last executing test programs: 11m37.735053965s ago: executing program 1 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10040000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000085100000f5ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000180)={0x2, 0x6, 0x7, 0xfa, 0x9, 0x83}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 11m36.76622775s ago: executing program 1 (id=913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r2, 0x5450b000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x4, 0x50, r2, 0xe9e28000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x401, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x3, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000010401040000000000000000050000040a000208000000060100000008000440000100000500010003000000720427def1979ca8d8d1efff7690b7a7a30210e37263732f4ca26486b07c40f4b726"], 0x30}, 0x1, 0x0, 0x0, 0xe05e39709130f3de}, 0x4000000) 11m35.676024386s ago: executing program 1 (id=918): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$evdev(0x0, 0x0, 0x60000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRESOCT=r6, @ANYBLOB="00000000000000002a9c000d00002a00000000000058f5671a50e055e5fbe36e18bce9537c35c3999b0215af14f562cef5ee639def3a4a954fe1e9476a5e1c8d8c3bd6a9433b55f9b5a14f2774356fee8cc964fa698428b69572f88730", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) 11m33.593718982s ago: executing program 1 (id=922): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000580)='.\x00', 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x151) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0x929, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x187c0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x1) modify_ldt$write2(0x11, &(0x7f0000000000)={0x80, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='cmdline\x00') lseek(r4, 0x20000000000a, 0x1) syz_clone(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 11m33.406028522s ago: executing program 1 (id=923): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80001, 0x0, 0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0xd6, 0x2, 0x28000, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x8000, 0x8000, 0xcf, 0x6}}) sendto$packet(r1, &(0x7f0000000380)="9a3efbadebdb6c53d5ac62fa85a0db7f9b4319e27df7cde5100c43d37a4c0a586a0a1444ed2882275814795867639508b88568d0ead9a794bbee9c1e9bc87fab21dc0b712c79a99cc8807b250b8bdb9933edd9c975ffa587aba65c39c3a9679b73b7d83beb0dd455e98896547d9b6adccc55b1f34cf45f4aebf17d643d2f457c9afcc2072636f55ecddb354ac65ff2ad58d0d556fb3c71826b97a7dad3d2282b066a765562f41790daf0a381bcce31e0356c3ad3c6e34a7487cd9410dd9ebf42478a9338e63a63147daa4a642b68d5231bde5be5ed990a64ffc15a9933ecd84db3620d77a41310c703f0f205077b742b69bc00bc", 0xf4, 0x1, &(0x7f0000000300)={0x11, 0x5, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) accept4$ax25(r0, &(0x7f00000000c0)={{}, [@null, @bcast, @netrom, @remote, @null, @rose, @null]}, &(0x7f0000000040)=0x48, 0xd9f792c88c3ea0da) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) modify_ldt$write(0x2000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x11581ec24010adc1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3a3d, 0x20000, 0x0, 0x286}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close_range(r9, r10, 0x2) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f0000000000)="0a000000010001", 0x404) 11m33.013625811s ago: executing program 1 (id=926): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x441, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002c00)=@delchain={0x100, 0x65, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x8, 0xb}, {0xe, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0xcc}}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_ACT={0x9c, 0x1, [@m_vlan={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6b, 0x6, "36fda39abbf5d55f94b20e2f3a8f2a8f3d0483c1f0cf9e66a999ecd8cd6df5144e4a198b9535fe57265324eae424187141dda426713ac826b1abf224185dcb986806e631528e5e9ceecbd7d642823358f6c5582ee9bfb2f43300413f7991c3f6185bbd8d053819"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES32], 0x48) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) getcwd(&(0x7f0000000680)=""/203, 0xcb) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11m32.93736522s ago: executing program 32 (id=926): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x441, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002c00)=@delchain={0x100, 0x65, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x8, 0xb}, {0xe, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0xcc}}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_ACT={0x9c, 0x1, [@m_vlan={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6b, 0x6, "36fda39abbf5d55f94b20e2f3a8f2a8f3d0483c1f0cf9e66a999ecd8cd6df5144e4a198b9535fe57265324eae424187141dda426713ac826b1abf224185dcb986806e631528e5e9ceecbd7d642823358f6c5582ee9bfb2f43300413f7991c3f6185bbd8d053819"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES32], 0x48) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) getcwd(&(0x7f0000000680)=""/203, 0xcb) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m27.060822504s ago: executing program 3 (id=2502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/88, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x6}}) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 2m26.091634294s ago: executing program 3 (id=2503): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) setreuid(0x0, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe65) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r7 = dup2(r2, r2) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYRESOCT=0x0], 0xf) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x39000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$dupfd(r9, 0x0, r9) read$FUSE(r10, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x8, 0x0, "69091078db84664d3d26ace4be66a68b70feef6e58a2392671d78d92251ee2068ef2a8984d4c7a4528ab40791f5d9b88132b410309abd7f90127f484784c6a77351d4d75afd4bcb563fe06016700"}, 0xd8) 2m22.844554172s ago: executing program 3 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10040000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000085100000f5ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000180)={0x2, 0x6, 0x7, 0xfa, 0x9, 0x83}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2m21.193221436s ago: executing program 3 (id=2520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000130000c7bcbbeec27668a8009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000001280)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket(0x22, 0x2, 0x1) sendfile(r4, r3, 0x0, 0x80000000000001) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_procfs(0x0, 0x0) fsopen(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) 2m20.174549745s ago: executing program 3 (id=2523): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r6, 0xf, 0x0) faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r7}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000"]) 2m19.890928614s ago: executing program 3 (id=2526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/88, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x6}}) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 2m4.831515417s ago: executing program 33 (id=2526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/88, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x6}}) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 8.670397857s ago: executing program 4 (id=2964): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000130000c7bcbbeec27668a8009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000001280)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket(0x22, 0x2, 0x1) sendfile(r4, r3, 0x0, 0x80000000000001) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_procfs(0x0, 0x0) fsopen(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) 8.480626934s ago: executing program 2 (id=2966): ioctl(0xffffffffffffffff, 0x8b32, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 7.752146174s ago: executing program 4 (id=2968): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$KDADDIO(r3, 0x4b34, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000007a01"]) 7.60857683s ago: executing program 4 (id=2969): syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result}], 0x1c) io_uring_setup(0x2c49, &(0x7f0000000400)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) 7.570042593s ago: executing program 2 (id=2970): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x1a0, 0x0, 0x8}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x9000, 0x4) write$binfmt_elf64(r4, 0x0, 0x37b) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x281, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) close(r3) 7.268131732s ago: executing program 0 (id=2971): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x10) fanotify_mark(0xffffffffffffffff, 0x1, 0xc0000021, r1, 0x0) (async) r2 = timerfd_create(0x9, 0x80800) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="889d66d6d6e8174996e5be25cda488850cf5d1d1eac610e50235aa2cda89dcc0fb4140d9909cb7a60fe045889b5db416fe", 0x31}, {&(0x7f0000000040)="ef4225ae73f978ce6f8df4b0e9c193c972e4cb5e6d189e5df410", 0x1a}], 0x2, 0x5, 0x1, 0x6) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) 7.267820529s ago: executing program 2 (id=2972): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a5, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000080)=0x3, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r6, 0x6, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) 7.149360686s ago: executing program 0 (id=2973): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x1000, 0x2) 6.740514934s ago: executing program 4 (id=2974): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x81, 0x579300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b500000007000100000000000000000020010001000000000000000000000000ac1414aa00000000000020000000000000000000000000000a00000000000000d4e177e933a097a03cb0a60795c04c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/108], 0xb4}}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140)=0x2, 0x4) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x1de0, &(0x7f00000001c0)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES2(r1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x80) r3 = socket(0x1e, 0x4, 0x0) bind$alg(r3, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) 6.289955396s ago: executing program 2 (id=2975): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="40e4", 0x2, 0x20008840, &(0x7f0000000140)={0x2, 0xfffd, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x8000, 0x55007}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000100)={[{0x5, 0x7, 0x3, 0x9, 0x4, 0x4, 0x3, 0x0, 0xfb, 0x1, 0x42, 0xf8, 0x7fffffffffffffff}, {0x7, 0x3ff, 0x8, 0x4f, 0x9, 0x9, 0x1, 0x40, 0x9, 0xe4, 0x9, 0xf2, 0xc27e}, {0x401, 0x9, 0x40, 0x5, 0x7, 0x2, 0xc0, 0x6, 0xf9, 0x36, 0x1, 0xd, 0x6b}], 0x5f}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000240)={[{0xdad1, 0xfff9, 0xce, 0x7, 0x8, 0xd2, 0x8, 0x1, 0x6, 0x9, 0x2, 0x4, 0x2b5b}, {0x80000001, 0x40, 0x4, 0x6, 0x5, 0xf, 0xc, 0x4, 0xab, 0x2f, 0x8, 0x50, 0x8001}, {0x0, 0x8, 0x1, 0xf, 0x1, 0x5, 0x0, 0x2, 0x7, 0x4, 0x4, 0x93}], 0x8}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x100007ff) ioctl$FS_IOC_GETVERSION(r8, 0x5b01, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="da420600c0b5000008002800aaaaaaaaaa0300"/28], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x40) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r10, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='vfat\x00', 0x0, &(0x7f0000000140)='\x06\x00\x00\x00\xf0\xff\x0e\x00') 6.000375605s ago: executing program 4 (id=2976): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) close(0x3) syz_emit_ethernet(0x7e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0xc, &(0x7f00000000c0)={0x0, 0xa, 0x59, {0x59, 0x31, "baf350be415a611f7137c92cae487aae0c2dda8b47d57cbba468cca9166239c779819b68ee44f252ca2c761c42a52f92a50e282afd6c13fba0b09f8816d54df006923f0e996d6c6630522d7cec10b102152ec260f049c9"}}, &(0x7f0000000140)={0x0, 0x3, 0x79, @string={0x79, 0x3, "d7d55f59bec570a9c954026d8647c47e700a285bd731c27bd7cf3e8729f8ac3f2ad85556b721adcbb95c47db8eb262a19926314af9a51f5fb6f67eb79bd15d784923a67553986cae2e7a9f605d854f7ae933ab4e56cebb2614eb7c5e99980026c11ac5a53f4b81953d17f784286a715eaddf7ebbb135f1"}}}, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x0, 0x8, 0x4d, "ee37e0000bf9f3f21c61fb800b6eeb5764c879fcb1e5c34a622c0a6ebb0c5ef7a5f3f84775971e2aa143642df476ba190c43c893838dac874f79aa2198b4d2e5610ba7c236b98bd2a116c5051c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9a}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "d64483"}, &(0x7f0000000300)={0x20, 0x82, 0x1, 'B'}, &(0x7f0000000340)={0x20, 0x83, 0x1, '\b'}, &(0x7f0000000380)={0x20, 0x84, 0x2, "bfd9"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "2673fa"}}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.408919169s ago: executing program 5 (id=2977): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x4c050}, 0x40) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x6, 0xfffffffd, 0x3ff}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 4.530570087s ago: executing program 5 (id=2978): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x6884}, 0x0) 4.53027817s ago: executing program 5 (id=2979): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000130000c7bcbbeec27668a8009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000001280)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket(0x22, 0x2, 0x1) sendfile(r4, r3, 0x0, 0x80000000000001) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_procfs(0x0, 0x0) fsopen(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) 4.010424851s ago: executing program 0 (id=2980): r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 3.599895687s ago: executing program 5 (id=2981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/88, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x6}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 3.232540746s ago: executing program 2 (id=2982): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000040), 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000005000008000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='qgroup_update_counters\x00', r6, 0x0, 0x1}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 3.160358317s ago: executing program 2 (id=2983): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe65) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r6 = dup2(r2, r2) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYRESOCT=0x0], 0xf) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x39000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$dupfd(r8, 0x0, r8) read$FUSE(r9, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x8, 0x0, "69091078db84664d3d26ace4be66a68b70feef6e58a2392671d78d92251ee2068ef2a8984d4c7a4528ab40791f5d9b88132b410309abd7f90127f484784c6a77351d4d75afd4bcb563fe06016700"}, 0xd8) 3.069878162s ago: executing program 0 (id=2984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000006c0)="67e4d54f578d", 0x6, 0xfffffffffffffffb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0x114, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x9, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x4, 0x1, '\v'}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0xf, "d70e"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x5, "356e9c"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x7, "ec39e9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x1, 0xa2, 0x2, "1ba846"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x0, 0x3}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x94, 0x4, 0x0, 0x0, "ff4e9a89b8a845274e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xbd, 0x4, 0x7, 0x1, "7246b261e8a7e56bf7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0xa539e118efcf08c8, 0x2, 0x9, 0x2, {0x7, 0x25, 0x1, 0x2, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x3, "346adf", "ca7a43"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x3, 0x30, 0x9, '3e/mf'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8c0, 0x9, 0x9, "08b9f61e96d99c37"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x80, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x44, 0x3, "770dd179a867"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x6, 0x5, {0x7, 0x25, 0x1, 0x82, 0x81, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x0, 0x2, 0x20, 0x4}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x102, &(0x7f0000000a00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x403}}, {0x73, &(0x7f00000003c0)=@string={0x73, 0x3, "2a9dbfd256233e132573cc56f5e142ca59916daf65160d018898e68f4128ae9548bc52a4c1f973bcd8b3edbdeda3875b194b96d8bede822d51ce90d3b7b1672fb7d96141cf8453d77924efdac7c61dbe8a57f3ca8b53865d069110abd34c35aad157039d925bc367bf9636c3724ef376ad"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a0102"], 0x1c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.939908003s ago: executing program 4 (id=2985): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) setreuid(0x0, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe65) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = dup2(r2, r2) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYRESOCT=0x0], 0xf) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x39000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r6, &(0x7f00000033c0)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x8, 0x0, "69091078db84664d3d26ace4be66a68b70feef6e58a2392671d78d92251ee2068ef2a8984d4c7a4528ab40791f5d9b88132b410309abd7f90127f484784c6a77351d4d75afd4bcb563fe06016700"}, 0xd8) 2.701951257s ago: executing program 5 (id=2986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/88, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x6}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 1.760441234s ago: executing program 5 (id=2987): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) setreuid(0x0, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe65) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYRESOCT=0x0], 0xf) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x39000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r5, &(0x7f00000033c0)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x8, 0x0, "69091078db84664d3d26ace4be66a68b70feef6e58a2392671d78d92251ee2068ef2a8984d4c7a4528ab40791f5d9b88132b410309abd7f90127f484784c6a77351d4d75afd4bcb563fe06016700"}, 0xd8) 77.183332ms ago: executing program 0 (id=2988): setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xffffffff, 0x2, 0x4, 0x0, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0xa00]}}) 0s ago: executing program 0 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioperm(0x0, 0x3, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="77b761d3c705abb78a40cd620541d224daf4d3a7c1fcdeb97b0b4d2066dbd46defe9c82ef1c7296d933dcba4e2f3f230363c30acfaaa34513c14fcebdff688c6660e986f91c0fc12a0c586109aaf522838e6b0ef4559ec7768f2ed3b38070e051cd5b56315a45fd5df69f92a69f30000"], 0x4c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) fsopen(0x0, 0x1) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38001fa1000000000700"/27, @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="01010300ff02000000000000000000000000000186dd0000"], 0x38}, 0x1, 0xf0}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) kernel console output (not intermixed with test programs): n invalid length. [ 732.406675][T15789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.690331][T15788] loop6: detected capacity change from 0 to 524287999 [ 732.694680][T15788] buffer_io_error: 23 callbacks suppressed [ 732.694698][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 732.704272][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.074026][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.102030][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.107054][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.116851][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.127783][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.176329][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.191384][T15788] ldm_validate_partition_table(): Disk read failed. [ 733.198783][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.223290][T15788] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.244483][T15788] Dev loop6: unable to read RDB block 0 [ 733.251272][T15788] loop6: unable to read partition table [ 733.271726][T15788] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 733.904622][T15712] ldm_validate_partition_table(): Disk read failed. [ 733.907908][T15712] Dev loop6: unable to read RDB block 0 [ 733.910447][T15712] loop6: unable to read partition table [ 734.566981][ T6007] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 734.786736][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 734.818694][ T6007] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 734.826135][ T6007] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 734.834677][ T6007] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 734.841814][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 734.851161][ T6007] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 734.858014][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.861447][ T6007] usb 5-1: Product: syz [ 734.863080][ T6007] usb 5-1: Manufacturer: syz [ 734.864973][ T6007] usb 5-1: SerialNumber: syz [ 734.925402][ T6007] usb 5-1: config 0 descriptor?? [ 734.943993][T15804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.374043][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 735.540335][T15801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.611585][ T6007] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input16 [ 736.014683][ T6007] usb 5-1: USB disconnect, device number 28 [ 739.216706][ T6032] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 739.408676][ T6032] usb 5-1: Using ep0 maxpacket: 8 [ 739.417620][ T6032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.428245][ T6032] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 739.440444][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.453410][ T6032] usb 5-1: config 0 descriptor?? [ 743.959602][ T6032] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 743.980173][ T6032] usb 5-1: USB disconnect, device number 29 [ 745.244249][T15897] xt_TCPMSS: Only works on TCP SYN packets [ 745.644861][T15904] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 745.716739][T15904] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 745.728193][T15904] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 746.446022][T15904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.901535][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.904783][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.215932][T15951] batadv_slave_1: entered allmulticast mode [ 749.234326][T15951] batadv_slave_1: left allmulticast mode [ 749.354805][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 749.354823][ T40] audit: type=1800 audit(2000000571.709:510): pid=15956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2286" name="file0" dev="overlay" ino=1820 res=0 errno=0 [ 751.827651][T15989] random: crng reseeded on system resumption [ 752.024892][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2294'. [ 752.028688][T15989] bridge_slave_1: left allmulticast mode [ 752.031158][T15989] bridge_slave_1: left promiscuous mode [ 752.033917][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.081838][T15989] bridge_slave_0: left allmulticast mode [ 752.084424][T15989] bridge_slave_0: left promiscuous mode [ 752.087776][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.965839][T16009] fuseblk: Unknown parameter 'grkup_id' [ 753.056834][ T2293] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 753.206696][ T2293] usb 7-1: Using ep0 maxpacket: 16 [ 753.212815][ T2293] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 753.222513][ T2293] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 753.235516][ T2293] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 753.247155][ T2293] usb 7-1: config 0 interface 0 has no altsetting 0 [ 753.258554][ T2293] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 753.265586][ T2293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.279186][ T2293] usb 7-1: Product: syz [ 753.282914][ T2293] usb 7-1: Manufacturer: syz [ 753.284965][ T2293] usb 7-1: SerialNumber: syz [ 753.294421][ T2293] usb 7-1: config 0 descriptor?? [ 753.298212][T16004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.686181][T16004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.693479][ T2293] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 753.988628][ T6032] usb 7-1: USB disconnect, device number 29 [ 754.110585][T16029] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.173676][T16029] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.249769][T16029] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.265801][T16033] netlink: 'syz.3.2305': attribute type 2 has an invalid length. [ 754.268845][T16033] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 754.271788][T16033] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 754.330869][T16029] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.457952][T16029] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.464829][T16029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.484688][T16029] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.500535][T16029] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.036888][ T6023] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 757.107098][T15286] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 757.196920][ T6023] usb 9-1: Using ep0 maxpacket: 16 [ 757.201693][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 757.205478][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 757.209122][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 757.213396][ T6023] usb 9-1: config 0 interface 0 has no altsetting 0 [ 757.222145][ T6023] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 757.226202][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.229673][ T6023] usb 9-1: Product: syz [ 757.231523][ T6023] usb 9-1: Manufacturer: syz [ 757.233560][ T6023] usb 9-1: SerialNumber: syz [ 757.236778][T15286] usb 7-1: device descriptor read/64, error -71 [ 757.241163][ T6023] usb 9-1: config 0 descriptor?? [ 757.245564][T16076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 757.456493][T16076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 757.461494][ T6023] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input18 [ 757.486639][T15286] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 757.626718][T15286] usb 7-1: device descriptor read/64, error -71 [ 757.728167][ T6032] usb 9-1: USB disconnect, device number 12 [ 757.738452][T15286] usb usb7-port1: attempt power cycle [ 758.086671][T15286] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 758.107153][T15286] usb 7-1: device descriptor read/8, error -71 [ 758.348263][T15286] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 758.370821][T15286] usb 7-1: device descriptor read/8, error -71 [ 758.663119][T15286] usb usb7-port1: unable to enumerate USB device [ 759.060291][ T40] audit: type=1804 audit(2000000581.419:511): pid=16108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2321" name="/newroot/592/cgroup.controllers" dev="tmpfs" ino=3250 res=1 errno=0 [ 759.086353][ T40] audit: type=1800 audit(2000000581.429:512): pid=16108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2321" name="cgroup.controllers" dev="tmpfs" ino=3250 res=0 errno=0 [ 759.124928][ T40] audit: type=1800 audit(2000000581.429:513): pid=16108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2321" name="cgroup.controllers" dev="tmpfs" ino=3250 res=0 errno=0 [ 760.056699][ T40] audit: type=1804 audit(2000000582.379:514): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2326" name="/newroot/574/cgroup.controllers" dev="tmpfs" ino=3150 res=1 errno=0 [ 760.065886][ T40] audit: type=1800 audit(2000000582.379:515): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2326" name="cgroup.controllers" dev="tmpfs" ino=3150 res=0 errno=0 [ 760.076826][ T40] audit: type=1800 audit(2000000582.379:516): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2326" name="cgroup.controllers" dev="tmpfs" ino=3150 res=0 errno=0 [ 761.272870][T16153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 761.275558][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 761.279033][T16153] vhci_hcd vhci_hcd.0: Device attached [ 761.282191][T16155] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 761.284935][T16155] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 761.288367][T16155] vhci_hcd vhci_hcd.0: Device attached [ 761.377650][T16157] vhci_hcd: connection closed [ 761.377734][T16156] vhci_hcd: connection closed [ 761.381781][ T1140] vhci_hcd: stop threads [ 761.387738][ T1140] vhci_hcd: release socket [ 761.389291][ T1140] vhci_hcd: disconnect device [ 761.390922][ T1140] vhci_hcd: stop threads [ 761.392432][ T1140] vhci_hcd: release socket [ 761.393926][ T1140] vhci_hcd: disconnect device [ 761.977497][ T40] audit: type=1804 audit(2000000584.339:517): pid=16171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2333" name="/newroot/576/cgroup.controllers" dev="tmpfs" ino=3162 res=1 errno=0 [ 761.987084][ T40] audit: type=1800 audit(2000000584.339:518): pid=16171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2333" name="cgroup.controllers" dev="tmpfs" ino=3162 res=0 errno=0 [ 761.996135][ T40] audit: type=1800 audit(2000000584.339:519): pid=16171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2333" name="cgroup.controllers" dev="tmpfs" ino=3162 res=0 errno=0 [ 763.162510][ T40] audit: type=1804 audit(2000000585.519:520): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2338" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1878 res=1 errno=0 [ 763.990534][T16209] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 764.446868][T16219] netlink: 'syz.0.2344': attribute type 2 has an invalid length. [ 764.450190][T16219] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 764.453496][T16219] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 764.462279][T16219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 765.113016][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 765.113031][ T40] audit: type=1804 audit(2000000587.469:523): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2345" name="/newroot/343/cgroup.controllers" dev="tmpfs" ino=1889 res=1 errno=0 [ 765.127169][ T40] audit: type=1800 audit(2000000587.469:524): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2345" name="cgroup.controllers" dev="tmpfs" ino=1889 res=0 errno=0 [ 765.135741][ T40] audit: type=1800 audit(2000000587.479:525): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2345" name="cgroup.controllers" dev="tmpfs" ino=1889 res=0 errno=0 [ 766.176809][ T6023] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 766.326896][ T6023] usb 9-1: Using ep0 maxpacket: 16 [ 766.331443][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 766.334610][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 766.338363][ T6023] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 766.341794][ T6023] usb 9-1: config 0 interface 0 has no altsetting 0 [ 766.345575][ T6023] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 766.348726][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.351215][ T6023] usb 9-1: Product: syz [ 766.352514][ T6023] usb 9-1: Manufacturer: syz [ 766.353975][ T6023] usb 9-1: SerialNumber: syz [ 766.356979][ T6023] usb 9-1: config 0 descriptor?? [ 766.359457][T16257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 766.432903][T16262] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 766.436143][T16262] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 766.440317][T16262] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 766.567247][T16257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 766.579309][ T6023] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input19 [ 766.842162][ T6023] usb 9-1: USB disconnect, device number 13 [ 767.106844][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 767.414099][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2359'. [ 767.664509][ T40] audit: type=1804 audit(2000000590.019:526): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2363" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3287 res=1 errno=0 [ 767.684795][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.685063][ T40] audit: type=1800 audit(2000000590.019:527): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2363" name="cgroup.controllers" dev="tmpfs" ino=3287 res=0 errno=0 [ 767.690815][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 767.696073][ T40] audit: type=1800 audit(2000000590.019:528): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2363" name="cgroup.controllers" dev="tmpfs" ino=3287 res=0 errno=0 [ 767.704965][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 767.711703][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 767.720228][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.004974][T16281] chnl_net:caif_netlink_parms(): no params data found [ 768.019157][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.090285][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.117616][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.119978][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.122364][T16281] bridge_slave_0: entered allmulticast mode [ 768.125317][T16281] bridge_slave_0: entered promiscuous mode [ 768.129968][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.133070][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.136208][T16281] bridge_slave_1: entered allmulticast mode [ 768.143138][T16281] bridge_slave_1: entered promiscuous mode [ 768.149915][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.213241][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.220693][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.259173][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.297931][T16281] team0: Port device team_slave_0 added [ 768.301640][T16281] team0: Port device team_slave_1 added [ 768.345674][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.351502][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.363898][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.369561][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.371814][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.379901][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.530545][T16281] hsr_slave_0: entered promiscuous mode [ 768.533981][T16281] hsr_slave_1: entered promiscuous mode [ 768.537367][T16281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.540824][T16281] Cannot create hsr debugfs directory [ 768.858109][ T40] audit: type=1800 audit(2000000591.219:529): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2366" name="file0" dev="overlay" ino=3193 res=0 errno=0 [ 768.882717][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.889106][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.894384][ T13] bond0 (unregistering): Released all slaves [ 768.988626][ T13] bond1 (unregistering): Released all slaves [ 768.999878][ T13] bond2 (unregistering): Released all slaves [ 769.010766][ T13] bond3 (unregistering): Released all slaves [ 769.022475][ T13] bond4 (unregistering): Released all slaves [ 769.030280][ T13] bond5 (unregistering): Released all slaves [ 769.037155][ T13] bond6 (unregistering): Released all slaves [ 769.045376][ T13] bond7 (unregistering): Released all slaves [ 769.053752][ T13] bond8 (unregistering): Released all slaves [ 769.063806][ T13] bond9 (unregistering): Released all slaves [ 769.583315][ T34] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 769.628719][ T13] hsr_slave_0: left promiscuous mode [ 769.630993][ T13] hsr_slave_1: left promiscuous mode [ 