last executing test programs: 4m39.172838267s ago: executing program 3 (id=539): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) mremap(&(0x7f00006d6000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f00005b6000/0x1000)=nil) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f00000024c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20a}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000002340)={0x48, 0x8, r2, 0x0, 0x2, 0xc8, &(0x7f0000002240)="6e78dd3995e3abfff69734b095366cdc1cb1af457cfe579425ab4951e173390b81c05f64dc3a58d64b6e36a855435ab88caef648189dbbbea0d1c75701584e1bb7badb9178a7e715deb8a234d7eaf4bf6624ffd68881afb40fb816e581fb56262abec8581e22319a4f515ea454682822352b24fd39d3c7e3b9b70a4a53696e90b38e76f9edeb74cf15f2df20e52270460e135e43a507ccaacfde6c8cff8f8ec4b4c28792d7db8a9fe8a19c462d93de3180d492d2bd7d01386de423199e4a8d9a6223ba15379d437e", 0x1}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x401) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) dup3(r3, r5, 0x80000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) syz_io_uring_setup(0x76cb, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) listen(0xffffffffffffffff, 0xfffffff7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 4m38.99096076s ago: executing program 3 (id=540): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000000, 0x4023d}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x51e1, 0x3ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$kcm(0x29, 0x5, 0x0) pipe(0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000fff800000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 4m37.862948532s ago: executing program 3 (id=541): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={[0x0, 0x8]}, &(0x7f00000000c0), 0x8) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x8, 0xa9, 0x9, 0xf}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 4m37.847601681s ago: executing program 3 (id=542): r0 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000500)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="2a0dd802b45c159a5e80abd19311f2b360cbe535d09c2efd50f5b92124c67dce4ad0a3d5940924ca95368d7072c796fe162594ea9d9bcb816c4a92314140dd1c769aad3674c58180c36cab6289e516bbd5229179ca7edc6961a8001f9c3ea4bdf86701af05b7eb45384efbe2a469b1461ed5d2ea7f0cc0bda280481c2a05474291728b8f5d62ad173c007e43477193edb32c623d81351af7ebe1937b07e879e59a97c4f010b7b57954f565c4ca88ce897715f99d1901f5fc15daead7589025165cdd793087ac6c5085caa4a56f8119f71143a9d1eb51", 0xd6}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaedf, 0x800, 0x2, 0x38a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2c, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f00000ff000/0x1000)=nil, 0x1000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x20, 0x7fff, 0xfff, 0x7fffffffffffffff, 0x4, 0x5, 0xa7, 0x7e}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$cgroup_int(r7, &(0x7f0000000000)=0x2b00, 0x12) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) 4m36.942483535s ago: executing program 3 (id=544): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125004, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f00000000c0)) 4m34.64211573s ago: executing program 3 (id=551): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000058c9449d8c7fef89f8c90080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a50b0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="c4bc00000000000000008500000075000000bf91000000000000b702000001000000850000008520000000000095000000000000000000000000f3c01bc11fd86ecb951ca8d97cb6f477ca2a0ead359fd7c8f6fc6bfdc2eeb1ccd8653187950ff26847e3544b05aa3d67bf2dd63edef6ef9f7e766220c4d53d0b6620ac0faae4978c90c9132c95bd0e9579654d13"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x109800, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000006c0)={0x1, 0x1, {0x7, 0x1, 0x2, 0xe, 0xb, 0xda7, 0x3, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x5, 0xe, {r3}, {0xee00}, 0x3, 0x9dbe}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000180)=0xffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 4m34.617729942s ago: executing program 32 (id=551): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000058c9449d8c7fef89f8c90080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a50b0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="c4bc00000000000000008500000075000000bf91000000000000b702000001000000850000008520000000000095000000000000000000000000f3c01bc11fd86ecb951ca8d97cb6f477ca2a0ead359fd7c8f6fc6bfdc2eeb1ccd8653187950ff26847e3544b05aa3d67bf2dd63edef6ef9f7e766220c4d53d0b6620ac0faae4978c90c9132c95bd0e9579654d13"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x109800, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000006c0)={0x1, 0x1, {0x7, 0x1, 0x2, 0xe, 0xb, 0xda7, 0x3, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x5, 0xe, {r3}, {0xee00}, 0x3, 0x9dbe}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000180)=0xffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 2m45.191681479s ago: executing program 1 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 32) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r3, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x50) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5baf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x109d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4000) (rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030a735967e303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) write$FUSE_DIRENTPLUS(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r9], 0x10) 2m45.191345385s ago: executing program 1 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4040086) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040881}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1cQ\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8x\xa2\xe46\"\xbc\xbe\x10\xe5xI:\x11wh\xebM\xa8H3\xa4^\xd2\xcc:\xaf\xb8\xf0Dkh/\xc5\x83o)\x0etyy\x818\xd6z\xdc4\xb45C\x164\xbf \xea\f\x049Z\xa5&F\xf3^@\xae0\xe4q@\x8c|IJ\x89L\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) inotify_rm_watch(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000080)={0x3, 0x7}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) r5 = syz_io_uring_setup(0x59ce, &(0x7f0000000340)={0x0, 0x49fa, 0x800, 0x0, 