ? __pfx___sys_connect+0x10/0x10 [ 2052.313076][ T3913] ? handle_mm_fault+0x270/0xd10 [ 2052.313112][ T3913] ? __pfx_ksys_write+0x10/0x10 [ 2052.313147][ T3913] __ia32_sys_connect+0x71/0xb0 [ 2052.313165][ T3913] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2052.313190][ T3913] __do_fast_syscall_32+0x7c/0x300 [ 2052.313217][ T3913] do_fast_syscall_32+0x32/0x80 [ 2052.313239][ T3913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2052.313263][ T3913] RIP: 0023:0xf704d579 [ 2052.313281][ T3913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2052.313300][ T3913] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2052.313318][ T3913] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 2052.313330][ T3913] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.313340][ T3913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2052.313351][ T3913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2052.313363][ T3913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2052.313387][ T3913] [ 2052.723511][ T3651] veth0_vlan: entered promiscuous mode [ 2052.739212][ T3651] veth1_vlan: entered promiscuous mode [ 2052.779901][ T3651] veth0_macvtap: entered promiscuous mode [ 2052.795533][ T3651] veth1_macvtap: entered promiscuous mode [ 2052.796873][ T3917] 9pnet_virtio: no channels available for device syz [ 2052.914144][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2052.933154][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.995477][ T3921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8496'. [ 2053.007590][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.012615][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.068632][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.441301][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.919711][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.928649][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.152224][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.182263][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2055.080542][ T6020] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2055.433537][ T6020] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2055.443732][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2055.734589][ T6020] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2055.856094][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2055.933397][ T6020] usb 7-1: Product: syz [ 2055.935452][ T6020] usb 7-1: Manufacturer: syz [ 2055.937703][ T6020] usb 7-1: SerialNumber: syz [ 2056.138609][ T6020] usb 7-1: config 0 descriptor?? [ 2056.836414][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8497'. [ 2059.002363][ T3941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8499'. [ 2059.356772][ T6020] usb 7-1: can't set config #0, error -71 [ 2059.365622][ T3952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8501'. [ 2059.496013][ T6020] usb 7-1: USB disconnect, device number 48 [ 2059.852489][ T3961] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2060.095765][ T3967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8500'. [ 2060.135050][ T3968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8504'. [ 2060.334300][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2060.338621][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2060.353331][T28310] Bluetooth: hci3: link tx timeout [ 2060.471320][T28310] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2062.135669][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2062.549647][ T5297] Bluetooth: hci3: command 0x0406 tx timeout [ 2062.733206][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2062.752982][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2063.229825][ T3982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8507'. [ 2064.153343][ C2] vkms_vblank_simulate: vblank timer overrun [ 2064.253917][ C2] vkms_vblank_simulate: vblank timer overrun [ 2064.272196][ T3994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8511'. [ 2064.407966][ C2] vkms_vblank_simulate: vblank timer overrun [ 2064.458205][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8513'. [ 2064.735995][ C2] vkms_vblank_simulate: vblank timer overrun [ 2064.800001][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.031916][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.145420][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.273601][ T4020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8517'. [ 2065.308562][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.493779][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.520155][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.591929][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.679989][ C2] vkms_vblank_simulate: vblank timer overrun [ 2065.832062][ T4030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8518'. [ 2065.852720][ C2] vkms_vblank_simulate: vblank timer overrun [ 2066.039985][ C2] vkms_vblank_simulate: vblank timer overrun [ 2066.075931][ C2] vkms_vblank_simulate: vblank timer overrun [ 2066.169239][ C2] vkms_vblank_simulate: vblank timer overrun [ 2066.272430][ T40] audit: type=1326 audit(1759814633.475:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4033 comm="syz.0.8519" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0 [ 2066.529846][ T4040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2066.533451][ T4040] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2066.546194][ T4040] vhci_hcd vhci_hcd.0: Device attached [ 2066.893896][T12241] usb 37-1: new high-speed USB device number 22 using vhci_hcd [ 2067.263978][ C2] vkms_vblank_simulate: vblank timer overrun [ 2067.304195][ C2] vkms_vblank_simulate: vblank timer overrun [ 2067.336183][ C2] vkms_vblank_simulate: vblank timer overrun [ 2067.665640][ T4041] vhci_hcd: connection reset by peer [ 2067.682601][T11400] vhci_hcd: stop threads [ 2067.685701][T11400] vhci_hcd: release socket [ 2067.691504][T11400] vhci_hcd: disconnect device [ 2067.938947][ T4060] 9pnet_fd: Insufficient options for proto=fd [ 2067.944065][T17468] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2067.959930][ C2] vkms_vblank_simulate: vblank timer overrun [ 2068.087922][ C2] vkms_vblank_simulate: vblank timer overrun [ 2068.264174][T17468] usb 7-1: Using ep0 maxpacket: 16 [ 2068.278281][T17468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2068.362783][T17468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2068.374044][T17468] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2068.394547][T17468] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2068.467936][T17468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.552116][ C2] hpet: Lost 1 RTC interrupts [ 2068.555164][ C2] vkms_vblank_simulate: vblank timer overrun [ 2068.610926][ C2] vkms_vblank_simulate: vblank timer overrun [ 2068.612467][T17468] usb 7-1: config 0 descriptor?? [ 2068.613781][ C2] hpet: Lost 1 RTC interrupts [ 2068.637078][ C2] vkms_vblank_simulate: vblank timer overrun [ 2068.641976][ C2] hpet: Lost 1 RTC interrupts [ 2068.716842][ T4065] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2068.913977][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2068.919402][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2068.960636][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2069.053586][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2069.062874][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2069.085610][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.107021][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.123580][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.155552][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.161988][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.171378][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.276451][ T4078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8525'. [ 2069.467830][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8526'. [ 2069.925948][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.972937][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.976477][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2069.985489][T17468] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2070.082160][T17468] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0009/input/input31 [ 2070.192863][ T4094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8528'. [ 2070.226048][T17468] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2071.296101][ T6288] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 2071.777641][ T4109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8533'. [ 2071.911444][ T4111] /dev/sg0: Can't lookup blockdev [ 2071.979920][T12241] vhci_hcd: vhci_device speed not set [ 2073.305864][ T4126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8538'. [ 2074.993047][T17468] usb 7-1: USB disconnect, device number 49 [ 2075.381014][ T4136] FAULT_INJECTION: forcing a failure. [ 2075.381014][ T4136] name failslab, interval 1, probability 0, space 0, times 0 [ 2075.435643][ T4136] CPU: 2 UID: 0 PID: 4136 Comm: syz.2.8542 Not tainted syzkaller #0 PREEMPT(full) [ 2075.435672][ T4136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2075.435684][ T4136] Call Trace: [ 2075.435691][ T4136] [ 2075.435699][ T4136] dump_stack_lvl+0x16c/0x1f0 [ 2075.435761][ T4136] should_fail_ex+0x512/0x640 [ 2075.435783][ T4136] ? fs_reclaim_acquire+0xae/0x150 [ 2075.435809][ T4136] should_failslab+0xc2/0x120 [ 2075.435833][ T4136] __kmalloc_noprof+0xdd/0x880 [ 2075.435861][ T4136] ? tomoyo_encode2+0x100/0x3e0 [ 2075.435885][ T4136] ? tomoyo_encode2+0x100/0x3e0 [ 2075.435901][ T4136] tomoyo_encode2+0x100/0x3e0 [ 2075.435923][ T4136] tomoyo_encode+0x29/0x50 [ 2075.435940][ T4136] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2075.435961][ T4136] ? tomoyo_profile+0x47/0x60 [ 2075.435984][ T4136] tomoyo_path_number_perm+0x245/0x580 [ 2075.436008][ T4136] ? tomoyo_path_number_perm+0x237/0x580 [ 2075.436036][ T4136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2075.436093][ T4136] ? find_held_lock+0x2b/0x80 [ 2075.436110][ T4136] ? hook_file_ioctl_common+0x145/0x410 [ 2075.436141][ T4136] ? __fget_files+0x20e/0x3c0 [ 2075.436169][ T4136] security_file_ioctl_compat+0x9b/0x240 [ 2075.436196][ T4136] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2075.436223][ T4136] __do_fast_syscall_32+0x7c/0x300 [ 2075.436244][ T4136] do_fast_syscall_32+0x32/0x80 [ 2075.436262][ T4136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2075.436282][ T4136] RIP: 0023:0xf705d579 [ 2075.436296][ T4136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2075.436312][ T4136] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2075.436328][ T4136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 2075.436338][ T4136] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2075.436348][ T4136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2075.436356][ T4136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2075.436365][ T4136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2075.436387][ T4136] [ 2075.436406][ T4136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2076.980423][ T4147] lo speed is unknown, defaulting to 1000 [ 2077.167540][ T4152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8546'. [ 2077.389774][ T6019] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2077.402050][T23500] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2078.203868][T23500] usb 7-1: Using ep0 maxpacket: 8 [ 2078.208735][T23500] usb 7-1: config index 0 descriptor too short (expected 2304, got 36) [ 2078.212289][T23500] usb 7-1: config 255 has too many interfaces: 33, using maximum allowed: 32 [ 2078.216028][T23500] usb 7-1: config 255 has an invalid descriptor of length 179, skipping remainder of the config [ 2078.238313][T23500] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 33 [ 2078.245176][T23500] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2078.257423][T23500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.603296][ T4147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.617903][ T4147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.839597][ T40] audit: type=1326 audit(1759814646.025:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4146 comm="syz.2.8544" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 2078.860670][ T4161] FAULT_INJECTION: forcing a failure. [ 2078.860670][ T4161] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.869739][ T4161] CPU: 1 UID: 0 PID: 4161 Comm: syz.0.8543 Not tainted syzkaller #0 PREEMPT(full) [ 2078.869761][ T4161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2078.869769][ T4161] Call Trace: [ 2078.869776][ T4161] [ 2078.869783][ T4161] dump_stack_lvl+0x16c/0x1f0 [ 2078.869805][ T4161] should_fail_ex+0x512/0x640 [ 2078.869825][ T4161] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2078.869849][ T4161] should_failslab+0xc2/0x120 [ 2078.869869][ T4161] __kmalloc_cache_noprof+0x72/0x780 [ 2078.869892][ T4161] ? sctp_stream_init_ext+0x4e/0x1b0 [ 2078.869912][ T4161] ? sctp_stream_init_ext+0x4e/0x1b0 [ 2078.869927][ T4161] sctp_stream_init_ext+0x4e/0x1b0 [ 2078.869944][ T4161] sctp_sendmsg_to_asoc+0x16a5/0x1bd0 [ 2078.869963][ T4161] ? sctp_assoc_set_primary+0x177/0x300 [ 2078.869982][ T4161] ? sctp_assoc_add_peer+0x252/0x1550 [ 2078.870006][ T4161] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 2078.870022][ T4161] ? sctp_connect_new_asoc+0x41e/0x770 [ 2078.870043][ T4161] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2078.870064][ T4161] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 2078.870137][ T4161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2078.870165][ T4161] sctp_sendmsg+0xe99/0x1e00 [ 2078.870191][ T4161] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2078.870209][ T4161] ? __pfx___might_resched+0x10/0x10 [ 2078.870229][ T4161] ? aa_sk_perm+0x2f4/0xb10 [ 2078.870255][ T4161] ? __pfx_aa_sk_perm+0x10/0x10 [ 2078.870275][ T4161] ? __might_fault+0xe3/0x190 [ 2078.870295][ T4161] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2078.870316][ T4161] inet_sendmsg+0x119/0x140 [ 2078.870331][ T4161] __sys_sendto+0x43c/0x520 [ 2078.870347][ T4161] ? __pfx___sys_sendto+0x10/0x10 [ 2078.870379][ T4161] ? find_held_lock+0x2b/0x80 [ 2078.870394][ T4161] ? syscall_trace_enter+0x1cb/0x240 [ 2078.870419][ T4161] __ia32_sys_sendto+0xdd/0x1b0 [ 2078.870433][ T4161] ? syscall_trace_enter+0xee/0x240 [ 2078.870456][ T4161] __do_fast_syscall_32+0x7c/0x300 [ 2078.870478][ T4161] do_fast_syscall_32+0x32/0x80 [ 2078.870495][ T4161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.870513][ T4161] RIP: 0023:0xf704d579 [ 2078.870524][ T4161] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2078.870540][ T4161] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2078.870555][ T4161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 2078.870564][ T4161] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 2078.870573][ T4161] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2078.870582][ T4161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2078.870590][ T4161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2078.870610][ T4161] [ 2079.973399][ T6019] usb 6-1: device descriptor read/all, error -71 [ 2080.261710][T23500] usb 7-1: string descriptor 0 read error: -71 [ 2080.360284][T23500] usb 7-1: USB disconnect, device number 50 [ 2080.422326][ T4177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8555'. [ 2081.899009][ T4194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8567'. [ 2082.194394][ T6020] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2082.796162][ T6020] usb 9-1: Using ep0 maxpacket: 16 [ 2082.839067][ T6020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.906656][ T6020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.916848][ T6020] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2082.993560][ T6020] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2083.048501][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.082984][ T6020] usb 9-1: config 0 descriptor?? [ 2083.550196][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.578530][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.593828][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.636528][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.640464][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.643320][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.654469][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.677538][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.684020][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.692946][ T6020] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 2083.720812][ T6020] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.000A/input/input32 [ 2083.962463][ T4216] lo speed is unknown, defaulting to 1000 [ 2084.761471][ T6020] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2085.689802][ T6020] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 2086.188371][ C2] hpet: Lost 1 RTC interrupts [ 2086.227325][ T4224] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2086.252442][ C2] hpet: Lost 1 RTC interrupts [ 2086.503992][ C2] hpet: Lost 1 RTC interrupts [ 2086.595875][ C2] hpet: Lost 1 RTC interrupts [ 2086.661122][T12241] usb 9-1: USB disconnect, device number 2 [ 2086.809913][ C2] hpet: Lost 1 RTC interrupts [ 2086.863953][ C2] hpet: Lost 1 RTC interrupts [ 2086.895298][ C2] hpet: Lost 1 RTC interrupts [ 2086.929930][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2086.935100][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2086.989990][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2086.993795][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2087.036305][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2089.334210][T28310] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 2090.529873][ T6019] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2090.741735][ T4259] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2090.815017][ T6019] usb 6-1: Using ep0 maxpacket: 16 [ 2090.819269][ T6019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.849197][ C2] hpet: Lost 1 RTC interrupts [ 2090.889065][ T6019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2090.894166][ T6019] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2090.927062][T20263] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2090.931806][T20263] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2091.003408][ T6019] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2091.013287][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.080235][T23500] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2091.125694][T20263] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2091.197341][ T6019] usb 6-1: config 0 descriptor?? [ 2091.313281][T23500] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2091.324549][T23500] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2091.342001][T20263] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2091.347813][T20263] rtc rtc0: __rtc_set_alarm: err=-22 [ 2091.425980][ T4263] siw: device registration error -23 [ 2091.641246][T23500] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2091.644899][T23500] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2091.648973][T23500] usb 9-1: Product: syz [ 2091.699163][T23500] usb 9-1: Manufacturer: syz [ 2091.703727][T23500] usb 9-1: SerialNumber: syz [ 2091.757605][T23500] usb 9-1: config 0 descriptor?? [ 2091.817220][T23500] usb 9-1: selecting invalid altsetting 0 [ 2091.840000][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.843635][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.864787][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.909253][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.923586][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.929217][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.966782][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2091.992223][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2092.011699][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2092.017613][ T6019] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 2092.050298][ T6019] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input33 [ 2092.178450][ T6019] microsoft 0003:045E:07DA.000B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2093.267936][T30585] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 2093.360478][T28310] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2093.364457][T28310] Bluetooth: hci3: Injecting HCI hardware error event [ 2093.389821][ T5297] Bluetooth: hci3: hardware error 0x00 [ 2093.557780][ T4260] snd-usb-audio 9-1:0.0: Runtime PM usage count underflow! [ 2093.574036][T23500] usb 9-1: USB disconnect, device number 3 [ 2094.193680][T20263] IPVS: starting estimator thread 0... [ 2094.313017][ T4295] IPVS: using max 30 ests per chain, 72000 per kthread [ 2094.610511][ T6019] usb 6-1: USB disconnect, device number 44 [ 2095.124121][ T4311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8587'. [ 2096.309779][ T5297] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2097.977249][ T4337] FAULT_INJECTION: forcing a failure. [ 2097.977249][ T4337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2098.037465][ T4337] CPU: 3 UID: 0 PID: 4337 Comm: syz.2.8595 Not tainted syzkaller #0 PREEMPT(full) [ 2098.037497][ T4337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2098.037511][ T4337] Call Trace: [ 2098.037519][ T4337] [ 2098.037528][ T4337] dump_stack_lvl+0x16c/0x1f0 [ 2098.037559][ T4337] should_fail_ex+0x512/0x640 [ 2098.037589][ T4337] should_fail_alloc_page+0xe7/0x130 [ 2098.037620][ T4337] prepare_alloc_pages+0x3c2/0x610 [ 2098.037648][ T4337] ? stack_depot_save_flags+0x29/0x9c0 [ 2098.037677][ T4337] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 2098.037701][ T4337] ? kasan_save_stack+0x42/0x60 [ 2098.037723][ T4337] ? kasan_save_track+0x14/0x30 [ 2098.037744][ T4337] ? __kasan_kmalloc+0xaa/0xb0 [ 2098.037765][ T4337] ? __kmalloc_noprof+0x32f/0x880 [ 2098.037794][ T4337] ? bio_kmalloc+0x41/0x70 [ 2098.037814][ T4337] ? blk_rq_map_kern+0x387/0x6d0 [ 2098.037844][ T4337] ? scsi_execute_cmd+0xbd9/0xef0 [ 2098.037869][ T4337] ? sr_do_ioctl+0x219/0x840 [ 2098.037899][ T4337] ? sr_packet+0xee/0x1c0 [ 2098.037919][ T4337] ? dvd_do_auth+0x83b/0xe70 [ 2098.037950][ T4337] ? mmc_ioctl_dvd_auth+0x153/0x230 [ 2098.037968][ T4337] ? cdrom_ioctl+0x2cea/0x3190 [ 2098.037987][ T4337] ? sr_block_ioctl+0x1b0/0x250 [ 2098.038008][ T4337] ? blkdev_compat_ptr_ioctl+0x9c/0xe0 [ 2098.038039][ T4337] ? compat_blkdev_ioctl+0x2eb/0x7a0 [ 2098.038056][ T4337] ? __ia32_compat_sys_ioctl+0x23f/0x370 [ 2098.038084][ T4337] ? __do_fast_syscall_32+0x7c/0x300 [ 2098.038108][ T4337] ? do_fast_syscall_32+0x32/0x80 [ 2098.038130][ T4337] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2098.038160][ T4337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2098.038201][ T4337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2098.038239][ T4337] ? policy_nodemask+0xea/0x4e0 [ 2098.038269][ T4337] alloc_pages_mpol+0x1fb/0x550 [ 2098.038297][ T4337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2098.038321][ T4337] ? trace_kmalloc+0x2b/0xd0 [ 2098.038348][ T4337] ? bio_kmalloc+0x41/0x70 [ 2098.038373][ T4337] alloc_pages_noprof+0x131/0x390 [ 2098.038400][ T4337] blk_rq_map_kern+0x403/0x6d0 [ 2098.038435][ T4337] scsi_execute_cmd+0xbd9/0xef0 [ 2098.038469][ T4337] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2098.038496][ T4337] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 2098.038522][ T4337] ? kernel_text_address+0x8d/0x100 [ 2098.038554][ T4337] ? widen_string+0xdc/0x2d0 [ 2098.038582][ T4337] ? __kernel_text_address+0xd/0x40 [ 2098.038601][ T4337] ? unwind_get_return_address+0x59/0xa0 [ 2098.038627][ T4337] sr_do_ioctl+0x219/0x840 [ 2098.038659][ T4337] ? __pfx_sr_do_ioctl+0x10/0x10 [ 2098.038680][ T4337] ? stack_trace_save+0x8e/0xc0 [ 2098.038722][ T4337] sr_packet+0xee/0x1c0 [ 2098.038746][ T4337] dvd_do_auth+0x83b/0xe70 [ 2098.038778][ T4337] ? __pfx_dvd_do_auth+0x10/0x10 [ 2098.038820][ T4337] ? __might_fault+0xe3/0x190 [ 2098.038839][ T4337] ? __might_fault+0x13b/0x190 [ 2098.038872][ T4337] mmc_ioctl_dvd_auth+0x153/0x230 [ 2098.038900][ T4337] ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10 [ 2098.038932][ T4337] cdrom_ioctl+0x2cea/0x3190 [ 2098.038955][ T4337] ? __pfx_cdrom_ioctl+0x10/0x10 [ 2098.038977][ T4337] ? rpm_resume+0x80c/0x1310 [ 2098.038995][ T4337] ? rcu_is_watching+0x12/0xc0 [ 2098.039015][ T4337] ? rpm_resume+0x80c/0x1310 [ 2098.039032][ T4337] ? trace_rpm_return_int+0x196/0x220 [ 2098.039052][ T4337] ? rpm_resume+0x811/0x1310 [ 2098.039081][ T4337] ? __pfx_rpm_resume+0x10/0x10 [ 2098.039099][ T4337] ? do_raw_spin_lock+0x12c/0x2b0 [ 2098.039132][ T4337] ? find_held_lock+0x2b/0x80 [ 2098.039160][ T4337] ? lockdep_hardirqs_on+0x7c/0x110 [ 2098.039182][ T4337] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2098.039202][ T4337] ? __pm_runtime_resume+0xc3/0x170 [ 2098.039230][ T4337] sr_block_ioctl+0x1b0/0x250 [ 2098.039255][ T4337] ? __pfx_sr_block_ioctl+0x10/0x10 [ 2098.039277][ T4337] blkdev_compat_ptr_ioctl+0x9c/0xe0 [ 2098.039312][ T4337] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 2098.039341][ T4337] compat_blkdev_ioctl+0x2eb/0x7a0 [ 2098.039362][ T4337] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2098.039387][ T4337] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2098.039406][ T4337] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2098.039439][ T4337] __do_fast_syscall_32+0x7c/0x300 [ 2098.039493][ T4337] do_fast_syscall_32+0x32/0x80 [ 2098.039545][ T4337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2098.039568][ T4337] RIP: 0023:0xf705d579 [ 2098.039587][ T4337] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2098.039606][ T4337] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2098.039629][ T4337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005392 [ 2098.039641][ T4337] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2098.039653][ T4337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2098.039663][ T4337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2098.039672][ T4337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2098.039694][ T4337] [ 2099.129685][ C2] hpet: Lost 1 RTC interrupts [ 2099.170266][ T4345] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2099.240113][ C2] hpet: Lost 1 RTC interrupts [ 2099.560158][ C2] hpet: Lost 1 RTC interrupts [ 2099.751765][ C2] hpet: Lost 1 RTC interrupts [ 2099.817054][ T4354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8600'. [ 2099.940656][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2099.946756][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2099.996277][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2100.571321][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2100.843885][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2101.480747][ T4373] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2101.677547][ T4376] siw: device registration error -23 [ 2101.835932][ C2] hpet: Lost 1 RTC interrupts [ 2101.929671][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2101.933619][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2101.937873][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2101.949118][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2101.976234][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2102.409380][ T4389] kAFS: No cell specified [ 2103.203254][ T4402] 9pnet_virtio: no channels available for device syz [ 2103.306112][ T4404] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2103.399923][ C2] hpet: Lost 1 RTC interrupts [ 2103.429544][ C2] hpet: Lost 1 RTC interrupts [ 2103.608346][ C2] hpet: Lost 1 RTC interrupts [ 2103.680570][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.708724][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.727990][ C2] hpet: Lost 2 RTC interrupts [ 2103.767977][ C2] hpet: Lost 1 RTC interrupts [ 2103.956907][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2103.958123][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2103.959161][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2103.988825][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2103.988898][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2104.124198][ T4407] siw: device registration error -23 [ 2105.174025][ T4418] 9pnet_fd: Insufficient options for proto=fd [ 2105.411127][ T4420] 9pnet_virtio: no channels available for device syz [ 2105.828016][ T4422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8621'. [ 2110.286455][ T4446] syz.1.8627 (4446): /proc/4443/oom_adj is deprecated, please use /proc/4443/oom_score_adj instead. [ 2111.263188][ T4450] 9pnet_virtio: no channels available for device syz [ 2111.586130][ T4452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8630'. [ 2112.676142][ T4461] 9pnet_fd: Insufficient options for proto=fd [ 2113.800562][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8635'. [ 2120.552553][ T4520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8647'. [ 2122.869809][ T5297] Bluetooth: hci2: command 0x0406 tx timeout [ 2125.887615][ T4542] kAFS: No cell specified [ 2126.598591][ T4555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8657'. [ 2126.852484][ T4560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8658'. [ 2128.709681][ T2884] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2128.871629][ T2884] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2128.878266][ T2884] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2128.892937][ T2884] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2128.904112][ T2884] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2128.930906][ T2884] usb 9-1: Product: syz [ 2128.937270][ T2884] usb 9-1: Manufacturer: syz [ 2128.944554][ T2884] usb 9-1: SerialNumber: syz [ 2129.000471][ T2884] usb 9-1: config 0 descriptor?? [ 2129.156033][ T2884] usb 9-1: selecting invalid altsetting 0 [ 2129.554526][ T4583] kAFS: No cell specified [ 2129.858956][ T6019] usb 9-1: USB disconnect, device number 4 [ 2130.397169][ T5297] Bluetooth: hci2: command 0x0406 tx timeout [ 2130.647485][ T4600] FAULT_INJECTION: forcing a failure. [ 2130.647485][ T4600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.664683][ T4600] CPU: 2 UID: 0 PID: 4600 Comm: syz.0.8667 Not tainted syzkaller #0 PREEMPT(full) [ 2130.664714][ T4600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2130.664725][ T4600] Call Trace: [ 2130.664734][ T4600] [ 2130.664743][ T4600] dump_stack_lvl+0x16c/0x1f0 [ 2130.664770][ T4600] should_fail_ex+0x512/0x640 [ 2130.664793][ T4600] _copy_from_iter+0x29f/0x1720 [ 2130.664819][ T4600] ? __build_skb_around+0x278/0x3b0 [ 2130.664847][ T4600] ? __pfx__copy_from_iter+0x10/0x10 [ 2130.664872][ T4600] ? __pfx___alloc_skb+0x10/0x10 [ 2130.664891][ T4600] ? aa_af_perm+0x190/0x240 [ 2130.664925][ T4600] pfkey_sendmsg+0x1d1/0x850 [ 2130.664952][ T4600] ____sys_sendmsg+0xa98/0xc70 [ 2130.664991][ T4600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2130.665014][ T4600] ? get_compat_msghdr+0x11a/0x170 [ 2130.665041][ T4600] ? __pfx__kstrtoull+0x10/0x10 [ 2130.665072][ T4600] ___sys_sendmsg+0x134/0x1d0 [ 2130.665096][ T4600] ? __pfx____sys_sendmsg+0x10/0x10 [ 2130.665135][ T4600] __sys_sendmmsg+0x2f9/0x420 [ 2130.665153][ T4600] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2130.665175][ T4600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2130.665200][ T4600] ? fput+0x9b/0xd0 [ 2130.665220][ T4600] ? ksys_write+0x1ac/0x250 [ 2130.665235][ T4600] ? __pfx_ksys_write+0x10/0x10 [ 2130.665252][ T4600] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2130.665269][ T4600] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2130.665287][ T4600] __do_fast_syscall_32+0x7c/0x300 [ 2130.665306][ T4600] do_fast_syscall_32+0x32/0x80 [ 2130.665323][ T4600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.665343][ T4600] RIP: 0023:0xf704d579 [ 2130.665356][ T4600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2130.665371][ T4600] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2130.665387][ T4600] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 2130.665397][ T4600] RDX: 000000000000007b RSI: 0000000000004004 RDI: 0000000000000000 [ 2130.665406][ T4600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.665414][ T4600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2130.665423][ T4600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.665442][ T4600] [ 2131.473243][ T4609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8669'. [ 2131.516900][ T4600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.141336][ T4620] FAULT_INJECTION: forcing a failure. [ 2133.141336][ T4620] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.173852][ T4620] CPU: 2 UID: 0 PID: 4620 Comm: syz.1.8670 Not tainted syzkaller #0 PREEMPT(full) [ 2133.173880][ T4620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2133.173892][ T4620] Call Trace: [ 2133.173900][ T4620] [ 2133.173908][ T4620] dump_stack_lvl+0x16c/0x1f0 [ 2133.173934][ T4620] should_fail_ex+0x512/0x640 [ 2133.173956][ T4620] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 2133.173978][ T4620] should_failslab+0xc2/0x120 [ 2133.174003][ T4620] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 2133.174021][ T4620] ? __d_lookup+0x25c/0x4a0 [ 2133.174045][ T4620] ? __d_alloc+0x32/0xae0 [ 2133.174070][ T4620] ? __d_alloc+0x32/0xae0 [ 2133.174088][ T4620] __d_alloc+0x32/0xae0 [ 2133.174109][ T4620] d_alloc+0x4a/0x1e0 [ 2133.174130][ T4620] lookup_one_qstr_excl+0x175/0x250 [ 2133.174155][ T4620] ? mnt_want_write+0x161/0x450 [ 2133.174182][ T4620] filename_create+0x1e7/0x4a0 [ 2133.174201][ T4620] ? __pfx_filename_create+0x10/0x10 [ 2133.174216][ T4620] ? find_held_lock+0x2b/0x80 [ 2133.174234][ T4620] ? __might_fault+0xe3/0x190 [ 2133.174251][ T4620] ? __might_fault+0xe3/0x190 [ 2133.174275][ T4620] do_symlinkat+0xbe/0x310 [ 2133.174297][ T4620] ? __pfx_do_symlinkat+0x10/0x10 [ 2133.174318][ T4620] ? getname_flags.part.0+0x1c5/0x550 [ 2133.174348][ T4620] __ia32_sys_symlink+0x74/0x90 [ 2133.174367][ T4620] __do_fast_syscall_32+0x7c/0x300 [ 2133.174389][ T4620] do_fast_syscall_32+0x32/0x80 [ 2133.174410][ T4620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2133.174431][ T4620] RIP: 0023:0xf70ed579 [ 2133.174446][ T4620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2133.174463][ T4620] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 2133.174479][ T4620] RAX: ffffffffffffffda RBX: 0000000080000840 RCX: 0000000080000080 [ 2133.174490][ T4620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2133.174500][ T4620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2133.174510][ T4620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2133.174520][ T4620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2133.174545][ T4620] [ 2133.564759][ T4600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.904664][ T4600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.032731][ T4625] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2134.345790][ T4621] lo speed is unknown, defaulting to 1000 [ 2135.297796][ T4600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.456883][ T4638] kAFS: No cell specified [ 2135.677025][ T6020] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2136.037714][ T6020] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2136.051525][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2138.303872][ T6020] usb 7-1: string descriptor 0 read error: -71 [ 2138.307858][ T6020] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2138.317162][ T4600] Failed to register nexthop notifier [ 2138.369875][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2139.236193][ T6020] usb 7-1: config 0 descriptor?? [ 2139.250999][ T6020] usb 7-1: can't set config #0, error -71 [ 2139.256041][ T6020] usb 7-1: USB disconnect, device number 51 [ 2139.421510][ T4660] siw: device registration error -23 [ 2139.841750][ T4669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8682'. [ 2139.848860][ T4669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8682'. [ 2141.069128][ T4675] kAFS: No cell specified [ 2141.729272][ T4679] Bluetooth: hci0: Frame reassembly failed (-84) [ 2141.790475][T30507] Bluetooth: hci0: Frame reassembly failed (-84) [ 2142.380288][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.675327][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.749687][T28310] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2143.777632][ C1] vkms_vblank_simulate: vblank timer overrun [ 2144.339995][ T4683] siw: device registration error -23 [ 2144.832272][ C1] vkms_vblank_simulate: vblank timer overrun [ 2144.879087][ C1] vkms_vblank_simulate: vblank timer overrun [ 2144.947773][ C1] vkms_vblank_simulate: vblank timer overrun [ 2145.067459][ C1] vkms_vblank_simulate: vblank timer overrun [ 2145.692662][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2145.720750][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2145.743303][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2145.761232][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2145.768067][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2145.800025][T12241] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2145.861062][ T4691] lo speed is unknown, defaulting to 1000 [ 2146.056094][T12241] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2146.062536][T12241] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2146.103645][T12241] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2146.135080][T12241] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2146.173134][T12241] usb 6-1: Product: syz [ 2146.185294][T12241] usb 6-1: Manufacturer: syz [ 2146.188490][T12241] usb 6-1: SerialNumber: syz [ 2146.219012][T12241] usb 6-1: config 0 descriptor?? [ 2146.237156][T12241] usb 6-1: selecting invalid altsetting 0 [ 2146.563340][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.623177][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.700072][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.047391][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.358812][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.424693][ T4691] chnl_net:caif_netlink_parms(): no params data found [ 2147.866828][T28310] Bluetooth: hci0: command tx timeout [ 2147.882281][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.108260][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.349574][ T6288] usb 6-1: USB disconnect, device number 45 [ 2148.588943][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.603665][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.606666][ T4691] bridge_slave_0: entered allmulticast mode [ 2148.612769][ T4691] bridge_slave_0: entered promiscuous mode [ 2148.633388][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.645302][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.650777][ T4691] bridge_slave_1: entered allmulticast mode [ 2148.671777][ T4691] bridge_slave_1: entered promiscuous mode [ 2149.007322][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2149.157206][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2149.608919][ T4691] team0: Port device team_slave_0 added [ 2149.660214][ T4691] team0: Port device team_slave_1 added [ 2149.895349][ T46] bridge_slave_1: left allmulticast mode [ 2149.897623][ T46] bridge_slave_1: left promiscuous mode [ 2149.900543][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.911546][T28310] Bluetooth: hci0: command tx timeout [ 2149.981790][ T46] bridge_slave_0: left allmulticast mode [ 2149.984692][ T46] bridge_slave_0: left promiscuous mode [ 2149.987667][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.006079][T28310] Bluetooth: hci0: command tx timeout [ 2152.015658][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2152.025797][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2152.064394][ T46] bond0 (unregistering): Released all slaves [ 2152.121139][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2152.125629][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2152.144458][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.195514][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.198489][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2152.225288][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2152.809071][ T4723] kAFS: No cell specified [ 2152.869036][ T4691] hsr_slave_0: entered promiscuous mode [ 2152.873750][ T4691] hsr_slave_1: entered promiscuous mode [ 2152.913381][ T4691] debugfs: 'hsr0' already exists in 'hsr' [ 2152.931753][ T4691] Cannot create hsr debugfs directory [ 2154.083362][T28310] Bluetooth: hci0: command tx timeout [ 2154.555415][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 2154.555433][ C2] hpet: Lost 1 RTC interrupts [ 2154.587817][ C2] hpet: Lost 1 RTC interrupts [ 2154.659399][ C2] hpet: Lost 1 RTC interrupts [ 2154.665423][ T4743] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2154.723502][ C2] hpet: Lost 1 RTC interrupts [ 2154.768380][ C2] hpet: Lost 1 RTC interrupts [ 2154.932936][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2155.092753][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2155.097773][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2155.103168][ T6019] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2155.106783][ T6019] rtc rtc0: __rtc_set_alarm: err=-22 [ 2155.269251][ T46] hsr_slave_0: left promiscuous mode [ 2155.342792][ T46] hsr_slave_1: left promiscuous mode [ 2155.370501][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2155.383946][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2155.471203][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2155.474121][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2155.631323][ T46] veth1_macvtap: left promiscuous mode [ 2155.634161][ T46] veth0_macvtap: left promiscuous mode [ 2155.637021][ T46] veth1_vlan: left promiscuous mode [ 2155.640498][ T46] veth0_vlan: left promiscuous mode [ 2160.422128][ T46] team0 (unregistering): Port device team_slave_1 removed [ 2160.763480][ T46] team0 (unregistering): Port device team_slave_0 removed [ 2164.957937][ T4767] kAFS: No cell specified [ 2165.019608][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2165.133066][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.138897][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.140279][ T4771] netlink: 'syz.1.8703': attribute type 10 has an invalid length. [ 2165.160297][ T4770] FAULT_INJECTION: forcing a failure. [ 2165.160297][ T4770] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.160384][ T4770] CPU: 1 UID: 0 PID: 4770 Comm: syz.2.8702 Not tainted syzkaller #0 PREEMPT(full) [ 2165.160410][ T4770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2165.160424][ T4770] Call Trace: [ 2165.160432][ T4770] [ 2165.160441][ T4770] dump_stack_lvl+0x16c/0x1f0 [ 2165.160471][ T4770] should_fail_ex+0x512/0x640 [ 2165.160497][ T4770] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2165.160527][ T4770] should_failslab+0xc2/0x120 [ 2165.160566][ T4770] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2165.160588][ T4770] ? skb_clone+0x190/0x3f0 [ 2165.160616][ T4770] ? skb_clone+0x190/0x3f0 [ 2165.160637][ T4770] skb_clone+0x190/0x3f0 [ 2165.160661][ T4770] netlink_deliver_tap+0xabd/0xd30 [ 2165.160692][ T4770] netlink_unicast+0x64c/0x870 [ 2165.160721][ T4770] ? __pfx_netlink_unicast+0x10/0x10 [ 2165.160744][ T4770] ? __asan_memset+0x23/0x50 [ 2165.160763][ T4770] ? __build_skb_around+0x278/0x3b0 [ 2165.160794][ T4770] ? is_vmalloc_addr+0x86/0xa0 [ 2165.160816][ T4770] netlink_sendmsg+0x8c8/0xdd0 [ 2165.160843][ T4770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2165.160871][ T4770] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2165.160903][ T4770] sock_sendmsg+0x3cc/0x470 [ 2165.160931][ T4770] ? __pfx_sock_sendmsg+0x10/0x10 [ 2165.160955][ T4770] ? is_bpf_text_address+0x8a/0x1a0 [ 2165.161003][ T4770] splice_to_socket+0xaf4/0x1110 [ 2165.161038][ T4770] ? __pfx_splice_to_socket+0x10/0x10 [ 2165.161093][ T4770] ? common_file_perm+0x1a9/0x340 [ 2165.161124][ T4770] ? bpf_lsm_file_permission+0x9/0x10 [ 2165.161147][ T4770] ? security_file_permission+0x71/0x210 [ 2165.161169][ T4770] ? __pfx_splice_to_socket+0x10/0x10 [ 2165.161191][ T4770] do_splice+0x1475/0x1fc0 [ 2165.161212][ T4770] ? __lock_acquire+0x62e/0x1ce0 [ 2165.161249][ T4770] ? __pfx_do_splice+0x10/0x10 [ 2165.161266][ T4770] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 2165.161299][ T4770] ? find_held_lock+0x2b/0x80 [ 2165.161324][ T4770] __do_splice+0x32a/0x360 [ 2165.161345][ T4770] ? __pfx___do_splice+0x10/0x10 [ 2165.161374][ T4770] __ia32_sys_splice+0x189/0x250 [ 2165.161398][ T4770] __do_fast_syscall_32+0x7c/0x300 [ 2165.161425][ T4770] do_fast_syscall_32+0x32/0x80 [ 2165.161448][ T4770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2165.161474][ T4770] RIP: 0023:0xf705d579 [ 2165.161491][ T4770] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2165.161511][ T4770] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 2165.161532][ T4770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2165.161552][ T4770] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 2165.161564][ T4770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2165.161576][ T4770] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2165.161588][ T4770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2165.161616][ T4770] [ 2165.161666][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2165.182717][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8703'. [ 2165.190477][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.437158][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.475278][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.477795][ T4771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2165.480383][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.496616][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2165.512318][ T4771] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2165.551546][ T4777] bridge_slave_1: left allmulticast mode [ 2165.561223][ T4777] bridge_slave_1: left promiscuous mode [ 2165.574793][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.597922][ T4777] bridge_slave_0: left allmulticast mode [ 2165.601063][ T4777] bridge_slave_0: left promiscuous mode [ 2165.604578][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.639430][ T4777] bond0: (slave bridge0): Releasing backup interface [ 2165.776737][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8705'. [ 2165.833810][ T4785] Bluetooth: MGMT ver 1.23 [ 2165.945579][ T4691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2166.043720][ T4691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2166.920454][ T4804] siw: device registration error -23 [ 2167.321794][ T4691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2167.772726][ T4691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2168.132622][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2168.258689][ T4691] 8021q: adding VLAN 0 to HW filter on device team0 [ 2168.429612][ T6019] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2168.463623][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 2168.492656][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2168.570214][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.587498][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2168.588991][ T4827] bad cache= option: noneno [ 2168.588991][ T4827] blocksize : 16 [ 2168.588991][ T4827] min keysize : 0 [ 2168.588991][ T4827] max keysize : 64 [ 2168.588991][ T4827] ivsize : 16 [ 2168.588991][ T4827] chunksize : 16 [ 2168.588991][ T4827] walksize : 16 [ 2168.588991][ T4827] statesize : 0 [ 2168.588991][ T4827] [ 2168.588991][ T4827] name : ecb(aes) [ 2168.588991][ T4827] driver : ecb(aes-generic) [ 2168.588991][ T4827] module : kernel [ 2168.588991][ T4827] priority : 100 [ 2168.588991][ T4827] refcnt : 1 [ 2168.588991][ T4827] selftest : passed [ 2168.588991][ T4827] internal : no [ 2168.588991][ T4827] type : lskcipher [ 2168.588991][ T4827] blocksize : 16 [ 2168.588991][ T4827] min keysize : 16 [ 2168.588991][ T4827] max keysize : 32 [ 2168.588991][ T4827] ivsize : 0 [ 2168.588991][ T4827] chunksize : 16 [ 2168.588991][ T4827] statesize : 0 [ 2168.588991][ T4827] [ 2168.588991][ T4827] name : rfc4106(gcm(aes)) [ 2168.588991][ T4827] driver : rfc4106(gcm_base(ctr(aes-aesni) [ 2168.588991][ T4827] [ 2168.709911][ T4827] CIFS: VFS: bad cache= option: noneno [ 2168.709911][ T4827] blocksize : 16 [ 2168.709911][ T4827] min keysize : 0 [ 2168.709911][ T4827] max keysize : 64 [ 2168.709911][ T4827] ivsize : 16 [ 2168.709911][ T4827] chunksize : 16 [ 2168.709911][ T4827] walksize : 16 [ 2168.709911][ T4827] statesize : 0 [ 2168.709911][ T4827] [ 2168.709911][ T4827] name : ecb(aes) [ 2168.709911][ T4827] driver : ecb(aes-generic) [ 2168.709911][ T4827] module : kernel [ 2168.709911][ T4827] priority : 100 [ 2168.709911][ T4827] refcnt : 1 [ 2168.709911][ T4827] selftest : passed [ 2168.709911][ T4827] internal : no [ 2168.709911][ T4827] type : lskcipher [ 2168.709911][ T4827] blocksize : 16 [ 2168.709911][ T4827] min keysize : 16 [ 2168.709911][ T4827] max keysize : 32 [ 2168.709911][ T4827] ivsize : 0 [ 2168.709911][ T4827] chunksize : 16 [ 2168.709911][ T4827] statesize : 0 [ 2168.709911][ T4827] [ 2168.709911][ T4827] name : rfc4106(gcm(aes)) [ 2168.709911][ T4827] driver : rfc4106(gcm_base(ctr(aes-aesni) [ 2168.895367][ T6019] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2168.900064][ T6019] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2168.996792][ T6019] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2169.002908][ T6019] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2169.076871][ T6019] usb 6-1: Product: syz [ 2169.078595][ T6019] usb 6-1: Manufacturer: syz [ 2169.081869][ T6019] usb 6-1: SerialNumber: syz [ 2169.120061][ T6019] usb 6-1: config 0 descriptor?? [ 2169.138372][ T6019] usb 6-1: selecting invalid altsetting 0 [ 2169.775559][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.028217][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8715'. [ 2170.425061][ T4691] veth0_vlan: entered promiscuous mode [ 2170.703343][ T4691] veth1_vlan: entered promiscuous mode [ 2170.861239][T30585] usb 6-1: USB disconnect, device number 46 [ 2170.956197][ T4691] veth0_macvtap: entered promiscuous mode [ 2170.994686][ T4691] veth1_macvtap: entered promiscuous mode [ 2171.021597][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2171.032466][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.080763][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.129335][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.129389][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.129419][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.318244][ T4864] sp0: Synchronizing with TNC [ 2171.532165][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.549929][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.623179][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.646156][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.951351][ C2] hpet: Lost 1 RTC interrupts [ 2171.957156][ T4863] [U] è` [ 2171.976050][ T4882] netlink: 'syz.5.8686': attribute type 1 has an invalid length. [ 2172.015569][ T4883] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2172.104659][ C2] hpet: Lost 1 RTC interrupts [ 2172.451227][ C2] hpet: Lost 1 RTC interrupts [ 2172.560747][ C2] hpet: Lost 1 RTC interrupts [ 2172.709788][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8723'. [ 2172.794870][ C2] hpet: Lost 2 RTC interrupts [ 2172.933827][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2172.937885][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2172.941954][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2172.979981][ T2884] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2172.995234][ T2884] rtc rtc0: __rtc_set_alarm: err=-22 [ 2173.311784][ T53] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2173.528382][ T53] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2173.565200][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2173.576837][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2173.581342][ T53] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2173.584623][ T53] usb 7-1: Product: syz [ 2173.586123][ T53] usb 7-1: Manufacturer: syz [ 2173.588293][ T53] usb 7-1: SerialNumber: syz [ 2173.593863][ T53] usb 7-1: config 0 descriptor?? [ 2173.621752][ T53] usb 7-1: selecting invalid altsetting 0 [ 2175.495086][ T4927] siw: device registration error -23 [ 2175.535440][ T4925] sp0: Synchronizing with TNC [ 2175.943998][ T2884] usb 7-1: USB disconnect, device number 52 [ 2176.027956][ T4930] overlayfs: missing 'lowerdir' [ 2176.156153][ T4924] [U] è` [ 2176.924532][ T4954] 9pnet_virtio: no channels available for device syz [ 2178.341510][ T4967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8743'. [ 2178.505951][ T4962] nbd0: detected capacity change from 0 to 127 [ 2178.516525][T28310] block nbd0: Receive control failed (result -104) [ 2178.524813][ T4824] block nbd0: Send control failed (result -32) [ 2178.531360][ T4824] block nbd0: Request send failed, requeueing [ 2178.566265][T29817] block nbd0: Dead connection, failed to find a fallback [ 2178.579328][T29817] block nbd0: shutting down sockets [ 2178.595108][T29817] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2178.621614][T29817] buffer_io_error: 11 callbacks suppressed [ 2178.621636][T29817] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2178.641468][ T4824] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2178.658139][ T4824] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2178.665137][ T4824] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2178.669398][ T4824] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2179.273980][ T4975] siw: device registration error -23 [ 2180.220139][ T4984] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2180.240572][ T4990] siw: device registration error -23 [ 2181.770886][ C1] vkms_vblank_simulate: vblank timer overrun [ 2182.026951][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.251605][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.335294][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.570394][ T5023] netlink: 'syz.0.8757': attribute type 1 has an invalid length. [ 2183.588314][ T5024] sp0: Synchronizing with TNC [ 2183.659950][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.834831][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.845799][ T5026] bond2: (slave geneve2): making interface the new active one [ 2183.850500][ T5026] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2184.078873][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.115160][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.135250][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.207653][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.294807][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.391847][ T5022] [U] è` [ 2184.528608][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.618882][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.720768][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.850984][ C1] vkms_vblank_simulate: vblank timer overrun [ 2184.973010][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8752'. [ 2184.987188][ T5039] 9pnet_virtio: no channels available for device syz [ 2185.384934][ T5042] FAULT_INJECTION: forcing a failure. [ 2185.384934][ T5042] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.411391][ T5042] CPU: 3 UID: 0 PID: 5042 Comm: syz.1.8753 Not tainted syzkaller #0 PREEMPT(full) [ 2185.411418][ T5042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2185.411429][ T5042] Call Trace: [ 2185.411436][ T5042] [ 2185.411443][ T5042] dump_stack_lvl+0x16c/0x1f0 [ 2185.411470][ T5042] should_fail_ex+0x512/0x640 [ 2185.411492][ T5042] ? fs_reclaim_acquire+0xae/0x150 [ 2185.411518][ T5042] should_failslab+0xc2/0x120 [ 2185.411543][ T5042] __kmalloc_noprof+0xdd/0x880 [ 2185.411572][ T5042] ? tomoyo_encode2+0x100/0x3e0 [ 2185.411596][ T5042] ? tomoyo_encode2+0x100/0x3e0 [ 2185.411612][ T5042] tomoyo_encode2+0x100/0x3e0 [ 2185.411635][ T5042] tomoyo_encode+0x29/0x50 [ 2185.411652][ T5042] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2185.411680][ T5042] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2185.411707][ T5042] ? dentry_open+0x46/0xd0 [ 2185.411732][ T5042] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2185.411758][ T5042] ? wrap_directory_iterator+0xa2/0xe0 [ 2185.411785][ T5042] ? __do_fast_syscall_32+0x7c/0x300 [ 2185.411806][ T5042] ? do_fast_syscall_32+0x32/0x80 [ 