769.633663][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.636045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.645158][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.647710][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.672913][ T13] veth1_macvtap: left promiscuous mode [ 769.675907][ T13] veth0_macvtap: left promiscuous mode [ 769.677913][ T13] veth1_vlan: left promiscuous mode [ 769.736726][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 769.741800][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 769.745961][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 769.749160][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.752347][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.756341][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 769.759569][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.777558][ T5952] Bluetooth: hci4: command tx timeout [ 769.860452][ T1147] smc: removing ib device syz2 [ 770.007758][ T34] usb 9-1: usb_control_msg returned -71 [ 770.014592][ T34] usbtmc 9-1:16.0: can't read capabilities [ 770.022322][ T34] usb 9-1: USB disconnect, device number 14 [ 770.070704][ T40] audit: type=1804 audit(2000000592.429:530): pid=16338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2371" name="/newroot/583/cgroup.controllers" dev="tmpfs" ino=3210 res=1 errno=0 [ 770.079684][ T40] audit: type=1800 audit(2000000592.439:531): pid=16338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2371" name="cgroup.controllers" dev="tmpfs" ino=3210 res=0 errno=0 [ 770.087467][ T40] audit: type=1800 audit(2000000592.439:532): pid=16338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2371" name="cgroup.controllers" dev="tmpfs" ino=3210 res=0 errno=0 [ 770.478716][ T13] team0 (unregistering): Port device team_slave_1 removed [ 770.554667][ T13] team0 (unregistering): Port device team_slave_0 removed [ 771.079951][ T13] vxcan1 (unregistering): left allmulticast mode [ 771.414470][T16281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 771.453064][T16281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 771.462745][T16281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 771.468474][T16281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 771.526711][ T6007] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 771.557038][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.595624][T16281] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.609685][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.612076][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.619214][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.621546][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.728698][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.733486][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.740132][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 771.749298][ T6007] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.753146][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.764623][ T6007] usb 7-1: config 0 descriptor?? [ 771.824208][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.876145][T16281] veth0_vlan: entered promiscuous mode [ 771.889179][T16281] veth1_vlan: entered promiscuous mode [ 771.899421][ T5952] Bluetooth: hci4: command tx timeout [ 771.927502][T16281] veth0_macvtap: entered promiscuous mode [ 771.940785][T16281] veth1_macvtap: entered promiscuous mode [ 771.982701][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.005276][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.018629][T16281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.021442][T16281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.024901][T16281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.032470][T16281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.111212][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.120263][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.151315][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.154763][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.380276][ T6007] usbhid 7-1:0.0: can't add hid device: -71 [ 772.382267][ T6007] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 772.386162][ T6007] usb 7-1: USB disconnect, device number 34 [ 773.657789][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 773.662198][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 773.665346][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 773.669476][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 773.672773][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 773.838002][T16399] chnl_net:caif_netlink_parms(): no params data found [ 773.938124][ T5952] Bluetooth: hci4: command tx timeout [ 774.108002][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.110308][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.112608][T16399] bridge_slave_0: entered allmulticast mode [ 774.115595][T16399] bridge_slave_0: entered promiscuous mode [ 774.119445][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.121944][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.124403][T16399] bridge_slave_1: entered allmulticast mode [ 774.128643][T16399] bridge_slave_1: entered promiscuous mode [ 774.176020][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.197473][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.268378][ T40] audit: type=1800 audit(2000000596.629:533): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2382" name="file0" dev="overlay" ino=1939 res=0 errno=0 [ 774.361088][T16399] team0: Port device team_slave_0 added [ 774.369139][T16399] team0: Port device team_slave_1 added [ 774.436980][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.439401][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.456481][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.460777][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.462942][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.471454][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.564776][T16399] hsr_slave_0: entered promiscuous mode [ 774.569549][T16399] hsr_slave_1: entered promiscuous mode [ 774.572214][T16399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.574737][T16399] Cannot create hsr debugfs directory [ 774.813281][T16399] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.919149][T16399] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.965078][T16426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.970037][T16426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.976798][T15286] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 775.003686][T16399] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.063501][T16399] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.233078][T16399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 775.240023][T16399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 775.251481][T16399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 775.258240][T16399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 775.368870][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.379665][T16399] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.385357][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.388252][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.400460][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.403532][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.544289][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.580437][T16399] veth0_vlan: entered promiscuous mode [ 775.585407][T16399] veth1_vlan: entered promiscuous mode [ 775.600310][T16399] veth0_macvtap: entered promiscuous mode [ 775.606060][T16399] veth1_macvtap: entered promiscuous mode [ 775.616467][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.626177][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.631075][T16399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.633807][T16399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.636502][T16399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.640465][T16399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.696852][ T5952] Bluetooth: hci2: command tx timeout [ 775.775287][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.779545][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.802585][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.805207][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.026704][ T5952] Bluetooth: hci4: command tx timeout [ 777.094171][ T40] audit: type=1800 audit(2000000599.449:534): pid=16473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2395" name="file0" dev="overlay" ino=37 res=0 errno=0 [ 777.778993][ T5952] Bluetooth: hci2: command tx timeout [ 777.937133][T16482] netlink: 'syz.0.2398': attribute type 2 has an invalid length. [ 777.939706][T16482] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 777.942329][T16482] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 777.946108][T16482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 778.126487][T16485] netlink: 'syz.0.2399': attribute type 2 has an invalid length. [ 778.425611][T16494] syz.3.2400: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 778.431116][T16494] CPU: 2 UID: 0 PID: 16494 Comm: syz.3.2400 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 778.431133][T16494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 778.431140][T16494] Call Trace: [ 778.431144][T16494] [ 778.431148][T16494] dump_stack_lvl+0x16c/0x1f0 [ 778.431169][T16494] warn_alloc+0x248/0x3a0 [ 778.431187][T16494] ? __pfx_warn_alloc+0x10/0x10 [ 778.431202][T16494] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 778.431219][T16494] ? stack_depot_save_flags+0x3e0/0xa40 [ 778.431239][T16494] ? kasan_save_stack+0x42/0x60 [ 778.431254][T16494] ? kasan_save_stack+0x33/0x60 [ 778.431268][T16494] ? kasan_save_track+0x14/0x30 [ 778.431283][T16494] ? xskq_create+0x52/0x1d0 [ 778.431295][T16494] ? xsk_setsockopt+0x640/0x840 [ 778.431307][T16494] ? do_sock_setsockopt+0x224/0x470 [ 778.431320][T16494] ? xskq_create+0xfb/0x1d0 [ 778.431334][T16494] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 778.431352][T16494] ? xskq_create+0xfb/0x1d0 [ 778.431369][T16494] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 778.431388][T16494] ? xskq_create+0xfb/0x1d0 [ 778.431401][T16494] vmalloc_user_noprof+0x9e/0xe0 [ 778.431414][T16494] ? xskq_create+0xfb/0x1d0 [ 778.431428][T16494] xskq_create+0xfb/0x1d0 [ 778.431443][T16494] xsk_setsockopt+0x640/0x840 [ 778.431456][T16494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 778.431469][T16494] ? __pfx_aa_sk_perm+0x10/0x10 [ 778.431482][T16494] ? errseq_sample+0x53/0x70 [ 778.431501][T16494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 778.431514][T16494] do_sock_setsockopt+0x224/0x470 [ 778.431525][T16494] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 778.431545][T16494] __sys_setsockopt+0x120/0x1a0 [ 778.431563][T16494] __ia32_sys_setsockopt+0xbc/0x160 [ 778.431577][T16494] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.431592][T16494] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 778.431609][T16494] __do_fast_syscall_32+0x7c/0x3a0 [ 778.431626][T16494] do_fast_syscall_32+0x32/0x80 [ 778.431643][T16494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.431656][T16494] RIP: 0023:0xf7fc3579 [ 778.431665][T16494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 778.431676][T16494] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 778.431686][T16494] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 778.431692][T16494] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 778.431698][T16494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.431704][T16494] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 778.431710][T16494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.431724][T16494] [ 778.431728][T16494] Mem-Info: [ 778.553066][T16494] active_anon:9048 inactive_anon:14004 isolated_anon:0 [ 778.553066][T16494] active_file:2953 inactive_file:10854 isolated_file:0 [ 778.553066][T16494] unevictable:1768 dirty:261 writeback:0 [ 778.553066][T16494] slab_reclaimable:6631 slab_unreclaimable:70369 [ 778.553066][T16494] mapped:30514 shmem:22266 pagetables:1790 [ 778.553066][T16494] sec_pagetables:331 bounce:0 [ 778.553066][T16494] kernel_misc_reclaimable:0 [ 778.553066][T16494] free:43378 free_pcp:12648 free_cma:0 [ 778.579086][T16494] Node 0 active_anon:204kB inactive_anon:100kB active_file:544kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1228kB dirty:4kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7200kB pagetables:1556kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 778.597121][T16494] Node 1 active_anon:36060kB inactive_anon:55916kB active_file:11268kB inactive_file:43396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120908kB dirty:1040kB writeback:0kB shmem:85568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8192kB pagetables:5604kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB [ 778.613605][T16494] Node 0 DMA free:2620kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 778.629204][T16494] lowmem_reserve[]: 0 289 289 289 289 [ 778.631507][T16494] Node 0 DMA32 free:46312kB boost:29740kB min:42960kB low:46264kB high:49568kB reserved_highatomic:4096KB free_highatomic:564KB active_anon:204kB inactive_anon:100kB active_file:544kB inactive_file:20kB unevictable:3536kB writepending:4kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:6472kB local_pcp:940kB free_cma:0kB [ 778.644618][T16494] lowmem_reserve[]: 0 0 0 0 0 [ 778.647078][T16494] Node 1 DMA32 free:124600kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:416KB active_anon:36060kB inactive_anon:55916kB active_file:11268kB inactive_file:43396kB unevictable:3536kB writepending:1040kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:44340kB local_pcp:5620kB free_cma:0kB [ 778.662282][T16494] lowmem_reserve[]: 0 0 0 0 0 [ 778.664446][T16494] Node 0 DMA: 49*4kB (U) 31*8kB (U) 12*16kB (U) 12*32kB (U) 3*64kB (U) 3*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2620kB [ 778.670620][T16494] Node 0 DMA32: 684*4kB (UMEH) 427*8kB (UMEH) 238*16kB (UMEH) 290*32kB (UMEH) 121*64kB (UMEH) 49*128kB (UME) 29*256kB (UME) 7*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 46312kB [ 778.678671][T16494] Node 1 DMA32: 1352*4kB (UMEH) 919*8kB (UMEH) 1222*16kB (UMEH) 450*32kB (MEH) 147*64kB (UMEH) 85*128kB (UME) 53*256kB (UME) 34*512kB (UME) 14*1024kB (UME) 6*2048kB (U) 0*4096kB = 124600kB [ 778.685139][T16494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.688566][T16494] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 778.692050][T16494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.695095][T16494] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 778.698044][T16494] 36910 total pagecache pages [ 778.699514][T16494] 821 pages in swap cache [ 778.700891][T16494] Free swap = 73128kB [ 778.702296][T16494] Total swap = 124996kB [ 778.703607][T16494] 524155 pages RAM [ 778.704834][T16494] 0 pages HighMem/MovableOnly [ 778.706308][T16494] 209145 pages reserved [ 778.707716][T16494] 0 pages cma reserved [ 779.744744][T16507] 9p: Unknown Cache mode or invalid value fscache [ 779.856702][ T5952] Bluetooth: hci2: command tx timeout [ 780.119727][T16520] netlink: 'syz.4.2407': attribute type 2 has an invalid length. [ 780.122401][T16520] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 780.124903][T16520] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 780.129009][T16520] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 780.669601][T16527] netlink: 'syz.2.2409': attribute type 12 has an invalid length. [ 780.953887][T16532] netlink: 'syz.3.2411': attribute type 12 has an invalid length. [ 780.973301][T16532] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 780.976986][T16532] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2411'. [ 781.095390][T16539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.936927][ T5952] Bluetooth: hci2: command tx timeout [ 783.259226][T16580] validate_nla: 3 callbacks suppressed [ 783.259242][T16580] netlink: 'syz.0.2422': attribute type 12 has an invalid length. [ 783.264767][T16580] netlink: 'syz.0.2422': attribute type 29 has an invalid length. [ 783.268243][T16580] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2422'. [ 783.358250][T16582] netlink: 'syz.4.2423': attribute type 2 has an invalid length. [ 783.360805][T16582] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 783.363259][T16582] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 783.369756][T16582] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 783.846682][ T838] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 784.017359][ T838] usb 8-1: Using ep0 maxpacket: 16 [ 784.021378][ T838] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 784.026668][ T838] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 784.036663][ T838] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 784.041575][ T838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 784.049152][ T838] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 784.055501][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.062940][ T838] usb 8-1: Product: syz [ 784.065160][ T838] usb 8-1: Manufacturer: syz [ 784.069847][ T838] usb 8-1: SerialNumber: syz [ 784.111124][ T838] usb 8-1: config 0 descriptor?? [ 784.114375][T16586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 784.323516][T16586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 784.329984][ T838] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 784.600591][ T838] usb 8-1: USB disconnect, device number 27 [ 785.934087][T16628] netlink: 'syz.0.2435': attribute type 2 has an invalid length. [ 785.938183][T16628] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 785.940632][T16628] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 785.944272][T16628] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 785.995268][ T40] audit: type=1800 audit(2000000608.349:535): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2434" name="file0" dev="overlay" ino=3305 