0x4e}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) openat$vmci(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff67) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x8718f000) r9 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r5, 0x10}) 2m45.02056031s ago: executing program 1 (id=1306): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x2d}, {0x6, "8f23e93dbf411511a1d7b45070ff1def0737a9ab0f480b1b371bbe5806bd4d543c193412e9d770a6b18c79ff0253b4b40e390a967b85c8c3586c23c6b762e2dc"}}}}, 0x47) mmap$KVM_VCPU(&(0x7f0000b8b000/0x3000)=nil, 0x930, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x20301, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x4004510d, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {}, {}, @connect={{0x6, 0x1}, {0x6, 0xf}}}, {0x13, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @raw8={"f81c703db135dc80a185eb39"}}, {0x0, 0x0, 0x0, 0x0, @time={0x6}, {}, {0x0, 0xfd}, @time}], 0x70) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb4, 0x11, 0x148, 0x0, 0x10, 0x18c, 0x2a8, 0x2a8, 0x18c, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'virt_wifi0\x00', 'erspan0\x00', {}, {0xff}, 0x6, 0x1}, 0x10, 0x94, 0xb4, 0x1c, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x2ab, 0x4, 0x9, '\x00', 'syz1\x00', {0xfffffffc}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x27c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14200000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$inet(0x2, 0x2, 0x0) 2m44.131613579s ago: executing program 1 (id=1312): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r3 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}, {&(0x7f0000004000)="52ce89", 0x3}], 0x2}, 0x4) (async) splice(r2, &(0x7f0000000000)=0x10, 0xffffffffffffffff, &(0x7f0000000040)=0xe, 0x9, 0x4) 2m44.131378092s ago: executing program 1 (id=1313): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000009579b0fc058e7271f66d2dc31e319b25651228e194a304de9675cf43dd01dcda27d0135220046b12d8b66464bd8166b6aed57eb05c7521222c54229b1ce6bbb9fdca2e8956642770acf25f2569f916cfe84dc5ace7c0f1e9ebb71bbd0deb75d50d00a362ab2cbcc81367e700d9166f553694ed56178ff752338dbc0097bcb29b05e362f264d73ad333ad66c4665d57e1c67cd4803145ea33b2d1e4d928b0e172506f3e4fff0f1896cae75b82d08b03426e43288a9ee44d2056440b4cb321db88bd30cfec18ebbd7f71cb60c1b015d736d2"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000130001000000000000000000070000007e64fcca2eea18f8b4ab3169a85ce9b72ccd1e8a73d2a335434032efd96c2bed9b00ba381a0faad120200e1811e178199bbc504cf67d8cb804beaa167294da365863532374298150cd9b4a62058cde037ca90d3e6c5806842fa44351920d1e6fa7fdf72f37248097", @ANYRES32=r5, @ANYBLOB="06a00000000000001c001a80180005801400018008000100000000000800020000800000"], 0x3c}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2m43.200434233s ago: executing program 1 (id=1317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x4e63, 0x9, @private1, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03b1b3d741dd17c1c50d38af2a565ef1e83323691c58d6650000000100", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f00", [0x0, 0xfffffffffffffffd]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRES64, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1) r7 = dup(r5) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0x599, 0x8802}) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) sync() write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000380)={0x18, 0x6, 0x0, {0xfffffffffffffffd}}, 0x18) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x10010, 0xffffffffffffffff, 0xea415000) 2m28.211261535s ago: executing program 33 (id=1317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x4e63, 0x9, @private1, 0x9}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03b1b3d741dd17c1c50d38af2a565ef1e83323691c58d6650000000100", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f00", [0x0, 0xfffffffffffffffd]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRES64, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1) r7 = dup(r5) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0x599, 0x8802}) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) sync() write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000380)={0x18, 0x6, 0x0, {0xfffffffffffffffd}}, 0x18) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x10010, 0xffffffffffffffff, 0xea415000) 5.081170357s ago: executing program 5 (id=2403): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblcr\x00', 0x0, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@rand_addr=0x64010102, 0x4e24, 0x2000, 0x100000cd, 0x12d5f, 0x3}}, 0x44) (async) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000240)={r2, r3, 0x0, 0x0, 0x4}) (async, rerun: 32) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) (async, rerun: 64) bind$isdn(r5, &(0x7f0000000040)={0x22, 0x74, 0x5, 0xad, 0x6}, 0x6) (rerun: 64) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8008743f, &(0x7f0000000140)) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) (async) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@local, 0x200001}, @hyper, 0x0, 0x0, 0x7fff, 0x80200004, 0x24b, 0x40, 0x9}) (rerun: 32) 4.876417177s ago: executing program 5 (id=2407): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x21, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x10159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7233}, 0x4c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) mq_notify(r3, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r2}) getpeername$qrtr(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd) connect$inet6(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r4, 0x0, 0x40000}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffe}, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 3.719881406s ago: executing program 4 (id=2411): setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) (rerun: 64) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) fallocate(r0, 0x3b, 0x6, 0x39) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80a40) (rerun: 32) ioctl$BLKFRAGET(r1, 0x1265, &(0x7f0000000100)) (async) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000140)=""/180, &(0x7f0000000200)=0xb4) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e) (async) r4 = openat$tun(0xffffff9c, &(0x7f00000002c0), 0x8200, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000380)=0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x140b, 0x8, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000014) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x1412, 