last executing test programs: 7m3.869792445s ago: executing program 0 (id=2353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000005c0)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000080), 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 7m3.665596885s ago: executing program 0 (id=2354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80103000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000317d000900000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES8=r0, @ANYRESHEX=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='fsi_master_acf_cmd_rel_addr\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000440)={r12, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000100)={r13, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r14}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m2.522667898s ago: executing program 0 (id=2363): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettaction={0x180, 0x32, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f31}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff5}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf17}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7c4}]}, 0x180}}, 0x20044080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x200000a0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) chdir(0x0) io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xaebc, 0x20, 0x2, 0x180}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000000008004400", @ANYRES32=r7, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000080) unshare(0x62040200) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 7m1.21341018s ago: executing program 0 (id=2370): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000009df00)='illinois\x00', 0x9) listen(r1, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = mq_open(&(0x7f00000000c0)='\x00', 0x80, 0x8, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) gettid() flock(0xffffffffffffffff, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x15a) openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) flock(r4, 0x2) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x101b81) ioctl$USBDEVFS_SETINTERFACE(r6, 0x41045508, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(r5, &(0x7f0000001180)=""/102396, 0x18ffc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0xc000) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x7}) pread64(r7, &(0x7f0000000100)=""/86, 0x20, 0x4) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000305000000000000", @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r6], 0x68}}, 0x24004805) 7m1.053246517s ago: executing program 0 (id=2373): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) pselect6(0x40, &(0x7f0000000140)={0x10000, 0x3, 0x2, 0x3, 0x8000000000000001, 0x40, 0x1, 0x7ff}, &(0x7f0000000240)={0x9, 0x8, 0x1d5, 0x4, 0xfffffffffffffff7, 0x0, 0xffffffffffffff6e}, &(0x7f0000000280)={0x6f, 0x0, 0x7f, 0x31a12163, 0x7, 0x7, 0x1}, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x26, 0x8]}, 0x8}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x60004000) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) ioprio_get$uid(0x3, 0xee01) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000000)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) pselect6(0x40, &(0x7f0000000140)={0x10000, 0x3, 0x2, 0x3, 0x8000000000000001, 0x40, 0x1, 0x7ff}, &(0x7f0000000240)={0x9, 0x8, 0x1d5, 0x4, 0xfffffffffffffff7, 0x0, 0xffffffffffffff6e}, &(0x7f0000000280)={0x6f, 0x0, 0x7f, 0x31a12163, 0x7, 0x7, 0x1}, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x26, 0x8]}, 0x8}) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000090601080000000000000000010000080500010007000000680007800c00148008000140ffffffff050015000100000005000300820000000900130073797a31000000000a001100ffffffffffff000005001a0000000000080008400000000b0900130073797a3200000000140017006e6574706369300000000000000000000900020073797a30000000000800094000000000280007800c001940fffffffffffffff9060005404e22000008000940000000ea08000a4000000007340008800c00078008001c40000000bc0c00078005001500030000000c00078006001d4000ed00000c0007800800084000000000100008800c00078008000b4000000001540007800800094000000dbb050015000300000008000940000000031400170070696d726567300000000000000000000c001b40000000000000000605001500e700000008000b400000000808000b40000000030857d54820a24c726aa9c89b73c40c305a012b"], 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x60004000) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) (async) ioprio_get$uid(0x3, 0xee01) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) 7m0.973410871s ago: executing program 0 (id=2375): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) chown(&(0x7f0000000140)='./file0\x00', 0xee01, r5) umount2(&(0x7f0000000040)='./file0\x00', 0xb) socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0xf85d359b7ae47443, 0x20000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r6) socket$inet(0x2, 0x80001, 0x84) 6m45.929587081s ago: executing program 32 (id=2375): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) chown(&(0x7f0000000140)='./file0\x00', 0xee01, r5) umount2(&(0x7f0000000040)='./file0\x00', 0xb) socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0xf85d359b7ae47443, 0x20000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r6) socket$inet(0x2, 0x80001, 0x84) 3m35.562111305s ago: executing program 1 (id=3807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x312) 3m35.488747714s ago: executing program 1 (id=3811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fsopen(0x0, 0x0) getresgid(0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) 3m32.412036864s ago: executing program 1 (id=3851): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x10000004, 0x10100}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5ee}], 0x1}}], 0x1, 0x0) 3m32.411786463s ago: executing program 1 (id=3852): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x241) 3m32.348612519s ago: executing program 1 (id=3854): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x840000000002, 0x3, 0xfa) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x4c}}, 0x0) 3m32.138248997s ago: executing program 1 (id=3855): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) 3m32.074416703s ago: executing program 33 (id=3855): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) 43.61367426s ago: executing program 3 (id=5045): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 43.317729219s ago: executing program 3 (id=5048): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x40000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040), 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 42.070134602s ago: executing program 3 (id=5050): sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, 0x6e6bbc}}, 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) 42.069438861s ago: executing program 3 (id=5051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x1, r7, 0x1, 0x80000001, 0xb, 0x1fd, 0x1}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_io_uring_setup(0x493, &(0x7f0000000200)={0x0, 0x7279, 0x100, 0x4, 0x313}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000040), 0x200000000000019f) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) 41.27732501s ago: executing program 3 (id=5056): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x101180, 0x100}, 0x18) execveat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000002c0)='autofs\x00', &(0x7f0000000300)='\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='rpc_pipefs\x00', &(0x7f0000000440)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS']}, 0x100) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file1\x00'}) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 41.130249262s ago: executing program 3 (id=5057): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.901024683s ago: executing program 34 (id=5057): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.499955204s ago: executing program 4 (id=5204): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="5b00000000000000f1000040"]) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x18) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff004) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0xe, r10}, 0x10) write$char_usb(r5, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 5.369793773s ago: executing program 4 (id=5224): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff11e]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000100)={0x2fd, [[0x10001, 0x9, 0x0, 0x0, 0x40], [0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5], [0x1, 0x2000101, 0x2000, 0x1, 0x3, 0x1, 0x0, 0xfffffffc]], '\x00', [{0x0, 0xc278}, {0x7, 0x0, 0x0, 0x1}, {0xffbffbfd, 0x0, 0x0, 0x1}, {0x1, 0x80000}, {0x0, 0x1}, {0x3}, {0x400, 0x3}, {0x0, 0x7}, {}, {0x0, 0x4}, {}, {0x800}], '\x00', 0x8}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xc) ftruncate(r5, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000000)={@remote, @loopback, @empty}, 0xc) 4.380023956s ago: executing program 6 (id=5232): socket$igmp(0x2, 0x3, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0}, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioperm(0x0, 0x9, 0x5) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x4668, 0x10100, 0xfffffffd, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4200}}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffd}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000010100c0"]) 4.377241798s ago: executing program 4 (id=5233): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x1d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0x5, 0x4) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fda30e2ed46d812ed92603b91ac31eefb5b2ccfa1cb7a0ca9c2bd0222c413df2ccb809667f75c65acbafdb4ad02cd328496ac923d3ac3d68534bee0591dceeb1cf9c827efb64904c90456df08642720402e3dd23ac2772d5cd3abe9d605231d941fbb92dfa7b99d5703da533caefd7b7a44240faac7692e9d6d82a7b277fc0dd869b34d9355b6e09dac2aafc20a9c25af1267aed165ecc63c88e8cf616fdafbfbb98efc63920fc7afa36be78d02fe5f1627f", 0xb2}, {&(0x7f00000006c0)="93e43645e17fae8ec433dcbe8e7d749daec93b1863502570f54c5a0d9487155d6bd6cadf025c2b4b6e22219cb6c99624451a7c20c5fed5df6ce8199a64320abbf447e4711ffb58123c354db8b9246fab592bd6ba2b49605c2955", 0x5a}, {&(0x7f0000000b40)="69911be93b1f41f874f25217a50473ac98310c835f0f591cbcdfeda181489fd01440a9dae5cb16070c60ea51a1b728d517209bfaafd04fbb4a6caabe116fd2d79c217f3387731c014b0e9fce63b88c97f2663c3ad6d1489e083186336952689b16e4fb81b0f9fc3b681023ffd071b94a677383abfc9aa41d9a694672703de4f8861c4a876fbc43c8348a0398fbb1d18525e26ab2042dc7e4ef7a9b86feda0b36cca8ebd0fd2abcf389896cfbd7a26ad2efa2b9c3b43e0be0154146e55b4f8913644cec8b8a879120d5df63ae0f27ac2f951b728ea535f975d59d125804873180ba97f5736374dc430a1adf8736f4b8871c751619f9ec67c569", 0xf9}, {&(0x7f0000000840)="5c4a5600c958caf6081d414a835d82c25586c49ee6870eaf106684391fd4008384f0200fb0297fb793ad8cae9fba30b7a28a9103b36f8746226d9cfa1f85f88eb77b845a510317c12a1de55209676e", 0x4f}, {&(0x7f0000000280)="12157f9d06de06f1fcba", 0xa}, {&(0x7f00000008c0)="920e1edd0572fc19c13473c425350a7202955ac2db7ba8d786393df7271adc836e3b1fc01450e692232c4534233fda66768180dbd3ff01b0b9bacc759cfd95afa8d10add87d168868150cdcd5f3fd6c564c72485a56d676227", 0x59}, {&(0x7f0000000940)="b31de5abcc9b194bad8a16355b3cc006c2e1eabeed99a85a9464493c1cf5892509004e261cac7a3ef10800000000000000bf1f2146f3b8f1ed5daa9bbbdb49c479987389", 0x44}, {&(0x7f0000000300)="fa4f3fcde774f829", 0x8}, {&(0x7f0000002700)="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", 0xcfd}], 0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @empty, 0x20, 0x20}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 4.188135339s ago: executing program 5 (id=5236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x8000000, @void, @value, @void, @value}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x30}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x110400) keyctl$describe(0x11, r3, 0x0, 0x0) creat(0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = io_uring_setup(0xebc, &(0x7f00000000c0)={0x0, 0xfffffff9, 0x40, 0x2, 0x31f}) close_range(r5, r5, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x0) name_to_handle_at(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 4.100078724s ago: executing program 6 (id=5237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000340)) gettid() (async) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) mount_setattr(r2, 0x0, 0x1900, 0x0, 0x0) (async) mount_setattr(r2, 0x0, 0x1900, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00006d9000/0x4000)=nil, 0x4000, 0x200000a, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f00006d9000/0x4000)=nil, 0x4000, 0x200000a, 0x12, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$P9_RWRITE(r5, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x7}, 0xb) (async) write$P9_RWRITE(r5, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x7}, 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_setscheduler(r6, 0x6, &(0x7f0000000180)=0x5) 4.09968135s ago: executing program 6 (id=5238): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x100000}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, &(0x7f0000000300)={0x0, 0x0, @d}, 0x18, r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffb8, &(0x7f0000000040)={&(0x7f0000000380)=@delchain={0x0, 0x65, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0xb, 0x3}, {0x0, 0x2}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x0, 0x51, 0x4}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x0, 0x51, 0x4}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x0, 0x60, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x0, 0x1b, @local}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x0, 0x62, "e316eb25ab2d6c8659c04b36e6824f97"}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x0, 0x1b, @multicast1}, @TCA_FLOWER_KEY_MPLS_BOS={0x0, 0x44, 0x28}]}}, @TCA_CHAIN={0x0, 0xb, 0xfffffffb}, @TCA_CHAIN={0x0, 0xb, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) lseek(r5, 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) io_uring_enter(0xffffffffffffffff, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x6) 4.041695292s ago: executing program 2 (id=5239): iopl(0x3) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0), 0x4) socket$packet(0x11, 0x2, 0x300) dup3(r4, r1, 0x0) unshare(0x42000000) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000300)=0x4f4e, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20, r8, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xaa, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) 3.779991006s ago: executing program 4 (id=5240): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020400030c000000000700000000000005000600000000000a004e230001000000000000000000000000000000000001020000000000000002000100000000000000030d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)={'stack ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'eD\xcbj\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb3) write$apparmor_exec(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='exec :'], 0xb0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "90550ea6c68600c7ec450d3ba891efd6"}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f750200000098", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000004400)='./file0\x00', 0x101280, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0xc00, 0x90, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"]) syz_fuse_handle_req(r2, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r12 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r12, &(0x7f0000004380)={0x20, 0x0, r13, {0x6, 0x0, 0xf, 0x7fff}}, 0x20) write$FUSE_INIT(r12, &(0x7f0000002280)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x29, 0x7, 0x204000, 0x2, 0x2, 0x3, 0x8000, 0x0, 0x0, 0x8, 0x6}}, 0x50) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x3, 0x6, 0x1, 0x40000000000, 0x4, 0x100000000000, 0xe767, 0x8, 0x10000, 0x8000, 0x0, r11, r4, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x27, 0x4, 0x7fff) 3.691169267s ago: executing program 4 (id=5241): openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) ioctl$int_in(r3, 0x5421, &(0x7f0000000400)=0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x8cff) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) 2.924735788s ago: executing program 6 (id=5242): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010089080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x40}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x1}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) close_range(r4, 0xffffffffffffffff, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002640)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x20000010) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x10}}, 0x40000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000100)={0x1, 0xaa4, 0x0, 