last executing test programs: 59.148581816s ago: executing program 3 (id=2192): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x78, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x9, 0x0, 0x0, 0x1, 0x4, 0x2, 0x7}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0xe, 0x6, @broadcast}, 0x14) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r5, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) (async) lseek(r6, 0x0, 0x1) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0xa00000, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b88, 0x40430}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0xc1, 0xfffffffffffffff7, 0x100000000, 0x8, 0x67, 0x9}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}}, 0x4001) 58.092697054s ago: executing program 3 (id=2201): setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfd74, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010001000000efdbdf2500000000d2ef7ac7338ae64b3cd81ea15734f62d68bb1b70eacbe8b55437f9e3114330f1031bedd5656bfdd3644310a8c16bf351876436bff9fbf0bcf021c63f74422c5e77a5bf7a7e7fb3ab7040cf", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300766c616e3100000000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x80, 0x11208000, 0x21, @mcast1, @remote, 0x8, 0x7, 0x1, 0x4}}) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, 0x0, 0x0) eventfd2(0xff, 0x80001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) socket$kcm(0x29, 0x5, 0x0) 57.215633038s ago: executing program 3 (id=2206): r0 = epoll_create1(0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e2a, @multicast2}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r6 = gettid() timer_create(0x0, 0x0, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a77000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000200)=[0xfffffff5, 0x2a2, 0x763, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0xd2042, 0xb9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x5}) 56.083657206s ago: executing program 3 (id=2212): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r4, @ANYRES32=r6, @ANYRESDEC, @ANYBLOB="04005b00969d05b74f8dfa4d8e7f46a4f95c1c4a499c466bf7a90113e90f858b04df66e26b5f812fe729b2e449e5bda12f0e8192d518d86715cd543ed977dca8b7d135e6657db315758ae0f78fe4f149f9c40c7fc39a63df22a7d35b4a57f59d98676c70a27e3a39a653b668395d0cc2e82dce7b960556a8b7f61841"], 0x20}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000180), 0xb, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 55.258017651s ago: executing program 3 (id=2214): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0x100, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='fd', &(0x7f00000000c0)='X', 0x1) sendfile(r1, r2, &(0x7f0000000000)=0x8000000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x80000000, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) tee(r1, r0, 0x100, 0x0) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='fd', &(0x7f00000000c0)='X', 0x1) (async) sendfile(r1, r2, &(0x7f0000000000)=0x8000000, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) (async) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x80000000, 0x2) (async) 54.992750397s ago: executing program 3 (id=2217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180), 0x10) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000f07b9740aa140121790f010203010902"], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58428, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000004580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r10}}) msgget(0x0, 0x512) 39.754657426s ago: executing program 32 (id=2217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180), 0x10) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000f07b9740aa140121790f010203010902"], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58428, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000004580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r10}}) msgget(0x0, 0x512) 3.791384731s ago: executing program 0 (id=2524): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x7}, 0xf8}}}, 0x7) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000040)={0x40, 0x6, 0x76, {0x76, 0x21, "9402cd701878360c6b627114f28863b868295880baecb38449e917e2d75e1503dd24f330e5f895ec6eb1422b996ec295610970b9163e794d028700469c849258dd8903a492cd40761c10e4d2e4eec936ddcaa871ae7ec1efe9792af5f5ccc5340cf061f31eb99aedc515e6992540b93c0becef5f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x10, &(0x7f00000001c0)={0x20, 0x3b, 0x12, "9ee52c9d9e8842d6a1fec0f074907514dfe2"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) pread64(r2, &(0x7f0000000700)=""/4090, 0xffa, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) read$msr(r2, &(0x7f0000000340)=""/136, 0x88) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) 3.559176848s ago: executing program 1 (id=2528): r0 = socket$igmp(0x2, 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x7b) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) io_setup(0x8, 0x0) r3 = syz_usbip_server_init(0x3) openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x473, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x23, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000001000000180000000b00000000000000030000001854000009000000000000000000000085200000040000001835000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYBLOB="0000000000000000b702f2ffffffffff840000d3a2c2f041daf9f3c8", @ANYRES32=r8, @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x1, 0x23, &(0x7f0000000140)=""/35, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, r9, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x5, 0x3, 0xe}, {0x3, 0x3, 0x4, 0x1}], 0x10, 0x1}, 0x94) pselect6(0xffffffffffffff94, &(0x7f00000001c0)={0x2, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x820}, 0x0, &(0x7f00000002c0)={0xff, 0x7, 0xfffffffffffffffb, 0x0, 0x0, 0x200000000008, 0x80000006}, 0x0, 0x0) 2.955912863s ago: executing program 4 (id=2529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000003ffff0f00000400000000000000000000000000000000ea"]) 2.811695725s ago: executing program 4 (id=2530): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007ba0080000000000bf9100000000000005020000010000008500000084000000b700000000000000950000000000000078e127df827941adde8a1ab651ac7aecb21cc8f8fe2984239dcf6b1897bfb556a2375ecb51cc18aabeadf2fdb0e4d8d6f96e6a382dbfe0b2d0b7b9bf2bffb128d751945454752bbbc02af1cb527659736631a54e6c570f7a9e9fda89066eddb613c392ad7bf83351869ac5d99b"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) 2.785113246s ago: executing program 4 (id=2531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)}, 0x4048043) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="021300060200000000000000ffffffffb6b6dd739c83f7ff160b02774e17599f90fdfc38fdb1f43dbbce5e61c87ea2614efa2b890203dc6ee1467b6983ab4580260a436f87b9727bebb54954c421d845b5d4b8b92c96219bf28631c068d66ce6cd7e1938791eb2022afcf6ea06005c80d298da7c56f4618472c33ae046fb5a6ad7cd66dba159da7a35e9977fd68295ffee9c9c6b971319959beb5ff908ae"], 0x10}}, 0x8000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021200000200000000000e0000000000"], 0x10}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x0, r5}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e25, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0xfffffe, 0x31, 0xad, 0x3, 0x2c, 0x0, 0xd2}, 0x9c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000540)=ANY=[@ANYBLOB="6d0600000000000000", @ANYRES16=r9, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdf9006f065891cdd}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf250100000005000d001500000008d601000000000014000c00fe880000000000000000000000000001080004000a010101"], 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x28000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 2.6732826s ago: executing program 2 (id=2533): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 2.63750894s ago: executing program 2 (id=2534): bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=@deltclass={0x5ac, 0x29, 0x109, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0x5, 0x5}, {0xf}}, [@c_atm={{0x8}, {0xd8, 0x2, [@TCA_ATM_HDR={0x6, 0x3, "140a"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0xffe0}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xd}}, @TCA_ATM_HDR={0x38, 0x3, "c1c49ef7307f6ecb2331df7f15e6f53113531f87ec85cf5a19abb48307ed15b09658c5dcdeaf65dcbe30a4bd3523d01c44dc1085"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xccbe5e0139a6499b}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xf}}, @TCA_ATM_HDR={0x3e, 0x3, "b62049187481516331e37803661646002cdbeffcd6e896827f63e768a7e49daf592bb28527d1fd127714cb097669e2f585ea4b1e4fb4981cec11"}, @TCA_ATM_HDR={0x34, 0x3, "cd41f9ca7c6676d03c39971b7a16ef08d0ecd4e273ee19f28de23fc463da93e57fb0494046fe1a6c44dc15c284a3b5d9"}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0x1}, 0x3, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7ff5}, 0x9, 0xfffffffc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xa, 0x3, 0xc3, 0x3, 0x84a7, 0xfffffff7, 0x4, 0x3f800000, 0x3, 0x3, 0x9, 0x8, 0x7, 0x100000, 0x8, 0x7fffffff, 0x7, 0x100000, 0x9, 0xfffffffe, 0x7fff, 0xc47a, 0x0, 0x8, 0x0, 0x7b49, 0xa6b5, 0x1000, 0x5, 0xffffffff, 0x7fff, 0x0, 0x9, 0x1, 0x10000, 0x2, 0x3, 0x7, 0x2, 0x1, 0x2, 0x5, 0x2, 0x4, 0x2, 0x1, 0x10000, 0x9, 0xe, 0x2, 0x3, 0x6, 0x4, 0x9, 0x3, 0x8, 0xa94b, 0x80, 0xc47a, 0xf, 0x9, 0x1000, 0xf, 0x67, 0x8, 0x5, 0x5, 0x0, 0xfcd, 0xf7c, 0x3, 0x7, 0x5, 0xa9, 0x8000, 0x0, 0x9, 0x7, 0x6372, 0x63, 0x3d, 0x8001, 0x3dc, 0xf, 0xff, 0x3, 0x3, 0x40, 0x200, 0x3ff, 0x3a, 0x1, 0xe, 0x0, 0x458, 0x800, 0x3, 0x2, 0x6fd1, 0x2, 0x7, 0x1, 0x1, 0x7fff, 0x203a, 0x3, 0x3, 0x5, 0xbd, 0x10, 0x1000, 0x7, 0x8, 0x3, 0x8926038, 0x9, 0xfffffff8, 0xffff02d1, 0x8001, 0x9, 0x69a, 0x3, 0x2, 0x5, 0x0, 0xdf31, 0x8, 0xe, 0x1, 0xf, 0x3, 0xf4, 0x0, 0x3, 0x654, 0x6, 0x0, 0x2, 0x5, 0xd, 0x1, 0xfff, 0x4, 0x800, 0x4, 0x8, 0xa, 0x80, 0x7, 0x1, 0x8, 0x73db, 0x94, 0xff, 0xfffff001, 0x7fffffff, 0x5, 0x642cc663, 0x3dec, 0x2, 0x7, 0xd1, 0x0, 0x0, 0x7, 0x5dc, 0x101, 0x7, 0xfffffffe, 0x0, 0x8, 0x5, 0xf3, 0xc, 0x2, 0x4, 0x200, 0x5ff7, 0x1, 0x57e82600, 0x9, 0xe, 0xfff, 0x8000, 0x0, 0x7, 0x1, 0x1eb5, 0xa3, 0x817, 0x6, 0x7, 0x9, 0xf, 0xbdf, 0x8000, 0x2, 0x0, 0xdf12, 0xfffffff9, 0x30, 0x6, 0x9, 0xfffff16e, 0x1, 0xfff, 0xdab, 0x10, 0x4, 0xa, 0xad9, 0x0, 0xc53, 0x4, 0xe, 0xf, 0x400, 0x7f8, 0x3e7, 0x58d99f59, 0x8, 0x80000000, 0x39, 0x4, 0x2916, 0x44, 0xbb14, 0x9, 0xfffffffe, 0x40, 0x2, 0x7, 0x7, 0x6, 0x0, 0x788, 0x4, 0x3, 0x200, 0x8, 0xc, 0x7, 0x0, 0x8001, 0x444, 0xd, 0x1, 0x9, 0x9, 0x8d, 0x7fffffff, 0x80000000, 0x1, 0x3, 0x5, 0x3b]}]}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0xd, 0x3, "c926940417154a6fe7"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xc}}]}}, @c_atm={{0x8}, {0x44, 0x2, [@TCA_ATM_HDR={0x37, 0x3, "70878251cd966d5644bec9bf3db95ab850e918867db2ed8c03732e119173f7d15db88a351c5b4f87c1f8fa75006f98fb57051d"}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x2043}}}, 0x7) socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_enter(0xffffffffffffffff, 0x68be, 0x5002, 0x4, 0x0, 0x0) 2.180898359s ago: executing program 1 (id=2535): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x60002, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000091}, 0x40) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='dvmrp1\x00', 0x6, 0x1}) r5 = openat$binder_debug(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getchain={0x2c, 0x66, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfffb, 0x8}, {0xfff2, 0xb}, {0x6, 0x5}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = dup(r0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000600)={0x28, 0x0, r7, r8, 0x8100000000, 0x4, 0xdb}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000640)=0x12) r9 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x8080, 0x15) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf77}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc840}, 0x40) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x2, r8}) mkdir(&(0x7f0000000a00)='./file0\x00', 0x102) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000a40)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0xc, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x19}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9b}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x280000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400d1}, 0x4090) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r12, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0x0, 0x9, 0x6}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) getsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x178, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x2}, 0x8000) 2.148372844s ago: executing program 1 (id=2536): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x4c92, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0xfffffd, 0x20000}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.759647358s ago: executing program 4 (id=2537): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffbd6, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x30}}, 0x40) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r3, &(0x7f00000034c0), 0x0, 0x10720, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000240)=0x10, 0x8) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.681715004s ago: executing program 2 (id=2538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="5f5df09a5522668d5a1b63076a320978f60ee61ae0dcb3a20f1beded5ef7d6887af25e", 0x23}, {&(0x7f0000000180)="b8391061d4ff12969589f855e2b6274c6edce58db5b36d13a6a65431f1446128acd723b9c51a61fe71411ea63a18bbfa723e99deaf179769305f662fd5149e332208341ac5ff3c71", 0x48}, {&(0x7f0000000340)="134af73e7e148eb75107f415535e87f6aa03536783aad4a00cec864cb325ff3db72ffb12448c03b5cf9153877e1af483133f2a61bb6efff1de1a11add71b8f067ad698e292cf349a18cf7ae8d0fb776f16fad085a4d14d25dc12d98025290d996d294e2b8f053eb13b50c70cffb18112a448457635bcc963e850bd5debabb0e23c", 0x81}, {&(0x7f0000000400)="7a7d8eadf750ca85c01bc4c7fb92fb7f5e853c5adf59251d9b66d58688f21509da8200751986573be1024ee9601be4bda5801c08eaaa1b390af2fd460ad942c33bd90bd31c8389226ce55b52522d564e8b2a3da43aef5cd67bfc281dc0423094dba4eadf485eb445fa1db9a13092fd1145e3a1bdc9eed8703a46ff406a98f21ae8acf44614e36bce1747a9e228784ca10c85ced215dd3c9ff22299262c66fefac8683be07095485ebc068366db6b06e208f8be8e46a2fa83f103a062cab37d39", 0xc0}, {&(0x7f00000004c0)="e8e6eb276fab0d280ef4e13490a139124dec5b810ccd5199c28dc41445b304182ab849e0a5eebefb3ba1d64cd8aeaa0b133919577f6c06c83c86d686f95921ed947a852e58d107722a5ac9e8e706fa3e1d949161502ebb3ecd7b1cc76a88aaec25254352e174d05527d3ef4018d49cd594660e5b731882d7557607a869d14919809499191878851295", 0x89}, {&(0x7f0000000580)="55bc061863db51061be08c146356c9e0a640c73954e4186c4b099f5c860d5a9752fa69ff06434fc8e74e7214c7874a73d9c5e8f3bcabb74cd047c2c1f29f03263bd322bd551b13f50164a03fffc4df9f990fe86a5b88c94b50459977cb1870c826a79f8bf4a68af647d0fe2529a0f426005546929d3e5e3a64b3516ad037de51b05c8f08a3aee52799aea18f3b59ec1fb2a430f16355e171d56a544843c5e02b98f087a524173e9694caedfcb36a9ce89065b160dba48da1d5996189dc7cb13741675912cbae8c320674600eed00f3ac7bb73b9457ec0e79314ca52b55c74ba2", 0xe0}], 0x6) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40c042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=0x0) 1.611347148s ago: executing program 2 (id=2539): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x3, 0x5003) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="c045c4b1aa737c50b23a7a9e19df1cea56ea5ac798584a68da74cd5fc316094c0cf257ab00d63eafbaeafe40bc97b264a63901dd1964ce1301678633d5c28638183e2bc97822649c6ae031429a82bbf05493f5df54e26c946b99622d2771f5248c6ceabb62fa303d811cab8c855cdb8db3015e1f54755624649e4a3f99dd76134ea1162dd9424e466f8b7e46679234b11647a60267bade6fd60bd91f3ffc3033760b76ce98c1936cf3614e2f3d1bf409278a9433b978cbe961996fcbb63f", 0xbe}, {&(0x7f0000000140)="6a90047f46809b741f61f905876ff5152d09178b6c44c5d72bfb08b3985fc8251469065ac2a1a8f048b93c1a84414990309e31b32b16a8658e23159a484a5f95a68b72ac67489335ac4aa7c05ffa8208d2f424351dfe7d06c3441b37d97b0f7a1b1de23722ff4e12cee4ab7129939134fde193241064064a9424aafa8184bee51e9eb2aaa1e061f0ff313f2d126ccf999c19cba502b2b927f2968ab1b8462523882273a575b5e07c21fa3f120a34ed80611cdc8e9a", 0xb5}, {&(0x7f0000000200)="61c38da77e274ade40a04e526351855982e60b61f075453d73e09810292405a9c376939175a56ecdd6cb59546f3b88323f3d6919d9196c8d5944d5bb92de7529e109360e6cd03d8377e58d95b555fbcdf966af83e79c545e608870c246e5a66054b0592ce9a46dacf3f24fd541093a3f61c013079874ffb7", 0x78}, {&(0x7f0000000280)="4a932405f16e043e2011fb24370da18c768aa3a33d583983d0625fc34cb5f2e50f9e6ad721993723f3eed2d31c800cb68c29dae3a47b62aacbe68575881ffd32d6f72fab7ff45ac1654585a1cfbb9250a5bd0b072267b6ea3770a053a4c1e63f30acd222", 0x64}, {&(0x7f0000000300)}], 0x5, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) ptrace$pokeuser(0x6, r0, 0x8, 0x10001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1d1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x49001}, 0x1) r6 = openat$nullb(0xffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000540)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='io.stat\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x30) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000005c0)) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f00000009c0)="e4dd1db82c6187ddcb3ef05e3af5f2e7e9ad8b3ec16b312c17d3945a6d209c00aa18c7ec2392c85b938268521e1ee4cf3ab7c22a9e35e25a6d2eed807c65b7ca5d72898225365b95f1a17fc81cd37f6f10fc7e08f554a341db4948c15463140cbb34d8c4df2fe89e5472333c7f229bf00240385ed60c9e8bd6153618a8722c8c91d0689180ac4ac945", 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r7, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) fremovexattr(r1, &(0x7f0000000b40)=@random={'os2.', 'A:\x00'}) socket(0x1e, 0x0, 0x9) r9 = syz_usbip_server_init(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000b80), 0x5005) openat$fuse(0xffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r10 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000c00), 0xc0080, 0x0) close_range(r10, r9, 0x2) openat$mice(0xffffff9c, &(0x7f0000000c40), 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000c80)=0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@getchain={0x74, 0x66, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {0xffe0, 0xffff}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x33ded6c6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000015}, 