0x4, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000005c0)) (async) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000600)={0xc72, 0x1}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f0000001a00)={&(0x7f0000000640)={0xa, 0x4e20, 0xa, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000680)="4bc0c8e30d56c7effe4ed47310c0974ec26b8e264c939a25d12a10f7d5e0bab793be52d646b76ab71baffc8e7d40fbb22b6e7be79ca2f9dc8dd153c4c4946f6352e5bb73b2c647a01105e19fbd5e43746a717cfc5e18841f05c0cd82c739eb9485a9e523ec94ae58fcbf7988733678a02c58995bab064c3919f24cd88914f0ac93aea07db6d51e47be7ba7cbbacad757f5d35b9903fdc3c7a439bd2b4db9f87381a3ca81087e3ced67ade962ea00842d3b42ea38f6adc0dd58a6237c403dc3451e91d9978f0a", 0xc6}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="00203a1481e6505b9ea5818a505040dbe47662bca26a0c2cd9e28382df5fc8dab7ada1daec97e229cb42731c9adfcd25abcfdd7c074b3aacd43d5b4e7410236a73476332cc6f9eb44fabba2367892871319f15f691e47aa6d560d62a17e2f7263b6f9779b95c35fc0c7e51bda96c3efc27c1ed43b0df64cd7329b4ba8b76e7da73eafacf44e5caa8feaac2910bf7c53a8b3ab7bdd1f13d2a3509093aac321b0e4095e77f3a0100632441b3da035083c173660785978c78383c0627397a09149c942a84db9dd5", 0xc6}, {&(0x7f00000008c0)="bb641a7d71c69b498fde0d1cc7ab353ae766c30eb180cfa4a078649eda7738de1b37ec672c0db73171cb30331ea3005eed967e4958c5122e29609e6fdc2541398df71e6c8ec7aa94ce617fdac600321604abea8207c7a156a3ef48f19af701e210a2054271552ff47d47edb9c5910c6e981b3d84d2dd846b750b8d7baa8747623122ebc64c3b620d903a9d76185818c2d8094006a9b829de58b227e10a4462dc4585f38419a75d2019b902e7d8da9aba92221588611668860c9745b2a83f00e37971b3f6fddc34cdaeb0468f0dc8d7fe", 0xd0}, {&(0x7f00000009c0)="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", 0x1000}], 0x5}, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r4, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)=r6}, 0x1c) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001bc0)={'gre0\x00', &(0x7f0000001b00)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x936, 0x401, {{0x26, 0x4, 0x2, 0x0, 0x98, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x4, [{@multicast1, 0x4}, {@multicast2, 0xbbd}, {@empty, 0x40}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x8, [{@remote, 0x7f}, {@loopback, 0x1}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x0, 0x8, "e6bf6a8573fc"}, {0x0, 0x12, "174f90c086aa9e96f6bb313b0fd015d2"}, {0x0, 0x11, "393d1792877128d386f23a9d01808e"}, {0x1, 0xa, "f4cf13dc2753d8eb"}]}, @noop, @timestamp={0x44, 0x10, 0xd6, 0x0, 0x0, [0xe, 0x7f, 0x4]}]}}}}}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x5, 0x6}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x7}}, @float={0xe, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001c80), 0x68, 0x0, 0x0, 0xc, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@bloom_filter={0x1e, 0x5, 0x9, 0x1000, 0x28, r7, 0x7, '\x00', r8, r9, 0x2, 0x1, 0x1, 0xd}, 0x50) (async) openat$nci(0xffffff9c, &(0x7f0000001d80), 0x2, 0x0) (async) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x8000000) (async) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x80010, r2, 0x10000000) (async) r12 = openat$dlm_control(0xffffff9c, &(0x7f0000001dc0), 0x2a083, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000001ec0)=@IORING_OP_LINKAT={0x27, 0x22, 0x0, r12, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)='./file0\x00', 0xffffffffffffffff, 0x1400, 0x1}) 3.719483308s ago: executing program 4 (id=2412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$setopts(0x4200, r0, 0x6, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsync(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x100f, 0xc7, 0x2, 0x7, 'syz1\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r7, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) 3.209833101s ago: executing program 2 (id=2415): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r4, 0x8}, &(0x7f0000000040)=0x8) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000003c0)={r6}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001200000328bd700000000000ac1e0101000000000000000000000000ac1414aa000088000000000000003c003ebfdcb67cb488b90000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000100000000320000007f00000100000000000000000000000000000000000000000000000000000000080000000000000005000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000027bd7000000000000200000241000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc2c45513, &(0x7f0000000040)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x3, 0x2, 0x1000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8, 0x4, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, 0x2, 0x4, 0x1, 0x0, 0x4cd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x14f9, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x1, 0xfffffffc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x648c0000, 0x2, 0x0, 0xfffffffd, 0x10]}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0008470a0004008c70616e3100000000002aee389b6575b8065f9b0000000000000000000c16d72c501d206329c078"], 0x20}, 0x1, 0x0, 0x0, 0x24004010}, 0x4c040) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 3.139547282s ago: executing program 2 (id=2417): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000120001"], 0xb8}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="070000000400000008080000010000000000000085481325734646f86251cd1c718cb678a488499a853574a0094d6811440f3f32e700397efef8b400b9ead26c6e6baf545d00353cb91cd915bc4d2b20041e400000003c2cd43901ecc121fb12f64bba840f1e2e0f84243723ab065c345590773acc0eb5688eb651a5855da0d6e87df3cc6bb2fce602055314649bd0b2917e8622a87d896583929140fbc478229bd8fbc3fbad3cb3c0967bab15f3e463f476d8e8077c238a7b1e28c8b09c8abf8314cdcc15306a033a00c4ea0d5601224b2613ad4c84d692382bec02f7ab78340a16a38897a3e9b5808d64b8906406d08ff3935398d6c39956996f79d9faddab51", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000100000000000950000000000000014ad7899f0d1a9c6f280778ae44e272f9257f6c83272d54900f49e40313bc4e9e720ef87d565fa8d36e3ecb022bf0cc082289ecbb933cc1813ed614f0d026ed44530242a3d78b2b3316eda7578fd268d92071a2ec3da04ea4c1b7f3be3463f0bcf7b245a2e3fc21e90ad4ffe29cdde0fc47077f7f06d4a1114a72a247e754a375c3fadb96e3396ffd900a06709e7bbecb9f85a655969d4dfe14bb83772173a4e3bc9b37fbd633c8eb04b28f03972a3797572"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x20048000) sendto$packet(r3, &(0x7f00000001c0)="a6bea8a120e5f8310c3008791426", 