2185.411851][ T5042] ? do_raw_spin_lock+0x12c/0x2b0 [ 2185.411888][ T5042] tomoyo_file_open+0x6b/0x90 [ 2185.411911][ T5042] security_file_open+0x84/0x1e0 [ 2185.411930][ T5042] do_dentry_open+0x596/0x1530 [ 2185.411953][ T5042] ? lockdep_init_map_type+0x5c/0x280 [ 2185.411982][ T5042] vfs_open+0x82/0x3f0 [ 2185.412010][ T5042] dentry_open+0x71/0xd0 [ 2185.412035][ T5042] ovl_path_open+0x198/0x1f0 [ 2185.412058][ T5042] ovl_iterate_real+0xa1a/0x17f0 [ 2185.412078][ T5042] ? _parse_integer_limit+0x17f/0x1d0 [ 2185.412114][ T5042] ? __pfx_ovl_iterate_real+0x10/0x10 [ 2185.412140][ T5042] ? __pfx_ovl_fill_real+0x10/0x10 [ 2185.412165][ T5042] ? __pfx_ovl_fill_plain+0x10/0x10 [ 2185.412214][ T5042] ? __pfx___might_resched+0x10/0x10 [ 2185.412234][ T5042] ? __pfx___might_resched+0x10/0x10 [ 2185.412258][ T5042] ovl_iterate+0x6f7/0x1000 [ 2185.412278][ T5042] ? __pfx_down_write+0x10/0x10 [ 2185.412303][ T5042] ? __pfx_down_read_killable+0x10/0x10 [ 2185.412329][ T5042] ? __pfx_ovl_iterate+0x10/0x10 [ 2185.412349][ T5042] wrap_directory_iterator+0xa2/0xe0 [ 2185.412382][ T5042] iterate_dir+0x293/0xaf0 [ 2185.412413][ T5042] __ia32_compat_sys_getdents+0x13b/0x2b0 [ 2185.412442][ T5042] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 2185.412471][ T5042] ? __pfx_compat_filldir+0x10/0x10 [ 2185.412502][ T5042] ? rcu_is_watching+0x12/0xc0 [ 2185.412526][ T5042] __do_fast_syscall_32+0x7c/0x300 [ 2185.412550][ T5042] do_fast_syscall_32+0x32/0x80 [ 2185.412572][ T5042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2185.412594][ T5042] RIP: 0023:0xf70ed579 [ 2185.412610][ T5042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2185.412629][ T5042] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 2185.412647][ T5042] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 2185.412658][ T5042] RDX: 000000000000005b RSI: 0000000000000000 RDI: 0000000000000000 [ 2185.412668][ T5042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2185.412679][ T5042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2185.412690][ T5042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2185.412716][ T5042] [ 2185.412742][ T5042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2185.664272][ T5031] tmpfs: Unknown parameter 'qwota' [ 2185.690074][ C1] vkms_vblank_simulate: vblank timer overrun [ 2185.772406][ C1] vkms_vblank_simulate: vblank timer overrun [ 2186.013721][ T5049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8754'. [ 2186.485528][ C1] vkms_vblank_simulate: vblank timer overrun [ 2186.675049][ T5055] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2190.236964][ T5066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8760'. [ 2190.407772][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8760'. [ 2190.436815][ T5067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8761'. [ 2192.252445][ T5079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8764'. [ 2192.489079][ T5297] Bluetooth: hci0: link tx timeout [ 2192.608619][ T5297] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 2192.732781][ T5087] 9pnet_virtio: no channels available for device syz [ 2192.785580][T26502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2192.805941][T26502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2192.811719][T26502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2192.839313][T26502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2192.843220][T26502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2193.025371][ T5092] binder: 5091:5092 ioctl c0306201 80000300 returned -22 [ 2193.048165][ T5088] lo speed is unknown, defaulting to 1000 [ 2193.192984][ T5095] 9pnet_virtio: no channels available for device syz [ 2193.461592][ T5100] netlink: 'syz.0.8770': attribute type 1 has an invalid length. [ 2193.527211][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 2193.687042][ T5106] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8771'. [ 2193.777978][ T5106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2193.810097][ T5106] block device autoloading is deprecated and will be removed. [ 2193.834476][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8772'. [ 2193.896028][ T5110] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 2193.901940][ T5110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2193.919282][ T5110] vhci_hcd vhci_hcd.0: Device attached [ 2193.947321][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.966271][ T5110] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 2193.971929][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.976838][ T5110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2193.997259][ T5088] bridge_slave_0: entered allmulticast mode [ 2194.007403][ T5088] bridge_slave_0: entered promiscuous mode [ 2194.017331][ T5118] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 2194.020260][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.021103][ T5118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2194.021438][ T5118] vhci_hcd vhci_hcd.0: Device attached [ 2194.023618][ T5118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2194.025824][ T5110] vhci_hcd vhci_hcd.0: Device attached [ 2194.044297][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.046108][ T5118] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 2194.048546][ T5088] bridge_slave_1: entered allmulticast mode [ 2194.068320][ T5118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2194.070510][ T5118] vhci_hcd vhci_hcd.0: Device attached [ 2194.111876][ T5088] bridge_slave_1: entered promiscuous mode [ 2194.137271][ T53] usb 37-1: new low-speed USB device number 23 using vhci_hcd [ 2194.144038][ T5110] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 2194.155587][ T5110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2194.174179][ T5110] vhci_hcd vhci_hcd.0: Device attached [ 2194.219691][ T5118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2194.276301][ T5110] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(25) [ 2194.279284][ T5110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2194.300842][ T5110] vhci_hcd vhci_hcd.0: Device attached [ 2194.350058][ T5110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2194.526755][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2194.577021][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2194.788367][T26502] Bluetooth: hci0: command 0x0406 tx timeout [ 2194.862700][ T5132] 9pnet_virtio: no channels available for device syz [ 2194.917587][T26502] Bluetooth: hci3: command tx timeout [ 2195.002265][ T5118] lo speed is unknown, defaulting to 1000 [ 2195.590392][ T5088] team0: Port device team_slave_0 added [ 2195.596788][ T5088] team0: Port device team_slave_1 added [ 2195.772251][ T5136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8776'. [ 2195.814945][ T5127] vhci_hcd: connection closed [ 2195.818431][T11400] vhci_hcd: stop threads [ 2195.831359][T11400] vhci_hcd: release socket [ 2195.836912][T11400] vhci_hcd: disconnect device [ 2195.841579][ T5121] vhci_hcd: connection closed [ 2195.847358][ T5123] vhci_hcd: connection closed [ 2195.851401][ T5119] vhci_hcd: connection closed [ 2195.851733][ T5114] vhci_hcd: connection closed [ 2195.852555][T11400] vhci_hcd: stop threads [ 2195.852572][T11400] vhci_hcd: release socket [ 2195.852679][T11400] vhci_hcd: disconnect device [ 2195.853014][T11400] vhci_hcd: stop threads [ 2195.853023][T11400] vhci_hcd: release socket [ 2195.853084][T11400] vhci_hcd: disconnect device [ 2195.859807][ T5112] vhci_hcd: connection reset by peer [ 2195.891577][T11400] vhci_hcd: stop threads [ 2195.962132][T11400] vhci_hcd: release socket [ 2195.976764][T11400] vhci_hcd: disconnect device [ 2195.984163][T11400] vhci_hcd: stop threads [ 2195.986633][T11400] vhci_hcd: release socket [ 2196.002054][T11400] vhci_hcd: disconnect device [ 2196.020824][T11400] vhci_hcd: stop threads [ 2196.026429][T11400] vhci_hcd: release socket [ 2196.034511][T11400] vhci_hcd: disconnect device [ 2196.268951][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2196.308887][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2196.383341][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2196.397433][ T5142] 9pnet_fd: Insufficient options for proto=fd [ 2196.464500][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2196.470222][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2196.539742][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2196.868966][ T5144] 9pnet_virtio: no channels available for device syz [ 2197.019917][ T5297] Bluetooth: hci3: command tx timeout [ 2197.229913][ T5088] hsr_slave_0: entered promiscuous mode [ 2197.252493][ T5088] hsr_slave_1: entered promiscuous mode [ 2197.268935][ T5088] debugfs: 'hsr0' already exists in 'hsr' [ 2197.276573][ T5088] Cannot create hsr debugfs directory [ 2198.312659][ T5149] 9pnet_virtio: no channels available for device syz [ 2198.997154][ T5088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2199.063829][ T5297] Bluetooth: hci3: command tx timeout [ 2199.067121][ T5088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2199.080107][ T5088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2199.108831][ T5088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2199.259669][ T53] vhci_hcd: vhci_device speed not set [ 2199.290875][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2199.342461][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 2199.376016][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.379916][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.404548][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.408986][T11400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.564661][ T5160] netlink: 'syz.1.8780': attribute type 1 has an invalid length. [ 2199.565400][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2199.842786][ T5163] bond1: (slave geneve2): making interface the new active one [ 2199.905863][ T5163] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2200.511735][T24038] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2200.612146][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2200.800321][T24038] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2200.806015][T24038] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2200.826770][T12241] usb usb38-port1: attempt power cycle [ 2200.860261][T24038] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2200.865801][T24038] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2200.926911][ C2] hpet: Lost 1 RTC interrupts [ 2201.085565][T24038] usb 7-1: Product: syz [ 2201.090406][T24038] usb 7-1: Manufacturer: syz [ 2201.112358][ T5297] Bluetooth: hci3: command tx timeout [ 2201.122175][T24038] usb 7-1: SerialNumber: syz [ 2201.220644][ T5181] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2201.220855][T24038] usb 7-1: config 0 descriptor?? [ 2201.411319][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2201.420820][T24038] usb 7-1: selecting invalid altsetting 0 [ 2201.593317][T12241] usb usb38-port1: unable to enumerate USB device [ 2202.719180][ T5088] veth0_vlan: entered promiscuous mode [ 2202.747620][ T5088] veth1_vlan: entered promiscuous mode [ 2202.839896][ T5088] veth0_macvtap: entered promiscuous mode [ 2202.851110][ T5088] veth1_macvtap: entered promiscuous mode [ 