0x894) 1.410607334s ago: executing program 0 (id=2540): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007ba0080000000000bf9100000000000005020000010000008500000084000000b700000000000000950000000000000078e127df827941adde8a1ab651ac7aecb21cc8f8fe2984239dcf6b1897bfb556a2375ecb51cc18aabeadf2fdb0e4d8d6f96e6a382dbfe0b2d0b7b9bf2bffb128d751945454752bbbc02af1cb527659736631a54e6c570f7a9e9fda89066eddb613c392ad7bf83351869ac5d99b"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) 1.362715952s ago: executing program 1 (id=2541): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r4, @ANYRES32=r6, @ANYRESDEC, @ANYBLOB="04005b00969d05b74f8dfa4d8e7f46a4f95c1c4a499c466bf7a90113e90f858b04df66e26b5f812fe729b2e449e5bda12f0e8192d518d86715cd543ed977dca8b7d135e6657db315758ae0f78fe4f149f9c40c7fc39a63df22a7d35b4a57f59d98676c70a27e3a39a653b668395d0cc2e82dce7b960556a8b7f61841"], 0x20}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000180), 0xb, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.331820011s ago: executing program 0 (id=2542): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000007c0)=""/160, 0xa0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) close(0x3) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x34565348, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x3, 0x0, 0x6}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg$inet(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000002980)=""/4106, 0x100a}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4083, 0xff3}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) r5 = socket(0x2b, 0x80801, 0x1) openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x420000, 0x30, 0x1}, 0x18) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r5, 0x894b, 0x0) 938.002152ms ago: executing program 2 (id=2543): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 912.425407ms ago: executing program 4 (id=2544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)={0x184a, 0xb, [{0x1, 0x1}, {0x2}, {0xa}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x6, 0x1}, {0xb}, {0xc, 0x1}, {0x3, 0x1}, {0xe}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r6 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f0000010040)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) r7 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r7, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) 907.685771ms ago: executing program 2 (id=2545): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r6, 0x1, {0x2, 0x0, 0x1}}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) socket(0x29, 0x5, 0x9) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x80015b1b, 0x0) 499.480529ms ago: executing program 1 (id=2546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_audit(0x10, 0x3, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x39be, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYBLOB="eeeaffff616d250b50c83b2a6a34000000000000", @ANYRES32=0x0], 0x50) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef546", 0x8b}], 0x1) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0xc) 360.148278ms ago: executing program 0 (id=2547): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000a4bce1ba800a5486563ce27a38000107"], 0x14}}, 0x0) 358.404969ms ago: executing program 0 (id=2548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000120000000c00000006000000050000001100000f05000000005f00000000"], 0x0, 0x2a, 0x0, 0xa}, 0x28) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = getpgrp(0xffffffffffffffff) fcntl$lock(r3, 0x27, &(0x7f0000002c00)={0x0, 0x3, 0xdf5, 0x9, r4}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x8}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x42}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r6) write(r1, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@empty, @multicast2, 0x0}, &(0x7f0000000640)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x70, 0x3, 0x5, @mcast1, @loopback, 0x1, 0x700, 0x12000, 0x10001}}) sendmmsg$inet(r5, &(0x7f0000002b80)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="699384cd0814c3fe55d128da30e8d32ad5fe4f76c06f42cb5e4f8838f51a2783928411cdf088ed1ecf010a21505caeca725d29adec3a5bf3b6d212237c2acd7f52dd51f91b7487c716497e3930ebeb9ff6d914122287da7f596ef804a52a2ca1aa0d0ae03ad8714040cef890bb5e34e219db9bf5293d5ca7c38cfd1a20d2709be49e43dbe4561a9e2dcd0d93cc5285ed4b97ad18f113b3732fac9b908e5c9d3acb15b3fd2b23094fc296b44baba4b926a60459942328c336c612b84872033f94901c996d45dde70ccc6de3d02295ea3fea22a7fcd7a599b9dcfd05825f8a1381ae3fff0caa762c90dec4d3fe19969a0db1a6bd7de166e256bda8a4cc46b3dcefd1ffee7f236a8bef2bb7e1f755124f281c38746ed4b66366453037ea32c1997d3f41dd938fd7d5420cc0aa3b0cd98fcdf8b41ec954be5fa889b3336834fe4ff10ce00145051dcde21a5ffb1873cef44e6893e50a98b918051ce0ece9efd6e6701f02fad59fea24bdd0d64807ec5d36d71f792ff383ceb1eafcd439fe92f4ddfd79547c81090d869a0a639c1cd702725a0ac8c964810e05653cdba1ee639751b21e009ef3914fb97a40fded0b48c2a972b39da160ad1581a4abac4c967b0437fdedbfce123f37afa9c72a49dc2390c498d47f129fd78d0267864b7e748e9a4af10a083e632715611934dfbb6cfa681b21f1db20e555967ea99620ac7df2f9953f08522366d0beca8224bd0feb5afd93606ca363d6145eb64f4bc859ed4845949e506bc3dd5ca978c0fbcce9b02a378aaf7670fec66828324714eef16aa97a01d5bc5d841ac58b952cdef0397da872fd5e9941509e317a14227473eb0a8102365de1ec60ed1e5cb76dd745ba1dd1c301bb6e6f78bb45e2b6820d580f3d2113e0c85c3046207b70ec81ec06f68a5a41bf505aa30269bc64003c6d1d861946a481c5375cc1e5d909d61cafbb15d2da4e37478b3312c17a6bcf13e8390292357464537fbd7edb391e55c273a33c08f4afe750d988b5f84f9cde7236c4456aaf942ca936185bf6f5f22b2f3594df4bc613879688b8203076db8891c6cf7049c998a3e636a5d94c095fe541404a6b5821ac203b4361e7468e93f49194dd0581ee9a92237c0611a8b4fc6b83bc2e997b8332857ec1f7679a82f66354be004e483b3eb938ee767da83c94b9100be7ec0a004487b37c79da6680a8e153d483bc80308562ce5e88c07408bd6940d9556b401dd02a5396555b35a482c2fc9e0e2fedde6a4041fd4c0208931a25c242b8941b17b1e1d97d7bfa9adedb1976351f6f2a89a932cb315ce8078789471b9b6836f9e83af2ea591d665a9ef10ef3fc9ba404a9c1bf564a8609b2ab9f29a0e93140eef06b4c83cdafb102aaeb095296aca2cffcd2ac61a4560abf05d536e9d6d2e11d6c22ee3771007ddc05fb58680bd78343e218c6a69627abb27f3055c98fb3dbb80c720a5684d80686618a0491ed8ce1e65c58aa0dfb1273267d3e3dbcbcddba2912b33366a38ea6e935b764f2cf3ba32715cd238f86ff5b8fafe4109734796c49b0565faa140f5bd33fbb3d4f31b864df0495839005a0e0ab254b2a0610e36e177dc4e5cf72c15fd5d3be0cb5083243b386b16f7abf5933b8de1c42bec887bf5a24681ab7b2fb136a30c56139b034223d9619879d360195bf267407f7666e9d179c8608cc0d82fa1a819cabbb8f8773b7fc1f98d4d6ba0b85b6555fe638b7b876c7aa7d2ec6c3424e94612136f8f86f6202d134a8b413cf2c72966cf5588d37fd10bc230704a7bfc6230612a3075cec27c1eee8269333e556e5db17072320a95e911a6052d9a8e8261d4f433e029146102d70c68a1403b33fa5b74c77342a94d69544a88396b00bc3c25cb0738101476abd3f5c6a7ffe859cdb61e69986ae876a3b9d64ac48a72fd26a3875d666a4c336e1533d9650ed5b653224fd7d9a9c10868b25d1c7f1ece66e3f1adcbee416655db10fe762d5846a13d23e42c9e4a2adc6e60c30307227f4b5af417101be17d0fa98dda1092d2fa450ffead66d219d3e23821ecc03171168166707c7dc7b23efcd9cff546754cef602d7ebdc8411fac8908826722f2a32f0af077951fef468a497e108ec7b7bc8cbd569ba2463ee8d148713e3aab223aeaeae088b0da115c7b7c0a742885463edae474f6b21ae0c3d56d462b4d84244fa8d8348f4cf14a3c824531f5170abd9e25a93c547ef2d6f4380367c79f49439c5055d2aae09e324d7f991a942a54ddaa0701199f8468746621fb48cac76ce6afcda8a9733c9f27109f16a820243fad3f35aaf02c001058a425dcfa9ecaac26e5673bdef36b6eb0a7b826dde3633cdda651364ac7cd6989b9e3f7810e4768af17c6d9fca3630110588c9c3940a9cb630ceb6a399bfd9a57a2b608050f788b5198903e30c3d390726867c43b905aed2a3f7bc8d62920dd8c0ea3a6c9182cec728b3a3c9c1e4a1e5b754ae4e42f8a132885deacecc4a371a86b3c2c900fcc09e778e33fc9bcaf4d49711cbaba09a81e1b4b96ed4230f837410b2df5446af0e95d65d0830e3fb26b0357ff552f3fb89affc4f7f43d8a8da07cb5c3fecfd9d7f366e1b30eff5e77de826dfa58207b122a8a809f278f497a462705bd4094ecc49aaf599669417ac9c4de3328ae0a374d30a024f53c066af3aed121b678384e3541ca2bb1a77fe46ff0496d0528a407076bec5229619743caeea169f5218b187bac97ee529d5c05df0589ae308fcb86d4ff68976184801b1cfb6bf8cf20560f8b6e45e5fa021dc0f963f4a3d6142d48e8ed8a375ee350809bad4a3370c08698acca0bf8a66fba73f50f2ee2647ec7b79e5a44b93c7750803ae8587641a945b722814597d1399103d4bf53156ae5aa6a206edce1bdf33e672381572d6344dc96d9e98f21cd0d5dcebecff97ff807c539b176363cd60df1bc07f37abfd107d79662ab3e2edfe86bd2aa6cf6f70f320f5e918faff39f199a91a4a6c753b66b966b163455756b8fa040239b92a271c7b4cd620ad97a3e1b6ff395aa88b3a07ed957bb717048fd29cb535c4ddb5376e87d4f58e2dfffc4fe0bfee736e471706cf043404af83cb80c1c77e1fd3c20f31fb5b57d5946aeef6c2ce07e537bbb99795a82f3bb9f36401b07ccaa341c0b1f67507a4f28ad8b80fa3e2de142081a70d0a2e7f50fc2e1732de6cbef5c55026a4eb3f9c57a706d3ee13787ed7ec902e9f57d1f204d620b83291ac3815b30e5128af9ff72859e21021ad59e9e3c52092d7fe522e581f77d1feeb701f795f9cee1aed53783f4290aea93267eac3ace9d16c12ff22623f16079622c4bda5378b594c52761a98b311ccbccad1f4442c833139f41db5888f8933358d649defe27d40e60653e79217ffc52bdb0a8876496c097c622b5b6bf60a9fd4c4b125ea9028808cfae81e2bb46683d3ab448f3d8f3af4236b24542cfc4930eb45c73cd69a4ded990d8126dcacb9754375586ce0902f96197fc7a401ca2ed0820e6f6b54c86a469a3a0a7c393d084624685fb6b8b65c28347a585cc19445f2300ee9e1e2abf0d4324d7aa53d151fc530a71b1ba80b64a23f5672f966d68c30a8af7169d772d0992a57c420e88d4d390134437befd43f005688a756db87b88331fdbcef292d0382d4ac8de007fb94660706f52af41d96a8f783782019ffccf6aa5172b8dcb1d331bee88be4c6add2de7d9e2672432c9ba6eea7c49f2ef1302466cd081ce97683318cdf9723a356aa69661bff9db361b9b28eb073f2808534d09b08c6f6870e49ec86cffd42becfc36b7ff085315d958e38fe056012d10da1650a90d6eb5fadff2e1519553c4f2b363bca955f12a94cd5b3a600bfe56c34037170487791260ab74b116656e752996e0f878148ca13e00271332fb6c1933ecddbe3d99e23946dedcaaf096fe78ac09195d3effc5d4f29c2f7a436817e55c1e19f86f8253aee6a1b969d9aae488dd0c483f277b656a0922c672fd38700d9dbf14fe97dffe7bcaf8636755e2c9ae0b340c82613dbd00fabd5118c032bdddd3612c64573c4ebf044443a933620d0c71fd2bb0a23cf49a46de072888fda8fbbe765056f29d73b25517dc4558d9eedf8110251d1bfb6ece20a085b30de0eef421a28a854d73b79fc4f50d39fe128b3341034dd0302f289a371e0b5fe85f15f81d5d75a8d43ad2a68e9eedb8a7420f9c5e3da5d30db851a18e2df392232cedeccd85f6cc92f324ef5268dbbbafae852fc6cf92e4c7ad0eddb921434ad3cc1c2de5d3942d438a7325a3b608f6c1b4de275fac1a1872769dbb3ce621135d45d9be4d4f07dda9b2cd3f79d175c05255d5e2a0e372414de6406ca1d013416643faf13bca1469162e20b1f0bd9c7a23950c03ee12216b74834b79d19d7bbb0cebbed2e26a670d610f5be7c0080075f07a868f3fcfb436e608e6df655e68391063086a6534f7b6a7c8da6bc74070ac94dafc31d08206739b3a5c6106551d44dfde37a75b194334f8eaee01ae68cdc07bdbe15ead6812faf4a012f9692f84757180142b20007de2e75bbce3b76a29e9d8a6ab80d54b355f9b3b6f056048fdd834f134febf607402a38f86f919b136b18b95571357641c688c8cce6afaed91b6c2dec68d7313c9437127158fb247e9a03ab7e8091a1c8b933596904c7e9745f95cd2e1ff0165fcc325d13c988b3fc782a8b10adc71b10ba123aadd520cd51bd5cc40aca922d7fa76d8b708a108268129a6c4b914981cb28c8d92cf6ec227c0cf659fbe3ff0cbd05f0556cc8258ae387c420b645aec0bb7960d36d44e73ef7243ee086fd2ad49b813b939a7dd812eb831d3f4fbd566bd642f321d22d39e9dc36de504e889e0e5709e4399a6275969bc7337997c42db579bb472a5fbe8ceff719e0329a9b4cfd9dc6a37335f274dacd8b7e77e8c86185bb1102febf603c1be82b2d781a259f735a237fd0efdc42d4c8e56b213c0b61ed47d9ffe125da7999f6444a27a9988c5d1f969dc441c935008279fd95e120780b0e3f97299c15c9dbda7d20f50a005669fb55fde083d2edb6c4fed3b6c6f302ca748fa8b7782bab67ec1fabf869dc852787d9e94588a2fcad880bb7441707368c5ccc223e794b1d25b6164f5c2e29ee82c4a0606f0c87324cb2e828443c70ddc0ad442d59311f97889b185b22bb9a1a9e3e96148ca765e2ff9afc4a9c3fb00c61f9af60a099659ad94601e75cef6279f7b168a4d62df13912b07f702e118c6ac1240f5118f0387b4d514c96ee67c6ead3254fcb3ce8dbbe0cf75620889b8d9847400b2632e02c475a5d5f92aefe8f1cb100268d8fa47bd54326b279dc3b372dbfda94d72597ff4193a815e24f9cb1bcf5209667aec23fc00676fe01083d946f0e8dcee19ff4d85c2d48d991fed794217fea3db452f8d78c6c7978078aae18550abef509b3d1dad67d94484ee705b1e90a0b9fc8a02609c7bfd305d9016a9f53c7ed10a1b62b3851d5c9f539a3acef38732093df949675709bbfbac1cddcc0cbb63cf7f9ca73d470a6ac47b656642c873c8de0a14023bad29400c5a46bcf83b52a5950d0c262c73334bcf6c15466d2de8c08663bd02aaae803ece16e33ed39e445207a42d1cc1914b51fa7d96b12109928c71464bee115c25ed4166d4c341686a64d86233981d019b6313637a686c56133c97c9fc1afb93e32dd7a9fe26c54faf3f4f44860bdde65b1790503c765da4584c9becd72870c96dd5bdc8f7a13c96736b068c1c76c4e2fb82056309ba489910cd43141169168b32ab9c6517ac73919dd", 0x1000}, {&(0x7f0000000400)="74b234f37497a7f021af4d8baf2e3dc6f88f13af9e62ff6a8af3679e31e30b80ed7aa0a2bd031d2c8299f6fc725e8bd4e3806138d34ec68a1bc424fb", 0x3c}], 0x3, &(0x7f0000000480)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xc489}}, @ip_tos_int={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="03439659655e74bc40743bd95c9d5f3b582aa4b41c48cf9f193b3d9c5ddbbca9e580e94e58ff66c69e47ec15dcf0d1466cf46e96dd789e5e772f3929e7", 0x3d}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x9c, [@multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @loopback, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="192710842c58dc0d654405625df8d1a757b4454e063caf5cbfc84bba422d3ba718bc04266a1609058a403f2ac9bcdc8e80ade0c561afe5a4e585680ab65335cccac2206a5ee4233de8bc15eca95772de1f7df367042e3371039b94d5be23328ef5c48dad28ad9c1d984da5fac291b6343eb17918e8c89411", 0x78}], 0x1, &(0x7f00000008c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x20, [@private=0xa010100, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r12, @multicast2, @empty}}}, @ip_tos_int={{0x10}}], 0x90}}, {{&(0x7f0000000980)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002a00)="47aa6372b34119ac6fd36c25820e7cbd0711411ee77e5a6bcd65550f1c82505fc5f09112f10f471faa0e7c2322887a23ca8a83053b95dc0cc3dcc4388cb3689b7ad7fc6f0aa7d74e85ef9e31795ce7beadfe4b920cd1e8b73a60f994be27a160726fc04ae12ae45e57da7b52ac6589d3068ed801e64e2dd7a971775a66d3168fb2af67baa43f55a085d311ed10edc296f52c4b58a9203136f7346458ed8fb63072cbda5e37c0264dc28ce04c2573548b4b70950931bd3ff8b8e653c36af1e45e6f07406562b873c9f1b03379d9c1d130b06b6bdb533f2cbaa308f5f1fad022eec476d9f4fe3b005f6d306b", 0xeb}], 0x1, &(0x7f0000002b40)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0x10}}], 0x4, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r8, 0x9}}, 0x10) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r13, 0xb701, 0x0) 352.927087ms ago: executing program 1 (id=2549): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f6468037dc125020000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabbd43288f5917104987cc99a176b29cdb32afd49a0ae2b446288e2a75c83e1a98c9e75ce8cc0f0d73a79762b896c52213ed637a89d10cf13b60a010d2ea6d89afc511a439db9faa7"], 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r8, r4, 0x0, 0x8010002b) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) recvfrom(r10, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 46.085398ms ago: executing program 0 (id=2550): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x1520, 0xffffffffffffffff, 0x3}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) 0s ago: executing program 4 (id=2551): r0 = gettid() syz_open_dev$video(&(0x7f0000000000), 0x9, 0x400000) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000340)={0x76cb7a9c5b8585bc, 0xe, 0x4, 0x800}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) openat$random(0xffffff9c, &(0x7f0000000400), 0x90201, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffeb, 0xfff3}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84", 0x4b}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): audit: type=1326 audit(1755669935.031:21843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.1.1697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 310.486311][T12189] overlay: ./bus is not a directory [ 310.502921][ T40] audit: type=1326 audit(1755669935.041:21844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.1.1697" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 310.510952][ T40] audit: type=1326 audit(1755669935.041:21845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.1.1697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 310.520481][ T40] audit: type=1326 audit(1755669935.041:21846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.1.1697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 310.584250][ T5979] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 310.619068][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1702'. [ 310.635389][ T40] audit: type=1326 audit(1755669935.191:21847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1703" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 310.738286][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1703'. [ 310.911201][T12218] bond2: (slave bond3): Releasing backup interface [ 310.916508][T12218] bond4: (slave vlan2): Releasing active interface [ 310.921278][T12218] bond5: (slave ip6erspan0): Releasing active interface [ 310.930844][T12218] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 310.938019][T12218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.941695][T12218] bond0: (slave wlan1): Opening slave failed [ 311.444041][T12220] 9pnet_fd: Insufficient options for proto=fd [ 311.496359][ T40] audit: type=1326 audit(1755669936.051:21848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.0.1707" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 311.539215][ T59] usb 6-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 311.547600][ T59] usb 6-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 311.550918][ T59] keyspan_pda 6-1:9.0: probe with driver keyspan_pda failed with error -2 [ 311.557877][ T59] keyspan_pda 6-1:9.213: Keyspan PDA - (prerenumeration) converter detected [ 311.560882][ T59] usb 6-1: ezusb_set_reset-1 failed: -71 [ 311.563009][ T59] usb 6-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 311.565931][ T59] usb 6-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 311.675749][T12235] input: syz1 as /devices/virtual/input/input20 [ 311.687335][T12224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1706'. [ 311.852914][ T5988] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 313.500908][T12282] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1723'. [ 313.503998][T12282] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1723'. [ 314.073011][T12303] nfs: Unknown parameter 'fowner' [ 314.483267][T12328] nfs: Unknown parameter 'fowner' [ 314.519775][T12332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 314.642665][ T5988] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 