0xe, 0x20000000, &(0x7f0000000140)={0x11, 0xed, r7, 0x1, 0x3d}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 3.136837933s ago: executing program 0 (id=2418): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa3100000000000000077ea60864160af36514001ac004000202080002000600050076e6f06cea2618c3d3b5b207000000000000a705251ea6618294ff0051f60a84c9f4d4938037e786a6d00010", 0xffffffffffffff5b}, {&(0x7f0000000200)="e6799411c53c354a6afcf73236a8d0feda6893cd9d876af11069dc4e17bf84ddb77a8932093e373094498a563a2d870f8a6476ea77be59161522b6574554992966807d80f9d74d2b11b73d95dffdb8f86d310886037c25b41dd8dad2f2adbdd134c2b931fc8301817f51f30df042869afacd3f36e60f509ced420ff01b793017084f10b3c25eda9bcabc6781c2a6d21d33e853bb18cd9da3525c73c448563fb5a0a81d73f981639288c53f6eecf263a457a8505e834aee72b5b676f1797d152c2e63b91f0f891338b7", 0xc9}, {&(0x7f0000000140)="31898a23379f2d13279ba2f92b35be9b9b9777a69be557d4157511d85e4af6b6a17ecdd65ea02b1ec3dd470694e4511c33ed1a673b5afd68eedd03fb7441838066af407bfd50c5f2a7f122c9bcf3eef3ee90fb676c9dedb10ee781850061a4f8d26ceec9ae99cf6547c57d49854cca79c1c9764aa7", 0x75}, {&(0x7f0000001500)="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", 0x8a3}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r3 = socket(0x1d, 0x2, 0x7) accept4$packet(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) r5 = open$dir(&(0x7f00000068c0)='./file0\x00', 0x105500, 0x281) getdents64(r5, &(0x7f0000000000)=""/30, 0x1e) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000100)) 3.135394535s ago: executing program 0 (id=2419): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(0x0, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x600880d0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x0, r0}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x34010, 0x4) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 2.798282555s ago: executing program 5 (id=2420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180500000020732500000000002020207b1af8ff000000003fa100000000000007810000f8ffffffb702000008000000b703000000000028850000009500000095"], &(0x7f0000000bc0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f00000081c0)={0x2020}, 0xfdef) r4 = eventfd2(0x49, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@getlink={0x28, 0x12, 0x300, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x18084, 0x1200}, [@IFLA_WEIGHT={0x8, 0xf, 0x959c}]}, 0x60}}, 0x0) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x101, r0, &(0x7f0000000340)="5ee94279ef7f487135bd5794e94f26e1a3d076b3feaf400ddde63b174a50f505f1a09fac97d36fa78b0f8a0d7d1598b63eb605b5e99c66dabb12f7d5be4d3711e2f81156d4827be6996dda0dbc997c2038989a4536baf7a51dc7352f79eda19c9935ef0c7deb7ab261db66cdde501cc1155f8c2ef8700ee327367f468b8d2a615c05f065f6d40dfe9cd2addfad0e6cfc749172bff1a3986bc3f4a7b890", 0x9d, 0x1ff, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000400)="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", 0xff, 0x6, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0xc47, r2, &(0x7f0000000540)="1a966c71d825776c9ad2cd79e2", 0xd, 0xfffffffffffffff7, 0x0, 0x0, r4}]) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000000)="f279b9d847dfc3c1b4d326f8487dd77e57b72649f8be2ce4c9a26a48893fffa8a2ed142be2d8cb407b5d0bea29c8733596e600ff4f9721974e9bb38f0e904e59e67bdae07e5244b870865ce56736bf26c63369c1c8b8bfb7f73e45e61c41a3bb2202b87fff", &(0x7f0000000100), &(0x7f0000000140)="428eab2d67a215e6f773e96a8a8efe553e66038f1e730d9c0469656040ac9b109956e529af25066fe7b351c58b8eef16f3505311870c29845486c6a70e5ce959e2b4149425eba560531d", &(0x7f00000001c0)="a15fb5e52642bfffef62f72685848623ffaac49ceed33901045e70b9e83aeeebb8ee6d1aec16c23edf7a469bf71ebe6f2a147ef9b6c98d3c001e4515d4446f4c1222e497b05b841f929ce6d3baf78b1df66d356041155f4607708d0100e3a284d080fb54b6a586dfa14e3ae11835591d3c6e0f771cf35bface424402b0aad10774a6ad578451ab3c58216f64a986f4b3b730b9", 0x3, r1}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x10, 0x3, 0x1, 0x81, 0x5, 0x8, 0x0, 0xb, 0xfc, 0x3, 0x8, 0x5}, {0x5b5d, 0xd4, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x0, 0x38, 0x8, 0x40, 0x2, 0x8}, {0x5, 0x9, 0x1, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x2, 0x7f, 0x4, 0xa, 0xc}], 0x5}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000c00)={0x47c, r10, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_BEACON_HEAD={0x44d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @initial, {0x5, 0x3}}, 0x6, @default, 0x2118, @val={0x0, 0x1b, @random="7998ede4ae55b891ac5284ee9ecaff699085b895d2666d9ef4eaff"}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x6, 0x2}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x6, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x99, "1e5a7624e257dfe184d9729214bb923393816ac4a02ff42c5c7fbe434acec134ae939f18f00e22ec263872eaf4682b8676cfad23d2e707bd712878a175fac4228551ba55a79a5a7d41520f9479a97a3195cba9adf16e454260d69838552ed1e3a1810e948a974b37a67a64e410a411af89e262a380e7b71d0d7fc734213d95dab60e3ad575188e619870d9ba6aa2f8f15080e42f37eb1dc6c1"}, {0xdd, 0x97, "e0a9ca69c824dc2dd82aff8c9a318af1f2ebbe160f4becd1341495ec939ec83a16a2d7c9e56d29e1ae167e25f13f0d1ab5123bede4e411cb05c8f846c125225076b74980cc46a749d1b32482782b14e77a093a35ea7580a890c220667e8ce2d95dd92c829269e831fe586bfa519dc15820520b77676a825e8f312f1b5e5770f4632a5da292795b71a2898def475cc770a9932d431ed4c8"}, {0xdd, 0x10, "78df49ef479aec86ff278a28173c0ddf"}, {0xdd, 0x75, "48f9741d11c0f34a0268cf7601040bbfe9c4e69f6bcb2fbc566824f7be6088706830e8ea7d14991c89ccd5e0ce6a483552159c006e446bf9d6e6368d875b334ecc1c85fb1003ebd0d91e4dc0ce5e5c4310d7c38a48e067bf434c783543f555a20bde212538b839323f299369353ede15cfd1fea805"}, {0xdd, 0xa3, "c7f4656a21f843424c2f748c9a907594e4d6b96767ac518b5fde0105b588ea44fdbadbbc08a7efcb9f31abf7af4f6ec58f4986c16fa41aa1ade2f0ac9b12176f55a68723e6ea4d56932b181654f11fc8c3e919d0c62f7dd0629c41d60f1a9eb11bc1a375e372fd7546f3bb3cea501800e2cdef77f90af69646ea6044ce528e98f5755b27412f12955c42256339107b78ab51ac8ff99329957e2ca2a9bb48de4dc0274a"}, {0xdd, 0x9a, "88e5317bd8a2319f5eb0271a0854ecebbc072eac7bb6acb2c22dbca2bce302bb9181a73c0a042cf5ba3ba6f9b81e9544cc5bc66d9280bf32883c8b2fc6e71b4ca0af52a5516d047a763368f03de67a86562b3b443350f61c59ba41d3b32bb56ce45879b3e1a3bab58d4c626a754d223f06c30a8150b222754684ceba4bd1f5c845c1651a48a3fea6d96b282cf2c7d9cf680c74ca1155c1191793"}, {0xdd, 0x2b, "b1c1fc3f4c2b9fd5db6bb122635b27db9bb8d37eeb1ecd41baed1ed78cf1a598304eeb21bcde7d525411fd"}, {0xdd, 