res=0 errno=0 [ 787.247518][ T8309] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 787.354049][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 787.358146][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.361343][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.371546][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.375152][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.387949][ T40] audit: type=1804 audit(2000000609.739:536): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2441" name="/newroot/12/cgroup.controllers" dev="tmpfs" ino=90 res=1 errno=0 [ 787.398733][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2442'. [ 787.409317][ T40] audit: type=1800 audit(2000000609.739:537): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2441" name="cgroup.controllers" dev="tmpfs" ino=90 res=0 errno=0 [ 787.420415][ T40] audit: type=1800 audit(2000000609.739:538): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2441" name="cgroup.controllers" dev="tmpfs" ino=90 res=0 errno=0 [ 787.697320][T16649] chnl_net:caif_netlink_parms(): no params data found [ 787.780014][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.782299][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.784543][T16649] bridge_slave_0: entered allmulticast mode [ 787.787384][T16649] bridge_slave_0: entered promiscuous mode [ 787.790536][T16649] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.792899][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.795153][T16649] bridge_slave_1: entered allmulticast mode [ 787.798982][T16649] bridge_slave_1: entered promiscuous mode [ 787.836970][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.841612][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.887873][T16649] team0: Port device team_slave_0 added [ 787.892944][T16649] team0: Port device team_slave_1 added [ 787.935203][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.940567][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.955235][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.970615][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.973003][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.981007][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.082432][T16649] hsr_slave_0: entered promiscuous mode [ 788.084693][T16649] hsr_slave_1: entered promiscuous mode [ 788.090047][T16649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.092407][T16649] Cannot create hsr debugfs directory [ 788.201949][T16649] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.261728][T16649] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.337737][T16649] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.400527][T16649] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.489456][ T40] audit: type=1800 audit(2000000610.849:539): pid=16682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2446" name="file0" dev="overlay" ino=105 res=0 errno=0 [ 788.525156][T16649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 788.530633][T16649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 788.534587][T16649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 788.540165][T16649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 788.591022][T16649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.604446][T16649] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.624773][T16649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.628782][T16649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.637986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.640622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.644613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.647326][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.734714][T16649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.761219][T16649] veth0_vlan: entered promiscuous mode [ 788.768263][T16649] veth1_vlan: entered promiscuous mode [ 788.782879][T16649] veth0_macvtap: entered promiscuous mode [ 788.786840][T16649] veth1_macvtap: entered promiscuous mode [ 788.796095][T16649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.803608][T16649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.809292][T16649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.812860][T16649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.816149][T16649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.819975][T16649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.894144][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.900707][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.912341][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.915041][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.085895][T16704] netlink: 'syz.4.2448': attribute type 2 has an invalid length. [ 789.088526][T16704] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 789.091058][T16704] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 789.095365][T16704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 789.112562][T16693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.115540][T16693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.456887][ T63] Bluetooth: hci3: command tx timeout [ 791.039459][ T40] audit: type=1804 audit(2000000613.399:540): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2453" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=2049 res=1 errno=0 [ 791.046432][ T40] audit: type=1800 audit(2000000613.399:541): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2453" name="cgroup.controllers" dev="tmpfs" ino=2049 res=0 errno=0 [ 791.053488][ T40] audit: type=1800 audit(2000000613.409:542): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2453" name="cgroup.controllers" dev="tmpfs" ino=2049 res=0 errno=0 [ 791.064172][ C0] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 791.067233][ C0] sr 2:0:0:0: [sr0] tag#1 CDB: opcode=0xe1 (vendor) [ 791.069301][ C0] sr 2:0:0:0: [sr0] tag#1 CDB[00]: e1 b1 d2 e4 3a a7 00 00 00 00 00 00 00 00 00 00 [ 791.072059][ C0] sr 2:0:0:0: [sr0] tag#1 CDB[10]: 00 [ 791.140882][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 791.143878][T16732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.204815][T16732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.536798][ T63] Bluetooth: hci3: command tx timeout [ 791.564452][T16737] loop6: detected capacity change from 0 to 524287999 [ 791.951744][T16743] netlink: 'syz.3.2458': attribute type 2 has an invalid length. [ 791.954035][T16743] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 791.956289][T16743] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 791.961610][T16743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 793.148717][ T40] audit: type=1804 audit(2000000615.509:543): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2465" name="/newroot/21/cgroup.controllers" dev="tmpfs" ino=149 res=1 errno=0 [ 793.155537][ T40] audit: type=1800 audit(2000000615.509:544): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2465" name="cgroup.controllers" dev="tmpfs" ino=149 res=0 errno=0 [ 793.165832][ T40] audit: type=1800 audit(2000000615.519:545): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2465" name="cgroup.controllers" dev="tmpfs" ino=149 res=0 errno=0 [ 793.617072][ T63] Bluetooth: hci3: command tx timeout [ 794.997806][T16799] netlink: 'syz.3.2470': attribute type 2 has an invalid length. [ 795.000371][T16799] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 795.002873][T16799] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 795.008098][T16799] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 795.026765][T15057] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 795.176670][T15057] usb 5-1: Using ep0 maxpacket: 16 [ 795.179900][T15057] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 795.183001][T15057] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 795.186513][T15057] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 795.190391][T15057] usb 5-1: config 0 interface 0 has no altsetting 0 [ 795.194151][T15057] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 795.197353][T15057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.199926][T15057] usb 5-1: Product: syz [ 795.201372][T15057] usb 5-1: Manufacturer: syz [ 795.202904][T15057] usb 5-1: SerialNumber: syz [ 795.206286][T15057] usb 5-1: config 0 descriptor?? [ 795.208669][T16795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.414753][T16795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.421263][T15057] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22 [ 795.612100][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 795.682023][ T5947] usb 5-1: USB disconnect, device number 30 [ 795.706677][ T63] Bluetooth: hci3: command tx timeout [ 796.211301][ T40] audit: type=1804 audit(2000000618.569:546): pid=16817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2475" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=2065 res=1 errno=0 [ 796.226771][ T40] audit: type=1800 audit(2000000618.569:547): pid=16817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2475" name="cgroup.controllers" dev="tmpfs" ino=2065 res=0 errno=0 [ 796.234054][ T40] audit: type=1800 audit(2000000618.569:548): pid=16817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2475" name="cgroup.controllers" dev="tmpfs" ino=2065 res=0 errno=0 [ 796.355070][ T40] audit: type=1326 audit(2000000618.709:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16818 comm="syz.0.2476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 796.572412][ T40] audit: type=1326 audit(2000000618.929:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16818 comm="syz.0.2476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7fc00000 [ 796.624150][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 796.627120][T16826] netlink: 'syz.0.2477': attribute type 5 has an invalid length. [ 796.630313][T16826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2477'. [ 796.640960][T16826] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 796.644147][T16826] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 796.647141][T16826] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 796.649911][T16826] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 796.652775][T16826] geneve2: entered promiscuous mode [ 796.654508][T16826] geneve2: entered allmulticast mode [ 797.544194][T16849] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2483'. [ 797.552475][T16849] netlink: zone id is out of range [ 797.554847][T16849] netlink: zone id is out of range [ 797.557490][T16849] netlink: zone id is out of range [ 797.559819][T16849] netlink: zone id is out of range [ 797.562092][T16849] netlink: zone id is out of range [ 797.564352][T16849] netlink: zone id is out of range [ 797.567380][T16849] netlink: zone id is out of range [ 797.569623][T16849] netlink: zone id is out of range [ 797.571927][T16849] netlink: zone id is out of range [ 797.574173][T16849] netlink: zone id is out of range [ 798.133893][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 798.363784][T16865] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 798.374813][T16865] bond9: entered promiscuous mode [ 798.379019][T16865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 799.296111][ T40] audit: type=1804 audit(2000000621.649:551): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2490" name="/newroot/30/cgroup.controllers" dev="tmpfs" ino=197 res=1 errno=0 [ 799.308344][ T40] audit: type=1800 audit(2000000621.649:552): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2490" name="cgroup.controllers" dev="tmpfs" ino=197 res=0 errno=0 [ 799.315629][ T40] audit: type=1800 audit(2000000621.669:553): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2490" name="cgroup.controllers" dev="tmpfs" ino=197 res=0 errno=0 [ 800.256175][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.264175][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.397941][T15057] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 801.926753][ T59] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 802.086668][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 802.089966][ T59] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 802.093197][ T59] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 802.096864][ T59] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 802.100613][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 802.105509][ T59] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 802.112008][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.115243][ T59] usb 7-1: Product: syz [ 802.116782][ T59] usb 7-1: Manufacturer: syz [ 802.118529][ T59] usb 7-1: SerialNumber: syz [ 802.125870][ T59] usb 7-1: config 0 descriptor?? [ 802.129141][T16925] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 802.336657][T16925] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 802.341802][ T59] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 802.612645][ T60] usb 7-1: USB disconnect, device number 35 [ 804.093287][T16960] 9pnet_fd: Insufficient options for proto=fd [ 806.091926][ T40] audit: type=1804 audit(2000000628.449:554): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2512" name="/newroot/35/cgroup.controllers" dev="tmpfs" ino=224 res=1 errno=0 [ 806.101227][ T40] audit: type=1800 audit(2000000628.449:555): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2512" name="cgroup.controllers" dev="tmpfs" ino=224 res=0 errno=0 [ 806.129498][ T40] audit: type=1800 audit(2000000628.469:556): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2512" name="cgroup.controllers" dev="tmpfs" ino=224 res=0 errno=0 [ 806.649944][ T40] audit: type=1800 audit(2000000629.009:557): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2514" name="file0" dev="overlay" ino=213 res=0 errno=0 [ 808.338751][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.341299][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.301881][ T40] audit: type=1800 audit(2000000632.659:558): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2529" name="file0" dev="overlay" ino=116 res=0 errno=0 [ 811.131655][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 811.134847][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 822.450580][T17188] bridge0: entered promiscuous mode [ 823.337475][T17189] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 823.848225][T17199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.852331][T17199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.056807][ T5947] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 824.639582][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.644550][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.648881][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.653957][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.658940][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 824.942898][T17212] chnl_net:caif_netlink_parms(): no params data found [ 825.045044][T17212] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.047732][T17212] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.050355][T17212] bridge_slave_0: entered allmulticast mode [ 825.053266][T17212] bridge_slave_0: entered promiscuous mode [ 825.056895][T17212] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.059269][T17212] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.061729][T17212] bridge_slave_1: entered allmulticast mode [ 825.065197][T17212] bridge_slave_1: entered promiscuous mode [ 825.103205][T17212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.108420][T17212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.144049][T17212] team0: Port device team_slave_0 added [ 825.148973][T17212] team0: Port device team_slave_1 added [ 825.204182][T17212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.209096][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.217995][T17212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.222684][T17212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.225016][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.233799][T17212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.285048][T17212] hsr_slave_0: entered promiscuous mode [ 825.287492][T17212] hsr_slave_1: entered promiscuous mode [ 825.289674][T17212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.292029][T17212] Cannot create hsr debugfs directory [ 825.414254][T17212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 825.422255][T17212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 825.427582][T17212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 825.433329][T17212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 825.453392][T17212] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.456401][T17212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.459693][T17212] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.462698][T17212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.523160][T17212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.560394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.565824][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.600439][T17212] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.612927][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.615253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.629324][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.632365][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.797691][T17212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.001215][T17212] veth0_vlan: entered promiscuous mode [ 826.010346][T17212] veth1_vlan: entered promiscuous mode [ 826.031687][T17212] veth0_macvtap: entered promiscuous mode [ 826.038293][T17212] veth1_macvtap: entered promiscuous mode [ 826.053521][T17212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.082154][T17212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.092135][T17212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.095043][T17212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.099599][ T6007] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 826.102198][T17212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.104932][T17212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.188043][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.191921][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.227330][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.230582][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.258176][ T6007] usb 9-1: Using ep0 maxpacket: 16 [ 826.262516][ T6007] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 826.266473][ T6007] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 826.288880][ T6007] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 826.292923][ T6007] usb 9-1: config 0 interface 0 has no altsetting 0 [ 826.302776][ T6007] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 826.306514][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.317563][ T6007] usb 9-1: Product: syz [ 826.320456][ T6007] usb 9-1: Manufacturer: syz [ 826.322385][ T6007] usb 9-1: SerialNumber: syz [ 826.338337][ T6007] usb 9-1: config 0 descriptor?? [ 827.148692][ T6007] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input24 [ 827.216824][ T5952] Bluetooth: hci0: command tx timeout [ 827.397014][ T5335] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.397475][ T6007] usb 9-1: USB disconnect, device number 16 [ 827.403278][ T5335] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 827.406402][ T5335] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 827.433685][T17270] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 827.486887][ T53] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 827.686785][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 827.691873][ T53] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 827.695119][ T53] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 827.698712][ T53] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 827.701791][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 827.710945][ T53] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 827.713884][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.716480][ T53] usb 5-1: Product: syz [ 827.718046][ T53] usb 5-1: Manufacturer: syz [ 827.719621][ T53] usb 5-1: SerialNumber: syz [ 827.732783][ T53] usb 5-1: config 0 descriptor?? [ 828.087197][ T53] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input25 [ 828.098762][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.105655][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.114750][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.120811][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.174504][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.188373][T17265] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.213837][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.222861][ T5335] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.346726][T17264] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.393404][ T59] usb 5-1: USB disconnect, device number 32 [ 828.842211][ T40] audit: type=1804 audit(2000000651.199:559): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2579" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=57 res=1 errno=0 [ 828.854966][ T40] audit: type=1800 audit(2000000651.209:560): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2579" name="cgroup.controllers" dev="tmpfs" ino=57 res=0 errno=0 [ 828.862044][ T40] audit: type=1800 audit(2000000651.219:561): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2579" name="cgroup.controllers" dev="tmpfs" ino=57 res=0 errno=0 [ 829.082331][T17303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 829.161337][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 829.297011][ T63] Bluetooth: hci0: command tx timeout [ 830.151968][ T40] audit: type=1804 audit(2000000652.509:562): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2585" name="/newroot/58/cgroup.controllers" dev="tmpfs" ino=347 res=1 errno=0 [ 830.172762][ T40] audit: type=1800 audit(2000000652.509:563): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2585" name="cgroup.controllers" dev="tmpfs" ino=347 res=0 errno=0 [ 830.192669][ T40] audit: type=1800 audit(2000000652.509:564): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2585" name="cgroup.controllers" dev="tmpfs" ino=347 res=0 errno=0 [ 830.281597][T17319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2586'. [ 830.386668][T15057] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 830.546758][T15057] usb 9-1: Using ep0 maxpacket: 32 [ 830.550723][T15057] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 830.560168][T15057] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 830.564101][T15057] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 830.569289][T15057] usb 9-1: Product: syz [ 830.571892][T15057] usb 9-1: Manufacturer: syz [ 830.573977][T15057] usb 9-1: SerialNumber: syz [ 830.579712][T15057] usb 9-1: config 0 descriptor?? [ 830.583647][T17309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 830.595005][T15057] hub 9-1:0.0: bad descriptor, ignoring hub [ 830.597667][T15057] hub 9-1:0.0: probe with driver hub failed with error -5 [ 830.946404][T17309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.949616][T17309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.377066][ T5952] Bluetooth: hci0: command tx timeout [ 831.486881][ T5947] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 831.646714][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 831.650675][ T5947] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 831.654710][ T5947] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 831.659459][ T5947] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 831.663507][ T5947] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.669855][ T5947] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 831.673582][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.676508][ T5947] usb 10-1: Product: syz [ 831.678301][ T5947] usb 10-1: Manufacturer: syz [ 831.680315][ T5947] usb 10-1: SerialNumber: syz [ 831.684319][ T5947] usb 10-1: config 0 descriptor?? [ 831.897631][ T5947] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 831.901553][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.905666][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.910778][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.913962][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.935888][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.941466][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.944554][T17265] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.952724][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 831.957599][ T5335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 832.146688][T17335] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 832.154154][ T5947] usb 10-1: USB disconnect, device number 2 [ 833.099441][ T5947] usb 9-1: USB disconnect, device number 17 [ 833.108149][T17358] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 833.456857][ T5952] Bluetooth: hci0: command tx timeout [ 835.000961][T17381] loop2: detected capacity change from 0 to 7 [ 835.008045][T17216] Dev loop2: unable to read RDB block 7 [ 835.010300][T17216] loop2: AHDI p1 p2 p3 [ 835.011973][T17216] loop2: partition table partially beyond EOD, truncated [ 835.014907][T17216] loop2: p1 start 1601398130 is beyond EOD, truncated [ 835.017726][T17216] loop2: p2 start 1702059890 is beyond EOD, truncated [ 835.023259][T17381] Dev loop2: unable to read RDB block 7 [ 835.025745][T17381] loop2: AHDI p1 p2 p3 [ 835.030480][T17381] loop2: partition table partially beyond EOD, truncated [ 835.034644][T17381] loop2: p1 start 1601398130 is beyond EOD, truncated [ 835.037067][T17381] loop2: p2 start 1702059890 is beyond EOD, truncated [ 842.130406][T17489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 842.472208][T17498] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 843.011649][T17504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2625'. [ 843.404985][ T6032] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 843.556663][ T6032] usb 7-1: Using ep0 maxpacket: 16 [ 843.563216][ T6032] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 843.566326][ T6032] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 843.578836][ T6032] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 843.582383][ T6032] usb 7-1: config 0 interface 0 has no altsetting 0 [ 843.589526][ T6032] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 843.592543][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.595129][ T6032] usb 7-1: Product: syz [ 843.596493][ T6032] usb 7-1: Manufacturer: syz [ 843.598152][ T6032] usb 7-1: SerialNumber: syz [ 843.606195][ T6032] usb 7-1: config 0 descriptor?? [ 843.608747][T17506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 843.816987][T17506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 843.822113][ T6032] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input27 [ 844.096977][ T6032] usb 7-1: USB disconnect, device number 37 [ 844.965679][T17531] ptrace attach of ""[17532] was attempted by "/syz-executor exec"[17531] [ 845.436327][ T40] audit: type=1804 audit(2000000667.789:565): pid=17543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2634" name="/newroot/14/bus/file1" dev="overlay" ino=120 res=1 errno=0 [ 846.605773][ T40] audit: type=1804 audit(2000000668.959:566): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2639" name="/newroot/421/cgroup.controllers" dev="tmpfs" ino=2310 res=1 errno=0 [ 846.628089][ T40] audit: type=1800 audit(2000000668.959:567): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2639" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 846.639344][ T40] audit: type=1800 audit(2000000668.959:568): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2639" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 849.271754][T17597] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2646'. [ 850.422756][T17615] /dev/nullb0: Can't open blockdev [ 852.868935][T17642] netfs: Couldn't get user pages (rc=-14) [ 854.161930][ T40] audit: type=1804 audit(2000000676.519:569): pid=17663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2661" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=174 res=1 errno=0 [ 854.171424][ T40] audit: type=1800 audit(2000000676.519:570): pid=17663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2661" name="cgroup.controllers" dev="tmpfs" ino=174 res=0 errno=0 [ 854.183339][ T40] audit: type=1800 audit(2000000676.519:571): pid=17663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2661" name="cgroup.controllers" dev="tmpfs" ino=174 res=0 errno=0 [ 855.859727][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2666'. [ 855.908993][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 858.771871][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 860.700487][ T1256] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 860.796460][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 860.831776][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2683'. [ 860.837838][T17765] input: syz1 as /devices/virtual/input/input28 [ 860.841727][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'. [ 865.293639][T17838] net_ratelimit: 7 callbacks suppressed [ 865.293656][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.325388][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.328959][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.332018][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.334956][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.337455][T17838] Dead loop on virtual device ip6_vti0, fix it urgently! [ 865.814734][T17851] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 865.817579][T17851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.840241][T17851] vhci_hcd vhci_hcd.0: Device attached [ 865.899023][T17851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2705'. [ 866.159171][ T6032] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 866.476660][T15057] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 866.504324][T17852] vhci_hcd: connection reset by peer [ 866.514603][ T61] vhci_hcd: stop threads [ 866.516103][ T61] vhci_hcd: release socket [ 866.520974][ T61] vhci_hcd: disconnect device [ 866.622238][T15057] usb 10-1: device descriptor read/64, error -71 [ 866.856744][T15057] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 866.986686][T15057] usb 10-1: device descriptor read/64, error -71 [ 867.097182][T15057] usb usb10-port1: attempt power cycle [ 867.192665][T17883] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 867.195510][T17883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 867.198908][T17883] IPv6: NLM_F_CREATE should be set when creating new route [ 867.265158][T17884] netlink: 'syz.4.2710': attribute type 9 has an invalid length. [ 867.270083][T17884] netlink: 'syz.4.2710': attribute type 6 has an invalid length. [ 867.446905][T15057] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 867.487307][T15057] usb 10-1: device descriptor read/8, error -71 [ 867.726808][T15057] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 867.747707][T15057] usb 10-1: device descriptor read/8, error -71 [ 867.860398][T15057] usb usb10-port1: unable to enumerate USB device [ 868.426465][T17898] 9pnet_virtio: no channels available for device syz [ 869.362710][T17923] netlink: 'syz.5.2717': attribute type 2 has an invalid length. [ 869.365716][T17923] netlink: 'syz.5.2717': attribute type 1 has an invalid length. [ 869.371983][T17923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 869.782018][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.784198][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.532402][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 870.536177][T17926] bridge_slave_1: left allmulticast mode [ 870.546717][T17926] bridge_slave_1: left promiscuous mode [ 870.552573][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.561623][T17926] bridge_slave_0: left allmulticast mode [ 870.564027][T17926] bridge_slave_0: left promiscuous mode [ 870.566473][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.296736][ T6032] vhci_hcd: vhci_device speed not set [ 872.639942][T17940] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 874.280687][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 874.286766][T17964] bridge_slave_1: left allmulticast mode [ 874.288762][T17964] bridge_slave_1: left promiscuous mode [ 874.292027][T17964] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.303758][T17964] bridge_slave_0: left allmulticast mode [ 874.305922][T17964] bridge_slave_0: left promiscuous mode [ 874.308388][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.658355][T17971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 878.265487][T18029] bridge: RTM_NEWNEIGH with invalid ether address [ 878.509651][ T6007] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 878.657872][ T6007] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.661202][ T6007] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 878.664073][ T6007] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.667996][ T6007] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 878.671456][ T6007] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 878.675109][ T6007] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 878.678266][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.682972][T18029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.687013][ T6007] hub 9-1:1.0: bad descriptor, ignoring hub [ 878.689019][ T6007] hub 9-1:1.0: probe with driver hub failed with error -5 [ 878.691500][ T6007] cdc_wdm 9-1:1.0: skipping garbage [ 878.693249][ T6007] cdc_wdm 9-1:1.0: skipping garbage [ 878.697050][ T6007] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 878.699031][ T6007] cdc_wdm 9-1:1.0: Unknown control protocol [ 879.087084][ T6032] usb 9-1: USB disconnect, device number 18 [ 882.765945][T18081] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 882.785279][T18081] bond14: entered promiscuous mode [ 882.787846][T18081] 8021q: adding VLAN 0 to HW filter on device bond14 [ 882.822059][T18081] 8021q: adding VLAN 0 to HW filter on device bond14 [ 882.825309][T18081] bond14: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 882.830047][T18081] bond14: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 882.837005][T18081] bond14: (slave ip6gre1): making interface the new active one [ 882.840253][T18081] ip6gre1: entered promiscuous mode [ 882.844081][T18081] bond14: (slave ip6gre1): Enslaving as an active interface with an up link [ 883.846782][T16083] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 883.986773][T16083] usb 5-1: device descriptor read/64, error -71 [ 884.226712][T16083] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 884.356698][T16083] usb 5-1: device descriptor read/64, error -71 [ 884.467632][T16083] usb usb5-port1: attempt power cycle [ 884.806696][T16083] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 884.827944][T16083] usb 5-1: device descriptor read/8, error -71 [ 885.066704][T16083] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 885.100516][T16083] usb 5-1: device descriptor read/8, error -71 [ 885.165547][ T40] audit: type=1800 audit(2000000707.519:572): pid=18112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2758" name="file0" dev="overlay" ino=2473 res=0 errno=0 [ 885.209284][T16083] usb usb5-port1: unable to enumerate USB device [ 888.101785][T18155] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 888.423056][T18159] netlink: 'syz.0.2768': attribute type 2 has an invalid length. [ 888.426832][T18159] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 889.513781][T18172] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 889.526412][T18172] bond8: entered promiscuous mode [ 889.528351][T18172] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.547224][T18172] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.550132][T18172] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 