314.645387][ T5988] Bluetooth: hci3: Injecting HCI hardware error event [ 314.652702][ T5988] Bluetooth: hci3: hardware error 0x00 [ 314.779073][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1745'. [ 314.961011][T12349] netlink: 884 bytes leftover after parsing attributes in process `syz.2.1749'. [ 315.226282][T12352] nfs: Unknown parameter 'fowner' [ 315.785679][ T40] audit: type=1326 audit(1755669940.342:21849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.2.1751" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x0 [ 315.888161][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1751'. [ 316.654000][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.656515][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.732912][ T5988] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 317.111602][ T40] audit: type=1326 audit(1755669941.662:21850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.3.1758" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 317.212819][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1758'. [ 319.000680][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 319.089720][T12427] netlink: 'syz.2.1768': attribute type 6 has an invalid length. [ 319.095100][T12427] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1768'. [ 319.829618][T12438] veth0: entered promiscuous mode [ 319.859932][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 319.953848][ T40] audit: type=1326 audit(1755669944.512:21851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.1.1781" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 319.991253][T12460] tipc: Enabled bearer , priority 0 [ 319.995787][T12460] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.998863][T12460] tipc: Resetting bearer [ 320.004071][T12458] tipc: Disabling bearer [ 320.007883][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1781'. [ 320.819844][T12479] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1790'. [ 321.037806][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 321.054253][T12482] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 321.057377][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 321.247502][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 321.251160][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 321.367447][T12494] syzkaller1: entered promiscuous mode [ 321.369490][T12494] syzkaller1: entered allmulticast mode [ 321.372948][T12494] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 321.445925][T12498] lo speed is unknown, defaulting to 1000 [ 321.583879][ T40] audit: type=1326 audit(1755669946.142:21852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12497 comm="syz.0.1797" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 322.280204][T12518] kAFS: No cell specified [ 322.406965][T12529] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 322.409277][T12529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 322.412668][T12529] vhci_hcd vhci_hcd.0: Device attached [ 322.500496][T12536] nfs: Unknown parameter 'fowner' [ 322.586729][T12530] vhci_hcd: connection closed [ 322.586901][ T8349] vhci_hcd: stop threads [ 322.589847][ T8349] vhci_hcd: release socket [ 322.591887][ T8349] vhci_hcd: disconnect device [ 322.602237][ T34] vhci_hcd: vhci_device speed not set [ 324.196735][ T40] audit: type=1326 audit(1755669948.752:21853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12575 comm="syz.0.1821" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 324.241496][T12573] syz.3.1820: attempt to access beyond end of device [ 324.241496][T12573] md0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 324.245910][T12573] EXT4-fs (md0): unable to read superblock [ 324.252605][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1821'. [ 325.750222][T12611] nfs: Unknown parameter '00000000000000000000' [ 325.786942][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 326.114309][ T40] audit: type=1326 audit(1755669950.672:21854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.3.1833" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 326.832360][T12642] nfs: Unknown parameter '00000000000000000000' [ 327.652923][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1845'. [ 327.679921][T12660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1846'. [ 327.691973][T12661] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1846'. [ 327.797931][ T40] audit: type=1326 audit(1755669952.352:21855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.2.1851" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x0 [ 327.922861][ T40] audit: type=1326 audit(1755669952.482:21856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12677 comm="syz.3.1852" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 328.180598][T12691] FAULT_INJECTION: forcing a failure. [ 328.180598][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 328.184730][T12691] CPU: 3 UID: 0 PID: 12691 Comm: syz.1.1856 Not tainted syzkaller #0 PREEMPT(full) [ 328.184746][T12691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.184753][T12691] Call Trace: [ 328.184758][T12691] [ 328.184763][T12691] dump_stack_lvl+0x16c/0x1f0 [ 328.184781][T12691] should_fail_ex+0x512/0x640 [ 328.184798][T12691] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 328.184816][T12691] should_failslab+0xc2/0x120 [ 328.184831][T12691] __kmalloc_noprof+0xd2/0x510 [ 328.184862][T12691] ? __pfx___might_resched+0x10/0x10 [ 328.184876][T12691] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 328.184894][T12691] ? __mutex_lock+0x1c5/0x1060 [ 328.184909][T12691] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 328.184926][T12691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.184941][T12691] ? rcu_is_watching+0x12/0xc0 [ 328.184955][T12691] ? bpf_lsm_capable+0x9/0x10 [ 328.184966][T12691] ? security_capable+0x7e/0x260 [ 328.184978][T12691] genl_rcv_msg+0x55c/0x800 [ 328.184995][T12691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.185010][T12691] ? __pfx_netlbl_unlabel_staticremovedef+0x10/0x10 [ 328.185027][T12691] netlink_rcv_skb+0x155/0x420 [ 328.185041][T12691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.185057][T12691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.185074][T12691] ? netlink_deliver_tap+0x1ae/0xd30 [ 328.185087][T12691] ? is_vmalloc_addr+0x86/0xa0 [ 328.185099][T12691] genl_rcv+0x28/0x40 [ 328.185113][T12691] netlink_unicast+0x5aa/0x870 [ 328.185128][T12691] ? __pfx_netlink_unicast+0x10/0x10 [ 328.185142][T12691] ? __pfx___might_resched+0x10/0x10 [ 328.185154][T12691] netlink_sendmsg+0x8d1/0xdd0 [ 328.185169][T12691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.185183][T12691] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 328.185197][T12691] ____sys_sendmsg+0xa95/0xc70 [ 328.185214][T12691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.185230][T12691] ? get_compat_msghdr+0x11a/0x170 [ 328.185244][T12691] ? kstrtouint_from_user+0x13c/0x1d0 [ 328.185258][T12691] ___sys_sendmsg+0x134/0x1d0 [ 328.185271][T12691] ? get_pid_task+0xfc/0x250 [ 328.185285][T12691] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.185301][T12691] ? rcu_is_watching+0x12/0xc0 [ 328.185316][T12691] __sys_sendmsg+0x16d/0x220 [ 328.185329][T12691] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.185345][T12691] ? rcu_is_watching+0x12/0xc0 [ 328.185361][T12691] __do_fast_syscall_32+0x7c/0x3a0 [ 328.185376][T12691] do_fast_syscall_32+0x32/0x80 [ 328.185390][T12691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.185404][T12691] RIP: 0023:0xf70ce579 [ 328.185413][T12691] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.185424][T12691] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 328.185435][T12691] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 328.185441][T12691] RDX: 0000000024008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.185448][T12691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.185454][T12691] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.185460][T12691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.185469][T12691] [ 328.306789][T12693] tmpfs: Unknown parameter 'Tsrquota' [ 329.732097][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 330.460066][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 330.503786][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 330.511598][ T10] usb 5-1: config 13 has an invalid interface number: 90 but max is 0 [ 330.520976][ T10] usb 5-1: config 13 has no interface number 0 [ 330.523447][ T10] usb 5-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 330.529140][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 330.532772][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.536214][ T10] usb 5-1: Product: syz [ 330.537738][ T10] usb 5-1: Manufacturer: syz [ 330.539710][ T10] usb 5-1: SerialNumber: syz [ 330.811334][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.871389][ T10] snd-usb-audio 5-1:13.90: probe with driver snd-usb-audio failed with error -2 [ 330.882664][ T10] usb 5-1: USB disconnect, device number 4 [ 330.903045][T11527] udevd[11527]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.456321][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 332.138522][T12779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1881'. [ 332.810888][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1886'. [ 334.434126][T12827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.962140][T12846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 334.963992][T12846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.966832][T12846] vhci_hcd vhci_hcd.0: Device attached [ 335.228945][T12850] lo speed is unknown, defaulting to 1000 [ 335.231532][ T6008] usb 40-1: SetAddress Request (6) to port 0 [ 335.236062][ T6008] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 335.587092][T12847] vhci_hcd: connection reset by peer [ 335.589203][ T8349] vhci_hcd: stop threads [ 335.590569][ T8349] vhci_hcd: release socket [ 335.592686][ T8349] vhci_hcd: disconnect device [ 335.613086][T12862] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1904'. [ 335.920283][T12866] lo speed is unknown, defaulting to 1000 [ 337.131069][ T40] audit: type=1326 audit(1755669961.683:21857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.139927][ T40] audit: type=1326 audit(1755669961.683:21858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.148558][ T40] audit: type=1326 audit(1755669961.683:21859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.156591][ T40] audit: type=1326 audit(1755669961.683:21860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.167761][ T40] audit: type=1326 audit(1755669961.683:21861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.174724][ T40] audit: type=1326 audit(1755669961.703:21862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.181679][ T40] audit: type=1326 audit(1755669961.703:21863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.184030][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 337.189015][ T40] audit: type=1326 audit(1755669961.703:21864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.200320][ T40] audit: type=1326 audit(1755669961.703:21865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.208004][ T40] audit: type=1326 audit(1755669961.703:21866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 339.222454][T12959] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 339.249509][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.252908][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.255635][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.258749][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.261635][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.279537][T12960] lo speed is unknown, defaulting to 1000 [ 339.345182][T12960] chnl_net:caif_netlink_parms(): no params data found [ 339.410993][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.413412][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.415693][T12960] bridge_slave_0: entered allmulticast mode [ 339.418038][T12960] bridge_slave_0: entered promiscuous mode [ 339.420726][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.423655][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.426140][T12960] bridge_slave_1: entered allmulticast mode [ 339.428572][T12960] bridge_slave_1: entered promiscuous mode [ 339.475361][T12960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.481597][T12960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.485569][ T1144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.516521][T12960] team0: Port device team_slave_0 added [ 339.521046][T12960] team0: Port device team_slave_1 added [ 339.552885][ T1144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.559132][T12960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.562382][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.573388][T12960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.578792][T12960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.581592][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.593002][T12960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.612003][ T1144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.634216][T12960] hsr_slave_0: entered promiscuous mode [ 339.636432][T12960] hsr_slave_1: entered promiscuous mode [ 339.638377][T12960] debugfs: 'hsr0' already exists in 'hsr' [ 339.640134][T12960] Cannot create hsr debugfs directory [ 339.660902][ T1144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.789895][ T1144] bond0 (unregistering): Released all slaves [ 339.801944][ T1144] bond1 (unregistering): Released all slaves [ 339.871437][ T1144] tipc: Left network mode [ 340.198368][ T1144] hsr_slave_0: left promiscuous mode [ 340.201058][ T1144] hsr_slave_1: left promiscuous mode [ 340.208237][ T1144] veth1_macvtap: left promiscuous mode [ 340.210582][ T1144] veth0_macvtap: left promiscuous mode [ 340.321616][ T6008] usb 40-1: device descriptor read/8, error -110 [ 340.631645][T12960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.636716][T12960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.641956][T12960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.647558][T12960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.686978][T12960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.698043][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.704007][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.706776][ T8346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.711731][ T6008] usb usb40-port1: attempt power cycle [ 340.714846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.717966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.828440][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.848037][T12960] veth0_vlan: entered promiscuous mode [ 340.852554][T12960] veth1_vlan: entered promiscuous mode [ 340.864613][T12960] veth0_macvtap: entered promiscuous mode [ 340.868099][T12960] veth1_macvtap: entered promiscuous mode [ 340.877894][T12960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.884465][T12960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.890839][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.894518][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.897941][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.900865][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.906451][ T1144] IPVS: stop unused estimator thread 0... [ 340.920921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.925993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.933715][ T8349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.942431][ T8349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.281236][ T5988] Bluetooth: hci4: command tx timeout [ 341.281296][ T6061] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 341.304050][ T6008] usb usb40-port1: unable to enumerate USB device [ 341.310259][ T6008] IPVS: starting estimator thread 0... [ 341.411249][T13022] IPVS: using max 40 ests per chain, 96000 per kthread [ 341.441459][ T6061] usb 8-1: Using ep0 maxpacket: 8 [ 341.454969][ T6061] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.520778][ T6061] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.533371][ T6061] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.538695][ T6061] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.551235][ T6061] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.564145][ T6061] usbtmc 8-1:16.0: bulk endpoints not found [ 341.767033][T13013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.773800][T13013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.106974][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 343.351107][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 343.371306][ T5988] Bluetooth: hci4: command tx timeout [ 343.520990][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 343.523777][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 343.527332][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.530453][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.533747][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.537851][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.541104][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.748464][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 343.750702][ T10] usbtmc 7-1:16.0: can't read capabilities [ 343.858033][T13057] 9pnet_fd: Insufficient options for proto=fd [ 344.023915][T13064] ptrace attach of ""[13063] was attempted by "/syz-executor exec"[13064] [ 344.057022][ T841] usb 8-1: USB disconnect, device number 15 [ 344.252769][ T10] usb 7-1: USB disconnect, device number 5 [ 345.089546][T13080] overlayfs: missing 'lowerdir' [ 345.440911][ T5988] Bluetooth: hci4: command tx timeout [ 345.637649][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 345.640951][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 345.641702][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.655841][T13085] bridge_slave_1 (unregistering): left allmulticast mode [ 345.658318][T13085] bridge_slave_1 (unregistering): left promiscuous mode [ 345.660779][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.341026][T13095] netlink: 'syz.2.1960': attribute type 39 has an invalid length. [ 346.887463][T13116] nfs: Unknown parameter 'fowner' [ 