0xb1, "e6c76c6e2a332397966a73866a1c5ea72c9fa39b7c8321aa2d646a7f033d04189e051d48a7ad9e7836a0ff8fbba2e461dd5004fbf4e4c757d74cf4b533af49d01fb67c567041e05626df02ffd431d70c98bd91e2db3219ce9e550ee3efd097f5efb9da5ce20481c841289003547fe352e20797eeb9b015553b8aa340b37c8ba55aa5c7ec270b89733845bc383437cc9b8de8fc4703f6bf5c232eb1658f39e28716b48296fea1376e15b450e726ae633299"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_id={0x72, 0x6}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2b, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.414125282s ago: executing program 4 (id=2421): mkdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12f) 2.350335923s ago: executing program 4 (id=2422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, 0x0, 0x800, 0x0) setpriority(0x0, 0x0, 0x1ff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x6, 0x10000, 0x42}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000340)={'erspan0\x00', @broadcast}) 2.16174632s ago: executing program 0 (id=2423): r0 = openat$ptmx(0xffffff9c, 0xffffffffffffffff, 0x505080, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f00000000c0)='./file0\x00') r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000100)={0x20000015}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x3e1}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @mcast2, 0xfca}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r5, 0x3}}, 0x48) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000300)={0x4, 0x6, 0x3, 0x8001}) r6 = openat$autofs(0xffffff9c, &(0x7f0000000340), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x30f}}, './file0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @multicast1}, {0x0, @random="092b9bd96fbf"}, 0x40, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'batadv_slave_0\x00'}) read$FUSE(r7, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$cgroup_ro(r7, &(0x7f0000002480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2d) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r10, &(0x7f00000025c0)={&(0x7f00000024c0), 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "d7afa568635fb722"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r7) openat$sw_sync(0xffffff9c, &(0x7f0000002600), 0x1, 0x0) r12 = eventfd(0x7) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000002640)={0x1, r12}) r13 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r13, &(0x7f0000003a00)={&(0x7f0000002680)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002700)=""/172, 0xac}, {&(0x7f00000027c0)=""/99, 0x63}, {&(0x7f0000002840)=""/183, 0xb7}, {&(0x7f0000002900)=""/192, 0xc0}], 0x4, &(0x7f0000002a00)=""/4096, 0x1000}, 0x2000) close_range(r13, r13, 0x2) sched_setaffinity(r8, 0x8, &(0x7f0000003a40)=0x8) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000003a80)={{0x5, 0x8, 0xab4b, 0xba}, 'syz0\x00', 0x3c}) renameat(r7, &(0x7f0000003b00)='./file0\x00', r9, &(0x7f0000003b40)='./file0\x00') 2.161378357s ago: executing program 0 (id=2424): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000080)=0xffffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) (async) io_setup(0x2, &(0x7f0000000200)=0x0) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x97a15000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listxattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') (async) chdir(&(0x7f0000000240)='./bus\x00') r5 = creat(&(0x7f0000000040)='./file1\x00', 0x5e) fcntl$setstatus(r5, 0x4, 0x6000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000005, 0x2013, r5, 0x25162000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000005, 0x2013, r5, 0x25162000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x1, r5, 0x0, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x1, r5, 0x0, 0x80000}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x40f5}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0x2}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xf, 0x0, 0x5}}]}}]}, 0x44}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) io_pgetevents(r2, 0x7, 0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000000440)=[{}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.780093596s ago: executing program 2 (id=2425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000480)=0x1209385, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_generic(r10, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x1d4, 0x2f, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@generic="0b12ff147f1f7f599637154d4109ceb0a2f67da65cf2653ca2ec3422278ef14ca9663f33957360b0b2558972d32b59b933d5abd8700f60a4d1ebee551e59e216cc2eacd0217dba2e", @generic="d2d164d150e73274879b5ad4eaaac41acc0066d988eab786543c28cd6b238775d37cf8fdd10786cb90aba3e5cc3d8868d6ac82378f5ce8ee9d32a13337674ad5721295f9357a5c66209d642155e704687c7eaabd414ff218ee4150577722d3e997be8c18c95635777e2a7d6aa1659700345ca6", @generic="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", @typed={0x8, 0x4d, 0x0, 0x0, @pid=r1}]}, 0x1d4}}, 0x20008000) 1.690192208s ago: executing program 0 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040024) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x0, 0xfffffffd, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002240)={0x90, 0x16, 0xa01, 0x70bd2d, 0x0, {0x9}, [@typed={0x4}, @generic="597b66fa92944b4941c9ac494620cc262aee8354a0586b832e4a21cd0f114909e38d3dbeea52dccb4b6492b75301f38febf6036e82fca267bbe0486d6c682f78fe409af5ad7b287675e0546864ad437df6334d95ba735af0ded1d5fec1ddbccbb5c5b9bc075be3d79b5df561b3cc9576b235d6baf3"]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001001000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x41, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000800) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 1.500377964s ago: executing program 5 (id=2427): setreuid(0xee01, 0xee01) r0 = socket(0x1, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 1.499889748s ago: executing program 5 (id=2428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001008010003306000000000400000000000000000000000000000000000601fe800000000000005bd1dd7907c9007200"/71, @ANYRES32=0x0, @ANYRES32=0x0], 0x140}, 0x1, 0x0, 0x0, 0x90}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x7ff, 0x61b, 0x8001, 0x9}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) r9 = dup2(r8, r8) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f0000000100)=@mmap={0x40000000, 