0x0}) listen(r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2005336780000008b8e87e05a1dee738ad6976aa2d25896d49c16c5acd19efe915567ac08c6ce8440c3e09ca8f4e6dbc59600c65fca257cae844a3c0828a376da86b997577de9a9552d5c1e2e93fadd80be2dda0be7f2cfe08ac5ee61538dd9d3c04f36ba3804eadb931b96ac5fd93c02ecf55658944a6d0dacab8ecc76a8af9400"/145], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000210100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r10, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.688677165s ago: executing program 4 (id=5243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x10000009, 0x501400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vimc2(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, {0x8000000000, 0x5b}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) 2.639905421s ago: executing program 5 (id=5244): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000380)={0x9, 0x4, 0x1, 0xfdfdffffffffffff, 0x46fe, 0x6}) 2.590200159s ago: executing program 5 (id=5245): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0xff04) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 2.35985451s ago: executing program 6 (id=5246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendto$inet(r2, 0x0, 0x4d, 0x200047ee, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000095b6981fafafdb47f6261f92f20e4389faa5e7d364d5d4e6b32d43f44b72f4eeb880a740b43c86e9b5e9f021262e19c54a122c6582e9a160959353f693be1b4a56d659b871f7641a629e2b5242020bf3a7343a3200"/117, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="2c33195cb22c4081feba2ad79461f0b7fd3ab2818e8d5f41763947da5f2bdd006cc2d4acc81904bac1fd49", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x50) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0x10000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x700, 0x5b9907026b22afde, 0x81, 0x101, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @private=0x6, {[@noop, @rr={0x7, 0xf, 0x70, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x25}]}, @end, @timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x8, [{@multicast2, 0x10000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x10000}]}, @timestamp_prespec={0x44, 0x1c, 0xf1, 0x3, 0x6, [{@loopback}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0x53}]}]}}}}}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)) 2.127894934s ago: executing program 2 (id=5247): r0 = userfaultfd(0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$swradio(0x0, 0x1, 0x2) (async) syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') (rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000100000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpgid(r1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r7 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000600)) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 64) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.829756967s ago: executing program 2 (id=5248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r0], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010001000000000000000a3e00000000000000000000180016001400010001000000000000001d0010000300090008000400", @ANYRES32, @ANYBLOB="0600000007"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008004) 1.829356211s ago: executing program 2 (id=5249): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.672603162s ago: executing program 5 (id=5250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="017fffffff8d"}) 1.549747612s ago: executing program 5 (id=5251): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.349421676s ago: executing program 6 (id=5252): iopl(0x3) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0), 0x4) socket$packet(0x11, 0x2, 0x300) dup3(r4, r1, 0x0) unshare(0x42000000) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000300)=0x4f4e, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x50, r8, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xaa, 0x3}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x566}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd23}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7ba}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) 943.384985ms ago: executing program 2 (id=5253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x4}, {0x10}, {}, {0x0, 0x7}, {}, {}, {0xfffffffc}, {0x6}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) ioctl$I2C_TENBIT(r2, 0x704, 0x1) ioctl$I2C_SLAVE(r2, 0x703, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x8001}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000000c0)=""/191) r11 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000024c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x2, 0x4, 0x2, 0x1, 0x100, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}]}, &(0x7f0000002200)='GPL\x00', 0x7, 0xa5, &(0x7f0000002300)=""/165, 0x40f00, 0x60, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x2, 0xe, 0x4}, 0x10, 0xec16, 0xffffffffffffffff, 0x3, &(0x7f0000002440)=[r0, r10, r0, r0], &(0x7f0000002480)=[{0x1, 0x3, 0xd, 0x6}, {0x5, 0x1, 0xd, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x1c, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 909.064957ms ago: executing program 5 (id=5254): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x100000}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd38}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x90e}]}, {0x9, 0x6, "250a9af528"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xf0) 0s ago: executing program 2 (id=5255): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd38}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x90e}]}, {0x9, 0x6, "250a9af528"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x5, 0x3f8, 0x0, 0xb4f5663c712d9c87}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) io_uring_enter(0xffffffffffffffff, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xe2) 0s ago: executing program 6 (id=5256): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x79) close(r0) socket$rxrpc(0x21, 0x2, 0x2) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x227a, &(0x7f0000000040)) r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 [ 786.270956][T23113] dump_stack_lvl+0x16c/0x1f0 [ 786.270977][T23113] should_fail_ex+0x50a/0x650 [ 786.270992][T23113] strncpy_from_user+0x3b/0x2d0 [ 786.271005][T23113] setxattr_copy+0x8a/0x210 [ 786.271017][T23113] path_setxattrat+0x104/0x290 [ 786.271027][T23113] ? __pfx_path_setxattrat+0x10/0x10 [ 786.271041][T23113] ? __pfx___lock_acquire+0x10/0x10 [ 786.271052][T23113] ? __pfx_lock_release+0x10/0x10 [ 786.271075][T23113] ? lock_acquire+0x2f/0xb0 [ 786.271086][T23113] ? __might_fault+0xe3/0x190 [ 786.271099][T23113] ? __might_fault+0xe3/0x190 [ 786.271113][T23113] __ia32_sys_fsetxattr+0xc4/0x140 [ 786.271124][T23113] ? syscall_trace_enter+0xf0/0x260 [ 786.271138][T23113] __do_fast_syscall_32+0x73/0x120 [ 786.271149][T23113] do_fast_syscall_32+0x32/0x80 [ 786.271159][T23113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.271175][T23113] RIP: 0023:0xf7fa2579 [ 786.271183][T23113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 786.271193][T23113] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 00000000000000e4 [ 786.271203][T23113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 786.271209][T23113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.271215][T23113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.271221][T23113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 786.271226][T23113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.271238][T23113] [ 786.465461][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.466521][T23057] Bluetooth: hci0: command 0x0405 tx timeout [ 786.626414][T15205] Bluetooth: hci3: command tx timeout [ 786.724259][T23126] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4707'. [ 786.727260][T23126] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4707'. [ 786.865329][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.905282][ T57] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 786.939907][T23138] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4711'. [ 786.942379][T23138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4711'. [ 787.025314][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.067347][ T57] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 787.070490][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.073206][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 787.079473][ T57] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 787.083425][ T57] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 787.086954][ T57] usb 7-1: Manufacturer: syz [ 787.092826][ T57] usb 7-1: config 0 descriptor?? [ 787.097648][ T57] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 787.397459][T23153] lo speed is unknown, defaulting to 1000 [ 787.399603][T23153] wg1 speed is unknown, defaulting to 1000 [ 787.401763][T23153] »»»»»» speed is unknown, defaulting to 1000 [ 787.435572][T23153] »»»»»» speed is unknown, defaulting to 1000 [ 787.464532][T23153] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 787.467308][T23153] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 787.921926][T23057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.928357][T23057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.932234][T23057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.935294][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.936797][T23057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.944964][T23057] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 787.948284][T23057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.989801][T23158] lo speed is unknown, defaulting to 1000 [ 787.991722][T23158] wg1 speed is unknown, defaulting to 1000 [ 787.993704][T23158] »»»»»» speed is unknown, defaulting to 1000 [ 788.028613][T23158] »»»»»» speed is unknown, defaulting to 1000 [ 788.126919][T23158] chnl_net:caif_netlink_parms(): no params data found [ 788.172266][T23164] IPv6: NLM_F_REPLACE set, but no existing node found! [ 788.213098][T23158] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.215340][T23158] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.217479][T23158] bridge_slave_0: entered allmulticast mode [ 788.219684][T23158] bridge_slave_0: entered promiscuous mode [ 788.224884][T23158] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.227247][T23158] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.229355][T23158] bridge_slave_1: entered allmulticast mode [ 788.231642][T23158] bridge_slave_1: entered promiscuous mode [ 788.255664][T23158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.260446][T23158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.346748][T23158] team0: Port device team_slave_0 added [ 788.354330][T23158] team0: Port device team_slave_1 added [ 788.376170][T23158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.378422][T23158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.385849][T23158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.389971][T23158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.391882][T23158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.400720][T23158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.434253][T23158] hsr_slave_0: entered promiscuous mode [ 788.436644][T23158] hsr_slave_1: entered promiscuous mode [ 788.439665][T23158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.443845][T23158] Cannot create hsr debugfs directory [ 788.507421][T23158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.578146][T23158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.639088][T23158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.705211][T15205] Bluetooth: hci3: command tx timeout [ 788.771183][T23182] siw: device registration error -23 [ 788.782952][T23158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.857087][T23182] lo speed is unknown, defaulting to 1000 [ 788.859199][T23182] wg1 speed is unknown, defaulting to 1000 [ 788.861754][T23182] »»»»»» speed is unknown, defaulting to 1000 [ 788.922228][T23158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 788.938789][T23158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 788.946702][T23158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.953207][T23158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.955631][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.970541][T23158] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.973321][T23158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.976394][T23158] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.979137][T23158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.037772][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.041331][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.058608][T23158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.068728][T23158] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.073587][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.075686][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.080660][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.082829][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.152176][T23182] »»»»»» speed is unknown, defaulting to 1000 [ 789.368828][T23158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.528015][T23158] veth0_vlan: entered promiscuous mode [ 789.537621][T23158] veth1_vlan: entered promiscuous mode [ 789.557682][T23158] veth0_macvtap: entered promiscuous mode [ 789.561370][T23158] veth1_macvtap: entered promiscuous mode [ 789.578921][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.581964][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.584744][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.587949][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.590849][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.594157][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.600623][T23158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.610656][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.613804][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.620163][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.624324][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.629174][T23158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.632903][T23158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.649573][T23158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.655497][T23158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.658106][T23158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.660585][T23158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.663865][T23158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.685802][ T835] usb 7-1: USB disconnect, device number 36 [ 789.811654][T23214] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4726'. [ 789.815195][T23214] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4726'. [ 789.861314][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.873367][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.884669][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.888024][ T6006] IPVS: starting estimator thread 0... [ 789.888246][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.985491][T15205] Bluetooth: hci2: command tx timeout [ 789.985775][T23218] IPVS: using max 39 ests per chain, 93600 per kthread [ 789.991208][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.166446][T23229] 9pnet: Could not find request transport: rdmaÿÿ [ 790.307296][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.485970][T23237] lo speed is unknown, defaulting to 1000 [ 790.489056][T23237] wg1 speed is unknown, defaulting to 1000 [ 790.493259][T23237] »»»»»» speed is unknown, defaulting to 1000 [ 790.540375][T23237] »»»»»» speed is unknown, defaulting to 1000 [ 790.765275][ T5989] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 790.785898][T15205] Bluetooth: hci3: command tx timeout [ 790.798122][T23246] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4734'. [ 790.802097][T23246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4734'. [ 790.917072][ T5989] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 790.920123][ T5989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.923269][ T5989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.926485][ T5989] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 790.931735][ T5989] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 790.934443][ T5989] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 790.937215][ T5989] usb 10-1: Manufacturer: syz [ 791.036263][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.037722][ T5989] usb 10-1: config 0 descriptor?? [ 791.461975][ T5989] usbhid 10-1:0.0: can't add hid device: -71 [ 791.463837][ T5989] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 791.467327][ T5989] usb 10-1: USB disconnect, device number 6 [ 791.872455][T23255] macvlan0: entered allmulticast mode [ 791.874363][T23255] veth1_vlan: entered allmulticast mode [ 791.879276][T23255] veth1_vlan: left allmulticast mode [ 791.900361][T23255] macvlan0 (unregistering): left allmulticast mode [ 792.065299][T15205] Bluetooth: hci2: command tx timeout [ 792.071283][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.484899][T23270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4743'. [ 792.488291][T23270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4743'. [ 792.516752][T23272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4742'. [ 792.865632][T15205] Bluetooth: hci3: command tx timeout [ 792.897321][T23278] lo speed is unknown, defaulting to 1000 [ 792.907389][T23278] wg1 speed is unknown, defaulting to 1000 [ 792.910045][T23278] »»»»»» speed is unknown, defaulting to 1000 [ 793.035982][T23278] »»»»»» speed is unknown, defaulting to 1000 [ 793.106031][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.355598][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.798040][T23293] lo speed is unknown, defaulting to 1000 [ 793.800583][T23293] wg1 speed is unknown, defaulting to 1000 [ 793.803491][T23293] »»»»»» speed is unknown, defaulting to 1000 [ 793.854372][T23293] »»»»»» speed is unknown, defaulting to 1000 [ 793.965142][T15232] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 794.116609][T15232] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 794.119668][T15232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.122760][T15232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.125736][T15232] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 794.131698][T15232] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 794.134239][T15232] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 794.136892][T15232] usb 10-1: Manufacturer: syz [ 794.140734][T15232] usb 10-1: config 0 descriptor?? [ 794.145546][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.155181][T23057] Bluetooth: hci2: command tx timeout [ 794.371464][T23305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4752'. [ 794.375691][T23306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4752'. [ 794.552071][T15232] usbhid 10-1:0.0: can't add hid device: -71 [ 794.553937][T15232] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 794.565530][T15232] usb 10-1: USB disconnect, device number 7 [ 795.185817][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.449841][T23331] sp0: Synchronizing with TNC [ 795.864263][T23343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 795.884755][T23345] Bluetooth: MGMT ver 1.23 [ 796.066233][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.089926][T23356] random: crng reseeded on system resumption [ 796.176356][T23356] 9pnet_virtio: no channels available for device syz [ 796.185409][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 796.225417][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.228740][T23057] Bluetooth: hci2: command tx timeout [ 796.338420][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 796.342412][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.346100][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.349313][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 796.357589][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 796.361395][ T9] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 796.364060][ T9] usb 10-1: Manufacturer: syz [ 796.379353][ T9] usb 10-1: config 0 descriptor?? [ 796.407849][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.717682][T23371] syz_tun: entered allmulticast mode [ 796.729161][T23371] syz_tun: left allmulticast mode [ 796.799804][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 796.805337][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 796.847189][ T9] usb 10-1: USB disconnect, device number 8 [ 797.013370][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 797.193595][T23402] FAULT_INJECTION: forcing a failure. [ 797.193595][T23402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.197571][T23402] CPU: 3 UID: 0 PID: 23402 Comm: syz.4.4779 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 797.197586][T23402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 797.197593][T23402] Call Trace: [ 797.197621][T23402] [ 797.197644][T23402] dump_stack_lvl+0x16c/0x1f0 [ 797.197835][T23402] should_fail_ex+0x50a/0x650 [ 797.197891][T23402] _copy_from_user+0x2e/0xd0 [ 797.197905][T23402] get_compat_msghdr+0xa8/0x170 [ 797.197967][T23402] ? __pfx_get_compat_msghdr+0x10/0x10 [ 797.197984][T23402] ___sys_sendmsg+0x1b0/0x1e0 [ 797.198012][T23402] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.198028][T23402] ? trace_lock_acquire+0x14e/0x1f0 [ 797.198048][T23402] __sys_sendmmsg+0x2fa/0x420 [ 797.198060][T23402] ? __pfx___sys_sendmmsg+0x10/0x10 [ 797.198074][T23402] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 797.198109][T23402] ? fput+0x67/0x440 [ 797.198123][T23402] ? ksys_write+0x1ba/0x250 [ 797.198133][T23402] ? __pfx_ksys_write+0x10/0x10 [ 797.198144][T23402] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 797.198159][T23402] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 797.198175][T23402] __do_fast_syscall_32+0x73/0x120 [ 797.198186][T23402] do_fast_syscall_32+0x32/0x80 [ 797.198196][T23402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 797.198213][T23402] RIP: 0023:0xf7fd2579 [ 797.198221][T23402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 797.198231][T23402] RSP: 002b:00000000f508355c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 797.198261][T23402] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080001640 [ 797.198267][T23402] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.198273][T23402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.198279][T23402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 797.198285][T23402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 797.198296][T23402] [ 797.272660][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.096201][T23419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 798.286190][ T834] IPVS: starting estimator thread 0... [ 798.332529][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.385267][T23424] IPVS: using max 39 ests per chain, 93600 per kthread [ 798.515228][ T8] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 798.666943][ T8] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 798.669952][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.676963][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.681668][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 798.689915][ T8] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 798.694345][ T8] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 798.698742][ T8] usb 8-1: Manufacturer: syz [ 798.709631][ T8] usb 8-1: config 0 descriptor?? [ 798.916077][T23450] lo speed is unknown, defaulting to 1000 [ 798.921273][T23450] wg1 speed is unknown, defaulting to 1000 [ 798.927806][T23450] »»»»»» speed is unknown, defaulting to 1000 [ 799.355393][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.496863][T23450] »»»»»» speed is unknown, defaulting to 1000 [ 799.498902][T23451] siw: device registration error -23 [ 799.554331][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.645497][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 799.647479][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 799.669186][ T8] usb 8-1: USB disconnect, device number 47 [ 799.703136][T23454] lo speed is unknown, defaulting to 1000 [ 799.705342][T23454] wg1 speed is unknown, defaulting to 1000 [ 799.716790][T23454] »»»»»» speed is unknown, defaulting to 1000 [ 799.788788][T23454] »»»»»» speed is unknown, defaulting to 1000 [ 799.799351][T23460] block nbd2: shutting down sockets [ 799.805699][T23464] cgroup: Unknown subsys name 'cpuset' [ 799.862495][T23469] FAULT_INJECTION: forcing a failure. [ 799.862495][T23469] name failslab, interval 1, probability 0, space 0, times 0 [ 799.866329][T23469] CPU: 2 UID: 0 PID: 23469 Comm: syz.5.4803 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 799.866344][T23469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 799.866350][T23469] Call Trace: [ 799.866376][T23469] [ 799.866380][T23469] dump_stack_lvl+0x16c/0x1f0 [ 799.866402][T23469] should_fail_ex+0x50a/0x650 [ 799.866416][T23469] ? fs_reclaim_acquire+0xae/0x150 [ 799.866433][T23469] should_failslab+0xc2/0x120 [ 799.866446][T23469] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 799.866458][T23469] ? __lock_acquire+0x15a9/0x3c40 [ 799.866470][T23469] ? __alloc_skb+0x2b3/0x380 [ 799.866483][T23469] __alloc_skb+0x2b3/0x380 [ 799.866492][T23469] ? __pfx___alloc_skb+0x10/0x10 [ 799.866506][T23469] netlink_alloc_large_skb+0x69/0x130 [ 799.866540][T23469] netlink_sendmsg+0x689/0xd70 [ 799.866556][T23469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.866575][T23469] ____sys_sendmsg+0x9ae/0xb40 [ 799.866591][T23469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.866604][T23469] ? get_compat_msghdr+0x11b/0x170 [ 799.866628][T23469] ___sys_sendmsg+0x135/0x1e0 [ 799.866640][T23469] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.866655][T23469] ? __pfx_lock_release+0x10/0x10 [ 799.866666][T23469] ? trace_lock_acquire+0x14e/0x1f0 [ 799.866680][T23469] ? __fget_files+0x206/0x3a0 [ 799.866693][T23469] __sys_sendmsg+0x16e/0x220 [ 799.866704][T23469] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.866722][T23469] __do_fast_syscall_32+0x73/0x120 [ 799.866733][T23469] do_fast_syscall_32+0x32/0x80 [ 799.866743][T23469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.866759][T23469] RIP: 0023:0xf7fe7579 [ 799.866767][T23469] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 799.866776][T23469] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 799.866786][T23469] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 799.866792][T23469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 799.866798][T23469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 799.866803][T23469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 799.866809][T23469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.866820][T23469] [ 799.965538][T23475] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4805'. [ 799.990826][T23475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4805'. [ 800.300612][T23484] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 800.373309][T23486] siw: device registration error -23 [ 800.399000][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.470826][T23486] lo speed is unknown, defaulting to 1000 [ 800.477169][T23486] wg1 speed is unknown, defaulting to 1000 [ 800.506251][T23486] »»»»»» speed is unknown, defaulting to 1000 [ 800.578963][T23502] overlayfs: missing 'workdir' [ 801.182064][T23486] »»»»»» speed is unknown, defaulting to 1000 [ 801.311875][T23510] ptm ptm65: ldisc open failed (-12), clearing slot 65 [ 801.426489][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.468664][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.529765][T23538] siw: device registration error -23 [ 802.562450][T23538] lo speed is unknown, defaulting to 1000 [ 802.564736][T23538] wg1 speed is unknown, defaulting to 1000 [ 802.574523][T23538] »»»»»» speed is unknown, defaulting to 1000 [ 802.767652][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.898136][T23538] »»»»»» speed is unknown, defaulting to 1000 [ 803.505402][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.544124][T23557] lo speed is unknown, defaulting to 1000 [ 803.548546][T23557] wg1 speed is unknown, defaulting to 1000 [ 803.553049][T23557] »»»»»» speed is unknown, defaulting to 1000 [ 803.587270][T23560] usb usb1: usbfs: process 23560 (syz.4.4829) did not claim interface 0 before use [ 803.614676][T23557] »»»»»» speed is unknown, defaulting to 1000 [ 803.738857][T23565] usb 2-1: USB disconnect, device number 4 [ 803.807106][T23566] hub 2-0:1.0: USB hub found [ 803.808689][T23566] hub 2-0:1.0: 6 ports detected [ 803.985198][ T5987] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 804.152315][T23575] FAULT_INJECTION: forcing a failure. [ 804.152315][T23575] name failslab, interval 1, probability 0, space 0, times 0 [ 804.156776][T23575] CPU: 1 UID: 0 PID: 23575 Comm: syz.3.4833 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 804.156801][T23575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 804.156808][T23575] Call Trace: [ 804.156813][T23575] [ 804.156817][T23575] dump_stack_lvl+0x16c/0x1f0 [ 804.156840][T23575] should_fail_ex+0x50a/0x650 [ 804.156855][T23575] ? __hw_addr_add_ex+0x310/0x700 [ 804.156869][T23575] should_failslab+0xc2/0x120 [ 804.156883][T23575] __kmalloc_cache_noprof+0x68/0x420 [ 804.156897][T23575] __hw_addr_add_ex+0x310/0x700 [ 804.156913][T23575] dev_addr_init+0x13b/0x230 [ 804.156927][T23575] ? __pfx_dev_addr_init+0x10/0x10 [ 804.156945][T23575] alloc_netdev_mqs+0x330/0x13e0 [ 804.156956][T23575] ? __pfx_vxlan_setup+0x10/0x10 [ 804.156970][T23575] rtnl_create_link+0xbed/0xf10 [ 804.157012][T23575] rtnl_newlink+0x14e6/0x1d70 [ 804.157024][T23575] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.157036][T23575] ? hlock_class+0x4e/0x130 [ 804.157052][T23575] ? __pfx___lock_acquire+0x10/0x10 [ 804.157063][T23575] ? kmem_cache_free+0x2e2/0x4d0 [ 804.157074][T23575] ? aa_get_newest_label+0x376/0x680 [ 804.157090][T23575] ? find_held_lock+0x2d/0x110 [ 804.157106][T23575] ? find_held_lock+0x2d/0x110 [ 804.157123][T23575] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 804.157132][T23575] ? __pfx_lock_release+0x10/0x10 [ 804.157143][T23575] ? trace_lock_acquire+0x14e/0x1f0 [ 804.157155][T23575] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.157165][T23575] rtnetlink_rcv_msg+0x95b/0xea0 [ 804.157176][T23575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.157186][T23575] ? __pfx___lock_acquire+0x10/0x10 [ 804.157203][T23575] netlink_rcv_skb+0x165/0x410 [ 804.157219][T23575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.157230][T23575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.157251][T23575] ? rcu_is_watching+0x12/0xc0 [ 804.157269][T23575] netlink_unicast+0x53c/0x7f0 [ 804.157285][T23575] ? __pfx_netlink_unicast+0x10/0x10 [ 804.157300][T23575] ? __phys_addr_symbol+0x30/0x80 [ 804.157315][T23575] ? __check_object_size+0x488/0x710 [ 804.157330][T23575] netlink_sendmsg+0x8b8/0xd70 [ 804.157347][T23575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.157363][T23575] ? ____sys_sendmsg+0x76f/0xb40 [ 804.157380][T23575] ____sys_sendmsg+0x9ae/0xb40 [ 804.157393][T23575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.157407][T23575] ? get_compat_msghdr+0x11b/0x170 [ 804.157425][T23575] ___sys_sendmsg+0x135/0x1e0 [ 804.157437][T23575] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.157452][T23575] ? __pfx_lock_release+0x10/0x10 [ 804.157463][T23575] ? trace_lock_acquire+0x14e/0x1f0 [ 804.157477][T23575] ? __fget_files+0x206/0x3a0 [ 804.157490][T23575] __sys_sendmsg+0x16e/0x220 [ 804.157501][T23575] ? __pfx___sys_sendmsg+0x10/0x10 [ 804.157520][T23575] __do_fast_syscall_32+0x73/0x120 [ 804.157531][T23575] do_fast_syscall_32+0x32/0x80 [ 804.157540][T23575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 804.157556][T23575] RIP: 0023:0xf73ae579 [ 804.157580][T23575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 804.157589][T23575] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 804.157599][T23575] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000800000c0 [ 804.157605][T23575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.157611][T23575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 804.157616][T23575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 804.157622][T23575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.157634][T23575] [ 804.279079][ T5987] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 804.281686][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 804.284240][ T5987] usb 2-1: Product: QEMU USB Tablet [ 804.285817][ T5987] usb 2-1: Manufacturer: QEMU [ 804.287178][ T5987] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 804.288403][T23576] siw: device registration error -23 [ 804.331151][ T5987] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000E/input/input26 [ 804.361061][ T5987] hid-generic 0003:0627:0001.000E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 804.370106][T23576] lo speed is unknown, defaulting to 1000 [ 804.373221][T23576] wg1 speed is unknown, defaulting to 1000 [ 804.470952][T23576] »»»»»» speed is unknown, defaulting to 1000 [ 804.814875][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.838366][T23582] 9pnet_fd: Insufficient options for proto=fd [ 804.882978][T23576] »»»»»» speed is unknown, defaulting to 1000 [ 805.307042][ T25] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 805.466463][ T25] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 805.469770][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.472807][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.475564][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 805.479911][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 