889.554270][T18172] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 889.561035][T18172] bond8: (slave ip6gre1): making interface the new active one [ 889.563430][T18172] ip6gre1: entered promiscuous mode [ 889.565885][T18172] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 889.886711][ T6007] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 890.017217][ T6007] usb 5-1: device descriptor read/64, error -71 [ 890.268908][ T6007] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 890.406681][ T6007] usb 5-1: device descriptor read/64, error -71 [ 890.527036][ T6007] usb usb5-port1: attempt power cycle [ 890.866651][ T6007] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 890.887156][ T6007] usb 5-1: device descriptor read/8, error -71 [ 891.126715][ T6007] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 891.147338][ T6007] usb 5-1: device descriptor read/8, error -71 [ 891.257522][ T6007] usb usb5-port1: unable to enumerate USB device [ 891.406669][ T838] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 891.556842][ T838] usb 10-1: Using ep0 maxpacket: 32 [ 891.563194][ T838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 891.569165][ T838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 891.572331][ T838] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.575903][ T838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 891.582059][ T838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.587675][ T838] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 891.590517][ T838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.593013][ T838] usb 10-1: Product: syz [ 891.594363][ T838] usb 10-1: Manufacturer: syz [ 891.596262][ T838] usb 10-1: SerialNumber: syz [ 891.601057][ T838] usb 10-1: config 0 descriptor?? [ 891.603282][T18195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.609669][ T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input29 [ 891.620057][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.650371][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.682502][T17716] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.718113][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.727620][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.786851][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.796218][ T5335] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.820168][T18195] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 891.829781][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 892.490029][ T40] audit: type=1800 audit(2000000714.849:573): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2779" name="file0" dev="overlay" ino=2516 res=0 errno=0 [ 892.704575][T18218] netlink: 'syz.2.2780': attribute type 2 has an invalid length. [ 892.719823][T18218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 893.479372][T18231] loop4: detected capacity change from 0 to 7 [ 893.482543][T18231] Dev loop4: unable to read RDB block 7 [ 893.484334][T18231] loop4: unable to read partition table [ 893.486191][T18231] loop4: partition table beyond EOD, truncated [ 893.495592][T18231] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 893.499942][T18231] FAULT_INJECTION: forcing a failure. [ 893.499942][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 893.503781][T18231] CPU: 3 UID: 0 PID: 18231 Comm: syz.4.2785 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 893.503795][T18231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 893.503802][T18231] Call Trace: [ 893.503805][T18231] [ 893.503809][T18231] dump_stack_lvl+0x16c/0x1f0 [ 893.503829][T18231] should_fail_ex+0x512/0x640 [ 893.503844][T18231] ? fs_reclaim_acquire+0xae/0x150 [ 893.503858][T18231] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 893.503872][T18231] should_failslab+0xc2/0x120 [ 893.503883][T18231] __kmalloc_noprof+0xd2/0x510 [ 893.503905][T18231] tomoyo_realpath_from_path+0xc2/0x6e0 [ 893.503921][T18231] ? tomoyo_profile+0x47/0x60 [ 893.503938][T18231] tomoyo_path_number_perm+0x245/0x580 [ 893.503949][T18231] ? tomoyo_path_number_perm+0x237/0x580 [ 893.503962][T18231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 893.503989][T18231] ? find_held_lock+0x2b/0x80 [ 893.503999][T18231] ? hook_file_ioctl_common+0x145/0x410 [ 893.504013][T18231] ? __fget_files+0x20e/0x3c0 [ 893.504026][T18231] ? __fput_deferred+0x440/0x480 [ 893.504039][T18231] security_file_ioctl_compat+0x9b/0x240 [ 893.504053][T18231] __ia32_compat_sys_ioctl+0xc3/0x370 [ 893.504067][T18231] __do_fast_syscall_32+0x7c/0x3a0 [ 893.504085][T18231] do_fast_syscall_32+0x32/0x80 [ 893.504101][T18231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.504115][T18231] RIP: 0023:0xf70fe579 [ 893.504123][T18231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 893.504133][T18231] RSP: 002b:00000000f50ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 893.504143][T18231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000125f [ 893.504150][T18231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.504155][T18231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 893.504161][T18231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 893.504167][T18231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.504180][T18231] [ 893.504184][T18231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 893.587575][T18231] Dev loop4: unable to read RDB block 7 [ 893.589294][T18231] loop4: unable to read partition table [ 893.591178][T18231] loop4: partition table beyond EOD, truncated [ 893.603888][ T5350] Dev loop4: unable to read RDB block 7 [ 893.607478][ T5350] loop4: unable to read partition table [ 893.611449][ T5350] loop4: partition table beyond EOD, truncated [ 894.056672][T15057] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 894.120854][ T5947] usb 10-1: USB disconnect, device number 7 [ 894.236780][T15057] usb 5-1: Using ep0 maxpacket: 16 [ 894.239818][T15057] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.242870][T15057] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.247007][T15057] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 894.249788][T15057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.253547][T15057] usb 5-1: config 0 descriptor?? [ 894.258601][T15057] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input30 [ 894.511707][ T5335] bcm5974 5-1:0.0: could not read from device [ 894.519967][T18242] bcm5974 5-1:0.0: could not read from device [ 894.523991][T15057] usb 5-1: USB disconnect, device number 41 [ 894.524124][ T5335] bcm5974 5-1:0.0: could not read from device [ 897.232854][T18299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.279830][T18300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2802'. [ 897.282554][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2802'. [ 897.288149][T18300] IPv6: sit1: Disabled Multicast RS [ 897.290338][T18300] sit1: entered allmulticast mode [ 897.348821][T18299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.423639][T18299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.456719][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 897.508616][T18299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.620713][T18299] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.628776][T18299] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.635414][T18299] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.644748][T18304] FAULT_INJECTION: forcing a failure. [ 897.644748][T18304] name failslab, interval 1, probability 0, space 0, times 0 [ 897.645393][T18299] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.650218][T18304] CPU: 3 UID: 0 PID: 18304 Comm: syz.0.2804 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 897.650241][T18304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 897.650250][T18304] Call Trace: [ 897.650256][T18304] [ 897.650262][T18304] dump_stack_lvl+0x16c/0x1f0 [ 897.650290][T18304] should_fail_ex+0x512/0x640 [ 897.650311][T18304] ? fs_reclaim_acquire+0xae/0x150 [ 897.650331][T18304] ? tomoyo_encode2+0x100/0x3e0 [ 897.650350][T18304] should_failslab+0xc2/0x120 [ 897.650365][T18304] __kmalloc_noprof+0xd2/0x510 [ 897.650387][T18304] ? d_absolute_path+0x136/0x1a0 [ 897.650408][T18304] tomoyo_encode2+0x100/0x3e0 [ 897.650431][T18304] tomoyo_encode+0x29/0x50 [ 897.650450][T18304] tomoyo_realpath_from_path+0x18f/0x6e0 [ 897.650478][T18304] tomoyo_path_number_perm+0x245/0x580 [ 897.650494][T18304] ? tomoyo_path_number_perm+0x237/0x580 [ 897.650514][T18304] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.650561][T18304] ? find_held_lock+0x2b/0x80 [ 897.650576][T18304] ? hook_file_ioctl_common+0x145/0x410 [ 897.650599][T18304] ? __fget_files+0x20e/0x3c0 [ 897.650617][T18304] ? __fput_deferred+0x440/0x480 [ 897.650638][T18304] security_file_ioctl_compat+0x9b/0x240 [ 897.650658][T18304] __ia32_compat_sys_ioctl+0xc3/0x370 [ 897.650681][T18304] __do_fast_syscall_32+0x7c/0x3a0 [ 897.650706][T18304] do_fast_syscall_32+0x32/0x80 [ 897.650729][T18304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.650747][T18304] RIP: 0023:0xf70ee579 [ 897.650761][T18304] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 897.650775][T18304] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 897.650791][T18304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a6 [ 897.650801][T18304] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.650810][T18304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 897.650819][T18304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 897.650829][T18304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.650851][T18304] [ 897.650870][T18304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.911899][T18313] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 897.916437][T18313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 898.714566][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2809'. [ 899.951970][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2813'. [ 899.959297][T18338] netlink: 'syz.5.2813': attribute type 3 has an invalid length. [ 899.997702][T18337] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 900.240803][T18347] kvm: kvm [18346]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000079) [ 900.596679][ T838] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 900.751385][ T838] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 900.755253][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.758901][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.763121][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.770205][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.774557][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.779530][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.783108][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.786940][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.790379][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.793894][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.796833][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.800056][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.803333][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.806624][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.810696][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.814090][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.817722][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.821709][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.825065][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.828614][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.832717][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.836234][ T838] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.839614][ T838] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.843136][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 900.846701][ T838] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 900.849617][ T838] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 900.852674][ T838] usb 10-1: Product: syz [ 900.854293][ T838] usb 10-1: Manufacturer: syz [ 900.856000][ T838] usb 10-1: SerialNumber: syz [ 900.859585][ T838] usb 10-1: config 0 descriptor?? [ 900.864990][ T838] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 901.065021][ T40] audit: type=1326 audit(2000000723.419:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18341 comm="syz.5.2816" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 901.168145][T16083] usb 10-1: USB disconnect, device number 8 [ 901.177523][T16083] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 901.215857][T18369] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 901.229547][T18369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.238027][T18369] bond4: (slave veth0_to_bond): making interface the new active one [ 901.241649][T18369] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 901.261151][T18362] mkiss: ax0: crc mode is auto. [ 904.610727][ T40] audit: type=1800 audit(2000000726.969:575): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2835" name="file0" dev="overlay" ino=707 res=0 errno=0 [ 906.851639][ T40] audit: type=1800 audit(2000000729.209:576): pid=18452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2844" name="file0" dev="overlay" ino=745 res=0 errno=0 [ 907.583109][T18463] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2848'. [ 907.699783][T18467] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2850'. [ 907.892770][T18473] netdevsim netdevsim0: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 907.897194][T18473] netdevsim netdevsim0: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 909.808967][T18490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2693161846 (172362358144 ns) > initial count (27299349760 ns). Using initial count to start timer. [ 909.835393][T18492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2857'. [ 909.955889][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 910.553368][ T40] audit: type=1800 audit(2000000732.909:577): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2861" name="file0" dev="overlay" ino=2630 res=0 errno=0 [ 911.077487][T18516] netlink: 'syz.2.2863': attribute type 2 has an invalid length. [ 911.081598][T18516] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 911.091057][T18516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 911.287408][ T6007] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 912.110268][ T40] audit: type=1800 audit(2000000734.469:578): pid=18553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2870" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 912.124220][T18553] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2870'. [ 912.828657][ T5952] Bluetooth: hci3: command 0x0406 tx timeout [ 918.503525][T18594] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.633502][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 918.635895][ T2293] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 918.639195][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.641542][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.643846][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.646113][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.650865][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.653176][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.655526][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.657981][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.660889][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.663192][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.665524][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.669971][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.672620][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.675057][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.677483][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.680007][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.682453][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.686059][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.690908][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.694079][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.696486][ T2293] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 918.701613][ T2293] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 918.743503][T18594] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.780096][T18603] fido_id[18603]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 918.847189][T18594] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.877226][ T40] audit: type=1800 audit(2000000741.239:579): pid=18606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2874" name="file0" dev="overlay" ino=814 res=0 errno=0 [ 919.005583][T18594] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.272957][T18594] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.281817][T18594] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.291178][T18594] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.299621][T18594] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.874797][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'. [ 921.893086][T18645] kernel profiling enabled (shift: 7) [ 922.066714][ T53] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 922.217912][ T53] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 922.221387][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 922.225668][ T53] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.229173][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.234445][ T53] usb 7-1: config 0 descriptor?? [ 922.503651][ T53] usb 7-1: string descriptor 0 read error: -71 [ 922.507615][ T53] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 922.511107][ T53] usb 7-1: USB disconnect, device number 38 [ 922.754703][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 923.609515][T18670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2890'. [ 925.304872][T18712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 