0x2, 0x4, 0x0, 0x300000, {}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x0, "2063569a"}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) 1.121116052s ago: executing program 4 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001600010a0000000000000000080000000400200004009480"], 0x1c}}, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x46, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r7, 0x5414, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffdb, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008ab18d0f1d427aab11bfd3d8a6bf82e1b8155b982ab4e50f063ed88896346c6180fca9", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 990.109639ms ago: executing program 4 (id=2430): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) msgget(0x3, 0x616) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x27, 0x0, 0xa81001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 900.012317ms ago: executing program 2 (id=2431): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(0x0, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x600880d0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x0, r0}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x34010, 0x4) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 808.661828ms ago: executing program 0 (id=2432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0xfffffffe) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) (async, rerun: 64) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$alg(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002580)="91f92b97f9a96e"}, {&(0x7f0000002340)="00086a1c3a7258ed933189bf626a34d93e6f07c4955c7660b028512ba3d8750d8d6e60c309d6c5fec8c9a6b4130bc690294c2c6a31bf21b76cd73d642d64bb03f20ae2a3719be62ab93890d522c7faa8ba55d9da69168b9d9bd2fa9aae"}], 0x4, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"/532], 0x98, 0x4090}, 0x800) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40000) openat$hpet(0xffffff9c, &(0x7f0000000200), 0x16d2967af867ee16, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800491f00ea006700000421907864010102ac1414bb890fea096e0bb4086af3367b6e3a5b441c760364010100000000000000000000000007640101000000555f940401008913f9e0000001e0000001ac1414307f00000194040000940400008913e900000000ac1e0101ac1414aae000000144240b6040000003000000000000000300000004000100010000800100000f8000000008890fe35b03d60293a0735528880efe4e224e230411907812d16e7200f67820d599656f866942048338c39f1e5e3205141f6f2774bd03ff9e2aebb78298c7316ba66e667bb2645737987123b59923e157b32b81d35190978ca0a9c3f0a3609aae4018da42cf9adffe095161ffd3c51fdf1258e5788087f5383ffd453eadc2ec6034ad450b8ab8fbcf6671df0e21092761dacf35c596d6e63ebb612349b1abf87fa6f094a509635eb2b19e408610ed5434f33826129d587740dea6ead77f73071b7d99de4f186ba09599d07203782a4961a0148345f04f8494fba6968b0b14c31cc40357302e1b911fa81547e7bfa0"], 0x0) (async, rerun: 32) getrlimit(0x6, &(0x7f0000000080)) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000010000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 105.756258ms ago: executing program 5 (id=2433): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x6c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x804) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) r11 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rxrpc(r11, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) 261.88µs ago: executing program 2 (id=2434): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=2435): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x100, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 4 (id=2436): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30}, 0x30) (async) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getrusage(0xffffffffffffffff, &(0x7f0000000200)) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="3200000000000078ab", @ANYRES16, @ANYRES16=r1], 0x7) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) kernel console output (not intermixed with test programs): .508048][T11392] syz.4.1192 (11392) used obsolete PPPIOCDETACH ioctl [ 231.604778][ T6120] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.725194][ T6120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.744986][ T6120] usb 7-1: config 0 descriptor?? [ 231.754721][T11370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.766632][ T6120] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 231.961679][ T6246] usb 7-1: USB disconnect, device number 7 [ 232.464227][T11409] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 232.513717][T11412] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 232.561907][T11418] fuse: Unknown parameter 'ô§K:ÓK$8u' [ 232.563941][T11418] fuse: Unknown parameter 'ô§K:ÓK$8u' [ 232.747852][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 232.769098][T11433] netlink: 'syz.4.1204': attribute type 10 has an invalid length. [ 232.772121][T11433] veth0_vlan: left promiscuous mode [ 232.774140][T11433] veth0_vlan: entered promiscuous mode [ 232.776745][T11433] team0: Device veth0_vlan failed to register rx_handler [ 232.802580][T11435] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.1205'. [ 232.806145][T11435] openvswitch: netlink: Message has 5 unknown bytes. [ 232.861965][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 233.052917][T11445] bridge0: entered allmulticast mode [ 233.055177][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 233.058036][T11445] bridge_slave_1: left allmulticast mode [ 233.059826][T11445] bridge_slave_1: left promiscuous mode [ 233.062155][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.067929][T11445] bridge_slave_0: left allmulticast mode [ 233.069682][T11445] bridge_slave_0: left promiscuous mode [ 233.071450][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.149447][T11445] bridge0 (unregistering): left allmulticast mode [ 233.337423][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 233.352728][T11447] lo speed is unknown, defaulting to 1000 [ 233.413598][T11447] /dev/nullb0: Can't open blockdev [ 233.662927][T11465] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 233.665575][T11465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 233.668687][T11465] dummy0: entered promiscuous mode [ 233.688499][T11467] ptrace attach of "/syz-executor exec"[5974] was attempted by "/syz-executor exec"[11467] [ 233.755743][T11468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1211'. [ 