346.937695][T13115] input: syz1 as /devices/virtual/input/input21 [ 347.273763][T13119] bond1: (slave gretap1): Releasing active interface [ 347.463405][T13124] kvm: user requested TSC rate below hardware speed [ 347.476531][T13119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1968'. [ 347.484860][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 347.521115][ T5988] Bluetooth: hci4: command tx timeout [ 347.677302][T13129] FAULT_INJECTION: forcing a failure. [ 347.677302][T13129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.682318][T13129] CPU: 3 UID: 0 PID: 13129 Comm: syz.2.1971 Not tainted syzkaller #0 PREEMPT(full) [ 347.682334][T13129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.682341][T13129] Call Trace: [ 347.682344][T13129] [ 347.682349][T13129] dump_stack_lvl+0x16c/0x1f0 [ 347.682366][T13129] should_fail_ex+0x512/0x640 [ 347.682383][T13129] should_fail_alloc_page+0xe7/0x130 [ 347.682398][T13129] prepare_alloc_pages+0x3c2/0x610 [ 347.682412][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.682424][T13129] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 347.682438][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.682447][T13129] ? trace_mm_page_alloc+0x11f/0x1a0 [ 347.682462][T13129] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 347.682475][T13129] ? __pfx_stack_trace_save+0x10/0x10 [ 347.682487][T13129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 347.682499][T13129] ? stack_depot_save_flags+0x29/0x9c0 [ 347.682513][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.682524][T13129] ? alloc_vmap_area+0x645/0x29c0 [ 347.682538][T13129] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 347.682548][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682565][T13129] ? __sys_bpf+0x3f3c/0x4de0 [ 347.682579][T13129] ? __ia32_sys_bpf+0x76/0xe0 [ 347.682594][T13129] ? __do_fast_syscall_32+0x7c/0x3a0 [ 347.682607][T13129] ? do_fast_syscall_32+0x32/0x80 [ 347.682620][T13129] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.682635][T13129] alloc_pages_bulk_noprof+0x71c/0x1410 [ 347.682647][T13129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.682663][T13129] ? policy_nodemask+0xea/0x4e0 [ 347.682676][T13129] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 347.682689][T13129] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 347.682705][T13129] kasan_populate_vmalloc+0xf1/0x1f0 [ 347.682717][T13129] alloc_vmap_area+0x959/0x29c0 [ 347.682734][T13129] ? __pfx_alloc_vmap_area+0x10/0x10 [ 347.682749][T13129] __get_vm_area_node+0x1ca/0x330 [ 347.682765][T13129] __vmalloc_node_range_noprof+0x271/0x14b0 [ 347.682775][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682791][T13129] ? __ia32_sys_bpf+0x76/0xe0 [ 347.682806][T13129] ? __do_fast_syscall_32+0x7c/0x3a0 [ 347.682834][T13129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.682862][T13129] ? policy_nodemask+0xea/0x4e0 [ 347.682876][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682894][T13129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.682905][T13129] ? ___kmalloc_large_node+0xed/0x160 [ 347.682921][T13129] __kvmalloc_node_noprof+0x30a/0x620 [ 347.682932][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682949][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682967][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682983][T13129] bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.682999][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.683011][T13129] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 347.683027][T13129] ? __fget_files+0x20e/0x3c0 [ 347.683040][T13129] ? fput+0x9b/0xd0 [ 347.683053][T13129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.683068][T13129] __sys_bpf+0x3f3c/0x4de0 [ 347.683083][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.683093][T13129] ? __pfx___sys_bpf+0x10/0x10 [ 347.683107][T13129] ? ksys_write+0x190/0x250 [ 347.683118][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.683133][T13129] ? fput+0x9b/0xd0 [ 347.683146][T13129] ? ksys_write+0x1ac/0x250 [ 347.683158][T13129] __ia32_sys_bpf+0x76/0xe0 [ 347.683178][T13129] __do_fast_syscall_32+0x7c/0x3a0 [ 347.683192][T13129] do_fast_syscall_32+0x32/0x80 [ 347.683205][T13129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.683217][T13129] RIP: 0023:0xf705e579 [ 347.683226][T13129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 347.683237][T13129] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 347.683248][T13129] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800005c0 [ 347.683254][T13129] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.683260][T13129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.683266][T13129] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 347.683272][T13129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.683280][T13129] [ 347.684192][T13129] syz.2.1971: vmalloc error: size 6280512, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.917164][T13129] CPU: 3 UID: 0 PID: 13129 Comm: syz.2.1971 Not tainted syzkaller #0 PREEMPT(full) [ 347.917179][T13129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.917186][T13129] Call Trace: [ 347.917190][T13129] [ 347.917196][T13129] dump_stack_lvl+0x16c/0x1f0 [ 347.917214][T13129] warn_alloc+0x248/0x3a0 [ 347.917227][T13129] ? __pfx_warn_alloc+0x10/0x10 [ 347.917239][T13129] ? kfree+0x2b4/0x4d0 [ 347.917251][T13129] ? __get_vm_area_node+0x208/0x330 [ 347.917267][T13129] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 347.917277][T13129] ? __ia32_sys_bpf+0x76/0xe0 [ 347.917293][T13129] ? __do_fast_syscall_32+0x7c/0x3a0 [ 347.917306][T13129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.917324][T13129] ? policy_nodemask+0xea/0x4e0 [ 347.917337][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.917356][T13129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.917367][T13129] ? ___kmalloc_large_node+0xed/0x160 [ 347.917383][T13129] __kvmalloc_node_noprof+0x30a/0x620 [ 347.917394][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.917411][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.917428][T13129] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.917444][T13129] bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 347.917460][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.917473][T13129] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 347.917489][T13129] ? __fget_files+0x20e/0x3c0 [ 347.917502][T13129] ? fput+0x9b/0xd0 [ 347.917515][T13129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.917530][T13129] __sys_bpf+0x3f3c/0x4de0 [ 347.917545][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.917555][T13129] ? __pfx___sys_bpf+0x10/0x10 [ 347.917569][T13129] ? ksys_write+0x190/0x250 [ 347.917580][T13129] ? rcu_is_watching+0x12/0xc0 [ 347.917595][T13129] ? fput+0x9b/0xd0 [ 347.917608][T13129] ? ksys_write+0x1ac/0x250 [ 347.917621][T13129] __ia32_sys_bpf+0x76/0xe0 [ 347.917636][T13129] __do_fast_syscall_32+0x7c/0x3a0 [ 347.917650][T13129] do_fast_syscall_32+0x32/0x80 [ 347.917663][T13129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.917677][T13129] RIP: 0023:0xf705e579 [ 347.917685][T13129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 347.917695][T13129] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 347.917705][T13129] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800005c0 [ 347.917712][T13129] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.917718][T13129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.917724][T13129] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 347.917729][T13129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.917738][T13129] [ 347.917742][T13129] Mem-Info: [ 348.024695][T13129] active_anon:7942 inactive_anon:71 isolated_anon:0 [ 348.024695][T13129] active_file:15873 inactive_file:16080 isolated_file:0 [ 348.024695][T13129] unevictable:1768 dirty:666 writeback:0 [ 348.024695][T13129] slab_reclaimable:7875 slab_unreclaimable:64209 [ 348.024695][T13129] mapped:24353 shmem:4281 pagetables:1338 [ 348.024695][T13129] sec_pagetables:320 bounce:0 [ 348.024695][T13129] kernel_misc_reclaimable:0 [ 348.024695][T13129] free:49869 free_pcp:17164 free_cma:0 [ 348.042378][T13129] Node 0 active_anon:52kB inactive_anon:212kB active_file:168kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:44kB writeback:0kB shmem:4648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8920kB pagetables:1832kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 348.060992][T13129] Node 1 active_anon:31716kB inactive_anon:72kB active_file:63324kB inactive_file:64300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97272kB dirty:2620kB writeback:0kB shmem:12476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5052kB pagetables:3520kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB [ 348.071517][T13129] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:84kB free_cma:0kB [ 348.081231][T13129] lowmem_reserve[]: 0 288 288 288 288 [ 348.091200][T13129] Node 0 DMA32 free:17752kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1740KB active_anon:48kB inactive_anon:212kB active_file:168kB inactive_file:20kB unevictable:3536kB writepending:44kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:10404kB local_pcp:1920kB free_cma:0kB [ 348.110875][T13129] lowmem_reserve[]: 0 0 0 0 0 [ 348.121110][T13129] Node 1 DMA32 free:179640kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31716kB inactive_anon:72kB active_file:63324kB inactive_file:64300kB unevictable:3536kB writepending:2620kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:57832kB local_pcp:14108kB free_cma:0kB [ 348.137846][T13129] lowmem_reserve[]: 0 0 0 0 0 [ 348.139853][T13129] Node 0 DMA: 13*4kB (U) 32*8kB (U) 7*16kB (UM) 2*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2084kB [ 348.145033][T13129] Node 0 DMA32: 48*4kB (UMEH) 219*8kB (MEH) 104*16kB (MEH) 92*32kB (UMEH) 55*64kB (UMEH) 24*128kB (UMEH) 8*256kB (UM) 3*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 17752kB [ 348.150755][T13129] Node 1 DMA32: 1021*4kB (UM) 902*8kB (UME) 570*16kB (UME) 197*32kB (UME) 120*64kB (UME) 99*128kB (UME) 76*256kB (UME) 61*512kB (UME) 56*1024kB (UM) 8*2048kB (UM) 2*4096kB (M) = 179684kB [ 348.156854][T13129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.160259][T13129] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 348.170853][T13129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.175187][T13129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.178136][T13129] 36753 total pagecache pages [ 348.179680][T13129] 495 pages in swap cache [ 348.181144][T13129] Free swap = 117800kB [ 348.184470][T13129] Total swap = 124996kB [ 348.185932][T13129] 524155 pages RAM [ 348.187190][T13129] 0 pages HighMem/MovableOnly [ 348.191077][T13129] 209473 pages reserved [ 348.200816][T13129] 0 pages cma reserved [ 348.744040][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 348.744051][ T40] audit: type=1800 audit(1755669973.304:21936): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1973" name="bus" dev="overlay" ino=2431 res=0 errno=0 [ 349.309815][T13154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1979'. [ 350.710010][T13173] nfs: Unknown parameter 'fowner' [ 351.736242][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 351.805242][ T40] audit: type=1326 audit(1755669976.364:21937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1989" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 351.911117][T13189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1989'. [ 352.160264][ T40] audit: type=1326 audit(1755669976.714:21938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz.2.1992" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 352.212495][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 352.925125][T13214] netlink: 'syz.0.1998': attribute type 25 has an invalid length. [ 353.480681][ T40] audit: type=1326 audit(1755669978.044:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.3.2004" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 354.149291][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 354.203933][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 354.590809][ T7386] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 354.740495][ T7386] usb 8-1: Using ep0 maxpacket: 32 [ 354.744201][ T7386] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 354.747676][ T7386] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 354.751419][ T7386] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 354.754984][ T7386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.759017][ T7386] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.763081][ T7386] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.768442][ T7386] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 354.772339][ T7386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.777388][ T7386] usb 8-1: config 0 descriptor?? [ 355.021642][ T40] audit: type=1326 audit(1755669979.584:21940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.1.2020" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 356.077027][T13290] netlink: 'syz.0.2024': attribute type 8 has an invalid length. [ 356.094754][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 356.127736][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2024'. [ 357.547320][ T7386] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 357.563631][ T7386] usb 8-1: USB disconnect, device number 16 [ 357.567193][ T7386] usblp0: removed [ 357.658086][T13296] ubi31: attaching mtd0 [ 357.660873][T13296] ubi31: scanning is finished [ 357.662656][T13296] ubi31: empty MTD device detected [ 357.730774][T13296] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 357.733223][T13296] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 357.740448][T13296] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 357.755574][T13296] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 357.758742][T13296] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 357.790661][T13296] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 357.793247][T13296] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1720191989 [ 357.796326][T13296] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 357.812634][T13315] ubi31: background thread "ubi_bgt31d" started, PID 13315 [ 357.817648][T13316] syz.3.2030 (13316): drop_caches: 2 [ 357.819459][T13316] syz.3.2030 (13316): drop_caches: 2 [ 358.740639][T13335] kvm: pic: non byte read [ 358.743285][T13335] kvm: pic: non byte write [ 358.821657][T13337] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 358.824752][T13337] /dev/nullb0: Can't open blockdev [ 358.957442][T13342] FAULT_INJECTION: forcing a failure. [ 358.957442][T13342] name failslab, interval 1, probability 0, space 0, times 0 [ 358.961423][T13342] CPU: 3 UID: 0 PID: 13342 Comm: syz.1.2037 Not tainted syzkaller #0 PREEMPT(full) [ 358.961438][T13342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 358.961445][T13342] Call Trace: [ 358.961449][T13342] [ 358.961453][T13342] dump_stack_lvl+0x16c/0x1f0 [ 358.961470][T13342] should_fail_ex+0x512/0x640 [ 358.961487][T13342] should_failslab+0xc2/0x120 [ 358.961500][T13342] __kmalloc_cache_noprof+0x6a/0x3e0 [ 358.961511][T13342] ? nfnl_err_add+0x4e/0x350 [ 358.961529][T13342] nfnl_err_add+0x4e/0x350 [ 358.961544][T13342] nfnetlink_rcv_batch+0xc95/0x2330 [ 358.961557][T13342] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 358.961567][T13342] ? rcu_is_watching+0x12/0xc0 [ 358.961579][T13342] ? __local_bh_enable_ip+0xa4/0x120 [ 358.961591][T13342] ? __dev_queue_xmit+0xaf1/0x4490 [ 358.961601][T13342] ? __dev_queue_xmit+0xb12/0x4490 [ 358.961614][T13342] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.961629][T13342] ? __nla_parse+0x40/0x60 [ 358.961640][T13342] nfnetlink_rcv+0x3c1/0x430 [ 358.961649][T13342] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.961659][T13342] netlink_unicast+0x5aa/0x870 [ 358.961674][T13342] ? __pfx_netlink_unicast+0x10/0x10 [ 358.961686][T13342] ? __asan_memset+0x23/0x50 [ 358.961696][T13342] ? __build_skb_around+0x278/0x3b0 [ 358.961706][T13342] ? is_vmalloc_addr+0x86/0xa0 [ 358.961719][T13342] netlink_sendmsg+0x8d1/0xdd0 [ 358.961733][T13342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.961746][T13342] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 358.961759][T13342] ____sys_sendmsg+0xa95/0xc70 [ 358.961775][T13342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.961790][T13342] ? get_compat_msghdr+0x11a/0x170 [ 358.961804][T13342] ? kstrtouint_from_user+0x13c/0x1d0 [ 358.961818][T13342] ___sys_sendmsg+0x134/0x1d0 [ 358.961830][T13342] ? get_pid_task+0xfc/0x250 [ 358.961843][T13342] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.961858][T13342] ? rcu_is_watching+0x12/0xc0 [ 358.961872][T13342] __sys_sendmsg+0x16d/0x220 [ 358.961885][T13342] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.961900][T13342] ? rcu_is_watching+0x12/0xc0 [ 358.961911][T13342] __do_fast_syscall_32+0x7c/0x3a0 [ 358.961925][T13342] do_fast_syscall_32+0x32/0x80 [ 358.961938][T13342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.961952][T13342] RIP: 0023:0xf70ce579 [ 358.961960][T13342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 358.961971][T13342] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 358.961982][T13342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 358.961988][T13342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.961994][T13342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.962000][T13342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 358.962006][T13342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.962015][T13342] [ 360.212130][T13379] netlink: 'syz.0.2046': attribute type 4 has an invalid length. [ 360.687134][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2049'. [ 360.835479][ T40] audit: type=1326 audit(1755669985.394:21941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.2.2050" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 360.937386][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'. [ 361.423938][T13410] nfs: Unknown parameter 'fowner' [ 361.507715][T13414] netlink: 'syz.1.2057': attribute type 8 has an invalid length. [ 362.111513][ T40] audit: type=1326 audit(1755669986.674:21942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13433 