926.106521][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 926.585546][T18730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 927.834271][T18748] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 927.836329][T18748] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.839128][T18748] vhci_hcd vhci_hcd.0: Device attached [ 928.237999][T18760] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 928.246668][ T53] usb 48-1: SetAddress Request (2) to port 0 [ 928.248562][ T53] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 928.490126][T18749] vhci_hcd: connection reset by peer [ 928.491972][ T220] vhci_hcd: stop threads [ 928.493279][ T220] vhci_hcd: release socket [ 928.496789][ T220] vhci_hcd: disconnect device [ 928.716270][ T40] audit: type=1800 audit(2000000751.049:580): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2909" name="file0" dev="overlay" ino=870 res=0 errno=0 [ 928.908718][T18773] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2910'. [ 928.915585][T18773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 928.921610][T18773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 929.028717][T18779] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 929.496995][ T2293] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 929.656797][ T2293] usb 5-1: Using ep0 maxpacket: 32 [ 929.662255][ T2293] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 929.665472][ T2293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 929.671765][ T2293] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 929.676511][ T2293] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 929.682409][ T2293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 929.688347][ T2293] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 929.692224][ T2293] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 929.695734][ T2293] usb 5-1: Product: syz [ 929.697849][ T2293] usb 5-1: Manufacturer: syz [ 929.699843][ T2293] usb 5-1: SerialNumber: syz [ 929.705138][ T2293] usb 5-1: config 0 descriptor?? [ 929.714133][ T2293] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 929.721977][ T2293] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 930.053300][T18807] tmpfs: Unknown parameter 'grpquota 0 [ 930.053300][T18807] ' [ 930.114819][T18809] Cannot find del_set index 3 as target [ 930.117457][T18809] netlink: 'syz.5.2917': attribute type 11 has an invalid length. [ 930.118179][ T60] usb 5-1: USB disconnect, device number 42 [ 930.119880][T18809] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2917'. [ 930.127103][T18807] cdrom: dropping to single frame dma [ 930.586165][ T60] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 930.853240][T18829] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2919'. [ 930.860273][T18829] erspan0: entered promiscuous mode [ 931.230010][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.232018][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.256900][ T40] audit: type=1800 audit(2000000753.619:581): pid=18844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2923" name="file0" dev="overlay" ino=576 res=0 errno=0 [ 932.211046][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 932.517393][T17287] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 932.666623][T17287] usb 7-1: Using ep0 maxpacket: 32 [ 932.669710][T17287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.673232][T17287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.676327][T17287] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 932.680394][T17287] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 932.683212][T17287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.687179][T17287] usb 7-1: config 0 descriptor?? [ 932.832283][T18871] FAULT_INJECTION: forcing a failure. [ 932.832283][T18871] name failslab, interval 1, probability 0, space 0, times 0 [ 932.836314][T18871] CPU: 0 UID: 0 PID: 18871 Comm: syz.5.2932 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 932.836331][T18871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 932.836337][T18871] Call Trace: [ 932.836341][T18871] [ 932.836346][T18871] dump_stack_lvl+0x16c/0x1f0 [ 932.836367][T18871] should_fail_ex+0x512/0x640 [ 932.836382][T18871] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 932.836400][T18871] should_failslab+0xc2/0x120 [ 932.836410][T18871] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 932.836425][T18871] ? __alloc_skb+0x2b2/0x380 [ 932.836445][T18871] __alloc_skb+0x2b2/0x380 [ 932.836459][T18871] ? __pfx___alloc_skb+0x10/0x10 [ 932.836473][T18871] ? __pfx_rtnl_newlink+0x10/0x10 [ 932.836494][T18871] netlink_ack+0x15d/0xb80 [ 932.836510][T18871] netlink_rcv_skb+0x332/0x420 [ 932.836521][T18871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 932.836531][T18871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 932.836559][T18871] ? netlink_deliver_tap+0x1ae/0xd30 [ 932.836574][T18871] netlink_unicast+0x53d/0x7f0 [ 932.836587][T18871] ? __pfx_netlink_unicast+0x10/0x10 [ 932.836602][T18871] netlink_sendmsg+0x8d1/0xdd0 [ 932.836615][T18871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.836627][T18871] ? __import_iovec+0x1dd/0x650 [ 932.836646][T18871] ____sys_sendmsg+0xa98/0xc70 [ 932.836659][T18871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.836670][T18871] ? get_compat_msghdr+0x11a/0x170 [ 932.836693][T18871] ? __pfx__kstrtoull+0x10/0x10 [ 932.836708][T18871] ___sys_sendmsg+0x134/0x1d0 [ 932.836725][T18871] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.836739][T18871] ? __lock_acquire+0x622/0x1c90 [ 932.836770][T18871] __sys_sendmmsg+0x2f9/0x420 [ 932.836787][T18871] ? __pfx___sys_sendmmsg+0x10/0x10 [ 932.836808][T18871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 932.836830][T18871] ? fput+0x70/0xf0 [ 932.836840][T18871] ? ksys_write+0x1ac/0x250 [ 932.836854][T18871] ? __pfx_ksys_write+0x10/0x10 [ 932.836870][T18871] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 932.836880][T18871] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 932.836897][T18871] __do_fast_syscall_32+0x7c/0x3a0 [ 932.836914][T18871] do_fast_syscall_32+0x32/0x80 [ 932.836930][T18871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 932.836944][T18871] RIP: 0023:0xf70de579 [ 932.836952][T18871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 932.836962][T18871] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 932.836972][T18871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 932.836978][T18871] RDX: 0000000092492627 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.836984][T18871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.836989][T18871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 932.836995][T18871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.837008][T18871] [ 933.296766][ T53] usb 48-1: device descriptor read/8, error -110 [ 933.347482][T18877] afs: Unknown parameter '' [ 933.725007][ T53] usb usb48-port1: attempt power cycle [ 933.837560][ T40] audit: type=1800 audit(2000000756.179:582): pid=18882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2934" name="file0" dev="overlay" ino=910 res=0 errno=0 [ 933.841920][T18874] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 934.469768][ T53] usb usb48-port1: unable to enumerate USB device [ 935.205724][T17287] usbhid 7-1:0.0: can't add hid device: -71 [ 935.207954][T17287] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 935.211429][T17287] usb 7-1: USB disconnect, device number 39 [ 936.052951][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 936.183657][T18917] fuseblk: Unknown parameter 'ro' [ 937.168551][T18928] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2946'. [ 937.171486][T18928] FAULT_INJECTION: forcing a failure. [ 937.171486][T18928] name failslab, interval 1, probability 0, space 0, times 0 [ 937.176406][T18928] CPU: 3 UID: 0 PID: 18928 Comm: syz.0.2946 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 937.176427][T18928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 937.176437][T18928] Call Trace: [ 937.176443][T18928] [ 937.176449][T18928] dump_stack_lvl+0x16c/0x1f0 [ 937.176477][T18928] should_fail_ex+0x512/0x640 [ 937.176498][T18928] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 937.176524][T18928] should_failslab+0xc2/0x120 [ 937.176540][T18928] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 937.176578][T18928] ? __alloc_skb+0x2b2/0x380 [ 937.176606][T18928] __alloc_skb+0x2b2/0x380 [ 937.176627][T18928] ? __pfx___alloc_skb+0x10/0x10 [ 937.176647][T18928] ? __pfx_rtnl_setlink+0x10/0x10 [ 937.176681][T18928] netlink_ack+0x15d/0xb80 [ 937.176705][T18928] netlink_rcv_skb+0x332/0x420 [ 937.176722][T18928] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 937.176738][T18928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.176762][T18928] ? netlink_deliver_tap+0x1ae/0xd30 [ 937.176782][T18928] netlink_unicast+0x53d/0x7f0 [ 937.176801][T18928] ? __pfx_netlink_unicast+0x10/0x10 [ 937.176824][T18928] netlink_sendmsg+0x8d1/0xdd0 [ 937.176844][T18928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.176863][T18928] ? __import_iovec+0x1dd/0x650 [ 937.176892][T18928] ____sys_sendmsg+0xa98/0xc70 [ 937.176912][T18928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.176929][T18928] ? get_compat_msghdr+0x11a/0x170 [ 937.176963][T18928] ___sys_sendmsg+0x134/0x1d0 [ 937.176987][T18928] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.177020][T18928] ? find_held_lock+0x2b/0x80 [ 937.177050][T18928] __sys_sendmsg+0x16d/0x220 [ 937.177073][T18928] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.177106][T18928] ? rcu_is_watching+0x12/0xc0 [ 937.177126][T18928] __do_fast_syscall_32+0x7c/0x3a0 [ 937.177152][T18928] do_fast_syscall_32+0x32/0x80 [ 937.177175][T18928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.177194][T18928] RIP: 0023:0xf70ee579 [ 937.177206][T18928] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 937.177221][T18928] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 937.177236][T18928] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000c80 [ 937.177245][T18928] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.177254][T18928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.177262][T18928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 937.177271][T18928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.177291][T18928] [ 937.578571][ T40] audit: type=1800 audit(2000000759.939:583): pid=18941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2947" name="file0" dev="overlay" ino=616 res=0 errno=0 [ 937.850308][ C3] ata1: illegal qc_active transition (00000000->00000020) [ 938.177279][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 938.180136][ T1106] ata1.00: configured for UDMA/100 [ 939.795602][T18986] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 939.855291][ T40] audit: type=1800 audit(2000000762.209:584): pid=18991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2960" name="file0" dev="overlay" ino=610 res=0 errno=0 [ 939.917902][T18993] IPVS: set_ctl: invalid protocol: 2 0.0.0.5:20000 [ 941.660703][T19026] random: crng reseeded on system resumption [ 943.006857][ T60] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 943.166652][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 943.169551][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 943.172550][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 943.175515][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 943.178759][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.182714][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 943.185493][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.276691][T17287] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 943.395611][ T60] usb 7-1: usb_control_msg returned -32 [ 943.397671][ T60] usbtmc 7-1:16.0: can't read capabilities [ 943.426715][T17287] usb 9-1: Using ep0 maxpacket: 32 [ 943.429609][T17287] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 943.432181][T17287] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 943.434816][T17287] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 943.437932][T17287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 943.441138][T17287] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 943.444084][T17287] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 943.448284][T17287] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 943.451059][T17287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.455210][T17287] usb 9-1: config 0 descriptor?? [ 943.665827][T17287] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 943.671574][T17287] usb 9-1: USB disconnect, device number 19 [ 943.678348][T17287] usblp1: removed [ 943.718072][T19057] netlink: 'syz.5.2977': attribute type 2 has an invalid length. [ 943.720663][T19057] netlink: 'syz.5.2977': attribute type 1 has an invalid length. [ 943.723262][T19057] netlink: 'syz.5.2977': attribute type 1 has an invalid length. [ 943.768642][T19058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2975'. [ 943.781920][T19058] vfat: Unknown parameter '' [ 944.096667][T17287] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 944.246811][T17287] usb 9-1: Using ep0 maxpacket: 32 [ 944.250750][T17287] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 944.254404][T17287] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 944.258542][T17287] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 944.262330][T17287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 944.266346][T17287] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 944.270411][T17287] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 944.275758][T17287] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 944.279632][T17287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.285683][T17287] usb 9-1: config 0 descriptor?? [ 944.491407][T17287] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 945.747507][T16083] usb 7-1: USB disconnect, device number 40 [ 946.067024][ T60] usb 9-1: USB disconnect, device number 20 [ 946.073247][ T60] usblp1: removed [ 946.196717][T17287] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 946.348721][T17287] usb 5-1: Using ep0 maxpacket: 8 [ 946.352490][T17287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.355935][T17287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.359420][T17287] usb 5-1: language id specifier not provided by device, defaulting to English [ 946.363768][T17287] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 946.366910][T17287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.369504][T17287] usb 5-1: Product: 鴪튿⍖ጾ猥囌쩂酙꽭ᙥč颈迦⡁閮뱈ꑒ療뱳돘뷭ꏭ宇䬙𵪾ⶂ칑펐놷⽧䅡蓏흓⑹웇븝垊쫳压嶆鄆꬐䳓ꨵ埑鴃宒柃隿쌶乲盳 [ 946.374934][T17287] usb 5-1: Manufacturer: Ѓ [ 946.376477][T17287] usb 5-1: SerialNumber: ဉ [ 946.586414][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 946.591385][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 946.599015][ T40] audit: type=1326 audit(2000000768.959:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19084 comm="syz.0.2984" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 946.710799][T17287] usb 5-1: 0:2 : does not exist [ 946.719750][T17287] usb 5-1: USB disconnect, device number 43 [ 946.740094][T18653] udevd[18653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.030887][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 949.049261][T19109] 8021q: adding VLAN 0 to HW filter on device bond10 [ 949.071577][T19109] [ 949.072671][T19109] ===================================================== [ 949.075021][T19109] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 949.077359][T19109] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 949.080036][T19109] ----------------------------------------------------- [ 949.083633][T19109] syz.0.2989/19109 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 949.086820][T19109] ffff888028043c20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 949.090383][T19109] [ 949.090383][T19109] and this task is already holding: [ 949.092996][T19109] ffff88806d89ac90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 949.095733][T19109] which would create a new lock dependency: [ 949.097671][T19109] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 949.100033][T19109] [ 949.100033][T19109] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 949.102918][T19109] (&dev->event_lock#2){..-.}-{3:3} [ 949.102941][T19109] [ 949.102941][T19109] ... which became SOFTIRQ-irq-safe at: [ 949.107062][T19109] lock_acquire+0x179/0x350 [ 949.108810][T19109] _raw_spin_lock_irqsave+0x3a/0x60 [ 949.110470][T19109] input_inject_event+0x9f/0x390 [ 949.112070][T19109] led_set_brightness+0x214/0x290 [ 949.113681][T19109] led_trigger_event+0xda/0x270 [ 949.115243][T19109] kbd_bh+0x21b/0x300 [ 949.116545][T19109] tasklet_action_common+0x281/0x400 [ 949.118546][T19109] handle_softirqs+0x219/0x8e0 [ 949.120103][T19109] __irq_exit_rcu+0x109/0x170 [ 949.121604][T19109] irq_exit_rcu+0x9/0x30 [ 949.122963][T19109] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 949.124744][T19109] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 949.125396][T19111] macvlan2: entered promiscuous mode [ 949.126665][T19109] __tasklet_schedule_common+0x10d/0x190 [ 949.126690][T19109] vt_set_leds_compute_shiftstate+0x76/0x80 [ 949.126706][T19109] redraw_screen+0x542/0x760 [ 949.126728][T19109] complete_change_console+0x110/0x600 [ 949.126746][T19109] change_console+0x1ac/0x560 [ 949.126765][T19109] console_callback+0x1a1/0x4c0 [ 949.129025][T19111] macvlan2: entered allmulticast mode [ 949.130864][T19109] process_one_work+0x9cf/0x1b70 [ 949.133353][T19111] bond10: entered promiscuous mode [ 949.134284][T19109] worker_thread+0x6c8/0xf10 [ 949.136256][T19111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 949.137550][T19109] kthread+0x3c5/0x780 [ 949.137567][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.137582][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.137593][T19109] [ 949.137593][T19109] to a SOFTIRQ-irq-unsafe lock: [ 949.137598][T19109] (tasklist_lock){.