233.759328][T11468] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1211'. [ 233.829577][T11473] overlayfs: conflicting lowerdir path [ 234.084708][ T5985] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.128951][T11491] lo speed is unknown, defaulting to 1000 [ 234.751835][T11508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1221'. [ 234.856707][T11510] dlm: no locking on control device [ 235.193066][T11521] mkiss: ax0: crc mode is auto. [ 236.052439][ T5985] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 236.375637][T11562] dlm: no locking on control device [ 236.642404][T11573] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 236.647818][T11573] team0: Port device dummy0 added [ 238.477941][T11625] overlayfs: missing 'lowerdir' [ 238.528705][T11627] dlm: no locking on control device [ 238.716438][T11632] wg2: entered allmulticast mode [ 239.388831][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 239.599132][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 240.199663][T11660] lo speed is unknown, defaulting to 1000 [ 240.534710][ T6246] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.628987][ T6983] Bluetooth: hci4: Frame reassembly failed (-84) [ 240.684742][ T6246] usb 7-1: Using ep0 maxpacket: 16 [ 240.686702][ T6246] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.686716][ T6246] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.686725][ T6246] usb 7-1: config 0 has no interface number 0 [ 240.688692][ T6246] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.688705][ T6246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.688715][ T6246] usb 7-1: Product: syz [ 240.688721][ T6246] usb 7-1: Manufacturer: syz [ 240.688729][ T6246] usb 7-1: SerialNumber: syz [ 240.689742][ T6246] usb 7-1: config 0 descriptor?? [ 240.847996][T11691] dlm: no locking on control device [ 240.922517][ T6246] usb 7-1: USB disconnect, device number 8 [ 241.466173][T11693] 9pnet_fd: Insufficient options for proto=fd [ 242.644657][ T5985] Bluetooth: hci4: command 0x1003 tx timeout [ 242.644724][ T5332] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 242.914713][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 243.500946][T11724] syz.4.1276: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.535258][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.4.1276 Not tainted syzkaller #0 PREEMPT(full) [ 243.535276][T11724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.535283][T11724] Call Trace: [ 243.535287][T11724] [ 243.535291][T11724] dump_stack_lvl+0x16c/0x1f0 [ 243.535310][T11724] warn_alloc+0x248/0x3a0 [ 243.535322][T11724] ? __pfx_warn_alloc+0x10/0x10 [ 243.535335][T11724] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 243.535349][T11724] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 243.535366][T11724] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 243.535379][T11724] ? __schedule+0x11a3/0x5de0 [ 243.535392][T11724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.535406][T11724] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 243.535423][T11724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.535451][T11724] ? policy_nodemask+0xea/0x4e0 [ 243.535466][T11724] alloc_pages_mpol+0x1fb/0x550 [ 243.535480][T11724] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.535495][T11724] alloc_pages_noprof+0x131/0x390 [ 243.535508][T11724] kimage_alloc_pages+0x75/0x350 [ 243.535524][T11724] kimage_alloc_control_pages+0x153/0xa00 [ 243.535536][T11724] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 243.535548][T11724] do_kexec_load+0x478/0x8a0 [ 243.535558][T11724] ? lock_release+0x201/0x2f0 [ 243.535571][T11724] ? __pfx_do_kexec_load+0x10/0x10 [ 243.535583][T11724] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 243.535595][T11724] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 243.535607][T11724] ? rcu_is_watching+0x12/0xc0 [ 243.535618][T11724] __do_fast_syscall_32+0x7c/0x3a0 [ 243.535632][T11724] do_fast_syscall_32+0x32/0x80 [ 243.535645][T11724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.535659][T11724] RIP: 0023:0xf70de579 [ 243.535666][T11724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.535677][T11724] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 243.535687][T11724] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 243.535693][T11724] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 243.535700][T11724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.535705][T11724] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 243.535711][T11724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.535720][T11724] [ 243.535735][T11724] Mem-Info: [ 243.665414][T11724] active_anon:1597 inactive_anon:1227 isolated_anon:0 [ 243.665414][T11724] active_file:3008 inactive_file:10436 isolated_file:0 [ 243.665414][T11724] unevictable:1768 dirty:26 writeback:0 [ 243.665414][T11724] slab_reclaimable:6141 slab_unreclaimable:60030 [ 243.665414][T11724] mapped:24002 shmem:2936 pagetables:1335 [ 243.665414][T11724] sec_pagetables:321 bounce:0 [ 243.665414][T11724] kernel_misc_reclaimable:0 [ 243.665414][T11724] free:27840 free_pcp:229 free_cma:0 [ 243.679787][T11724] Node 0 active_anon:1900kB inactive_anon:724kB active_file:32kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7528kB dirty:8kB writeback:0kB shmem:5896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8528kB pagetables:1724kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB [ 243.696097][T11724] Node 1 active_anon:4388kB inactive_anon:3984kB active_file:12000kB inactive_file:41632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88252kB dirty:96kB writeback:0kB shmem:5620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7064kB pagetables:3616kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB [ 243.752027][T11724] Node 0 DMA free:1872kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 243.761177][T11724] lowmem_reserve[]: 0 288 288 288 288 [ 243.763587][T11724] Node 0 DMA32 free:11936kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:120KB active_anon:464kB inactive_anon:40kB active_file:168kB inactive_file:548kB unevictable:3536kB writepending:8kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:608kB local_pcp:172kB free_cma:0kB [ 243.773652][T11724] lowmem_reserve[]: 0 0 0 0 0 [ 243.774744][T11743] dlm: no locking on control device [ 