comm="syz.3.2062" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 362.121345][ T40] audit: type=1326 audit(1755669986.674:21943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.2.2064" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 362.231744][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2064'. [ 362.538778][T13442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.159798][T13465] lo speed is unknown, defaulting to 1000 [ 363.163062][T13465] lo speed is unknown, defaulting to 1000 [ 363.165966][T13465] lo speed is unknown, defaulting to 1000 [ 363.233009][T13465] infiniband sz1: set active [ 363.234833][ T841] lo speed is unknown, defaulting to 1000 [ 363.237370][T13465] infiniband sz1: added lo [ 363.250504][T13465] RDS/IB: sz1: added [ 363.251847][T13465] smc: adding ib device sz1 with port count 1 [ 363.253966][T13465] smc: ib device sz1 port 1 has pnetid [ 363.256106][ T53] lo speed is unknown, defaulting to 1000 [ 363.258171][T13465] lo speed is unknown, defaulting to 1000 [ 363.323842][T13465] lo speed is unknown, defaulting to 1000 [ 363.372304][T13465] lo speed is unknown, defaulting to 1000 [ 363.445786][T13465] lo speed is unknown, defaulting to 1000 [ 363.587910][T13485] nfs: Unknown parameter 'fowner' [ 364.433448][T11527] block nbd3: shutting down sockets [ 364.807848][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 365.439793][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 365.600936][ T53] usb 5-1: config 0 has no interfaces? [ 365.604322][ T53] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 365.606883][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.609461][ T53] usb 5-1: Product: syz [ 365.610936][ T53] usb 5-1: Manufacturer: syz [ 365.612518][ T53] usb 5-1: SerialNumber: syz [ 365.615029][ T53] usb 5-1: config 0 descriptor?? [ 366.134684][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 366.141253][T13531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2093'. [ 366.145557][T13531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2093'. [ 367.144136][ T40] audit: type=1326 audit(1755669991.705:21944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.2.2099" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 367.246327][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'. [ 367.286923][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.290852][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.437469][T13555] lo speed is unknown, defaulting to 1000 [ 367.441135][T13555] lo speed is unknown, defaulting to 1000 [ 367.968712][ T6034] usb 5-1: USB disconnect, device number 5 [ 368.199171][T13576] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 368.231459][T13576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.234455][T13576] bond1: (slave bond2): making interface the new active one [ 368.237315][T13576] bond1: (slave bond2): Enslaving as an active interface with an up link [ 368.894923][T13590] fuse: Bad value for 'fd' [ 368.940964][ T40] audit: type=1326 audit(1755669993.505:21945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.0.2110" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 369.335137][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'. [ 369.823436][T13617] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 369.867190][T13619] fuse: Bad value for 'fd' [ 370.169701][ T5988] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 370.172902][ T5988] Bluetooth: hci4: Injecting HCI hardware error event [ 370.175618][ T5988] Bluetooth: hci4: hardware error 0x00 [ 370.190553][T13627] overlay: ./file0 is not a directory [ 370.199567][ T53] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 370.349631][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 370.353169][ T53] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 370.356395][ T53] usb 8-1: config 0 has no interface number 0 [ 370.358922][ T53] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.363446][ T53] usb 8-1: config 0 interface 85 has no altsetting 0 [ 370.368198][ T53] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 370.371634][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.374367][ T53] usb 8-1: Product: syz [ 370.375717][ T53] usb 8-1: Manufacturer: syz [ 370.377305][ T53] usb 8-1: SerialNumber: syz [ 370.379626][ T53] usb 8-1: config 0 descriptor?? [ 370.791718][ T53] appletouch 8-1:0.85: Failed to read mode from device. [ 370.799613][ T53] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 370.804682][ T53] usb 8-1: USB disconnect, device number 18 [ 371.213542][ T40] audit: type=1326 audit(1755669995.775:21946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13640 comm="syz.1.2125" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 371.309656][T13645] nfs: Unknown parameter 'fowner' [ 371.319571][ T7386] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 371.790894][ T7386] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.247990][ T5988] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 372.431267][ T7386] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 372.434526][ T7386] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.437335][ T7386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 372.472541][ T7386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 372.480813][ T7386] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.484205][ T7386] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.486977][ T7386] usb 8-1: Product: syz [ 372.488222][ T7386] usb 8-1: Manufacturer: syz [ 372.492197][ T7386] cdc_wdm 8-1:1.0: skipping garbage [ 372.493883][ T7386] cdc_wdm 8-1:1.0: skipping garbage [ 372.496040][ T7386] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 372.497943][ T7386] cdc_wdm 8-1:1.0: Unknown control protocol [ 372.595975][T13661] nfs: Unknown parameter 'fowner' [ 372.698051][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.700426][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.703328][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.705546][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.707659][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.709745][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.711706][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.713771][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.715963][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.718307][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.720578][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.722655][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.724878][ T6034] usb 8-1: USB disconnect, device number 19 [ 372.726775][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.726786][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.726793][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 372.960296][ T59] usb 6-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 372.963381][ T59] usb 6-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 372.965770][ T59] keyspan_pda 6-1:9.213: probe with driver keyspan_pda failed with error -2 [ 372.973240][ T59] usb 6-1: USB disconnect, device number 9 [ 373.595815][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 373.682138][T13673] overlayfs: missing 'workdir' [ 373.738479][T13673] lo speed is unknown, defaulting to 1000 [ 373.752405][T13673] lo speed is unknown, defaulting to 1000 [ 374.366313][T13679] mkiss: ax0: crc mode is auto. [ 376.774868][T13712] lo speed is unknown, defaulting to 1000 [ 376.779779][T13712] lo speed is unknown, defaulting to 1000 [ 377.106612][ T40] audit: type=1326 audit(1755670001.665:21947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.3.2148" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 378.080801][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.082931][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.286661][T13748] blk_print_req_error: 138 callbacks suppressed [ 378.286672][T13748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.291917][T13748] buffer_io_error: 138 callbacks suppressed [ 378.291927][T13748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.292445][T13749] nfs: Unknown parameter 'fowner' [ 378.294053][T13748] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.301913][T13748] Buffer I/O error on dev nbd0, logical block 1, async page read [ 378.304405][T13748] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.307265][T13748] Buffer I/O error on dev nbd0, logical block 2, async page read [ 378.310779][T13748] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.313666][T13748] Buffer I/O error on dev nbd0, logical block 3, async page read [ 378.316608][T13748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.319773][T13748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.380355][T13748] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.392044][T13748] Buffer I/O error on dev nbd0, logical block 1, async page read [ 378.398317][T13748] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.401492][T13748] Buffer I/O error on dev nbd0, logical block 2, async page read [ 378.404042][T13748] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.406929][T13748] Buffer I/O error on dev nbd0, logical block 3, async page read [ 378.409725][T13748] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.414638][T13748] Buffer I/O error on dev nbd0, logical block 0, async page read [ 378.417230][T13748] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.581322][T13748] Buffer I/O error on dev nbd0, logical block 1, async page read [ 378.865121][T13748] ldm_validate_partition_table(): Disk read failed. [ 378.893566][T13748] Dev nbd0: unable to read RDB block 0 [ 378.896881][T13748] nbd0: unable to read partition table [ 379.145720][T13758] nfs: Unknown parameter 'fowner' [ 379.874398][ T40] audit: type=1326 audit(1755670004.435:21948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.3.2160" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 380.408276][ T40] audit: type=1800 audit(1755670004.965:21949): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2164" name="cgroup.controllers" dev="tmpfs" ino=2693 res=0 errno=0 [ 380.493375][T13785] FAULT_INJECTION: forcing a failure. [ 380.493375][T13785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.498263][T13785] CPU: 1 UID: 0 PID: 13785 Comm: syz.1.2165 Not tainted syzkaller #0 PREEMPT(full) [ 380.498279][T13785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.498285][T13785] Call Trace: [ 380.498289][T13785] [ 380.498294][T13785] dump_stack_lvl+0x16c/0x1f0 [ 380.498310][T13785] should_fail_ex+0x512/0x640 [ 380.498326][T13785] should_fail_alloc_page+0xe7/0x130 [ 380.498340][T13785] prepare_alloc_pages+0x3c2/0x610 [ 380.498360][T13785] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 380.498377][T13785] ? arch_stack_walk+0xa6/0x100 [ 380.498393][T13785] ? stack_trace_save+0x8e/0xc0 [ 380.498410][T13785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.498424][T13785] ? rcu_is_watching+0x12/0xc0 [ 380.498436][T13785] ? kasan_save_track+0x14/0x30 [ 380.498447][T13785] ? __kasan_slab_alloc+0x89/0x90 [ 380.498459][T13785] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 380.498471][T13785] ? __pmd_alloc+0xbf/0x930 [ 380.498485][T13785] ? __handle_mm_fault+0xa06/0x2a50 [ 380.498495][T13785] ? handle_mm_fault+0x589/0xd10 [ 380.498504][T13785] ? do_user_addr_fault+0x7a6/0x1370 [ 380.498533][T13785] ? exc_page_fault+0x5c/0xb0 [ 380.498544][T13785] ? asm_exc_page_fault+0x26/0x30 [ 380.498554][T13785] ? __get_user_4+0x14/0x20 [ 380.498564][T13785] ? sctp_getsockopt+0x24d/0x69b0 [ 380.498580][T13785] ? do_sock_getsockopt+0x34a/0x440 [ 380.498595][T13785] ? __sys_getsockopt+0x123/0x1b0 [ 380.498606][T13785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.498626][T13785] ? policy_nodemask+0xea/0x4e0 [ 380.498639][T13785] alloc_pages_mpol+0x1fb/0x550 [ 380.498653][T13785] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 380.498667][T13785] alloc_pages_noprof+0x131/0x390 [ 380.498680][T13785] pte_alloc_one+0x1c/0x3a0 [ 380.498691][T13785] __pte_alloc+0x6d/0x3c0 [ 380.498704][T13785] ? __pfx___pte_alloc+0x10/0x10 [ 380.498717][T13785] ? rcu_is_watching+0x12/0xc0 [ 380.498726][T13785] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.498742][T13785] do_pte_missing+0x285a/0x3ba0 [ 380.498752][T13785] ? do_raw_spin_unlock+0x172/0x230 [ 380.498767][T13785] ? _raw_spin_unlock+0x28/0x50 [ 380.498778][T13785] ? __pmd_alloc+0x3fb/0x930 [ 380.498793][T13785] __handle_mm_fault+0x152a/0x2a50 [ 380.498803][T13785] ? mt_find+0x3ef/0xa30 [ 380.498817][T13785] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.498827][T13785] ? __pfx_mt_find+0x10/0x10 [ 380.498843][T13785] ? find_vma+0xbf/0x140 [ 380.498855][T13785] ? __pfx_find_vma+0x10/0x10 [ 380.498882][T13785] handle_mm_fault+0x589/0xd10 [ 380.498892][T13785] ? __bpf_trace_exceptions+0x1/0x40 [ 380.498908][T13785] do_user_addr_fault+0x7a6/0x1370 [ 380.498923][T13785] ? rcu_is_watching+0x12/0xc0 [ 380.498934][T13785] exc_page_fault+0x5c/0xb0 [ 380.498945][T13785] asm_exc_page_fault+0x26/0x30 [ 380.498954][T13785] RIP: 0010:__get_user_4+0x14/0x20 [ 380.498965][T13785] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 17 04 00 90 90 90 90 90 90 90 90 90 90 [ 380.498976][T13785] RSP: 0018:ffffc900046e7ae8 EFLAGS: 00050283 [ 380.498985][T13785] RAX: 0000000080000140 RBX: 000000000000001e RCX: 0000000000000001 [ 380.498992][T13785] RDX: 00007ffffffff000 RSI: ffffffff8ad26f14 RDI: 0000000000000000 [ 380.499007][T13785] RBP: ffff88806c9c4600 R08: 0000000000000001 R09: 0000000000000000 [ 380.499015][T13785] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000084 [ 380.499021][T13785] R13: 0000000000000084 R14: ffffffff8960f760 R15: 1ffff920008dcf66 [ 380.499028][T13785] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 380.499044][T13785] ? sctp_getsockopt+0x244/0x69b0 [ 380.499060][T13785] sctp_getsockopt+0x24d/0x69b0 [ 380.499074][T13785] ? kstrtouint+0xdd/0x130 [ 380.499086][T13785] ? __pfx_kstrtouint+0x10/0x10 [ 380.499097][T13785] ? __pfx_sctp_getsockopt+0x10/0x10 [ 380.499113][T13785] ? kstrtouint_from_user+0x13c/0x1d0 [ 380.499126][T13785] ? __pfx___might_resched+0x10/0x10 [ 380.499136][T13785] ? rcu_is_watching+0x12/0xc0 [ 380.499145][T13785] ? lock_release+0x201/0x2f0 [ 380.499158][T13785] ? aa_sk_perm+0x2f4/0xb10 [ 380.499171][T13785] ? proc_fail_nth_write+0x9f/0x220 [ 380.499182][T13785] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.499194][T13785] ? ksys_write+0x12a/0x250 [ 380.499205][T13785] ? rcu_is_watching+0x12/0xc0 [ 380.499215][T13785] ? lock_release+0x201/0x2f0 [ 380.499228][T13785] ? aa_sock_opt_perm+0xfd/0x1c0 [ 380.499238][T13785] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 380.499253][T13785] do_sock_getsockopt+0x34a/0x440 [ 380.499269][T13785] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 380.499283][T13785] ? lock_release+0x201/0x2f0 [ 380.499298][T13785] __sys_getsockopt+0x123/0x1b0 [ 380.499311][T13785] __ia32_sys_getsockopt+0xbc/0x160 [ 380.499324][T13785] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 380.499337][T13785] __do_fast_syscall_32+0x7c/0x3a0 [ 380.499351][T13785] do_fast_syscall_32+0x32/0x80 [ 380.499364][T13785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.499376][T13785] RIP: 0023:0xf70ce579 [ 380.499384][T13785] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.499394][T13785] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 380.499403][T13785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 380.499409][T13785] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000080000140 [ 380.499415][T13785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.499421][T13785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 380.499427][T13785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.499435][T13785] [ 380.678099][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.713874][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2168'. [ 380.719452][T13796] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 380.723343][T13796] bridge0: port 2(netdevsim0) entered blocking state [ 380.726992][T13796] bridge0: port 2(netdevsim0) entered disabled state [ 380.731802][T13796] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 380.736414][T13796] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 380.743168][T13796] bridge0: port 2(netdevsim0) entered blocking state [ 380.745975][T13796] bridge0: port 2(netdevsim0) entered forwarding state [ 381.366192][T13821] macsec1: entered allmulticast mode [ 381.367990][T13821] dummy0: entered allmulticast mode [ 381.371113][T13821] dummy0: left allmulticast mode [ 381.414054][T13817] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 381.416127][T13817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.456546][T13817] vhci_hcd vhci_hcd.0: Device attached [ 381.473002][T13817] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 381.475636][T13817] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 381.796321][T13829] input: syz0 as /devices/virtual/input/input25 [ 381.819313][ T29] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 381.973924][T13835] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 382.308976][T13818] vhci_hcd: connection reset by peer [ 382.312657][ T1144] vhci_hcd: stop threads [ 382.314045][ T1144] vhci_hcd: release socket [ 382.315385][ T1144] vhci_hcd: disconnect device [ 382.341015][T13843] ldm_validate_partition_table(): Disk read failed. [ 382.346866][T13843] Dev nbd0: unable to read RDB block 0 [ 382.354467][T13843] nbd0: unable to read partition table [ 383.404227][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 383.430642][T13869] hsr_slave_1 (unregistering): left promiscuous mode [ 383.645871][T13874] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 383.653967][T13874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.684300][T13877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.696879][T13877] bond_slave_0: entered promiscuous mode [ 383.699215][T13877] bond_slave_1: entered promiscuous mode [ 383.701848][T13877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.705994][T13877] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 384.151615][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2199'. [ 384.711853][T13899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2201'. [ 385.034499][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 