+.+}-{3:3} [ 949.137611][T19109] [ 949.137611][T19109] ... which became SOFTIRQ-irq-unsafe at: [ 949.137616][T19109] ... [ 949.137621][T19109] lock_acquire+0x179/0x350 [ 949.137635][T19109] _raw_read_lock+0x5f/0x70 [ 949.137648][T19109] __do_wait+0x105/0x890 [ 949.163025][T19109] do_wait+0x21e/0x5a0 [ 949.164346][T19109] kernel_wait+0x9f/0x160 [ 949.165746][T19109] call_usermodehelper_exec_work+0xf1/0x170 [ 949.167611][T19109] process_one_work+0x9cf/0x1b70 [ 949.169184][T19109] worker_thread+0x6c8/0xf10 [ 949.170673][T19109] kthread+0x3c5/0x780 [ 949.171981][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.173448][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.174969][T19109] [ 949.174969][T19109] other info that might help us debug this: [ 949.174969][T19109] [ 949.178100][T19109] Chain exists of: [ 949.178100][T19109] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 949.178100][T19109] [ 949.182064][T19109] Possible interrupt unsafe locking scenario: [ 949.182064][T19109] [ 949.184600][T19109] CPU0 CPU1 [ 949.186226][T19109] ---- ---- [ 949.187897][T19109] lock(tasklist_lock); [ 949.189229][T19109] local_irq_disable(); [ 949.191338][T19109] lock(&dev->event_lock#2); [ 949.193572][T19109] lock(&new->fa_lock); [ 949.195667][T19109] [ 949.196780][T19109] lock(&dev->event_lock#2); [ 949.198304][T19109] [ 949.198304][T19109] *** DEADLOCK *** [ 949.198304][T19109] [ 949.200830][T19109] 6 locks held by syz.0.2989/19109: [ 949.202449][T19109] #0: ffff8880246e2428 (sb_writers#13){.+.+}-{0:0}, at: do_mq_open+0x1fa/0x8c0 [ 949.205245][T19109] #1: ffff88804e37b0c8 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: do_mq_open+0x232/0x8c0 [ 949.208398][T19109] #2: ffffffff8e80b930 (file_rwsem){.+.+}-{0:0}, at: do_dentry_open+0x6e1/0x1c10 [ 949.211294][T19109] #3: ffff888020b1cf38 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x495/0x1810 [ 949.214210][T19109] #4: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 949.217023][T19109] #5: ffff88806d89ac90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 949.219885][T19109] [ 949.219885][T19109] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 949.223063][T19109] -> (&dev->event_lock#2){..-.}-{3:3} { [ 949.224865][T19109] IN-SOFTIRQ-W at: [ 949.226178][T19109] lock_acquire+0x179/0x350 [ 949.228199][T19109] _raw_spin_lock_irqsave+0x3a/0x60 [ 949.230462][T19109] input_inject_event+0x9f/0x390 [ 949.232612][T19109] led_set_brightness+0x214/0x290 [ 949.234780][T19109] led_trigger_event+0xda/0x270 [ 949.236918][T19109] kbd_bh+0x21b/0x300 [ 949.238739][T19109] tasklet_action_common+0x281/0x400 [ 949.241014][T19109] handle_softirqs+0x219/0x8e0 [ 949.243102][T19109] __irq_exit_rcu+0x109/0x170 [ 949.245179][T19109] irq_exit_rcu+0x9/0x30 [ 949.247131][T19109] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 949.249519][T19109] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 949.251995][T19109] __tasklet_schedule_common+0x10d/0x190 [ 949.254332][T19109] vt_set_leds_compute_shiftstate+0x76/0x80 [ 949.256769][T19109] redraw_screen+0x542/0x760 [ 949.258798][T19109] complete_change_console+0x110/0x600 [ 949.261238][T19109] change_console+0x1ac/0x560 [ 949.263325][T19109] console_callback+0x1a1/0x4c0 [ 949.265430][T19109] process_one_work+0x9cf/0x1b70 [ 949.267563][T19109] worker_thread+0x6c8/0xf10 [ 949.269628][T19109] kthread+0x3c5/0x780 [ 949.271516][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.273556][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.275651][T19109] INITIAL USE at: [ 949.276939][T19109] lock_acquire+0x179/0x350 [ 949.278935][T19109] _raw_spin_lock_irqsave+0x3a/0x60 [ 949.281144][T19109] input_inject_event+0x9f/0x390 [ 949.283275][T19109] led_set_brightness+0x214/0x290 [ 949.285412][T19109] kbd_led_trigger_activate+0xcb/0x110 [ 949.287691][T19109] led_trigger_set+0x597/0xc50 [ 949.289761][T19109] led_trigger_set_default+0x1e0/0x2e0 [ 949.292042][T19109] led_classdev_register_ext+0x7b8/0xa10 [ 949.294369][T19109] input_leds_connect+0x552/0x8e0 [ 949.296524][T19109] input_attach_handler.isra.0+0x184/0x260 [ 949.298907][T19109] input_register_device+0xa84/0x1130 [ 949.301182][T19109] atkbd_connect+0x5da/0xa20 [ 949.303218][T19109] serio_driver_probe+0x77/0xb0 [ 949.305316][T19109] really_probe+0x23e/0xa90 [ 949.307329][T19109] __driver_probe_device+0x1de/0x440 [ 949.309928][T19109] driver_probe_device+0x4c/0x1b0 [ 949.312502][T19109] __driver_attach+0x283/0x580 [ 949.315173][T19109] bus_for_each_dev+0x13b/0x1d0 [ 949.317836][T19109] serio_handle_event+0x247/0xa50 [ 949.320534][T19109] process_one_work+0x9cf/0x1b70 [ 949.323194][T19109] worker_thread+0x6c8/0xf10 [ 949.325223][T19109] kthread+0x3c5/0x780 [ 949.327143][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.329160][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.331230][T19109] } [ 949.332144][T19109] ... key at: [] __key.7+0x0/0x40 [ 949.334737][T19109] -> (&client->buffer_lock){....}-{3:3} { [ 949.336602][T19109] INITIAL USE at: [ 949.337865][T19109] lock_acquire+0x179/0x350 [ 949.339837][T19109] _raw_spin_lock_irq+0x36/0x50 [ 949.342151][T19109] evdev_read+0x4c8/0xbc0 [ 949.344366][T19109] vfs_readv+0x5c1/0x8b0 [ 949.346241][T19109] do_readv+0x28c/0x340 [ 949.348657][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.350972][T19109] do_fast_syscall_32+0x32/0x80 [ 949.353426][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.356198][T19109] } [ 949.357024][T19109] ... key at: [] __key.1+0x0/0x40 [ 949.359693][T19109] ... acquired at: [ 949.361249][T19109] _raw_spin_lock+0x2e/0x40 [ 949.363286][T19109] evdev_pass_values+0x10e/0x9b0 [ 949.365303][T19109] evdev_events+0x1bb/0x390 [ 949.367179][T19109] input_pass_values+0x6c7/0x890 [ 949.369172][T19109] input_handle_event+0xf00/0x14d0 [ 949.371237][T19109] input_inject_event+0x1cd/0x390 [ 949.373257][T19109] evdev_write+0x2e1/0x440 [ 949.375059][T19109] vfs_write+0x29d/0x1150 [ 949.376877][T19109] ksys_write+0x1f8/0x250 [ 949.378662][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.380729][T19109] do_fast_syscall_32+0x32/0x80 [ 949.382711][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.385231][T19109] [ 949.386188][T19109] -> (&new->fa_lock){....}-{3:3} { [ 949.388209][T19109] INITIAL USE at: [ 949.389752][T19109] lock_acquire+0x179/0x350 [ 949.392138][T19109] _raw_write_lock_irq+0x36/0x50 [ 949.394637][T19109] fasync_insert_entry+0x1ca/0x2a0 [ 949.397243][T19109] fasync_helper+0x60/0xd0 [ 949.399599][T19109] pipe_fasync+0xc7/0x200 [ 949.401883][T19109] do_fcntl+0xa3d/0x15a0 [ 949.404167][T19109] do_compat_fcntl64+0x367/0x710 [ 949.406692][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.409283][T19109] do_fast_syscall_32+0x32/0x80 [ 949.411791][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.414786][T19109] INITIAL READ USE at: [ 949.416491][T19109] lock_acquire+0x179/0x350 [ 949.418993][T19109] _raw_read_lock_irqsave+0x74/0x90 [ 949.421824][T19109] kill_fasync+0x138/0x510 [ 949.424319][T19109] __splice_from_pipe+0x663/0x800 [ 949.427011][T19109] __do_sys_vmsplice+0x716/0x1180 [ 949.429758][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.432503][T19109] do_fast_syscall_32+0x32/0x80 [ 949.435145][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.438341][T19109] } [ 949.439365][T19109] ... key at: [] __key.0+0x0/0x40 [ 949.442084][T19109] ... acquired at: [ 949.443587][T19109] _raw_read_lock_irqsave+0x74/0x90 [ 949.445694][T19109] kill_fasync+0x138/0x510 [ 949.447511][T19109] evdev_pass_values+0x619/0x9b0 [ 949.449505][T19109] evdev_events+0x1bb/0x390 [ 949.451346][T19109] input_pass_values+0x6c7/0x890 [ 949.453354][T19109] input_handle_event+0xf00/0x14d0 [ 949.455427][T19109] input_inject_event+0x1cd/0x390 [ 949.457469][T19109] evdev_write+0x2e1/0x440 [ 949.459284][T19109] vfs_write+0x29d/0x1150 [ 949.461069][T19109] ksys_write+0x1f8/0x250 [ 949.462862][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.464922][T19109] do_fast_syscall_32+0x32/0x80 [ 949.466898][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.469470][T19109] [ 949.470422][T19109] [ 949.470422][T19109] the dependencies between the lock to be acquired [ 949.470430][T19109] and SOFTIRQ-irq-unsafe lock: [ 949.475683][T19109] -> (tasklist_lock){.+.+}-{3:3} { [ 949.477730][T19109] HARDIRQ-ON-R at: [ 949.479346][T19109] lock_acquire+0x179/0x350 [ 949.481801][T19109] _raw_read_lock+0x5f/0x70 [ 949.484226][T19109] __do_wait+0x105/0x890 [ 949.486594][T19109] do_wait+0x21e/0x5a0 [ 949.488904][T19109] kernel_wait+0x9f/0x160 [ 949.491323][T19109] call_usermodehelper_exec_work+0xf1/0x170 [ 949.494319][T19109] process_one_work+0x9cf/0x1b70 [ 949.496936][T19109] worker_thread+0x6c8/0xf10 [ 949.499425][T19109] kthread+0x3c5/0x780 [ 949.501733][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.504256][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.506810][T19109] SOFTIRQ-ON-R at: [ 949.508458][T19109] lock_acquire+0x179/0x350 [ 949.510952][T19109] _raw_read_lock+0x5f/0x70 [ 949.513567][T19109] __do_wait+0x105/0x890 [ 949.515961][T19109] do_wait+0x21e/0x5a0 [ 949.518278][T19109] kernel_wait+0x9f/0x160 [ 949.520723][T19109] call_usermodehelper_exec_work+0xf1/0x170 [ 949.523564][T19109] process_one_work+0x9cf/0x1b70 [ 949.526147][T19109] worker_thread+0x6c8/0xf10 [ 949.528654][T19109] kthread+0x3c5/0x780 [ 949.530959][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.533460][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.535961][T19109] INITIAL USE at: [ 949.537523][T19109] lock_acquire+0x179/0x350 [ 949.539964][T19109] _raw_write_lock_irq+0x36/0x50 [ 949.542528][T19109] copy_process+0x4caf/0x76a0 [ 949.545029][T19109] kernel_clone+0xfc/0x960 [ 949.547411][T19109] user_mode_thread+0xc7/0x110 [ 949.549935][T19109] rest_init+0x23/0x2b0 [ 949.552257][T19109] start_kernel+0x3ee/0x4d0 [ 949.554692][T19109] x86_64_start_reservations+0x18/0x30 [ 949.557529][T19109] x86_64_start_kernel+0x130/0x190 [ 949.560293][T19109] common_startup_64+0x13e/0x148 [ 949.562830][T19109] INITIAL READ USE at: [ 949.564709][T19109] lock_acquire+0x179/0x350 [ 949.567355][T19109] _raw_read_lock+0x5f/0x70 [ 949.569978][T19109] __do_wait+0x105/0x890 [ 949.572503][T19109] do_wait+0x21e/0x5a0 [ 949.574937][T19109] kernel_wait+0x9f/0x160 [ 949.577492][T19109] call_usermodehelper_exec_work+0xf1/0x170 [ 949.580649][T19109] process_one_work+0x9cf/0x1b70 [ 949.583420][T19109] worker_thread+0x6c8/0xf10 [ 949.586044][T19109] kthread+0x3c5/0x780 [ 949.588546][T19109] ret_from_fork+0x5d4/0x6f0 [ 949.591210][T19109] ret_from_fork_asm+0x1a/0x30 [ 949.593883][T19109] } [ 949.595021][T19109] ... key at: [] tasklist_lock+0x18/0x40 [ 949.598248][T19109] ... acquired at: [ 949.599861][T19109] _raw_read_lock+0x5f/0x70 [ 949.601754][T19109] send_sigurg+0xed/0xc80 [ 949.603788][T19109] sk_send_sigurg+0x76/0x360 [ 949.605672][T19109] unix_stream_sendmsg+0xeb3/0x11d0 [ 949.607780][T19109] ____sys_sendmsg+0xa98/0xc70 [ 949.609765][T19109] ___sys_sendmsg+0x134/0x1d0 [ 949.611704][T19109] __sys_sendmmsg+0x2f9/0x420 [ 949.613762][T19109] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 949.616087][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.618163][T19109] do_fast_syscall_32+0x32/0x80 [ 949.620183][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.622801][T19109] [ 949.623859][T19109] -> (&f_owner->lock){....}-{3:3} { [ 949.625883][T19109] INITIAL USE at: [ 949.627461][T19109] lock_acquire+0x179/0x350 [ 949.629865][T19109] _raw_write_lock_irq+0x36/0x50 [ 949.632414][T19109] __f_setown+0x61/0x3c0 [ 949.634699][T19109] f_setown+0x122/0x290 [ 949.636946][T19109] sock_ioctl+0x467/0x6b0 [ 949.639299][T19109] compat_sock_ioctl+0x4e3/0x730 [ 949.641842][T19109] __ia32_compat_sys_ioctl+0x23f/0x370 [ 949.644551][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.647154][T19109] do_fast_syscall_32+0x32/0x80 [ 949.649659][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.652917][T19109] INITIAL READ USE at: [ 949.654747][T19109] lock_acquire+0x179/0x350 [ 949.657595][T19109] _raw_read_lock_irqsave+0x74/0x90 [ 949.660478][T19109] send_sigurg+0x5f/0xc80 [ 949.662958][T19109] sk_send_sigurg+0x76/0x360 [ 949.665470][T19109] unix_stream_sendmsg+0xeb3/0x11d0 [ 949.668161][T19109] ____sys_sendmsg+0xa98/0xc70 [ 949.670813][T19109] ___sys_sendmsg+0x134/0x1d0 [ 949.673431][T19109] __sys_sendmmsg+0x2f9/0x420 [ 949.675949][T19109] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 949.678791][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.681492][T19109] do_fast_syscall_32+0x32/0x80 [ 949.684001][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.687062][T19109] } [ 949.688070][T19109] ... key at: [] __key.1+0x0/0x40 [ 949.690687][T19109] ... acquired at: [ 949.692129][T19109] lock_acquire+0x179/0x350 [ 949.693887][T19109] _raw_read_lock_irqsave+0x74/0x90 [ 949.695933][T19109] send_sigio+0x31/0x3e0 [ 949.697785][T19109] kill_fasync+0x214/0x510 [ 949.699652][T19109] lease_break_callback+0x23/0x30 [ 949.701703][T19109] __break_lease+0x674/0x1810 [ 949.703535][T19109] do_dentry_open+0x6e1/0x1c10 [ 949.705456][T19109] vfs_open+0x82/0x3f0 [ 949.707093][T19109] dentry_open+0x71/0xd0 [ 949.708839][T19109] do_mq_open+0x4df/0x8c0 [ 949.710610][T19109] __ia32_compat_sys_mq_open+0x154/0x280 [ 949.712855][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.714893][T19109] do_fast_syscall_32+0x32/0x80 [ 949.716852][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.719346][T19109] [ 949.720304][T19109] [ 949.720304][T19109] stack backtrace: [ 949.722547][T19109] CPU: 2 UID: 0 PID: 19109 Comm: syz.0.2989 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 949.722568][T19109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 949.722579][T19109] Call Trace: [ 949.722591][T19109] [ 949.722598][T19109] dump_stack_lvl+0x116/0x1f0 [ 949.722624][T19109] check_irq_usage+0x7dc/0x920 [ 949.722644][T19109] ? check_path.constprop.0+0x24/0x50 [ 949.722665][T19109] ? __lock_acquire+0x1285/0x1c90 [ 949.722684][T19109] __lock_acquire+0x1285/0x1c90 [ 949.722706][T19109] ? lockdep_unlock+0x64/0xe0 [ 949.722721][T19109] ? __lock_acquire+0x1053/0x1c90 [ 949.722737][T19109] lock_acquire+0x179/0x350 [ 949.722755][T19109] ? send_sigio+0x31/0x3e0 [ 949.722773][T19109] ? lock_acquire+0x179/0x350 [ 949.722794][T19109] _raw_read_lock_irqsave+0x74/0x90 [ 949.722817][T19109] ? send_sigio+0x31/0x3e0 [ 949.722832][T19109] send_sigio+0x31/0x3e0 [ 949.722844][T19109] kill_fasync+0x214/0x510 [ 949.722860][T19109] lease_break_callback+0x23/0x30 [ 949.722885][T19109] __break_lease+0x674/0x1810 [ 949.722905][T19109] ? __pfx___break_lease+0x10/0x10 [ 949.722921][T19109] ? apparmor_file_open+0x1a1/0x9c0 [ 949.722942][T19109] ? __pfx_apparmor_file_open+0x10/0x10 [ 949.722957][T19109] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 949.722981][T19109] do_dentry_open+0x6e1/0x1c10 [ 949.723007][T19109] vfs_open+0x82/0x3f0 [ 949.723025][T19109] dentry_open+0x71/0xd0 [ 949.723042][T19109] do_mq_open+0x4df/0x8c0 [ 949.723062][T19109] ? __pfx_do_mq_open+0x10/0x10 [ 949.723086][T19109] ? __pfx_do_futex+0x10/0x10 [ 949.723129][T19109] __ia32_compat_sys_mq_open+0x154/0x280 [ 949.723148][T19109] ? __pfx___ia32_compat_sys_mq_open+0x10/0x10 [ 949.723166][T19109] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 949.723186][T19109] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 949.723212][T19109] ? rcu_is_watching+0x12/0xc0 [ 949.723230][T19109] __do_fast_syscall_32+0x7c/0x3a0 [ 949.723256][T19109] do_fast_syscall_32+0x32/0x80 [ 949.723278][T19109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.723294][T19109] RIP: 0023:0xf70ee579 [ 949.723308][T19109] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 949.723323][T19109] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000115 [ 949.723340][T19109] RAX: ffffffffffffffda RBX: 0000000080000b40 RCX: 0000000000000001 [ 949.723351][T19109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 949.723360][T19109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 949.723371][T19109] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 949.723381][T19109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 949.723394][T19109] [ 949.832371][T19111] bond10: left promiscuous mode [ 953.781852][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) VM DIAGNOSIS: 07:01:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000c1c1dc RBX=0000000000000000 RCX=ffffffff8b7cfc39 RDX=ffffed1005646646 RSI=ffffffff8c156620 RDI=ffffffff819185c1 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a82850 R15=0000000000000000 RIP=ffffffff8b7ce79f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809755f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=000000004d9f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000113d39c RBX=0000000000000001 RCX=ffffffff8b7cfc39 RDX=ffffed1005666646 RSI=ffffffff8c156620 RDI=ffffffff819185c1 RBP=ffffed1003bdd488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000000 R12=0000000000000001 R13=ffff88801deea440 R14=ffffffff90a82850 R15=0000000000000000 RIP=ffffffff8b7ce79f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809765f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7394d1c CR3=000000004d9f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855875a5 RDI=ffffffff9b06da00 RBP=ffffffff9b06d9c0 RSP=ffffc9000319f310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b06d9c0 R15=ffffffff85587540 RIP=ffffffff855875cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809775f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71f3800 CR3=0000000072c9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000075fbac RBX=0000000000000003 RCX=ffffffff8b7cfc39 RDX=ffffed10056a6646 RSI=ffffffff8c156620 RDI=ffffffff819185c1 RBP=ffffed1003865000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801c328000 R14=ffffffff90a82850 R15=0000000000000000 RIP=ffffffff8b7ce79f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809785f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002cffdffc CR3=00000000600ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030c00000000 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000