2202.884461][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.928037][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2202.947923][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2202.956053][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2202.966187][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2202.973544][T30585] rtc rtc0: __rtc_set_alarm: err=-22 [ 2203.007549][T12241] usb 7-1: USB disconnect, device number 53 [ 2203.038418][ T1227] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.215175][ T1227] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.230086][ T1227] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.244947][ T1227] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2204.360071][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.451667][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.460614][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.549165][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.857137][ T5213] sp0: Synchronizing with TNC [ 2205.861363][ T5211] [U] è` [ 2206.662730][ C2] hpet: Lost 1 RTC interrupts [ 2206.737383][ T5224] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2206.814462][ C2] hpet: Lost 1 RTC interrupts [ 2206.934958][ C2] hpet: Lost 1 RTC interrupts [ 2207.012774][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.016893][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.022464][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.067583][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.269344][T30585] rtc rtc0: __rtc_set_alarm: err=-22 [ 2207.860543][ T5232] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.915121][ C2] hpet: Lost 2 RTC interrupts [ 2207.969940][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.975129][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2207.982076][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2208.039017][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2208.044846][T30585] rtc rtc0: __rtc_set_alarm: err=-22 [ 2208.675578][ T53] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 2208.955912][ T5243] siw: device registration error -23 [ 2209.071270][T29817] block nbd0: Possible stuck request ffff888025b95080: control (read@0,1024B). Runtime 30 seconds [ 2209.547891][ T53] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2209.552794][ T53] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2209.690547][ T53] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2209.705516][ T5254] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2209.773179][ T53] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2209.776789][ T53] usb 11-1: Product: syz [ 2209.778931][ T53] usb 11-1: Manufacturer: syz [ 2209.805036][ T53] usb 11-1: SerialNumber: syz [ 2209.812431][ T53] usb 11-1: config 0 descriptor?? [ 2209.848481][ T53] usb 11-1: selecting invalid altsetting 0 [ 2209.913133][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2209.917420][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2210.593646][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2210.613219][T30585] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2210.618047][T30585] rtc rtc0: __rtc_set_alarm: err=-22 [ 2210.885774][ T5260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8805'. [ 2211.799171][ T5233] snd-usb-audio 11-1:0.0: Runtime PM usage count underflow! [ 2211.845291][ T53] usb 11-1: USB disconnect, device number 2 [ 2212.227791][ T5273] md: md2 stopped. [ 2212.312372][ T5279] siw: device registration error -23 [ 2214.568637][ T5306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8813'. [ 2216.062822][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.076312][ T5322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8817'. [ 2216.383379][ T5326] 9pnet_fd: Insufficient options for proto=fd [ 2216.586090][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.827278][ T5331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8818'. [ 2217.217751][ T5340] netlink: 'syz.2.8819': attribute type 10 has an invalid length. [ 2217.266238][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.411234][ T5340] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2217.744123][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.913186][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8819'. [ 2218.996084][ T5352] siw: device registration error -23 [ 2219.491143][ T5340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2219.806131][ T5361] 9pnet_fd: Insufficient options for proto=fd [ 2220.119722][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8825'. [ 2220.136297][ T46] bridge_slave_1: left allmulticast mode [ 2220.140149][ T46] bridge_slave_1: left promiscuous mode [ 2220.144230][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.240935][ T46] bridge_slave_0: left allmulticast mode [ 2220.245805][ T46] bridge_slave_0: left promiscuous mode [ 2220.253194][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 2221.223828][ C2] vkms_vblank_simulate: vblank timer overrun [ 2221.670499][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.178580][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.286510][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.513421][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.610096][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.774810][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.846508][ C2] vkms_vblank_simulate: vblank timer overrun [ 2222.964016][ T5394] siw: device registration error -23 [ 2223.148784][ C2] vkms_vblank_simulate: vblank timer overrun [ 2223.383741][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2223.414667][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2223.447024][ C2] vkms_vblank_simulate: vblank timer overrun [ 2223.625795][ T46] bond0 (unregistering): Released all slaves [ 2223.658114][ T5396] overlayfs: missing 'lowerdir' [ 2223.667004][ C2] vkms_vblank_simulate: vblank timer overrun [ 2223.738957][ C2] vkms_vblank_simulate: vblank timer overrun [ 2224.238770][ C2] vkms_vblank_simulate: vblank timer overrun [ 2224.338492][ C2] vkms_vblank_simulate: vblank timer overrun [ 2224.372635][ T5402] 9pnet_fd: Insufficient options for proto=fd [ 2224.446539][ C2] vkms_vblank_simulate: vblank timer overrun [ 2224.450814][T20263] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2224.762579][T20263] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2224.767835][T20263] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2224.780419][T20263] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2224.906497][ C2] vkms_vblank_simulate: vblank timer overrun [ 2224.928575][T20263] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2224.934730][T20263] usb 6-1: Product: syz [ 2224.937672][T20263] usb 6-1: Manufacturer: syz [ 2224.978826][T20263] usb 6-1: SerialNumber: syz [ 2225.008128][T20263] usb 6-1: config 0 descriptor?? [ 2225.151222][T20263] usb 6-1: selecting invalid altsetting 0 [ 2225.706512][ C2] vkms_vblank_simulate: vblank timer overrun [ 2225.742547][ C2] vkms_vblank_simulate: vblank timer overrun [ 2225.838535][ C2] vkms_vblank_simulate: vblank timer overrun [ 2226.039320][ C2] vkms_vblank_simulate: vblank timer overrun [ 2226.144047][ T5421] 9pnet_fd: Insufficient options for proto=fd [ 2226.554510][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.581341][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.190685][ T5403] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 2227.196761][T12241] usb 6-1: USB disconnect, device number 47 [ 2227.519031][ T46] hsr_slave_0: left promiscuous mode [ 2227.554889][ T46] hsr_slave_1: left promiscuous mode [ 2227.570166][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2227.598944][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2227.630788][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2227.660143][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2227.957354][ T46] veth1_macvtap: left promiscuous mode [ 2227.957430][ T46] veth0_macvtap: left promiscuous mode [ 2227.957571][ T46] veth1_vlan: left promiscuous mode [ 2227.957664][ T46] veth0_vlan: left promiscuous mode [ 2228.376873][ T5438] siw: device registration error -23 [ 2229.057050][ T5446] 9p: Unknown Cache mode or invalid value fs [ 2229.061546][ T5448] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8841'. [ 2229.739604][ T5462] 9pnet_fd: Insufficient options for proto=fd [ 2230.337071][ T5465] overlayfs: missing 'lowerdir' [ 2232.035027][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8851'. [ 2233.175291][ T5487] 9p: Unknown Cache mode or invalid value fs [ 2233.178958][ T5487] 9pnet: Tag 65535 still in use [ 2233.201856][ C0] ------------[ cut here ]------------ [ 2233.214173][ C0] refcount_t: underflow; use-after-free. [ 2233.224079][ C0] WARNING: CPU: 0 PID: 46 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 2233.253368][ C0] Modules linked in: [ 2233.275195][ C0] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 2233.308248][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2233.320232][ C0] Workqueue: netns cleanup_net [ 2233.323430][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2233.331794][ C0] Code: ff 89 de e8 b8 c9 13 fd 84 db 0f 85 66 ff ff ff e8 cb ce 13 fd c6 05 c9 de c3 0b 01 90 48 c7 c7 e0 22 f1 8b e8 87 57 d2 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 ce 13 fd 0f b6 1d a4 de c3 0b 31 [ 2233.375283][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010086 [ 2233.383859][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a5ed8 [ 2233.389073][ C0] RDX: ffff88801ff74900 RSI: ffffffff817a5ee5 RDI: 0000000000000001 [ 2233.399894][ C0] RBP: ffff88804d898778 R08: 0000000000000001 R09: 0000000000000000 [ 2233.414524][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804d898778 [ 2233.423768][ C0] R13: ffff88805f468000 R14: 0000000000000015 R15: 1ffff110083fc00c [ 2233.434776][ C0] FS: 0000000000000000(0000) GS:ffff8880977e7000(0000) knlGS:0000000000000000 [ 2233.442857][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2233.453764][ C0] CR2: 000000008001b000 CR3: 000000005959e000 CR4: 0000000000352ef0 [ 2233.460590][ C0] DR0: 000000000000007f DR1: 000000000000f971 DR2: 0000000000000d6d [ 2233.471414][ C0] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2233.485590][ C0] Call Trace: [ 2233.494784][ C0] [ 2233.497294][ C0] p9_req_put+0x1ec/0x250 [ 2233.501010][ C0] req_done+0x1dc/0x2e0 [ 2233.513782][ C0] ? __pfx_req_done+0x10/0x10 [ 2233.516834][ C0] ? __pfx_req_done+0x10/0x10 [ 2233.520603][ C0] vring_interrupt+0x31e/0x400 [ 2233.523690][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 2233.526052][ C0] __handle_irq_event_percpu+0x236/0x920 [ 2233.532804][ C0] handle_irq_event+0xab/0x1e0 [ 2233.545719][ C0] handle_edge_irq+0x3ca/0x9e0 [ 2233.548486][ C0] __common_interrupt+0xcd/0x2f0 [ 2233.551622][ C0] common_interrupt+0x61/0xe0 [ 2233.556068][ C0] asm_common_interrupt+0x26/0x40 [ 2233.563540][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 2233.566933][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 be 8b 8b e8 78 90 e5 09 65 66 c7 05 26 35 27 12 00 00 e8 19 69 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 2233.584832][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000212 [ 2233.596586][ C0] RAX: 0000000000aabe80 RBX: 00000000ffffffff RCX: 0000000000000002 [ 2233.615567][ C0] RDX: 0000000000000000 RSI: ffffffff8daff475 RDI: ffffffff8bf1d540 [ 2233.623134][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2233.630917][ C0] R10: ffffffff908358d7 R11: 0000000000000000 R12: 0000000000000382 [ 2233.639264][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed1003fee920 [ 2233.650144][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 2233.654843][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2233.661878][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2233.667113][ C0] __irq_exit_rcu+0x109/0x170 [ 2233.671533][ C0] irq_exit_rcu+0x9/0x30 [ 2233.675188][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2233.682698][ C0] [ 2233.685129][ C0] [ 2233.688550][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2233.693774][ C0] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 2233.699954][ C0] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 09 ec 2b 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 77 0a 00 8b 05 6a 1b ec 0e 31 db 85 c0 74 [ 2233.718062][ C0] RSP: 0018:ffffc900006df7a8 EFLAGS: 00000246 [ 2233.723488][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 2233.729976][ C0] RDX: 0000000000000000 RSI: ffffffff8dbf1802 RDI: ffffffff8bf1d540 [ 2233.736258][ C0] RBP: ffffffff972a5a88 R08: 00000000000379b9 R09: ffffffff95ca4d92 [ 2233.744406][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000246 [ 2233.749743][ C0] R13: ffff88804c368000 R14: ffff88804c3684c0 R15: 0000000000000008 [ 2233.755661][ C0] __qdisc_destroy+0x11a/0x4d0 [ 2233.758405][ C0] qdisc_put+0xab/0xe0 [ 2233.760918][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 2233.765071][ C0] dev_shutdown+0xb8/0x430 [ 2233.769027][ C0] unregister_netdevice_many_notify+0xb2c/0x24c0 [ 2233.774884][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2233.779479][ C0] ? unregister_netdevice_queue+0x22e/0x3f0 [ 2233.786326][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2233.797810][ C0] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 2233.800674][ C0] default_device_exit_batch+0x853/0xaf0 [ 2233.804953][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2233.816941][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2233.820016][ C0] ? __pfx___might_resched+0x10/0x10 [ 2233.822679][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2233.843176][ C0] ops_undo_list+0x363/0xab0 [ 2233.846259][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 2233.848377][ C0] ? cleanup_net+0x347/0x8b0 [ 2233.850166][ C0] ? idr_destroy+0x62/0x2e0 [ 2233.851964][ C0] cleanup_net+0x41b/0x8b0 [ 2233.854295][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 2233.857823][ C0] ? rcu_is_watching+0x12/0xc0 [ 2233.874722][ C0] process_one_work+0x9cf/0x1b70 [ 2233.877929][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2233.881463][ C0] ? assign_work+0x1a0/0x250 [ 2233.885950][ C0] worker_thread+0x6c8/0xf10 [ 2233.888602][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2233.891520][ C0] kthread+0x3c2/0x780 [ 2233.894477][ C0] ? __pfx_kthread+0x10/0x10 [ 2233.898088][ C0] ? rcu_is_watching+0x12/0xc0 [ 2233.901339][ C0] ? __pfx_kthread+0x10/0x10 [ 2233.905055][ C0] ret_from_fork+0x675/0x7d0 [ 2233.908063][ C0] ? __pfx_kthread+0x10/0x10 [ 2233.911142][ C0] ret_from_fork_asm+0x1a/0x30 [ 2233.914208][ C0] [ 2233.916445][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2233.921968][ C0] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 2233.927957][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2233.936434][ C0] Workqueue: netns cleanup_net [ 2233.939102][ C0] Call Trace: [ 2233.941735][ C0] [ 2233.943883][ C0] dump_stack_lvl+0x3d/0x1f0 [ 2233.946949][ C0] vpanic+0x640/0x6f0 [ 2233.949787][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 2233.953823][ C0] panic+0xca/0xd0 [ 2233.956492][ C0] ? __pfx_panic+0x10/0x10 [ 2233.960052][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 2233.964395][ C0] check_panic_on_warn+0xab/0xb0 [ 2233.968839][ C0] __warn+0xf6/0x3c0 [ 2233.971326][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 2233.975390][ C0] report_bug+0x3c3/0x580 [ 2233.978802][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 2233.983220][ C0] handle_bug+0x184/0x210 [ 2233.986212][ C0] exc_invalid_op+0x17/0x50 [ 2233.988952][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2233.993010][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 2233.997729][ C0] Code: ff 89 de e8 b8 c9 13 fd 84 db 0f 85 66 ff ff ff e8 cb ce 13 fd c6 05 c9 de c3 0b 01 90 48 c7 c7 e0 22 f1 8b e8 87 57 d2 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 ce 13 fd 0f b6 1d a4 de c3 0b 31 [ 2234.012002][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010086 [ 2234.017326][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a5ed8 [ 2234.022085][ C0] RDX: ffff88801ff74900 RSI: ffffffff817a5ee5 RDI: 0000000000000001 [ 2234.026955][ C0] RBP: ffff88804d898778 R08: 0000000000000001 R09: 0000000000000000 [ 2234.032225][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804d898778 [ 2234.038458][ C0] R13: ffff88805f468000 R14: 0000000000000015 R15: 1ffff110083fc00c [ 2234.043219][ C0] ? __warn_printk+0x198/0x350 [ 2234.046261][ C0] ? __warn_printk+0x1a5/0x350 [ 2234.049300][ C0] ? refcount_warn_saturate+0x149/0x210 [ 2234.054400][ C0] p9_req_put+0x1ec/0x250 [ 2234.058719][ C0] req_done+0x1dc/0x2e0 [ 2234.061524][ C0] ? __pfx_req_done+0x10/0x10 [ 2234.065148][ C0] ? __pfx_req_done+0x10/0x10 [ 2234.068171][ C0] vring_interrupt+0x31e/0x400 [ 2234.071301][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 2234.075203][ C0] __handle_irq_event_percpu+0x236/0x920 [ 2234.079960][ C0] handle_irq_event+0xab/0x1e0 [ 2234.083141][ C0] handle_edge_irq+0x3ca/0x9e0 [ 2234.086228][ C0] __common_interrupt+0xcd/0x2f0 [ 2234.089429][ C0] common_interrupt+0x61/0xe0 [ 2234.092770][ C0] asm_common_interrupt+0x26/0x40 [ 2234.096670][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 2234.100089][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 be 8b 8b e8 78 90 e5 09 65 66 c7 05 26 35 27 12 00 00 e8 19 69 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 2234.113678][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000212 [ 2234.117549][ C0] RAX: 0000000000aabe80 RBX: 00000000ffffffff RCX: 0000000000000002 [ 2234.123538][ C0] RDX: 0000000000000000 RSI: ffffffff8daff475 RDI: ffffffff8bf1d540 [ 2234.129117][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2234.145018][ C0] R10: ffffffff908358d7 R11: 0000000000000000 R12: 0000000000000382 [ 2234.148506][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed1003fee920 [ 2234.151360][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 2234.153181][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2234.168619][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2234.171382][ C0] __irq_exit_rcu+0x109/0x170 [ 2234.174582][ C0] irq_exit_rcu+0x9/0x30 [ 2234.177074][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2234.195984][ C0] [ 2234.197617][ C0] [ 2234.199214][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2234.202286][ C0] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 2234.208939][ C0] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 09 ec 2b 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 77 0a 00 8b 05 6a 1b ec 0e 31 db 85 c0 74 [ 2234.227528][ C0] RSP: 0018:ffffc900006df7a8 EFLAGS: 00000246 [ 2234.230205][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 2234.243851][ C0] RDX: 0000000000000000 RSI: ffffffff8dbf1802 RDI: ffffffff8bf1d540 [ 2234.249456][ C0] RBP: ffffffff972a5a88 R08: 00000000000379b9 R09: ffffffff95ca4d92 [ 2234.257304][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000246 [ 2234.267160][ C0] R13: ffff88804c368000 R14: ffff88804c3684c0 R15: 0000000000000008 [ 2234.277430][ C0] __qdisc_destroy+0x11a/0x4d0 [ 2234.283787][ C0] qdisc_put+0xab/0xe0 [ 2234.285977][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 2234.295858][ C0] dev_shutdown+0xb8/0x430 [ 2234.298572][ C0] unregister_netdevice_many_notify+0xb2c/0x24c0 [ 2234.305647][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2234.315385][ C0] ? unregister_netdevice_queue+0x22e/0x3f0 [ 2234.318695][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2234.331736][ C0] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 2234.334271][ C0] default_device_exit_batch+0x853/0xaf0 [ 2234.336634][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2234.339239][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2234.347789][ C0] ? __pfx___might_resched+0x10/0x10 [ 2234.350685][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2234.370673][ C0] ops_undo_list+0x363/0xab0 [ 2234.373493][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 2234.376452][ C0] ? cleanup_net+0x347/0x8b0 [ 2234.379180][ C0] ? idr_destroy+0x62/0x2e0 [ 2234.381490][ C0] cleanup_net+0x41b/0x8b0 [ 2234.384255][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 2234.402647][ C0] ? rcu_is_watching+0x12/0xc0 [ 2234.405406][ C0] process_one_work+0x9cf/0x1b70 [ 2234.407644][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2234.409985][ C0] ? assign_work+0x1a0/0x250 [ 2234.412354][ C0] worker_thread+0x6c8/0xf10 [ 2234.414786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2234.418208][ C0] kthread+0x3c2/0x780 [ 2234.435127][ C0] ? __pfx_kthread+0x10/0x10 [ 2234.437863][ C0] ? rcu_is_watching+0x12/0xc0 [ 2234.442301][ C0] ? __pfx_kthread+0x10/0x10 [ 2234.446044][ C0] ret_from_fork+0x675/0x7d0 [ 2234.449035][ C0] ? __pfx_kthread+0x10/0x10 [ 2234.451881][ C0] ret_from_fork_asm+0x1a/0x30 [ 2234.467691][ C0] [ 2234.494625][ C0] Kernel Offset: disabled [ 2234.496774][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:26:40 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff852ca4d0 RDI=ffffffff9adeae20 RBP=ffffffff9adeade0 RSP=ffffc90000007538 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffffff9adeae30 R14=ffffffff9adeade0 R15=ffffffff9adeb0a0 RIP=ffffffff852ca4f7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001b000 CR3=000000005959e000 CR4=00352ef0 DR0=000000000000007f DR1=000000000000f971 DR2=0000000000000d6d DR3=0000000080000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b242520 RCX=ffffffff81afd051 RDX=ffff8880270d2480 RSI=ffffffff81afd02b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000450f878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056484a5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81afd02d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53fa510 CR3=000000000e182000 CR4=00352ef0 DR0=000000000000007f DR1=000000000000f971 DR2=0000000000000d6d DR3=0000000080000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90006ea0000 RBX=ffff888043e00000 RCX=ffffffff867c5ba2 RDX=00000000ffffffff RSI=ffffffff867c5baf RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90000538ea8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888043e016b8 R14=ffff888043e012d0 R15=0000000000000000 RIP=ffffffff867c5bdc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030923ffc CR3=000000006101b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000024234e5 RBX=0000000000000003 RCX=ffffffff8b61e2d9 RDX=0000000000000000 RSI=ffffffff8daff475 RDI=ffffffff8bf1d540 RBP=ffffed10037e5000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801bf28000 R14=ffffffff908358d0 R15=0000000000000000 RIP=ffffffff8b61cd8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888097ae7000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a15ff CR3=0000000072bcd000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000