385.170753][ T40] audit: type=1326 audit(1755670009.736:21950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13903 comm="syz.2.2204" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 385.333413][T13916] netlink: 'syz.3.2206': attribute type 10 has an invalid length. [ 385.336081][T13916] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2206'. [ 385.975575][T13924] tipc: Enabling of bearer rejected, failed to enable media [ 386.216927][ T40] audit: type=1326 audit(1755670010.776:21951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.3.2212" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 386.352238][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 386.961183][ T29] vhci_hcd: vhci_device speed not set [ 387.242598][T13952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.247379][ T10] lo speed is unknown, defaulting to 1000 [ 387.264478][T13952] netlink: 'syz.2.2216': attribute type 21 has an invalid length. [ 387.475896][ T8349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.478370][ T8349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.758699][ T53] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 387.910015][ T53] usb 8-1: config 0 has no interfaces? [ 387.914104][ T53] usb 8-1: New USB device found, idVendor=14aa, idProduct=2101, bcdDevice= f.79 [ 387.917835][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.921398][ T53] usb 8-1: Product: syz [ 387.923149][ T53] usb 8-1: Manufacturer: syz [ 387.925095][ T53] usb 8-1: SerialNumber: syz [ 387.928040][ T53] usb 8-1: config 0 descriptor?? [ 388.041819][ T40] audit: type=1804 audit(1755670012.606:21952): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2220" name="/newroot/522/file0" dev="tmpfs" ino=2766 res=1 errno=0 [ 388.282431][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2222'. [ 388.285818][T13982] netlink: 'syz.0.2222': attribute type 7 has an invalid length. [ 388.289212][T13982] netlink: 'syz.0.2222': attribute type 8 has an invalid length. [ 388.292093][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 389.189385][T13999] 9pnet_virtio: no channels available for device syz [ 389.474755][T14015] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 389.480406][T14015] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 389.503504][T14015] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 389.507405][T14015] fuse: Bad value for 'group_id' [ 389.509478][T14015] fuse: Bad value for 'group_id' [ 389.539882][T14016] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2232'. [ 390.418023][T14033] nfs: Unknown parameter 'fowner' [ 390.552246][T14034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2239'. [ 391.403787][T14044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.459829][T14047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.659877][T14044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.728171][T14044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.833950][T14044] bridge0: port 2(netdevsim0) entered disabled state [ 391.839614][T14044] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 391.843209][T14044] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 391.846825][T14044] bridge0: port 2(netdevsim0) entered disabled state [ 391.851409][T14044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.919154][ T8349] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.933225][ T8349] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.968396][ T1152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.971688][ T1152] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.010613][T14079] nfs: Unknown parameter 'fowner' [ 393.704563][ T40] audit: type=1804 audit(1755670018.226:21953): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2253" name="/newroot/532/file0/file0" dev="9p" ino=35913869 res=1 errno=0 [ 395.382175][ T40] audit: type=1326 audit(1755670019.946:21954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.2.2262" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 395.546883][ T40] audit: type=1326 audit(1755670020.106:21955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14121 comm="syz.0.2264" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 395.600736][T14123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2264'. [ 397.034781][ T40] audit: type=1326 audit(1755670021.596:21956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14155 comm="syz.0.2274" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 397.524858][T14169] FAULT_INJECTION: forcing a failure. [ 397.524858][T14169] name failslab, interval 1, probability 0, space 0, times 0 [ 397.530412][T14169] CPU: 3 UID: 0 PID: 14169 Comm: syz.2.2277 Not tainted syzkaller #0 PREEMPT(full) [ 397.530448][T14169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 397.530458][T14169] Call Trace: [ 397.530464][T14169] [ 397.530470][T14169] dump_stack_lvl+0x16c/0x1f0 [ 397.530502][T14169] should_fail_ex+0x512/0x640 [ 397.530527][T14169] should_failslab+0xc2/0x120 [ 397.530547][T14169] __kmalloc_cache_noprof+0x6a/0x3e0 [ 397.530565][T14169] ? copy_verifier_state+0xbad/0xfb0 [ 397.530590][T14169] copy_verifier_state+0xbad/0xfb0 [ 397.530612][T14169] ? kasan_save_track+0x14/0x30 [ 397.530632][T14169] push_stack+0x1ca/0x370 [ 397.530655][T14169] check_cond_jmp_op+0xaf1/0x72d0 [ 397.530678][T14169] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 397.530697][T14169] ? __pfx_print_verifier_state+0x10/0x10 [ 397.530715][T14169] ? verbose_linfo+0x196/0x8b0 [ 397.530730][T14169] do_check_common+0xa13e/0xb410 [ 397.530759][T14169] ? __pfx_do_check_common+0x10/0x10 [ 397.530777][T14169] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 397.530803][T14169] ? __pfx_verbose+0x10/0x10 [ 397.530817][T14169] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 397.530834][T14169] ? kfree+0x2b4/0x4d0 [ 397.530848][T14169] ? bpf_check+0x7cf8/0xc4d0 [ 397.530869][T14169] bpf_check+0x8763/0xc4d0 [ 397.530895][T14169] ? __pfx_bpf_check+0x10/0x10 [ 397.530913][T14169] ? pcpu_memcg_post_alloc_hook+0x2c7/0x690 [ 397.530931][T14169] ? 0xffffffff81000000 [ 397.530943][T14169] ? lock_release+0x201/0x2f0 [ 397.530965][T14169] ? pcpu_memcg_post_alloc_hook+0x2d1/0x690 [ 397.530984][T14169] ? __pfx_verbose+0x10/0x10 [ 397.530999][T14169] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 397.531016][T14169] ? rcu_is_watching+0x12/0xc0 [ 397.531033][T14169] ? bpf_prog_load+0xd41/0x2490 [ 397.531056][T14169] ? rcu_is_watching+0x12/0xc0 [ 397.531074][T14169] ? __asan_memset+0x23/0x50 [ 397.531091][T14169] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 397.531115][T14169] bpf_prog_load+0xe41/0x2490 [ 397.531141][T14169] ? __pfx_bpf_prog_load+0x10/0x10 [ 397.531166][T14169] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 397.531200][T14169] __sys_bpf+0x4a3f/0x4de0 [ 397.531224][T14169] ? lock_release+0x201/0x2f0 [ 397.531246][T14169] ? __pfx___sys_bpf+0x10/0x10 [ 397.531269][T14169] ? ksys_write+0x190/0x250 [ 397.531288][T14169] ? rcu_is_watching+0x12/0xc0 [ 397.531304][T14169] ? lock_release+0x201/0x2f0 [ 397.531326][T14169] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 397.531356][T14169] ? fput+0x9b/0xd0 [ 397.531378][T14169] ? ksys_write+0x1ac/0x250 [ 397.531396][T14169] ? __pfx_ksys_write+0x10/0x10 [ 397.531417][T14169] __ia32_sys_bpf+0x76/0xe0 [ 397.531442][T14169] __do_fast_syscall_32+0x7c/0x3a0 [ 397.531466][T14169] do_fast_syscall_32+0x32/0x80 [ 397.531493][T14169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.531515][T14169] RIP: 0023:0xf705e579 [ 397.531527][T14169] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 397.531544][T14169] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 397.531562][T14169] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 397.531573][T14169] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.531583][T14169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.531593][T14169] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 397.531603][T14169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.531619][T14169] [ 397.873854][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2278'. [ 398.050475][T14174] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.602324][T14185] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2282'. [ 398.625954][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.630443][T14188] bond_slave_0: left promiscuous mode [ 398.632345][T14188] bond_slave_1: left promiscuous mode [ 398.652434][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.659275][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.699370][ T53] lo speed is unknown, defaulting to 1000 [ 398.701449][ T53] sz1: Port: 1 Link DOWN [ 398.702809][ T53] lo speed is unknown, defaulting to 1000 [ 398.704748][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.707622][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.710789][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.713915][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.745320][T14188] overlayfs: failed to resolve './file0': -2 [ 398.788797][T14188] afs: Unknown parameter 'dyeà' [ 399.226042][T14199] buffer_io_error: 118 callbacks suppressed [ 399.226054][T14199] Buffer I/O error on dev loop6, logical block 262, async page read [ 399.493057][T14204] blk_print_req_error: 119 callbacks suppressed [ 399.493068][T14204] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.498449][T14204] Buffer I/O error on dev nbd0, logical block 0, async page read [ 399.500939][T14204] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.503738][T14204] Buffer I/O error on dev nbd0, logical block 1, async page read [ 399.506212][T14204] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.509803][T14204] Buffer I/O error on dev nbd0, logical block 2, async page read [ 399.512333][T14204] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.515151][T14204] Buffer I/O error on dev nbd0, logical block 3, async page read [ 399.517756][T14204] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.524296][T14204] Buffer I/O error on dev nbd0, logical block 0, async page read [ 399.526784][T14204] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.537981][T14204] Buffer I/O error on dev nbd0, logical block 1, async page read [ 399.540874][T14204] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.546109][T14204] Buffer I/O error on dev nbd0, logical block 2, async page read [ 399.550241][T14204] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.553850][T14204] Buffer I/O error on dev nbd0, logical block 3, async page read [ 399.558889][T14204] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.564302][T14204] Buffer I/O error on dev nbd0, logical block 0, async page read [ 399.567172][T14204] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 399.571335][T14204] ldm_validate_partition_table(): Disk read failed. [ 399.573932][T14204] Dev nbd0: unable to read RDB block 0 [ 399.576135][T14204] nbd0: unable to read partition table [ 399.699659][T14214] hugetlbfs: Bad value 'k' for mount option 'size' [ 399.699659][T14214] [ 399.717168][T14208] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 399.719987][T14208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 399.723780][T14208] vhci_hcd vhci_hcd.0: Device attached [ 399.975570][ T40] audit: type=1804 audit(1755670024.536:21957): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2292" name="/newroot/543/bus/file0" dev="overlay" ino=2893 res=1 errno=0 [ 400.017862][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 400.019876][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 400.157925][ T841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.307889][ T841] usb 5-1: Using ep0 maxpacket: 16 [ 400.310798][ T841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.314358][ T841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.318713][ T841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.321884][ T841] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 400.326867][ T841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.329882][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.332475][ T841] usb 5-1: SerialNumber: syz [ 400.336488][ T841] hub 5-1:1.0: bad descriptor, ignoring hub [ 400.338942][ T841] hub 5-1:1.0: probe with driver hub failed with error -5 [ 400.341438][ T841] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 400.468876][T14215] vhci_hcd: connection reset by peer [ 400.471241][ T1152] vhci_hcd: stop threads [ 400.472869][ T1152] vhci_hcd: release socket [ 400.474350][ T1152] vhci_hcd: disconnect device [ 400.857982][ T6127] usb 5-1: USB disconnect, device number 6 [ 401.137990][ T841] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 401.327110][T14230] nfs: Unknown parameter 'fowner' [ 401.459277][ T841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.169542][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 402.172924][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.175878][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 402.197326][ T841] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.209484][ T841] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.212980][ T841] usb 6-1: Manufacturer: syz [ 402.215477][ T841] usb 6-1: config 0 descriptor?? [ 402.477793][ T841] rc_core: IR keymap rc-hauppauge not found [ 402.479859][ T841] Registered IR keymap rc-empty [ 402.481529][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.497937][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.518665][ T841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 402.523501][ T841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 402.528749][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.547734][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.573341][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.587955][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.607739][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.627722][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.657818][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.678031][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.690356][T13625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.693134][T13625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.695840][T13625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.697733][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.699062][T13625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.703673][T13625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.717014][T14250] lo speed is unknown, defaulting to 1000 [ 402.717800][ T841] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 402.719551][T14250] lo speed is unknown, defaulting to 1000 [ 402.739113][ T841] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 402.743481][ T841] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 402.832646][T14250] chnl_net:caif_netlink_parms(): no params data found [ 402.917542][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.920528][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.922963][T14250] bridge_slave_0: entered allmulticast mode [ 402.925348][T14250] bridge_slave_0: entered promiscuous mode [ 402.928092][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.930510][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.932803][T14250] bridge_slave_1: entered allmulticast mode [ 402.935724][T14250] bridge_slave_1: entered promiscuous mode [ 402.970696][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.974696][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.994287][T14250] team0: Port device team_slave_0 added [ 402.997031][T14250] team0: Port device team_slave_1 added [ 403.015339][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.017787][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.025921][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.031001][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.033208][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.042298][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.067886][T14250] hsr_slave_0: entered promiscuous mode [ 403.070076][T14250] hsr_slave_1: entered promiscuous mode [ 403.071993][T14250] debugfs: 'hsr0' already exists in 'hsr' [ 403.073786][T14250] Cannot create hsr debugfs directory [ 403.146856][T14266] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 403.148808][T14266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 403.157753][T14266] vhci_hcd vhci_hcd.0: Device attached [ 403.175264][T14250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.179263][T14250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.183335][T14250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.187105][T14250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.202534][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.204813][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.207163][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.209450][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.233174][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.240902][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.243587][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.250098][T14250] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.254949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.257151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.263153][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.265354][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.387038][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.567447][T14250] veth0_vlan: entered promiscuous mode [ 403.573795][T14250] veth1_vlan: entered promiscuous mode [ 403.587302][T14250] veth0_macvtap: entered promiscuous mode [ 403.591613][T14250] veth1_macvtap: entered promiscuous mode [ 403.598096][T14250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.606304][T14250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.611813][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.615368][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.618492][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.623009][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.641688][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.644147][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.651231][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.653846][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.704836][T14288] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.732268][T14288] kvm: pic: level sensitive irq not supported [ 403.733205][T14288] kvm: pic: non byte read [ 403.740214][T14288] kvm: pic: level sensitive irq not supported [ 403.740656][T14288] kvm: pic: non byte read [ 403.746876][T14288] kvm: pic: level sensitive irq not supported [ 403.749442][T14288] kvm: pic: non byte read [ 403.753284][T14267] vhci_hcd: connection closed [ 403.754111][ T1144] vhci_hcd: stop threads [ 403.760193][ T1144] vhci_hcd: release socket [ 403.762138][ T1144] vhci_hcd: disconnect device [ 403.837268][ T10] usb 6-1: USB disconnect, device number 10 [ 404.027875][T14262] delete_channel: no stack [ 404.154229][T14300] 9p: Unknown Cache mode or invalid value fscach [ 404.208839][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 404.285576][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 404.717927][T13625] Bluetooth: hci2: command tx timeout [ 405.117732][ T29] usb 42-1: device descriptor read/8, error -110 [ 405.124566][ T40] audit: type=1326 audit(1755670029.687:21958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.132850][ T40] audit: type=1326 audit(1755670029.687:21959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.143306][ T40] audit: type=1326 audit(1755670029.697:21960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.153334][ T40] audit: type=1326 audit(1755670029.697:21961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.162360][ T40] audit: type=1326 audit(1755670029.697:21962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.169936][ T40] audit: type=1326 audit(1755670029.697:21963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.177295][ T40] audit: type=1326 audit(1755670029.697:21964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.184285][ T40] audit: type=1326 audit(1755670029.697:21965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.191347][ T40] audit: type=1326 audit(1755670029.697:21966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.198488][ T40] audit: type=1326 audit(1755670029.697:21967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14321 comm="syz.4.