805.482500][ T25] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 805.484666][ T25] usb 7-1: Manufacturer: syz [ 805.488119][ T25] usb 7-1: config 0 descriptor?? [ 805.675490][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.775287][T23607] random: crng reseeded on system resumption [ 805.825362][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.827800][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.834546][T23607] lo speed is unknown, defaulting to 1000 [ 805.838104][T23607] wg1 speed is unknown, defaulting to 1000 [ 805.843262][T23607] »»»»»» speed is unknown, defaulting to 1000 [ 805.897375][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 805.899119][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 805.902430][ T25] usb 7-1: USB disconnect, device number 37 [ 805.932979][T23607] »»»»»» speed is unknown, defaulting to 1000 [ 806.501470][T23623] lo speed is unknown, defaulting to 1000 [ 806.504884][T23623] wg1 speed is unknown, defaulting to 1000 [ 806.507142][T23623] »»»»»» speed is unknown, defaulting to 1000 [ 806.529274][T23622] lo speed is unknown, defaulting to 1000 [ 806.533111][T23622] wg1 speed is unknown, defaulting to 1000 [ 806.543129][T23623] »»»»»» speed is unknown, defaulting to 1000 [ 806.544023][T23622] »»»»»» speed is unknown, defaulting to 1000 [ 806.848149][T23622] »»»»»» speed is unknown, defaulting to 1000 [ 806.934031][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.995446][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.124207][T23647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4852'. [ 808.126820][T23647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4852'. [ 808.230878][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.233024][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.507696][T23652] FAULT_INJECTION: forcing a failure. [ 808.507696][T23652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.512572][T23652] CPU: 3 UID: 0 PID: 23652 Comm: syz.4.4854 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 808.512591][T23652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 808.512601][T23652] Call Trace: [ 808.512607][T23652] [ 808.512614][T23652] dump_stack_lvl+0x16c/0x1f0 [ 808.512646][T23652] should_fail_ex+0x50a/0x650 [ 808.512668][T23652] _copy_from_iter+0x29b/0x1400 [ 808.512690][T23652] ? trace_lock_acquire+0x14e/0x1f0 [ 808.512705][T23652] ? __alloc_skb+0x200/0x380 [ 808.512721][T23652] ? __pfx__copy_from_iter+0x10/0x10 [ 808.512742][T23652] ? __virt_addr_valid+0x1a4/0x590 [ 808.512760][T23652] ? __virt_addr_valid+0x5e/0x590 [ 808.512775][T23652] ? __phys_addr_symbol+0x30/0x80 [ 808.512796][T23652] ? __check_object_size+0x488/0x710 [ 808.512820][T23652] netlink_sendmsg+0x813/0xd70 [ 808.512846][T23652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.512876][T23652] ____sys_sendmsg+0x9ae/0xb40 [ 808.512896][T23652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.512916][T23652] ? get_compat_msghdr+0x11b/0x170 [ 808.512945][T23652] ___sys_sendmsg+0x135/0x1e0 [ 808.512964][T23652] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.512989][T23652] ? __pfx_lock_release+0x10/0x10 [ 808.513006][T23652] ? trace_lock_acquire+0x14e/0x1f0 [ 808.513027][T23652] ? __fget_files+0x206/0x3a0 [ 808.513049][T23652] __sys_sendmsg+0x16e/0x220 [ 808.513066][T23652] ? __pfx___sys_sendmsg+0x10/0x10 [ 808.513096][T23652] __do_fast_syscall_32+0x73/0x120 [ 808.513112][T23652] do_fast_syscall_32+0x32/0x80 [ 808.513127][T23652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.513151][T23652] RIP: 0023:0xf7fd2579 [ 808.513164][T23652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 808.513179][T23652] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 808.513195][T23652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 808.513205][T23652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.513214][T23652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.513252][T23652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 808.513262][T23652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.513281][T23652] [ 808.611872][T23655] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.615132][T23655] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4855'. [ 808.875640][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.961325][T23669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.972858][T23669] Invalid ELF header magic: != ELF [ 809.025461][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.236049][T23677] lo speed is unknown, defaulting to 1000 [ 809.246612][T23677] wg1 speed is unknown, defaulting to 1000 [ 809.249777][T23677] »»»»»» speed is unknown, defaulting to 1000 [ 809.331542][T23677] »»»»»» speed is unknown, defaulting to 1000 [ 809.807584][T23684] program syz.4.4864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.915427][T23685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4864'. [ 810.009910][T23687] netlink: 'syz.3.4865': attribute type 1 has an invalid length. [ 810.065544][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.192392][T23691] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4867'. [ 810.194857][T23691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4867'. [ 810.305625][T15205] Bluetooth: hci0: command 0x0405 tx timeout [ 810.699821][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4874'. [ 810.749688][T23709] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4876'. [ 810.752302][T23709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4876'. [ 810.860559][T23714] netlink: 'syz.4.4877': attribute type 4 has an invalid length. [ 810.869709][T23714] netlink: 'syz.4.4877': attribute type 4 has an invalid length. [ 811.108646][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.917716][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.929573][T23748] rtc_cmos 00:05: Alarms can be up to one day in the future [ 812.400104][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.414140][ T1135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.472037][T23728] syz.4.4879: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 812.478365][T23728] CPU: 1 UID: 0 PID: 23728 Comm: syz.4.4879 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 812.478380][T23728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.478387][T23728] Call Trace: [ 812.478391][T23728] [ 812.478396][T23728] dump_stack_lvl+0x16c/0x1f0 [ 812.478430][T23728] warn_alloc+0x24d/0x3a0 [ 812.478444][T23728] ? __pfx_warn_alloc+0x10/0x10 [ 812.478460][T23728] ? __get_vm_area_node+0x1b0/0x2f0 [ 812.478476][T23728] ? __get_vm_area_node+0x1dc/0x2f0 [ 812.478495][T23728] __vmalloc_node_range_noprof+0x1102/0x1530 [ 812.478509][T23728] ? packet_set_ring+0xb13/0x18c0 [ 812.478574][T23728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 812.478585][T23728] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 812.478598][T23728] ? rcu_is_watching+0x12/0xc0 [ 812.478614][T23728] ? trace_kmalloc+0x2d/0xd0 [ 812.478627][T23728] ? __kmalloc_noprof+0x23b/0x4f0 [ 812.478639][T23728] ? packet_set_ring+0xb13/0x18c0 [ 812.478650][T23728] vzalloc_noprof+0x6b/0x90 [ 812.478660][T23728] ? packet_set_ring+0xb13/0x18c0 [ 812.478670][T23728] packet_set_ring+0xb13/0x18c0 [ 812.478686][T23728] packet_setsockopt+0x188e/0x4070 [ 812.478700][T23728] ? __pfx_packet_setsockopt+0x10/0x10 [ 812.478712][T23728] ? __pfx___might_resched+0x10/0x10 [ 812.478728][T23728] ? aa_sk_perm+0x2f5/0xb20 [ 812.478740][T23728] ? __pfx_aa_sk_perm+0x10/0x10 [ 812.478750][T23728] ? find_held_lock+0x2d/0x110 [ 812.478768][T23728] ? __pfx_packet_setsockopt+0x10/0x10 [ 812.478780][T23728] do_sock_setsockopt+0x222/0x480 [ 812.478794][T23728] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 812.478807][T23728] ? lock_acquire+0x2f/0xb0 [ 812.478824][T23728] __sys_setsockopt+0x1a0/0x230 [ 812.478837][T23728] __ia32_sys_setsockopt+0xbc/0x160 [ 812.478846][T23728] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.478862][T23728] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 812.478878][T23728] __do_fast_syscall_32+0x73/0x120 [ 812.478889][T23728] do_fast_syscall_32+0x32/0x80 [ 812.478899][T23728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.478915][T23728] RIP: 0023:0xf7fd2579 [ 812.478924][T23728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 812.478934][T23728] RSP: 002b:00000000f50b455c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 812.478944][T23728] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000107 [ 812.478950][T23728] RDX: 0000000000000005 RSI: 00000000800000c0 RDI: 000000000000001c [ 812.478956][T23728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.478961][T23728] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 812.478967][T23728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.478979][T23728] [ 812.479284][T23728] Mem-Info: [ 812.565897][T23728] active_anon:6636 inactive_anon:3944 isolated_anon:0 [ 812.565897][T23728] active_file:13106 inactive_file:8360 isolated_file:0 [ 812.565897][T23728] unevictable:1768 dirty:635 writeback:0 [ 812.565897][T23728] slab_reclaimable:6117 slab_unreclaimable:71365 [ 812.565897][T23728] mapped:30723 shmem:6597 pagetables:1185 [ 812.565897][T23728] sec_pagetables:316 bounce:0 [ 812.565897][T23728] kernel_misc_reclaimable:0 [ 812.565897][T23728] free:45217 free_pcp:2793 free_cma:0 [ 812.578586][T23728] Node 0 active_anon:888kB inactive_anon:1328kB active_file:0kB inactive_file:964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2684kB dirty:64kB writeback:0kB shmem:3776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9860kB pagetables:1248kB sec_pagetables:1136kB all_unreclaimable? yes [ 812.587012][T23728] Node 1 active_anon:25916kB inactive_anon:14448kB active_file:52424kB inactive_file:32476kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120356kB dirty:2476kB writeback:0kB shmem:22712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:3812kB pagetables:3644kB sec_pagetables:128kB all_unreclaimable? no [ 812.597020][T23728] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 812.607878][T23728] lowmem_reserve[]: 0 297 0 0 0 [ 812.610950][T23728] Node 0 DMA32 free:19084kB boost:0kB min:13672kB low:17088kB high:20504kB reserved_highatomic:4096KB active_anon:1036kB inactive_anon:1328kB active_file:0kB inactive_file:956kB unevictable:3536kB writepending:64kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:1616kB local_pcp:1284kB free_cma:0kB [ 812.620115][T23728] lowmem_reserve[]: 0 0 0 0 0 [ 812.621838][T23728] Node 1 DMA32 free:158936kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:26716kB inactive_anon:14448kB active_file:52424kB inactive_file:32476kB unevictable:3536kB writepending:2476kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8256kB local_pcp:5008kB free_cma:0kB [ 812.635245][T23728] lowmem_reserve[]: 0 0 0 0 0 [ 812.638267][T23728] Node 0 DMA: 88*4kB (U) 26*8kB (U) 13*16kB (U) 38*32kB (U) 11*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2944kB [ 812.644790][T23728] Node 0 DMA32: 5*4kB (UMH) 49*8kB (UMEH) 38*16kB (MH) 80*32kB (UMEH) 69*64kB (UMEH) 26*128kB (UMEH) 12*256kB (UMEH) 5*512kB (UMEH) 2*1024kB (U) 0*2048kB 0*4096kB = 19004kB [ 812.653815][T23728] Node 1 DMA32: 6*4kB (E) 60*8kB (E) 21*16kB (UME) 200*32kB (UME) 329*64kB (UME) 56*128kB (UME) 8*256kB (UME) 6*512kB (UM) 47*1024kB (UM) 24*2048kB (UM) 5*4096kB (M) = 158344kB [ 812.661153][T23728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.666131][T23728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.670766][T23728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.675470][T23728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.679316][T23728] 29043 total pagecache pages [ 812.683534][T23728] 215 pages in swap cache [ 812.687857][T23728] Free swap = 118712kB [ 812.693698][T23728] Total swap = 124996kB [ 812.700698][T23728] 524155 pages RAM [ 812.751381][T23728] 0 pages HighMem/MovableOnly [ 812.764361][T23728] 206992 pages reserved [ 812.765881][T23728] 0 pages cma reserved [ 812.893265][T23785] lo speed is unknown, defaulting to 1000 [ 812.935279][T23785] wg1 speed is unknown, defaulting to 1000 [ 812.937294][T23785] »»»»»» speed is unknown, defaulting to 1000 [ 813.003247][T23785] »»»»»» speed is unknown, defaulting to 1000 [ 813.073341][T23791] 9pnet_virtio: no channels available for device syz [ 813.425272][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.495280][ T5989] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 813.728689][ T5989] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 813.732228][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.734999][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.738290][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.741455][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.744167][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.747473][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.751183][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.770956][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.774182][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.782726][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.785602][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.789208][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.792717][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.795539][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.799310][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.802484][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.819719][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.907171][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.913289][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.916284][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.937939][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.942472][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.945205][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.948291][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.957408][ T5989] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 813.960170][ T5989] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 813.962521][ T5989] usb 7-1: Product: syz [ 813.963720][ T5989] usb 7-1: Manufacturer: syz [ 813.965222][ T5989] usb 7-1: SerialNumber: syz [ 813.968167][ T5989] usb 7-1: config 0 descriptor?? [ 813.973925][ T5989] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 814.066415][T23813] 9pnet_virtio: no channels available for device syz [ 814.070647][T23813] FAULT_INJECTION: forcing a failure. [ 814.070647][T23813] name failslab, interval 1, probability 0, space 0, times 0 [ 814.074356][T23813] CPU: 3 UID: 0 PID: 23813 Comm: syz.5.4890 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 814.074370][T23813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 814.074377][T23813] Call Trace: [ 814.074380][T23813] [ 814.074385][T23813] dump_stack_lvl+0x16c/0x1f0 [ 814.074406][T23813] should_fail_ex+0x50a/0x650 [ 814.074418][T23813] ? fs_reclaim_acquire+0xae/0x150 [ 814.074463][T23813] should_failslab+0xc2/0x120 [ 814.074476][T23813] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 814.074488][T23813] ? alloc_empty_file+0x73/0x1e0 [ 814.074503][T23813] alloc_empty_file+0x73/0x1e0 [ 814.074516][T23813] path_openat+0xe1/0x2d80 [ 814.074527][T23813] ? hlock_class+0x4e/0x130 [ 814.074549][T23813] ? __lock_acquire+0x15a9/0x3c40 [ 814.074564][T23813] ? __pfx_path_openat+0x10/0x10 [ 814.074575][T23813] ? __pfx___lock_acquire+0x10/0x10 [ 814.074586][T23813] ? lock_acquire.part.0+0x11b/0x380 [ 814.074598][T23813] ? find_held_lock+0x2d/0x110 [ 814.074614][T23813] do_filp_open+0x20c/0x470 [ 814.074625][T23813] ? __pfx_do_filp_open+0x10/0x10 [ 814.074635][T23813] ? find_held_lock+0x2d/0x110 [ 814.074657][T23813] ? _raw_spin_unlock+0x28/0x50 [ 814.074672][T23813] ? alloc_fd+0x41f/0x760 [ 814.074685][T23813] do_sys_openat2+0x17a/0x1e0 [ 814.074699][T23813] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.074713][T23813] ? __fget_files+0x206/0x3a0 [ 814.074726][T23813] __ia32_compat_sys_open+0x147/0x1e0 [ 814.074740][T23813] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 814.074756][T23813] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 814.074774][T23813] __do_fast_syscall_32+0x73/0x120 [ 814.074785][T23813] do_fast_syscall_32+0x32/0x80 [ 814.074795][T23813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.074811][T23813] RIP: 0023:0xf7fe7579 [ 814.074819][T23813] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 814.074829][T23813] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 814.074839][T23813] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 000000000014103e [ 814.074845][T23813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 814.074851][T23813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.074856][T23813] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 814.074862][T23813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.074873][T23813] [ 