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 405.204662][T14326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2310'. [ 405.676484][ T29] usb usb42-port1: attempt power cycle [ 405.943849][T14345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2316'. [ 406.277964][ T29] usb usb42-port1: unable to enumerate USB device [ 406.415213][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'. [ 406.797574][T13625] Bluetooth: hci2: command 0x041b tx timeout [ 406.889127][T14375] fuse: Bad value for 'group_id' [ 406.890781][T14375] fuse: Bad value for 'group_id' [ 407.856868][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 407.952260][T14398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2332'. [ 408.469835][T14407] vlan1: entered promiscuous mode [ 408.471578][T14407] vlan1: entered allmulticast mode [ 408.473332][T14407] veth0_vlan: entered allmulticast mode [ 408.475247][T14407] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 408.511497][T14406] block device autoloading is deprecated and will be removed. [ 408.514002][T14406] syz.2.2334: attempt to access beyond end of device [ 408.514002][T14406] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.823623][T14423] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 408.826256][T14424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.877947][ T5988] Bluetooth: hci2: command 0x041b tx timeout [ 409.081905][T14434] vlan1: entered promiscuous mode [ 409.084140][T14434] vlan1: entered allmulticast mode [ 409.086274][T14434] veth0_vlan: entered allmulticast mode [ 409.391488][T14437] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2345'. [ 410.056320][T14457] support for the xor transformation has been removed. [ 410.094324][T14458] block device autoloading is deprecated and will be removed. [ 410.099422][T14455] binder: 14454:14455 ioctl c0306201 0 returned -14 [ 410.886467][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 410.941791][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 410.948520][T14472] input: syz0 as /devices/virtual/input/input28 [ 410.971847][ T5988] Bluetooth: hci2: command 0x041b tx timeout [ 411.029641][T14475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 411.032251][T14475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 411.035715][T14475] vhci_hcd vhci_hcd.0: Device attached [ 411.041801][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2359'. [ 411.089208][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'. [ 411.287435][T14189] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 411.805761][T14477] vhci_hcd: connection reset by peer [ 411.810534][ T8346] vhci_hcd: stop threads [ 411.814722][ T8346] vhci_hcd: release socket [ 411.816452][ T8346] vhci_hcd: disconnect device [ 412.277015][T14503] nfs: Unknown parameter 'fowner' [ 412.710613][T14514] netlink: 22462 bytes leftover after parsing attributes in process `syz.1.2369'. [ 412.714140][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2369'. [ 412.737245][T14512] netlink: 'syz.2.2368': attribute type 6 has an invalid length. [ 412.748843][T14512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2368'. [ 412.903814][T14519] smc: net device bond0 applied user defined pnetid SYZ2 [ 412.912928][T14519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2370'. [ 412.939018][T14519] smc: removing net device bond0 with user defined pnetid SYZ2 [ 412.942433][T14519] bond0 (unregistering): Released all slaves [ 413.047161][ T5988] Bluetooth: hci2: command 0x041b tx timeout [ 413.069360][T14525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.074754][T14525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.237443][ T841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 413.387736][ T841] usb 5-1: Using ep0 maxpacket: 16 [ 413.391291][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 413.396437][ T841] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 413.400133][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.402770][ T841] usb 5-1: Product: syz [ 413.404179][ T841] usb 5-1: Manufacturer: syz [ 413.405904][ T841] usb 5-1: SerialNumber: syz [ 413.411736][ T841] usb 5-1: config 0 descriptor?? [ 413.415169][ T841] hub 5-1:0.0: bad descriptor, ignoring hub [ 413.417982][ T841] hub 5-1:0.0: probe with driver hub failed with error -5 [ 413.421235][ T841] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input29 [ 413.942463][T14544] netfs: Couldn't get user pages (rc=-14) [ 415.067223][ T6058] usb 5-1: USB disconnect, device number 7 [ 416.354251][T14564] veth0: entered promiscuous mode [ 416.356827][T14563] veth0: left promiscuous mode [ 416.389549][T14566] program syz.4.2384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.397012][T14189] vhci_hcd: vhci_device speed not set [ 416.397049][T14560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 416.401934][T14560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.404786][T14560] vhci_hcd vhci_hcd.0: Device attached [ 416.461549][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 416.481790][T14569] lo speed is unknown, defaulting to 1000 [ 416.485170][T14569] lo speed is unknown, defaulting to 1000 [ 416.573751][T14574] nfs: Unknown parameter 'fowner' [ 416.591953][T14562] vhci_hcd: connection closed [ 416.603260][ T13] vhci_hcd: stop threads [ 416.607399][ T13] vhci_hcd: release socket [ 416.610239][ T13] vhci_hcd: disconnect device [ 416.627134][ T29] vhci_hcd: vhci_device speed not set [ 417.554222][T14583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.623007][T14589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.667062][T14589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.947044][ T841] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 418.098201][ T841] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.102408][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 418.107475][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 418.111499][ T841] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 418.118926][ T841] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.122856][ T841] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.126385][ T841] usb 9-1: Manufacturer: syz [ 418.130033][ T841] usb 9-1: config 0 descriptor?? [ 418.299917][T14598] netlink: 'syz.0.2393': attribute type 5 has an invalid length. [ 418.414604][ T841] rc_core: IR keymap rc-hauppauge not found [ 418.417638][ T841] Registered IR keymap rc-empty [ 418.426055][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.447977][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.467870][ T841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 418.473402][ T841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input30 [ 418.479288][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.507102][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.527014][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.547881][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.587097][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.596346][T14608] ubi: mtd0 is already attached to ubi31 [ 418.617578][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.636990][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.657160][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.676939][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.707554][ T841] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 418.728243][ T841] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 418.731229][ T841] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.884517][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'. [ 420.592222][T14657] nfs: Unknown parameter 'fowner' [ 420.630019][T14189] usb 9-1: USB disconnect, device number 2 [ 421.329023][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 422.016160][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 422.029615][T14689] syz.2.2418: attempt to access beyond end of device [ 422.029615][T14689] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 422.882246][T14722] blk_print_req_error: 54 callbacks suppressed [ 422.882258][T14722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.887707][T14722] buffer_io_error: 55 callbacks suppressed [ 422.887717][T14722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 422.894368][T14722] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.899460][T14722] Buffer I/O error on dev nbd0, logical block 1, async page read [ 422.902192][T14722] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.905148][T14722] Buffer I/O error on dev nbd0, logical block 2, async page read [ 422.909320][T14722] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.913260][T14722] Buffer I/O error on dev nbd0, logical block 3, async page read [ 422.916085][T14722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.919667][T14722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 422.922149][T14722] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.924934][T14722] Buffer I/O error on dev nbd0, logical block 1, async page read [ 422.929556][T14722] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.932540][T14722] Buffer I/O error on dev nbd0, logical block 2, async page read [ 422.935074][T14722] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.939366][T14722] Buffer I/O error on dev nbd0, logical block 3, async page read [ 422.942630][T14722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.946767][T14722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 422.950205][T14722] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.954589][T14722] Buffer I/O error on dev nbd0, logical block 1, async page read [ 422.961190][T14722] ldm_validate_partition_table(): Disk read failed. [ 422.964711][T14722] Dev nbd0: unable to read RDB block 0 [ 422.968886][T14722] nbd0: unable to read partition table [ 423.112722][T14734] nfs: Unknown parameter 'fowner' [ 423.251169][T14736] random: crng reseeded on system resumption [ 423.446661][T14746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.478252][T14766] comedi comedi3: c6xdigio: I/O port conflict (0x4f2b,3) [ 424.813732][T14771] ldm_validate_partition_table(): Disk read failed. [ 424.816730][T14771] Dev nbd0: unable to read RDB block 0 [ 424.819133][T14771] nbd0: unable to read partition table [ 425.613056][T14780] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2441'. [ 426.585123][T14793] netlink: 'syz.0.2449': attribute type 9 has an invalid length. [ 427.281681][T13625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.284968][T13625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.288452][T13625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.296528][T13625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.300779][T13625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.473779][T14802] lo speed is unknown, defaulting to 1000 [ 427.484002][T14802] lo speed is unknown, defaulting to 1000 [ 427.586649][ T6008] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 427.599742][T14802] chnl_net:caif_netlink_parms(): no params data found [ 427.653800][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.656105][T14802] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.658840][T14802] bridge_slave_0: entered allmulticast mode [ 427.661330][T14802] bridge_slave_0: entered promiscuous mode [ 427.664068][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.666886][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.669783][T14802] bridge_slave_1: entered allmulticast mode [ 427.672097][T14802] bridge_slave_1: entered promiscuous mode [ 427.687529][T14821] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2457'. [ 427.697171][T14802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.705648][T14802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.724301][T14802] team0: Port device team_slave_0 added [ 427.729238][T14802] team0: Port device team_slave_1 added [ 427.736300][ T6008] usb 6-1: Using ep0 maxpacket: 16 [ 427.748246][T14802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.750502][T14802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.756305][ T6008] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 427.759056][T14802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.764516][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.765774][T14802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.769481][ T6008] usb 6-1: Product: syz [ 427.770945][T14802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.771467][ T6008] usb 6-1: Manufacturer: syz [ 427.779917][T14802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.782188][ T6008] usb 6-1: SerialNumber: syz [ 427.809781][ T6008] r8152-cfgselector 6-1: Unknown version 0x0000 [ 427.817212][ T6008] r8152-cfgselector 6-1: config 0 descriptor?? [ 427.825113][T14802] hsr_slave_0: entered promiscuous mode [ 427.832198][T14802] hsr_slave_1: entered promiscuous mode [ 427.836298][T14802] debugfs: 'hsr0' already exists in 'hsr' [ 427.838251][T14802] Cannot create hsr debugfs directory [ 428.210433][T14802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.214160][T14802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.217688][T14802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.221929][T14802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.233668][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.236691][T14802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.239348][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.241621][T14802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.262164][T14802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.270625][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.273906][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.281676][T14802] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.288033][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.290910][ T8346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.298678][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.301498][ T8349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.371718][T14802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.388135][T14802] veth0_vlan: entered promiscuous mode [ 428.415745][T14802] veth1_vlan: entered promiscuous mode [ 428.446879][T14802] veth0_macvtap: entered promiscuous mode [ 428.501482][T14802] veth1_macvtap: entered promiscuous mode [ 428.847484][T14802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.854050][T14802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.868000][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.871878][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.875340][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.878456][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.899022][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.902418][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.910669][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.913985][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.105165][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.108465][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.366264][T13625] Bluetooth: hci5: command tx timeout [ 430.313714][ T6034] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 430.354993][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 430.355008][ T40] audit: type=1326 audit(1755670054.918:21982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 430.421913][T14879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2468'. [ 430.903334][ T40] audit: type=1326 audit(1755670055.468:21983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7fc00000 [ 431.046249][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2475'. [ 431.276641][T14917] mkiss: ax0: crc mode is auto. [ 431.430999][T13625] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 431.446880][T13625] Bluetooth: hci5: command tx timeout [ 431.696229][T14189] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 431.826189][T14189] usb 6-1: device descriptor read/64, error -71 [ 432.086813][T14189] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 