814.148449][T23816] 9pnet_virtio: no channels available for device syz [ 814.239325][T23826] FAULT_INJECTION: forcing a failure. [ 814.239325][T23826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.243677][T23826] CPU: 0 UID: 0 PID: 23826 Comm: syz.5.4893 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 814.243698][T23826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 814.243708][T23826] Call Trace: [ 814.243715][T23826] [ 814.243722][T23826] dump_stack_lvl+0x16c/0x1f0 [ 814.243754][T23826] should_fail_ex+0x50a/0x650 [ 814.243777][T23826] _copy_to_user+0x32/0xd0 [ 814.243808][T23826] simple_read_from_buffer+0xd0/0x160 [ 814.243837][T23826] proc_fail_nth_read+0x198/0x270 [ 814.243863][T23826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.243890][T23826] ? rw_verify_area+0xcf/0x680 [ 814.243915][T23826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.243939][T23826] vfs_read+0x1df/0xbf0 [ 814.243955][T23826] ? __fget_files+0x1fc/0x3a0 [ 814.243973][T23826] ? __pfx___mutex_lock+0x10/0x10 [ 814.243989][T23826] ? __pfx_vfs_read+0x10/0x10 [ 814.244013][T23826] ? __fget_files+0x206/0x3a0 [ 814.244038][T23826] ksys_read+0x12b/0x250 [ 814.244054][T23826] ? __pfx_ksys_read+0x10/0x10 [ 814.244077][T23826] __do_fast_syscall_32+0x73/0x120 [ 814.244096][T23826] do_fast_syscall_32+0x32/0x80 [ 814.244112][T23826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.244140][T23826] RIP: 0023:0xf7fe7579 [ 814.244153][T23826] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 814.244169][T23826] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 814.244185][T23826] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5106620 [ 814.244196][T23826] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 814.244206][T23826] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 814.244216][T23826] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 814.244225][T23826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.244247][T23826] [ 814.348728][T23833] 9pnet_virtio: no channels available for device syz [ 814.461388][T15232] usb 7-1: USB disconnect, device number 38 [ 814.465745][T15232] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 814.476824][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.945321][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.267853][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.515297][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.285440][T23878] netlink: 'syz.3.4903': attribute type 10 has an invalid length. [ 816.319548][T23878] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 816.545445][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.716534][T23889] FAULT_INJECTION: forcing a failure. [ 816.716534][T23889] name failslab, interval 1, probability 0, space 0, times 0 [ 816.722251][T23889] CPU: 1 UID: 0 PID: 23889 Comm: syz.5.4906 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 816.722273][T23889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 816.722283][T23889] Call Trace: [ 816.722290][T23889] [ 816.722297][T23889] dump_stack_lvl+0x16c/0x1f0 [ 816.722328][T23889] should_fail_ex+0x50a/0x650 [ 816.722350][T23889] ? fs_reclaim_acquire+0xae/0x150 [ 816.722377][T23889] should_failslab+0xc2/0x120 [ 816.722398][T23889] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 816.722418][T23889] ? __d_alloc+0x35/0x8c0 [ 816.722441][T23889] __d_alloc+0x35/0x8c0 [ 816.722462][T23889] d_alloc+0x4a/0x1e0 [ 816.722482][T23889] d_alloc_parallel+0xe7/0x12b0 [ 816.722517][T23889] ? __pfx_d_alloc_parallel+0x10/0x10 [ 816.722541][T23889] ? lockdep_init_map_type+0x16d/0x7d0 [ 816.722562][T23889] ? find_held_lock+0x2d/0x110 [ 816.722586][T23889] ? lockdep_init_map_type+0x16d/0x7d0 [ 816.722613][T23889] __lookup_slow+0x194/0x470 [ 816.722636][T23889] ? __pfx___lookup_slow+0x10/0x10 [ 816.722664][T23889] ? walk_component+0x342/0x5b0 [ 816.722706][T23889] ? lookup_fast+0x153/0x5f0 [ 816.722734][T23889] walk_component+0x350/0x5b0 [ 816.722761][T23889] path_lookupat+0x17f/0x770 [ 816.722781][T23889] filename_lookup+0x221/0x5f0 [ 816.722800][T23889] ? __pfx_filename_lookup+0x10/0x10 [ 816.722836][T23889] ? getname_kernel+0x52/0x370 [ 816.722866][T23889] kern_path+0x35/0x50 [ 816.722881][T23889] lookup_bdev+0xd9/0x280 [ 816.722905][T23889] ? __pfx_lookup_bdev+0x10/0x10 [ 816.722929][T23889] ? __pfx___lock_acquire+0x10/0x10 [ 816.722952][T23889] resume_store+0x1d8/0x460 [ 816.722975][T23889] ? __pfx_resume_store+0x10/0x10 [ 816.723002][T23889] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 816.723022][T23889] ? rcu_is_watching+0x12/0xc0 [ 816.723052][T23889] ? __pfx_resume_store+0x10/0x10 [ 816.723073][T23889] kobj_attr_store+0x55/0x80 [ 816.723089][T23889] ? __pfx_kobj_attr_store+0x10/0x10 [ 816.723104][T23889] sysfs_kf_write+0x117/0x170 [ 816.723128][T23889] kernfs_fop_write_iter+0x33d/0x500 [ 816.723148][T23889] ? __pfx_sysfs_kf_write+0x10/0x10 [ 816.723172][T23889] vfs_write+0x5ae/0x1150 [ 816.723188][T23889] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 816.723210][T23889] ? __pfx___mutex_lock+0x10/0x10 [ 816.723225][T23889] ? __pfx_vfs_write+0x10/0x10 [ 816.723258][T23889] ksys_write+0x12b/0x250 [ 816.723274][T23889] ? __pfx_ksys_write+0x10/0x10 [ 816.723297][T23889] __do_fast_syscall_32+0x73/0x120 [ 816.723314][T23889] do_fast_syscall_32+0x32/0x80 [ 816.723330][T23889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 816.723356][T23889] RIP: 0023:0xf7fe7579 [ 816.723368][T23889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 816.723383][T23889] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 816.723398][T23889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 816.723408][T23889] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.723417][T23889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.723426][T23889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 816.723435][T23889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.723457][T23889] [ 817.307436][T23906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4911'. [ 817.312552][T23907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4911'. [ 817.672698][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.681208][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.008399][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.705372][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.809739][T23944] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4920'. [ 818.812322][T23944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4920'. [ 819.106723][T23930] Set syz1 is full, maxelem 65536 reached [ 819.537493][T23973] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4930'. [ 819.565199][T23973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4930'. [ 819.876521][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.956772][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.035728][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.038786][ T1238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.315207][T24011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4939'. [ 821.318185][T24011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4939'. [ 821.726981][T24020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 821.996347][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.374980][T24035] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4948'. [ 822.377659][T24035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4948'. [ 822.946089][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.344702][T24057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.349757][T24057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.352763][T24057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.357037][T24057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.397085][T24058] 9pnet_virtio: no channels available for device syz [ 823.439767][T24060] FAULT_INJECTION: forcing a failure. [ 823.439767][T24060] name failslab, interval 1, probability 0, space 0, times 0 [ 823.443623][T24060] CPU: 3 UID: 0 PID: 24060 Comm: syz.5.4954 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 823.443637][T24060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 823.443643][T24060] Call Trace: [ 823.443647][T24060] [ 823.443652][T24060] dump_stack_lvl+0x16c/0x1f0 [ 823.443674][T24060] should_fail_ex+0x50a/0x650 [ 823.443687][T24060] ? fs_reclaim_acquire+0xae/0x150 [ 823.443703][T24060] should_failslab+0xc2/0x120 [ 823.443716][T24060] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 823.443729][T24060] ? __alloc_skb+0x2b3/0x380 [ 823.443742][T24060] __alloc_skb+0x2b3/0x380 [ 823.443752][T24060] ? __pfx___alloc_skb+0x10/0x10 [ 823.443762][T24060] ? lock_acquire+0x2f/0xb0 [ 823.443777][T24060] netlink_alloc_large_skb+0x69/0x130 [ 823.443795][T24060] netlink_sendmsg+0x689/0xd70 [ 823.443811][T24060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.443830][T24060] ____sys_sendmsg+0x9ae/0xb40 [ 823.443845][T24060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.443858][T24060] ? get_compat_msghdr+0x11b/0x170 [ 823.443878][T24060] ___sys_sendmsg+0x135/0x1e0 [ 823.443890][T24060] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.443905][T24060] ? __pfx_lock_release+0x10/0x10 [ 823.443916][T24060] ? trace_lock_acquire+0x14e/0x1f0 [ 823.443930][T24060] ? __fget_files+0x206/0x3a0 [ 823.443944][T24060] __sys_sendmsg+0x16e/0x220 [ 823.443954][T24060] ? __pfx___sys_sendmsg+0x10/0x10 [ 823.443972][T24060] __do_fast_syscall_32+0x73/0x120 [ 823.443983][T24060] do_fast_syscall_32+0x32/0x80 [ 823.443993][T24060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.444010][T24060] RIP: 0023:0xf7fe7579 [ 823.444019][T24060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 823.444028][T24060] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 823.444038][T24060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 823.444044][T24060] RDX: 00000000000c0010 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.444050][T24060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.444055][T24060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 823.444061][T24060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.444073][T24060] [ 823.444870][T24060] 9pnet_virtio: no channels available for device syz [ 823.985340][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.075513][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.524846][T24068] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4957'. [ 824.844433][T24068] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4957'. [ 824.868305][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.025406][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.287862][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 825.358208][T24092] 9pnet: Unknown protocol version 9p2000.u0x0000000000000003 [ 826.065246][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.785394][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.026560][T24134] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4967'. [ 827.029309][T24134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4967'. [ 827.105290][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.155266][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.159327][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.035153][T23057] Bluetooth: hci2: command 0x0405 tx timeout [ 829.195311][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.825518][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.225476][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.275362][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.305748][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.545716][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.355357][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.358302][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.385584][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.476698][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.482643][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.425572][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.587887][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.856995][T24160] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4971'. [ 835.859844][T24160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4971'. [ 836.031312][T23057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 836.036297][T23057] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 836.039337][T23057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 836.044256][T23057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 836.047571][T23057] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 836.051132][T23057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 836.076990][T24163] lo speed is unknown, defaulting to 1000 [ 836.079732][T24163] wg1 speed is unknown, defaulting to 1000 [ 836.081294][T24165] lo speed is unknown, defaulting to 1000 [ 836.081801][T24163] »»»»»» speed is unknown, defaulting to 1000 [ 836.085842][T24165] wg1 speed is unknown, defaulting to 1000 [ 836.128555][T24163] »»»»»» speed is unknown, defaulting to 1000 [ 836.129059][T24165] »»»»»» speed is unknown, defaulting to 1000 [ 836.151968][T24167] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 836.165200][T24167] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 836.202683][T24165] »»»»»» speed is unknown, defaulting to 1000 [ 836.225923][T24163] chnl_net:caif_netlink_parms(): no params data found [ 836.309044][T24163] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.312190][T24163] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.315509][T24163] bridge_slave_0: entered allmulticast mode [ 836.318894][T24163] bridge_slave_0: entered promiscuous mode [ 836.323418][T24163] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.329018][T24163] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.332153][T24163] bridge_slave_1: entered allmulticast mode [ 836.336034][T24163] bridge_slave_1: entered promiscuous mode [ 836.371573][T24163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.376344][T24163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.424738][T24163] team0: Port device team_slave_0 added [ 836.431390][T24163] team0: Port device team_slave_1 added [ 836.458022][T24163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.460022][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.470122][T24163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.475307][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.476176][T24163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.480656][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.490186][T24163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.520405][T24163] hsr_slave_0: entered promiscuous mode [ 836.522836][T24163] hsr_slave_1: entered promiscuous mode [ 836.524708][T24163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.527223][T24163] Cannot create hsr debugfs directory [ 836.621407][T24163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.719868][T24163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.816474][T24163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.889731][T24163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.982973][T24163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 836.986847][T24163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 836.990627][T24163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 836.994125][T24163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 837.017457][T24163] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.019563][T24163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.021844][T24163] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.023836][T24163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.054584][T24163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.065610][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.069640][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.086976][T24163] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.091744][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.093811][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.099436][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.101768][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.127051][T24163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.197419][T24163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.219641][T24163] veth0_vlan: entered promiscuous mode [ 837.224018][T24163] veth1_vlan: entered promiscuous mode [ 837.237527][T24163] veth0_macvtap: entered promiscuous mode [ 837.240774][T24163] veth1_macvtap: entered promiscuous mode [ 837.247067][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.250005][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.252887][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.256220][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.259023][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.261937][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.265663][T24163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.270699][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.273619][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.276996][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.279955][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.282681][T24163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.285680][T24163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.289210][T24163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.300364][T24163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.303017][T24163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.305791][T24163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.311336][T24163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.377224][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.379512][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.392411][ T560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.394701][ T560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.491963][T24194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4976'. [ 837.494573][T24194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4976'. [ 837.505555][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.665519][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.145353][T15205] Bluetooth: hci1: command tx timeout [ 838.303096][T24204] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4978'. [ 838.305789][T24204] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4978'. [ 838.396480][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.425595][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.657680][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4984'. [ 839.731665][T24227] team0 (unregistering): Port device team_slave_0 removed [ 839.742099][T24227] team0 (unregistering): Port device team_slave_1 removed [ 840.055553][T24234] lo speed is unknown, defaulting to 1000 [ 840.058640][T24234] wg1 speed is unknown, defaulting to 1000 [ 840.061310][T24234] »»»»»» speed is unknown, defaulting to 1000 [ 840.098150][T24234] »»»»»» speed is unknown, defaulting to 1000 [ 840.109119][T24235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 840.111857][T24235] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 840.228009][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.235463][T15205] Bluetooth: hci1: command tx timeout [ 840.293102][T24238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4987'. [ 840.295778][T24238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4987'. [ 840.465342][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.565326][T24243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4997'. [ 840.623315][T24244] siw: device registration error -23 [ 840.695096][T24244] lo speed is unknown, defaulting to 1000 [ 840.715743][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.722462][T24244] wg1 speed is unknown, defaulting to 1000 [ 840.734891][T24244] »»»»»» speed is unknown, defaulting to 1000 [ 841.223448][T24244] »»»»»» speed is unknown, defaulting to 1000 [ 841.505366][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.913242][T24264] __nla_validate_parse: 1 callbacks suppressed [ 841.913259][T24264] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4993'. [ 841.920389][T24264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4993'. [ 842.003996][T24270] siw: device registration error -23 [ 842.050144][T24269] siw: device registration error -23 [ 842.182646][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5002'. [ 842.238745][T24269] lo speed is unknown, defaulting to 1000 [ 842.240804][T24269] wg1 speed is unknown, defaulting to 1000 [ 842.242948][T24269] »»»»»» speed is unknown, defaulting to 1000 [ 842.305479][T15205] Bluetooth: hci1: command tx timeout [ 842.558496][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.561873][T24270] lo speed is unknown, defaulting to 1000 [ 842.566424][T24270] wg1 speed is unknown, defaulting to 1000 [ 842.698464][T24269] »»»»»» speed is unknown, defaulting to 1000 [ 842.700983][T24270] »»»»»» speed is unknown, defaulting to 1000 [ 842.782168][T24274] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4995'. [ 842.784734][T24274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4995'. [ 842.861278][T24270] »»»»»» speed is unknown, defaulting to 1000 [ 843.237829][T24287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4999'. [ 843.240394][T24287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4999'. [ 843.427872][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.595323][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.598040][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.322993][T24307] siw: device registration error -23 [ 844.371064][T24307] lo speed is unknown, defaulting to 1000 [ 844.378327][T24307] wg1 speed is unknown, defaulting to 1000 [ 844.381600][T24307] »»»»»» speed is unknown, defaulting to 1000 [ 844.405174][T15205] Bluetooth: hci1: command tx timeout [ 844.625661][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.713579][T24307] »»»»»» speed is unknown, defaulting to 1000 [ 845.650619][T24319] siw: device registration error -23 [ 845.660792][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5009'. [ 845.666132][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.690384][T24319] lo speed is unknown, defaulting to 1000 [ 845.692975][T24319] wg1 speed is unknown, defaulting to 1000 [ 845.695680][T24319] »»»»»» speed is unknown, defaulting to 1000 [ 845.804355][T24319] »»»»»» speed is unknown, defaulting to 1000 [ 845.909385][T24326] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5011'. [ 845.918214][T24326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5011'. [ 845.926507][T24328] lo speed is unknown, defaulting to 1000 [ 845.929118][T24328] wg1 speed is unknown, defaulting to 1000 [ 845.931176][T24328] »»»»»» speed is unknown, defaulting to 1000 [ 845.986890][T24329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 845.989690][T24329] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 845.994861][T24328] »»»»»» speed is unknown, defaulting to 1000 [ 846.010014][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.465407][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.705561][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.745263][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.824220][T24361] siw: device registration error -23 [ 847.876577][T24361] lo speed is unknown, defaulting to 1000 [ 847.884136][T24361] wg1 speed is unknown, defaulting to 1000 [ 847.892311][T24361] »»»»»» speed is unknown, defaulting to 1000 [ 848.231565][T24361] »»»»»» speed is unknown, defaulting to 1000 [ 848.630248][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.952866][T24380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5031'. [ 848.956752][T24380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5031'. [ 849.196099][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.360636][T24386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5025'. [ 849.363389][T24386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5025'. [ 849.862382][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.950337][T24392] lo speed is unknown, defaulting to 1000 [ 849.954041][T24392] wg1 speed is unknown, defaulting to 1000 [ 849.959254][T24392] »»»»»» speed is unknown, defaulting to 1000 [ 849.979509][T24398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 849.982237][T24398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 850.019615][T24392] »»»»»» speed is unknown, defaulting to 1000 [ 850.890262][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.111004][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.363010][T24455] siw: device registration error -23 [ 851.428467][T24455] lo speed is unknown, defaulting to 1000 [ 851.433635][T24455] wg1 speed is unknown, defaulting to 1000 [ 851.441800][T24455] »»»»»» speed is unknown, defaulting to 1000 [ 851.572728][T24470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 851.718801][T24455] »»»»»» speed is unknown, defaulting to 1000 [ 851.915480][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.229587][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.284368][T24484] siw: device registration error -23 [ 852.367530][T24484] lo speed is unknown, defaulting to 1000 [ 852.372018][T24484] wg1 speed is unknown, defaulting to 1000 [ 852.378476][T24484] »»»»»» speed is unknown, defaulting to 1000 [ 852.591530][T24484] »»»»»» speed is unknown, defaulting to 1000 [ 852.942930][T24494] siw: device registration error -23 [ 852.983214][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.049514][T24494] lo speed is unknown, defaulting to 1000 [ 853.057085][T24494] wg1 speed is unknown, defaulting to 1000 [ 853.075568][T24494] »»»»»» speed is unknown, defaulting to 1000 [ 853.284132][T24494] »»»»»» speed is unknown, defaulting to 1000 [ 853.665383][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.871707][T24519] lo speed is unknown, defaulting to 1000 [ 853.873808][T24519] wg1 speed is unknown, defaulting to 1000 [ 853.876222][T24519] »»»»»» speed is unknown, defaulting to 1000 [ 853.939289][T24520] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 853.945389][T24520] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 853.973649][T24519] »»»»»» speed is unknown, defaulting to 1000 [ 853.985449][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.988522][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.307422][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.961779][T24529] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5050'. [ 854.964218][T24529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5050'. [ 855.026112][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.778116][T24544] program syz.2.5054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.847483][T23216] kernel write not supported for file /sg0 (pid: 23216 comm: kworker/2:3) [ 856.075729][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.153736][T24552] siw: device registration error -23 [ 856.160619][T24552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5058'. [ 856.193960][T24552] lo speed is unknown, defaulting to 1000 [ 856.198368][T24552] wg1 speed is unknown, defaulting to 1000 [ 856.201050][T24552] »»»»»» speed is unknown, defaulting to 1000 [ 856.243164][T24552] »»»»»» speed is unknown, defaulting to 1000 [ 856.251579][T24555] siw: device registration error -23 [ 856.614772][T24555] lo speed is unknown, defaulting to 1000 [ 856.619669][T24555] wg1 speed is unknown, defaulting to 1000 [ 856.643931][T24555] »»»»»» speed is unknown, defaulting to 1000 [ 856.876350][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.035433][T24555] »»»»»» speed is unknown, defaulting to 1000 [ 857.107459][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.205023][T24568] lo speed is unknown, defaulting to 1000 [ 857.208316][T24568] wg1 speed is unknown, defaulting to 1000 [ 857.210907][T24568] »»»»»» speed is unknown, defaulting to 1000 [ 857.238125][T24569] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 857.240791][T24569] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 857.279432][T24568] »»»»»» speed is unknown, defaulting to 1000 [ 857.345654][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.605670][T24579] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5065'. [ 857.608205][T24579] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5065'. [ 858.156510][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.452744][T24587] program syz.4.5068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.521746][T24590] 9pnet_fd: Insufficient options for proto=fd [ 859.185392][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.188799][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.436594][T24602] siw: device registration error -23 [ 859.468900][T24602] lo speed is unknown, defaulting to 1000 [ 859.471918][T24602] wg1 speed is unknown, defaulting to 1000 [ 859.474221][T24602] »»»»»» speed is unknown, defaulting to 1000 [ 860.065649][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.157212][T24602] »»»»»» speed is unknown, defaulting to 1000 [ 860.239181][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.639922][T24620] random: crng reseeded on system resumption [ 861.355781][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.538008][T24664] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5077'. [ 861.541261][T24664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5077'. [ 861.985731][T24648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.393720][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.538013][T24675] program syz.2.5079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.627316][T24676] 9pnet_fd: Insufficient options for proto=fd [ 863.105394][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.173896][T24687] siw: device registration error -23 [ 863.209282][T24687] lo speed is unknown, defaulting to 1000 [ 863.211823][T24687] wg1 speed is unknown, defaulting to 1000 [ 863.214114][T24687] »»»»»» speed is unknown, defaulting to 1000 [ 863.249500][T24687] »»»»»» speed is unknown, defaulting to 1000 [ 863.425831][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.907544][T24696] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 864.115136][ T5989] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 864.265186][ T5989] usb 10-1: Using ep0 maxpacket: 8 [ 864.268750][ T5989] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 864.272218][ T5989] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 864.275192][ T5989] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 864.278314][ T5989] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.281959][ T5989] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.284458][ T5989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.323297][ T39] audit: type=1326 audit(2000000058.709:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.2.5084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7fc00000 [ 864.366934][T24705] vivid-004: ================= START STATUS ================= [ 864.372248][T24705] vivid-004: Radio HW Seek Mode: Bounded [ 864.376073][T24705] vivid-004: Radio Programmable HW Seek: false [ 864.378408][T24705] vivid-004: RDS Rx I/O Mode: Block I/O [ 864.379975][T24705] vivid-004: Generate RBDS Instead of RDS: false [ 864.381821][T24705] vivid-004: RDS Reception: true [ 864.383246][T24705] vivid-004: RDS Program Type: 0 inactive [ 864.384835][T24705] vivid-004: RDS PS Name: inactive [ 864.390569][T24705] vivid-004: RDS Radio Text: inactive [ 864.392226][T24705] vivid-004: RDS Traffic Announcement: false inactive [ 864.399198][T24705] vivid-004: RDS Traffic Program: false inactive [ 864.403518][T24705] vivid-004: RDS Music: false inactive [ 864.407645][T24705] vivid-004: ================== END STATUS ================== [ 864.465405][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.466792][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.493892][T24698] fuse: Unknown parameter 'woup_id' [ 864.497845][ T5989] usb 10-1: GET_CAPABILITIES returned 0 [ 864.499494][ T5989] usbtmc 10-1:16.0: can't read capabilities [ 864.510600][T24710] 9p: Unknown Cache mode or invalid value fscach [ 864.668614][T24714] program syz.2.5093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 864.707701][T24698] usb 10-1: usbtmc_ioctl_clear_in_halt returned -32 [ 864.711381][ T8] usb 10-1: USB disconnect, device number 9 [ 864.741444][T24715] 9pnet_fd: Insufficient options for proto=fd [ 865.197851][ T1135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.247432][T24718] siw: device registration error -23 [ 865.273291][T24718] lo speed is unknown, defaulting to 1000 [ 865.279085][T24718] wg1 speed is unknown, defaulting to 1000 [ 865.283478][T24718] »»»»»» speed is unknown, defaulting to 1000 [ 865.347808][T24718] »»»»»» speed is unknown, defaulting to 1000 [ 865.518534][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.609727][T24728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5096'. [ 865.644185][T24727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5097'. [ 866.462211][T24739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5100'. [ 866.464752][T24739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5100'. [ 866.491371][T24741] random: crng reseeded on system resumption [ 866.548633][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.123589][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.148357][T24748] lo speed is unknown, defaulting to 1000 [ 867.150526][T24748] wg1 speed is unknown, defaulting to 1000 [ 867.153250][T24748] »»»»»» speed is unknown, defaulting to 1000 [ 867.178533][T24750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 867.181389][T24750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 867.241145][T24748] »»»»»» speed is unknown, defaulting to 1000 [ 867.467622][T24758] program syz.5.5105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.536939][T24759] 9pnet_fd: Insufficient options for proto=fd [ 867.585587][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.225621][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.330041][T24761] program syz.4.