432.236344][T14189] usb 6-1: device descriptor read/64, error -71 [ 432.249130][T14937] input: syz1 as /devices/virtual/input/input32 [ 432.311173][T14941] fuse: Bad value for 'user_id' [ 432.312832][T14941] fuse: Bad value for 'user_id' [ 432.347024][T14189] usb usb6-port1: attempt power cycle [ 432.429569][ T40] audit: type=1326 audit(1755670056.998:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.4.2488" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 432.516124][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 432.676031][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 432.679083][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.682237][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.684967][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.688117][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 432.691209][ T29] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 432.694081][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.696118][T14189] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 432.700110][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 432.702049][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 432.705031][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 432.706887][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 432.708881][ T29] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 432.716739][T14189] usb 6-1: device descriptor read/8, error -71 [ 432.986041][T14189] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 433.006100][ T53] usb 5-1: USB disconnect, device number 8 [ 433.009056][T14189] usb 6-1: device descriptor read/8, error -71 [ 433.116589][T14189] usb usb6-port1: unable to enumerate USB device [ 433.346033][ T53] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 433.506057][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 433.509829][ T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.515297][ T53] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.516252][T13625] Bluetooth: hci5: command tx timeout [ 433.522303][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.525528][ T53] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 433.529713][ T53] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 433.532654][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.539217][ T53] hub 5-1:1.0: bad descriptor, ignoring hub [ 433.541179][ T53] hub 5-1:1.0: probe with driver hub failed with error -5 [ 433.547107][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 433.548878][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 433.550585][ T53] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 433.856056][ T53] usb 5-1: USB disconnect, device number 9 [ 433.856491][T14961] ubi: mtd0 is already attached to ubi31 [ 434.209421][ T40] audit: type=1326 audit(1755670058.768:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.2.2493" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 434.487415][T14977] netlink: 'syz.1.2496': attribute type 2 has an invalid length. [ 434.497143][ T40] audit: type=1326 audit(1755670059.058:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 434.516367][ T40] audit: type=1326 audit(1755670059.058:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 434.523492][ T40] audit: type=1326 audit(1755670059.058:21988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 434.536690][ T40] audit: type=1326 audit(1755670059.058:21989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 434.543658][ T40] audit: type=1326 audit(1755670059.058:21990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 434.552682][ T40] audit: type=1326 audit(1755670059.058:21991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.1.2496" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 435.029123][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'. [ 435.032083][T14993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2502'. [ 435.035619][T14993] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 435.038964][T14993] PKCS7: Only support pkcs7_signedData type [ 435.141498][T14997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.145607][T14997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.196675][T15002] bridge_slave_0: left allmulticast mode [ 435.202036][T15002] bridge_slave_0: left promiscuous mode [ 435.207919][T15002] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.213198][T15002] bridge_slave_1: left allmulticast mode [ 435.215113][T15002] bridge_slave_1: left promiscuous mode [ 435.217595][T15002] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.222899][T15002] bond0: (slave bond_slave_0): Releasing backup interface [ 435.229739][T15002] bond0: (slave bond_slave_1): Releasing backup interface [ 435.237760][T15002] team0: Port device team_slave_0 removed [ 435.244807][T15002] team0: Port device team_slave_1 removed [ 435.250286][T15002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.254059][T15002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.260618][T15002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.263803][T15002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.312671][ T8345] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.315907][ T8345] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.327262][T15003] team0: Mode changed to "loadbalance" [ 435.370355][ T8345] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.373078][ T8345] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.435905][T13625] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 435.438623][T13625] Bluetooth: hci2: Injecting HCI hardware error event [ 435.440861][T13625] Bluetooth: hci2: hardware error 0x00 [ 435.595978][ T5988] Bluetooth: hci5: command tx timeout [ 436.097945][T15017] fuse: Bad value for 'fd' [ 436.638730][T15015] team0: Unable to change to the same mode the team is in [ 436.824491][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 436.878143][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 436.878444][ T40] audit: type=1326 audit(1755670061.438:22013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.2.2511" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 437.085332][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 437.515813][T13625] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 437.733589][T15042] netlink: 'syz.2.2517': attribute type 2 has an invalid length. [ 438.394854][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2523'. [ 438.440790][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 438.668748][T15063] overlayfs: cannot append lower layer [ 438.747516][ T40] audit: type=1326 audit(1755670063.309:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15066 comm="syz.2.2527" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 438.755804][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 438.838737][T15071] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 438.840851][T15071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 438.843496][T15071] vhci_hcd vhci_hcd.0: Device attached [ 438.905706][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 438.911673][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 438.920727][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.923938][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.930842][ T29] usb 5-1: Product: syz [ 438.932360][ T29] usb 5-1: Manufacturer: syz [ 438.933879][ T29] usb 5-1: SerialNumber: syz [ 438.944988][ T29] usb 5-1: config 0 descriptor?? [ 438.956818][ T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 438.959982][ T29] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 439.115991][ T6008] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 439.519090][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.578885][ T29] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 439.626525][T15072] vhci_hcd: connection reset by peer [ 439.632117][T15080] netlink: 'syz.2.2532': attribute type 11 has an invalid length. [ 439.635106][T15080] netlink: 194308 bytes leftover after parsing attributes in process `syz.2.2532'. [ 439.635265][ T1152] vhci_hcd: stop threads [ 439.640647][T15079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.640958][ T1152] vhci_hcd: release socket [ 439.646678][ T1152] vhci_hcd: disconnect device [ 439.664794][T15082] fuse: Bad value for 'fd' [ 440.394740][ T29] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 440.397756][ T29] em28xx 5-1:0.0: board has no eeprom [ 440.465697][ T29] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 440.468365][ T29] em28xx 5-1:0.0: dvb set to bulk mode. [ 440.470753][ T6127] em28xx 5-1:0.0: Binding DVB extension [ 440.473795][ T29] usb 5-1: USB disconnect, device number 10 [ 440.476383][ T29] em28xx 5-1:0.0: Disconnecting em28xx [ 440.496985][ T40] audit: type=1326 audit(1755670065.059:22015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.498481][ T6127] em28xx 5-1:0.0: Registering input extension [ 440.504028][ T40] audit: type=1326 audit(1755670065.059:22016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.506613][ T29] em28xx 5-1:0.0: Closing input extension [ 440.513360][ T40] audit: type=1326 audit(1755670065.059:22017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.513383][ T40] audit: type=1326 audit(1755670065.059:22018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.513400][ T40] audit: type=1326 audit(1755670065.059:22019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.516668][ T29] em28xx 5-1:0.0: Freeing device [ 440.522671][ T40] audit: type=1326 audit(1755670065.059:22020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.553661][ T40] audit: type=1326 audit(1755670065.059:22021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.566755][ T40] audit: type=1326 audit(1755670065.059:22022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7fc00000 [ 440.725838][T15103] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.393689][T15114] fuse: Invalid rootmode [ 441.693654][T15121] lo speed is unknown, defaulting to 1000 [ 441.698313][T15121] lo speed is unknown, defaulting to 1000 [ 441.765575][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 441.945580][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 441.948500][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 441.951634][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.954870][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.958971][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.962627][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.966882][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 441.971626][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.240345][ T10] usb 7-1: usb_control_msg returned -32 [ 442.240365][ T10] usbtmc 7-1:16.0: can't read capabilities [ 442.338925][T15139] comedi comedi3: c6xdigio: I/O port conflict (0x4f2b,3) [ 442.341233][T15139] BUG: unable to handle page fault for address: ffffffff8b4cffd8 [ 442.343544][T15139] #PF: supervisor write access in kernel mode [ 442.345589][T15139] #PF: error_code(0x0003) - permissions violation [ 442.348936][T15139] PGD e385067 P4D e385067 PUD e386063 PMD b4001a1 [ 442.351153][T15139] Oops: Oops: 0003 [#1] SMP KASAN NOPTI [ 442.352894][T15139] CPU: 2 UID: 0 PID: 15139 Comm: syz.0.2550 Not tainted syzkaller #0 PREEMPT(full) [ 442.355768][T15139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 442.359105][T15139] RIP: 0010:down_write+0xcb/0x200 [ 442.360707][T15139] Code: 48 89 df 48 c7 44 24 28 00 00 00 00 e8 fe 26 8e f6 be 08 00 00 00 48 8d 7c 24 28 e8 ef 26 8e f6 ba 01 00 00 00 48 8b 44 24 28 48 0f b1 13 0f 94 c0 5a 84 c0 0f 84 ed 00 00 00 48 c7 c0 44 a8 [ 442.367151][T15139] RSP: 0018:ffffc90003157670 EFLAGS: 00010246 [ 442.369108][T15139] RAX: 0000000000000000 RBX: ffffffff8b4cffd8 RCX: ffffffff8b924ca1 [ 442.371561][T15139] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90003157698 [ 442.374030][T15139] RBP: 1ffff9200062aecf R08: 0000000000000001 R09: fffff5200062aed3 [ 442.376526][T15139] R10: ffffc9000315769f R11: 63206964656d6f63 R12: dffffc0000000000 [ 442.378979][T15139] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880453bd000 [ 442.381457][T15139] FS: 0000000000000000(0000) GS:ffff8880976c4000(0063) knlGS:00000000f5485b40 [ 442.384219][T15139] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 442.386286][T15139] CR2: ffffffff8b4cffd8 CR3: 000000001c71d000 CR4: 0000000000352ef0 [ 442.388761][T15139] Call Trace: [ 442.389837][T15139] [ 442.390774][T15139] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 442.392542][T15139] ? __pfx_down_write+0x10/0x10 [ 442.394086][T15139] ? lock_release+0x201/0x2f0 [ 442.395566][T15139] ? __pfx_net_ctl_permissions+0x10/0x10 [ 442.397351][T15139] ? net_ctl_permissions+0x118/0x130 [ 442.399117][T15139] kernfs_remove_by_name_ns+0x3d/0x110 [ 442.400865][T15139] driver_remove_file+0x4a/0x60 [ 442.402416][T15139] bus_remove_driver+0x224/0x2c0 [ 442.403996][T15139] driver_unregister+0x76/0xb0 [ 442.405523][T15139] comedi_device_detach_locked+0x12c/0xa50 [ 442.407403][T15139] comedi_device_detach+0x67/0xb0 [ 442.409021][T15139] comedi_device_attach+0x43d/0x900 [ 442.410674][T15139] do_devconfig_ioctl+0x1b1/0x710 [ 442.412276][T15139] ? __mutex_lock+0x1c5/0x1060 [ 442.413786][T15139] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 442.415519][T15139] ? kasan_save_stack+0x42/0x60 [ 442.417084][T15139] ? kasan_save_stack+0x33/0x60 [ 442.418563][T15139] ? kasan_save_track+0x14/0x30 [ 442.420098][T15139] ? kasan_save_free_info+0x3b/0x60 [ 442.421735][T15139] ? __kasan_slab_free+0x60/0x70 [ 442.423298][T15139] ? kfree+0x2b4/0x4d0 [ 442.424590][T15139] ? tomoyo_path_number_perm+0x470/0x580 [ 442.426405][T15139] comedi_unlocked_ioctl+0x165d/0x2f00 [ 442.428115][T15139] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 442.429958][T15139] ? rcu_is_watching+0x12/0xc0 [ 442.431569][T15139] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 442.433536][T15139] ? tomoyo_path_number_perm+0x295/0x580 [ 442.435304][T15139] ? rcu_is_watching+0x12/0xc0 [ 442.436868][T15139] ? lock_release+0x201/0x2f0 [ 442.438430][T15139] ? tomoyo_path_number_perm+0x18d/0x580 [ 442.440286][T15139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.442200][T15139] comedi_compat_ioctl+0x1d0/0x990 [ 442.443933][T15139] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 442.445710][T15139] ? trace_sched_exit_tp+0xd1/0x120 [ 442.447428][T15139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.449364][T15139] ? do_vfs_ioctl+0x128/0x14f0 [ 442.450903][T15139] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 442.452555][T15139] ? rcu_is_watching+0x12/0xc0 [ 442.453946][T15139] ? __fget_files+0x204/0x3c0 [ 442.455336][T15139] ? hook_file_ioctl_common+0x145/0x410 [ 442.457139][T15139] ? __fget_files+0x20e/0x3c0 [ 442.458650][T15139] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 442.460528][T15139] __ia32_compat_sys_ioctl+0x23f/0x370 [ 442.462231][T15139] __do_fast_syscall_32+0x7c/0x3a0 [ 442.463849][T15139] do_fast_syscall_32+0x32/0x80 [ 442.465353][T15139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.467291][T15139] RIP: 0023:0xf7f84579 [ 442.468834][T15139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 442.474793][T15139] RSP: 002b:00000000f548555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 442.477423][T15139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 442.479905][T15139] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.482387][T15139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.484854][T15139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.487373][T15139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.489897][T15139] [ 442.490881][T15139] Modules linked in: [ 442.492127][T15139] CR2: ffffffff8b4cffd8 [ 442.493436][T15139] ---[ end trace 0000000000000000 ]--- [ 442.495146][T15139] RIP: 0010:down_write+0xcb/0x200 [ 442.496782][T15139] Code: 48 89 df 48 c7 44 24 28 00 00 00 00 e8 fe 26 8e f6 be 08 00 00 00 48 8d 7c 24 28 e8 ef 26 8e f6 ba 01 00 00 00 48 8b 44 24 28 48 0f b1 13 0f 94 c0 5a 84 c0 0f 84 ed 00 00 00 48 c7 c0 44 a8 [ 442.502919][T15139] RSP: 0018:ffffc90003157670 EFLAGS: 00010246 [ 442.504867][T15139] RAX: 0000000000000000 RBX: ffffffff8b4cffd8 RCX: ffffffff8b924ca1 [ 442.507298][T15139] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90003157698 [ 442.509783][T15139] RBP: 1ffff9200062aecf R08: 0000000000000001 R09: fffff5200062aed3 [ 442.512347][T15139] R10: ffffc9000315769f R11: 63206964656d6f63 R12: dffffc0000000000 [ 442.514892][T15139] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880453bd000 [ 442.517344][T15139] FS: 0000000000000000(0000) GS:ffff8880976c4000(0063) knlGS:00000000f5485b40 [ 442.520178][T15139] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 442.522457][T15139] CR2: ffffffff8b4cffd8 CR3: 000000001c71d000 CR4: 0000000000352ef0 [ 442.524970][T15139] Kernel panic - not syncing: Fatal exception [ 442.527480][T15139] Kernel Offset: disabled [ 442.528884][T15139] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:07:47 Registers: info registers vcpu 0 CPU#0 RAX=00000000012af1ec RBX=0000000000000000 RCX=ffffffff8b908bf9 RDX=ffffed1005646656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f908ff8 CR3=0000000054768000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000010cfa8e6090 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8c162c80 RDI=0000000000000001 RBP=0000010cfa8e2f2e RSP=ffffc90000577ad0 R8 =0000000000000001 R9 =00000000000144af R10=ffff88807ef41ed7 R11=0000000000000010 R12=0000000000000001 R13=00000000000032c9 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8b8f66b2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080d2f000 CR3=000000006755f000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90003156f00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffff8b4cffd8 CR3=000000001c71d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=9339f65c3e45ee00 RBX=ffff8880204e5550 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880204e5550 RBP=0000000000000000 RSP=ffffc90003287ad8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90ab7697 R11=0000000000000003 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197608b RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002237 CR3=000000001c71d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000