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.408670][T24765] 9pnet_fd: Insufficient options for proto=fd [ 868.625423][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.368643][T24775] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5108'. [ 869.371272][T24775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5108'. [ 869.555192][T24781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5109'. [ 869.558003][T24781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5109'. [ 869.667175][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.667370][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.670020][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.671534][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.558521][T24815] random: crng reseeded on system resumption [ 870.721330][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.955512][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.262348][T24833] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5115'. [ 871.264901][T24833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5115'. [ 871.338564][ T5312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 871.343453][ T5312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 871.346763][ T5312] Bluetooth: hci1: command 0x0405 tx timeout [ 871.350086][T24835] lo speed is unknown, defaulting to 1000 [ 871.350660][ T5312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 871.352719][T24835] wg1 speed is unknown, defaulting to 1000 [ 871.355236][ T5312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 871.363556][T24835] »»»»»» speed is unknown, defaulting to 1000 [ 871.365498][T24838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 871.369057][T24838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 871.411614][T24836] lo speed is unknown, defaulting to 1000 [ 871.413861][T24836] wg1 speed is unknown, defaulting to 1000 [ 871.417636][T24839] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 871.420371][T24839] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 871.431785][T24835] »»»»»» speed is unknown, defaulting to 1000 [ 871.460376][T24836] »»»»»» speed is unknown, defaulting to 1000 [ 871.498093][T24836] »»»»»» speed is unknown, defaulting to 1000 [ 871.601196][ T1135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.651200][T24836] chnl_net:caif_netlink_parms(): no params data found [ 871.691862][ T1135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.754318][T24836] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.758157][T24836] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.760348][T24836] bridge_slave_0: entered allmulticast mode [ 871.762651][T24836] bridge_slave_0: entered promiscuous mode [ 871.784212][ T1135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.790993][T24836] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.793065][T24836] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.795285][T24836] bridge_slave_1: entered allmulticast mode [ 871.797482][T24836] bridge_slave_1: entered promiscuous mode [ 871.817832][T24836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.822131][T24836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.850202][T24836] team0: Port device team_slave_0 added [ 871.871927][ T1135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.881295][T24836] team0: Port device team_slave_1 added [ 871.901955][T24836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.903902][T24836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.912913][T24836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.918413][T24836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.921169][T24836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.931116][T24836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.961674][T24836] hsr_slave_0: entered promiscuous mode [ 871.963544][T24836] hsr_slave_1: entered promiscuous mode [ 871.965346][T24836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.967242][T24836] Cannot create hsr debugfs directory [ 872.023656][ T1135] bridge_slave_1: left allmulticast mode [ 872.025958][ T1135] bridge_slave_1: left promiscuous mode [ 872.027677][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.033032][ T1135] bridge_slave_0: left allmulticast mode [ 872.034746][ T1135] bridge_slave_0: left promiscuous mode [ 872.037215][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.688682][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.696876][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.715828][ T1135] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 872.740959][ T1135] bond0 (unregistering): Released all slaves [ 872.830001][T24857] siw: device registration error -23 [ 872.862534][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 872.865476][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.951150][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.056837][T24857] lo speed is unknown, defaulting to 1000 [ 873.058886][T24857] wg1 speed is unknown, defaulting to 1000 [ 873.061038][T24857] »»»»»» speed is unknown, defaulting to 1000 [ 873.086785][T24836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.090994][T24836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.095657][T24836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.118091][T24836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 873.203820][T24836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.213062][T24836] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.260843][T23189] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.262931][T23189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.281400][T24648] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.283430][T24648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.354535][T24857] »»»»»» speed is unknown, defaulting to 1000 [ 873.425161][T24838] Bluetooth: hci3: command tx timeout [ 873.434070][ T1135] hsr_slave_0: left promiscuous mode [ 873.463540][ T1135] hsr_slave_1: left promiscuous mode [ 873.466137][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.468852][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.472448][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.479132][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.528847][ T1135] veth1_macvtap: left promiscuous mode [ 873.530503][ T1135] veth0_macvtap: left promiscuous mode [ 873.532132][ T1135] veth1_vlan: left promiscuous mode [ 873.535473][ T1135] veth0_vlan: left promiscuous mode [ 873.672412][T24877] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 873.905343][T24882] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5123'. [ 873.907880][T24882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5123'. [ 873.987432][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.795639][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.512002][T24838] Bluetooth: hci3: command tx timeout [ 875.959465][T24836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.067806][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.172547][T24836] veth0_vlan: entered promiscuous mode [ 876.186191][T24836] veth1_vlan: entered promiscuous mode [ 876.271238][T24836] veth0_macvtap: entered promiscuous mode [ 876.274547][T24836] veth1_macvtap: entered promiscuous mode [ 876.301429][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.334996][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.341164][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.352655][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.357127][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.366111][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.392960][T24836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.396755][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.399761][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.406482][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.409338][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.412042][T24836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.414862][T24836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.484962][T24836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.495830][T24836] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.498301][T24836] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.500685][T24836] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.503152][T24836] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.572008][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.574257][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.591800][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.598887][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.748493][T24928] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5127'. [ 876.751333][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5127'. [ 876.812490][T24931] random: crng reseeded on system resumption [ 877.357176][T24954] lo speed is unknown, defaulting to 1000 [ 877.359494][T24954] wg1 speed is unknown, defaulting to 1000 [ 877.361666][T24954] »»»»»» speed is unknown, defaulting to 1000 [ 877.441981][T24954] »»»»»» speed is unknown, defaulting to 1000 [ 877.470838][T24954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 877.474106][T24954] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 877.585242][T24838] Bluetooth: hci3: command tx timeout [ 877.986057][T23190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.989794][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.993506][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.997659][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.222985][T24976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5131'. [ 878.228645][T24976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5131'. [ 878.364593][T24980] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 878.631094][ T560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.793425][T24989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5135'. [ 878.796121][T24989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5135'. [ 878.969837][T25002] program syz.6.5139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.025469][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.074263][T25004] 9pnet_fd: Insufficient options for proto=fd [ 879.277472][T25012] program syz.2.5142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.290587][T25009] siw: device registration error -23 [ 879.356929][T25013] 9pnet_fd: Insufficient options for proto=fd [ 879.369471][T25009] lo speed is unknown, defaulting to 1000 [ 879.372933][T25009] wg1 speed is unknown, defaulting to 1000 [ 879.378882][T25009] »»»»»» speed is unknown, defaulting to 1000 [ 879.665322][T24838] Bluetooth: hci3: command tx timeout [ 879.686393][T25009] »»»»»» speed is unknown, defaulting to 1000 [ 879.950447][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5144'. [ 879.953059][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5144'. [ 879.958784][T25022] netlink: 'syz.5.5144': attribute type 13 has an invalid length. [ 879.961085][T25022] netlink: 'syz.5.5144': attribute type 11 has an invalid length. [ 880.070801][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.128130][T25026] overlayfs: conflicting options: userxattr,metacopy=on [ 880.177439][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.180457][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.182715][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.184836][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.187018][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.189113][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.191204][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.193275][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.195501][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.197603][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.199594][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.201690][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.203765][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.205950][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.208099][ T25] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 880.214200][ T25] hid-generic 00A0:0006:0003.000F: hidraw1: HID v0.05 Device [syz1] on syz0 [ 880.292585][T25033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5147'. [ 880.295354][T25033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5147'. [ 880.354425][T25036] FAULT_INJECTION: forcing a failure. [ 880.354425][T25036] name failslab, interval 1, probability 0, space 0, times 0 [ 880.358532][T25036] CPU: 3 UID: 0 PID: 25036 Comm: syz.2.5148 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 880.358546][T25036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 880.358552][T25036] Call Trace: [ 880.358583][T25036] [ 880.358587][T25036] dump_stack_lvl+0x16c/0x1f0 [ 880.358829][T25036] should_fail_ex+0x50a/0x650 [ 880.358878][T25036] ? fs_reclaim_acquire+0xae/0x150 [ 880.358895][T25036] should_failslab+0xc2/0x120 [ 880.358909][T25036] __kmalloc_noprof+0xce/0x4f0 [ 880.358920][T25036] ? __pfx_d_absolute_path+0x10/0x10 [ 880.358932][T25036] ? tomoyo_encode2+0x100/0x3e0 [ 880.358947][T25036] tomoyo_encode2+0x100/0x3e0 [ 880.358960][T25036] tomoyo_realpath_from_path+0x1a7/0x710 [ 880.358976][T25036] tomoyo_mount_acl+0x1af/0x880 [ 880.358987][T25036] ? hlock_class+0x4e/0x130 [ 880.359003][T25036] ? __lock_acquire+0x15a9/0x3c40 [ 880.359017][T25036] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 880.359030][T25036] ? __pfx___lock_acquire+0x10/0x10 [ 880.359042][T25036] ? stack_trace_save+0x95/0xd0 [ 880.359058][T25036] ? __pfx_lock_release+0x10/0x10 [ 880.359076][T25036] ? trace_lock_acquire+0x14e/0x1f0 [ 880.359085][T25036] ? tomoyo_mount_permission+0x149/0x420 [ 880.359097][T25036] ? lock_acquire+0x2f/0xb0 [ 880.359150][T25036] ? tomoyo_mount_permission+0x149/0x420 [ 880.359202][T25036] tomoyo_mount_permission+0x16e/0x420 [ 880.359216][T25036] ? tomoyo_mount_permission+0x149/0x420 [ 880.359279][T25036] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 880.359310][T25036] ? get_current_fs_domain+0x184/0x1f0 [ 880.359335][T25036] security_sb_mount+0x9b/0x260 [ 880.359359][T25036] path_mount+0x129/0x1f00 [ 880.359377][T25036] ? kmem_cache_free+0x2e2/0x4d0 [ 880.359394][T25036] ? __pfx_path_mount+0x10/0x10 [ 880.359413][T25036] ? putname+0x13c/0x180 [ 880.359434][T25036] __ia32_sys_mount+0x28d/0x310 [ 880.359451][T25036] ? __pfx___ia32_sys_mount+0x10/0x10 [ 880.359476][T25036] __do_fast_syscall_32+0x73/0x120 [ 880.359517][T25036] do_fast_syscall_32+0x32/0x80 [ 880.359531][T25036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 880.359556][T25036] RIP: 0023:0xf743e579 [ 880.359569][T25036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 880.359584][T25036] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 880.359622][T25036] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080001340 [ 880.359630][T25036] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 00000000800003c0 [ 880.359636][T25036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.359642][T25036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 880.359648][T25036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.359660][T25036] [ 880.359677][T25036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 881.181754][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.838628][T23190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.499974][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.614342][T25078] netlink: 'syz.2.5160': attribute type 3 has an invalid length. [ 882.688909][T25082] tc_dump_action: action bad kind [ 882.960645][T25101] 9pnet_fd: Insufficient options for proto=fd [ 883.414485][T25113] FAULT_INJECTION: forcing a failure. [ 883.414485][T25113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.418868][T25113] CPU: 2 UID: 0 PID: 25113 Comm: syz.2.5168 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 883.418882][T25113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 883.418888][T25113] Call Trace: [ 883.418892][T25113] [ 883.418896][T25113] dump_stack_lvl+0x16c/0x1f0 [ 883.418918][T25113] should_fail_ex+0x50a/0x650 [ 883.418932][T25113] _copy_to_user+0x32/0xd0 [ 883.418947][T25113] simple_read_from_buffer+0xd0/0x160 [ 883.418964][T25113] proc_fail_nth_read+0x198/0x270 [ 883.418979][T25113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 883.418994][T25113] ? rw_verify_area+0xcf/0x680 [ 883.419009][T25113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 883.419023][T25113] vfs_read+0x1df/0xbf0 [ 883.419033][T25113] ? __fget_files+0x1fc/0x3a0 [ 883.419044][T25113] ? __pfx___mutex_lock+0x10/0x10 [ 883.419054][T25113] ? __pfx_vfs_read+0x10/0x10 [ 883.419067][T25113] ? __fget_files+0x206/0x3a0 [ 883.419081][T25113] ksys_read+0x12b/0x250 [ 883.419090][T25113] ? __pfx_ksys_read+0x10/0x10 [ 883.419103][T25113] __do_fast_syscall_32+0x73/0x120 [ 883.419115][T25113] do_fast_syscall_32+0x32/0x80 [ 883.419124][T25113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.419141][T25113] RIP: 0023:0xf743e579 [ 883.419148][T25113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 883.419158][T25113] RSP: 002b:00000000f50c6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 883.419169][T25113] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50c6620 [ 883.419174][T25113] RDX: 000000000000000f RSI: 00000000f742cff4 RDI: 0000000000000000 [ 883.419180][T25113] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 883.419186][T25113] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 883.419191][T25113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.419202][T25113] [ 883.507881][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.845273][T25125] trusted_key: encrypted_key: keyword 'bew' not recognized [ 883.939788][T25131] __nla_validate_parse: 2 callbacks suppressed [ 883.939799][T25131] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5173'. [ 883.944166][T25131] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 884.107436][T25142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5177'. [ 884.110062][T25142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5177'. [ 884.144968][T25146] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5178'. [ 884.147619][T25146] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5178'. [ 884.173085][T25148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5179'. [ 884.175880][T25148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5179'. [ 884.386382][T24648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.657777][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.308288][T25175] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5187'. [ 885.310854][T25175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5187'. [ 885.666582][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.182400][T25193] mmap: syz.6.5191 (25193): VmData 37376000 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 886.705546][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.725658][T25202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.945770][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.755497][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.225990][T23190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.232100][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.316235][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.318882][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.323100][T25241] tc_dump_action: action bad kind [ 888.785337][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.895807][ T8] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 889.065187][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 889.069949][ T8] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 889.072285][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.074876][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.079342][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.081977][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.095232][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.097738][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.318540][ T39] audit: type=1326 audit(2000000339.711:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.326677][ T39] audit: type=1326 audit(2000000339.711:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.333643][ T39] audit: type=1326 audit(2000000339.721:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.340451][ T39] audit: type=1326 audit(2000000339.721:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.345912][ T39] audit: type=1326 audit(2000000339.721:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.351150][ T39] audit: type=1326 audit(2000000339.721:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.356672][ T39] audit: type=1326 audit(2000000339.721:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25257 comm="syz.4.5204" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 889.524717][T25295] can: request_module (can-proto-0) failed. [ 889.592992][ T8] usb 9-1: usb_control_msg returned -32 [ 889.597443][ T8] usbtmc 9-1:16.0: can't read capabilities [ 889.835447][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.932552][T25303] program syz.2.5211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.954285][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 889.956862][T25306] program syz.6.5212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.979283][ T56] kernel write not supported for file /sg0 (pid: 56 comm: kworker/3:1) [ 890.145931][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.377787][T25313] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5213'. [ 890.381166][T25313] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5213'. [ 890.555247][ T39] audit: type=1326 audit(2000000340.941:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25319 comm="syz.6.5216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 890.561597][ T39] audit: type=1326 audit(2000000340.941:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25319 comm="syz.6.5216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 890.568664][ T39] audit: type=1326 audit(2000000340.941:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25319 comm="syz.6.5216" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 891.494516][T25338] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5222'. [ 891.498238][T25338] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5222'. [ 891.549840][T25341] program syz.2.5223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.558604][T23216] usb 9-1: USB disconnect, device number 32 [ 891.568487][T25341] 9pnet_fd: Insufficient options for proto=fd [ 891.907469][T15232] net_ratelimit: 2 callbacks suppressed [ 891.907481][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.075605][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.083988][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.101342][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.335213][T24838] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 892.682875][T25370] program syz.4.5233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.696136][T25370] 9pnet_fd: Insufficient options for proto=fd [ 892.739536][T25373] /dev/nullb0: Can't open blockdev [ 892.957342][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.115273][T23216] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 893.250364][T25391] fuse: Unknown parameter 'grou' [ 893.275419][T23216] usb 10-1: Using ep0 maxpacket: 8 [ 893.279303][T23216] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 893.281655][T23216] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.284661][T23216] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.290130][T23216] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.293047][T23216] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.297130][T23216] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 893.299716][T23216] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.383673][T25395] lo speed is unknown, defaulting to 1000 [ 893.385858][T25395] wg1 speed is unknown, defaulting to 1000 [ 893.388249][T25395] »»»»»» speed is unknown, defaulting to 1000 [ 893.423092][T25395] »»»»»» speed is unknown, defaulting to 1000 [ 893.493605][T25395] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 893.496462][T25395] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 893.507970][T23216] usb 10-1: usb_control_msg returned -32 [ 893.509731][T23216] usbtmc 10-1:16.0: can't read capabilities [ 893.575583][T25399] can0: slcan on ttyS3. [ 893.646023][T25380] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 893.848029][ T25] usb 10-1: USB disconnect, device number 10 [ 893.985391][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.286252][T25393] can0 (unregistered): slcan off ttyS3. [ 894.465317][T25270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.035466][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.438022][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'. [ 895.942440][T25456] lo speed is unknown, defaulting to 1000 [ 895.945661][T25456] wg1 speed is unknown, defaulting to 1000 [ 895.947842][T25456] »»»»»» speed is unknown, defaulting to 1000 [ 895.989579][T25456] »»»»»» speed is unknown, defaulting to 1000 [ 895.994681][T25457] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 895.997661][T25457] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 896.075426][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.115499][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.232942][T25471] cgroup: none used incorrectly [ 897.235973][T25471] ------------[ cut here ]------------ [ 897.237993][T25471] kernel BUG at mm/hugetlb.c:2333! [ 897.239572][T25471] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 897.241721][T25471] CPU: 3 UID: 0 PID: 25471 Comm: syz.6.5256 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 897.246005][T25471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 897.248990][T25471] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.251069][T25471] Code: a3 d0 00 00 00 e8 e4 73 a2 ff 48 c7 c7 40 56 e1 8d e8 88 c2 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 73 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 897.256374][T25471] RSP: 0018:ffffc9000649f8f0 EFLAGS: 00010083 [ 897.258078][T25471] RAX: 0000000000000808 RBX: ffffffff9a83d758 RCX: ffffc90027124000 [ 897.260696][T25471] RDX: 0000000000080000 RSI: ffffffff82167acb RDI: 0000000000000007 [ 897.263778][T25471] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 897.266052][T25471] R10: 0000000000000000 R11: 00000000000000d3 R12: 0000000000000000 [ 897.268229][T25471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 897.270481][T25471] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f50b6b40 [ 897.272941][T25471] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 897.274774][T25471] CR2: 0000000080001000 CR3: 0000000068518000 CR4: 0000000000352ef0 [ 897.276980][T25471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.279181][T25471] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 897.281572][T25471] Call Trace: [ 897.282524][T25471] [ 897.283361][T25471] ? die+0x31/0x80 [ 897.284422][T25471] ? do_trap+0x232/0x430 [ 897.285632][T25471] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.287263][T25471] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.288895][T25471] ? do_error_trap+0xf4/0x230 [ 897.290362][T25471] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.292027][T25471] ? handle_invalid_op+0x34/0x40 [ 897.293420][T25471] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.295058][T25471] ? exc_invalid_op+0x2e/0x50 [ 897.296379][T25471] ? asm_exc_invalid_op+0x1a/0x20 [ 897.297805][T25471] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 897.299464][T25471] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.301134][T25471] memfd_alloc_folio+0x16c/0x3b0 [ 897.302536][T25471] memfd_pin_folios+0xe8c/0x1150 [ 897.303924][T25471] ? __pfx_memfd_pin_folios+0x10/0x10 [ 897.305450][T25471] ? __pfx___lock_acquire+0x10/0x10 [ 897.306917][T25471] ? __pfx_down_read+0x10/0x10 [ 897.308258][T25471] ? __fget_files+0x206/0x3a0 [ 897.309767][T25471] udmabuf_create+0x641/0x11e0 [ 897.311254][T25471] ? __pfx_udmabuf_create+0x10/0x10 [ 897.312702][T25471] ? lock_acquire+0x2f/0xb0 [ 897.313996][T25471] ? __might_fault+0xe3/0x190 [ 897.315321][T25471] ? __might_fault+0xe3/0x190 [ 897.316658][T25471] udmabuf_ioctl+0x193/0x310 [ 897.317990][T25471] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 897.319485][T25471] ? __fget_files+0x206/0x3a0 [ 897.321008][T25471] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 897.322439][T25471] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 897.323929][T25471] __do_fast_syscall_32+0x73/0x120 [ 897.325394][T25471] do_fast_syscall_32+0x32/0x80 [ 897.326749][T25471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.328507][T25471] RIP: 0023:0xf742e579 [ 897.329878][T25471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 897.335190][T25471] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 897.337497][T25471] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040187542 [ 897.339722][T25471] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.342001][T25471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 897.344182][T25471] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 897.346385][T25471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.348695][T25471] [ 897.349772][T25471] Modules linked in: [ 897.351188][T25471] ---[ end trace 0000000000000000 ]--- [ 897.352731][T25471] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 897.354481][T25471] Code: a3 d0 00 00 00 e8 e4 73 a2 ff 48 c7 c7 40 56 e1 8d e8 88 c2 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 73 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 897.359724][T25471] RSP: 0018:ffffc9000649f8f0 EFLAGS: 00010083 [ 897.361515][T25471] RAX: 0000000000000808 RBX: ffffffff9a83d758 RCX: ffffc90027124000 [ 897.363698][T25471] RDX: 0000000000080000 RSI: ffffffff82167acb RDI: 0000000000000007 [ 897.365905][T25471] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 897.368131][T25471] R10: 0000000000000000 R11: 00000000000000d3 R12: 0000000000000000 [ 897.370344][T25471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 897.372562][T25471] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f50b6b40 [ 897.374973][T25471] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 897.376814][T25471] CR2: 0000000080001000 CR3: 0000000068518000 CR4: 0000000000352ef0 [ 897.379054][T25471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.381365][T25471] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 897.383552][T25471] Kernel panic - not syncing: Fatal exception [ 897.385743][T25471] Kernel Offset: disabled [ 897.386978][T25471] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:27:12 Registers: info registers vcpu 0 CPU#0 RAX=000000000007ffff RBX=ffffc90003dffb50 RCX=ffffc90029363000 RDX=0000000000080000 RSI=ffffffff84bba582 RDI=ffffc90003dffd90 RBP=0000000000000000 RSP=ffffc90003dff9a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000008 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b8eee6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7430048 CR3=0000000025fe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003ab51d5 RBX=0000000000000001 RCX=ffffffff8b46be39 RDX=0000000000000000 RSI=ffffffff8b6ce5c0 RDI=ffffffff8bd2d6e0 RBP=ffffed1003a5f910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2fc880 R14=ffffffff905fea10 R15=0000000000000000 RIP=ffffffff8b46d21f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2e04de CR3=0000000025fe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000294 RBX=ffffc90003d3f450 RCX=ffffffff84c30cfb RDX=ffff888022ddc880 RSI=ffffffff84c30d14 RDI=0000000000000006 RBP=0000000000000004 RSP=ffffc90003d3f238 R8 =0000000000000006 R9 =0000000000000294 R10=0000000000000298 R11=0000000000000012 R12=0000000000000004 R13=0000000000000800 R14=0000000000000a94 R15=0000000000000a98 RIP=ffffffff81b8ee9c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f93e1496d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d6e65a6000 CR3=000000004c060000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 d54b0745d54b0745 ZMM22=d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 d3e06898d3e06898 ZMM23=c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 c24d2677c24d2677 ZMM24=2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 2fa3d4682fa3d468 ZMM25=d700df42d700df42 d700df42d700df42 d700df42d700df42 d700df42d700df42 d700df42d700df42 d700df42d700df42 d700df42d700df42 d700df42d700df42 ZMM26=c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f c0babb6fc0babb6f ZMM27=48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc 48a58ddc48a58ddc ZMM28=000001900000018f 0000018e0000018d 0000018c0000018b 0000018a00000189 0000018800000187 0000018600000185 0000018400000183 0000018200000181 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 bb3c0000bb3c0000 info registers vcpu 3 CPU#3 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85388475 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc9000649f230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000063 R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff8538849f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000068518000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000