243.778144][T11724] [ 243.779188][T11724] Node 1 DMA32 free:101104kB boost:51200kB min:98340kB low:110124kB high:121908kB reserved_highatomic:10240KB free_highatomic:1976KB active_anon:4588kB inactive_anon:1884kB active_file:12100kB inactive_file:41332kB unevictable:3536kB writepending:24kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1952kB local_pcp:24kB free_cma:0kB [ 243.793270][T11724] lowmem_reserve[]: 0 0 0 0 0 [ 243.795275][T11724] Node 0 DMA: 7*4kB (UM) 3*8kB (M) 6*16kB (M) 4*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1940kB [ 243.814240][T11724] Node 0 DMA32: 77*4kB (UM) 31*8kB (UMEH) 14*16kB (UM) 103*32kB (UMH) 52*64kB (UM) 23*128kB (UM) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11628kB [ 243.825915][T11724] Node 1 DMA32: 461*4kB (UMEH) 1119*8kB (MEH) 731*16kB (UMEH) 520*32kB (UMEH) 285*64kB (UMEH) 102*128kB (UME) 45*256kB (UME) 18*512kB (UMH) 10*1024kB (UMH) 0*2048kB 0*4096kB = 101404kB [ 243.847986][T11724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.856323][T11724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.864894][T11724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.875541][T11724] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 243.879415][T11724] 16196 total pagecache pages [ 243.881293][T11724] 602 pages in swap cache [ 243.883120][T11724] Free swap = 80328kB [ 243.885235][T11724] Total swap = 124996kB [ 243.889591][T11724] 524155 pages RAM [ 243.891113][T11724] 0 pages HighMem/MovableOnly [ 243.892991][T11724] 209473 pages reserved [ 243.895271][T11724] 0 pages cma reserved [ 244.525473][ T6019] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 244.555864][T11724] kexec: Could not allocate control_code_buffer [ 244.573303][T11724] Process accounting resumed [ 244.661539][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 244.675670][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 244.685341][ T40] audit: type=1326 audit(2000000007.229:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.692086][ T40] audit: type=1326 audit(2000000007.229:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.698711][ T6019] usb 7-1: Using ep0 maxpacket: 8 [ 244.700368][ T40] audit: type=1326 audit(2000000007.229:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.708228][ T40] audit: type=1326 audit(2000000007.229:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.715142][ T40] audit: type=1326 audit(2000000007.229:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.715960][ T6019] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.722058][ T40] audit: type=1326 audit(2000000007.229:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.722082][ T40] audit: type=1326 audit(2000000007.229:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.722098][ T40] audit: type=1326 audit(2000000007.229:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.722114][ T40] audit: type=1326 audit(2000000007.229:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.722130][ T40] audit: type=1326 audit(2000000007.229:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 244.757840][ T6019] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.760568][ T6019] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 244.763862][ T6019] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 244.767364][ T6019] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 244.770049][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.774960][ T6019] hub 7-1:1.0: bad descriptor, ignoring hub [ 244.777286][ T6019] hub 7-1:1.0: probe with driver hub failed with error -5 [ 244.779766][ T6019] cdc_wdm 7-1:1.0: skipping garbage [ 244.781374][ T6019] cdc_wdm 7-1:1.0: skipping garbage [ 244.784136][ T6019] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 244.786487][ T6019] cdc_wdm 7-1:1.0: Unknown control protocol [ 244.993929][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 245.408351][T11793] dlm: no locking on control device [ 245.442508][T11755] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 246.954028][T11822] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 246.963281][T11822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.976080][T11822] bond1: (slave veth11): Enslaving as an active interface with a down link [ 246.979252][T11822] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 246.981731][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1303'. [ 246.984744][T11822] dummy0: entered promiscuous mode [ 246.989134][T11822] team0: Port device dummy0 removed [ 247.264797][ T29] usb 7-1: USB disconnect, device number 9 [ 247.278675][T11846] C: renamed from team_slave_0 [ 247.281568][T11846] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 247.284043][T11846] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1307'. [ 247.286951][T11846] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 247.440655][T11842] dlm: no locking on control device [ 247.714670][ T6019] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 247.865816][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.869237][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.872320][ T6019] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 247.875603][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.879239][ T6019] usb 9-1: config 0 descriptor?? [ 247.977412][T11848] overlayfs: workdir and upperdir must be separate subtrees [ 247.981759][T11849] overlayfs: workdir and upperdir must be separate subtrees [ 248.274739][T11871] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.487011][T11860] overlay: Unknown parameter 'subj_role' [ 248.493547][ T6019] usbhid 9-1:0.0: can't add hid device: -71 [ 248.497197][ T6019] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 248.500465][ T6019] usb 9-1: USB disconnect, device number 9 [ 249.147702][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 249.152615][T11903] syzkaller1: entered promiscuous mode [ 249.156411][T11903] syzkaller1: entered allmulticast mode [ 249.395776][T11916] dlm: no locking on control device [ 249.740631][T11925] input: syz0 as /devices/virtual/input/input19 [ 249.825854][T11928] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1326'. [ 250.014679][T11932] nvme_fabrics: missing parameter 'transport=%s' [ 250.016771][T11932] nvme_fabrics: missing parameter 'nqn=%s' [ 250.914527][T11965] loop2: detected capacity change from 0 to 7 [ 250.928486][T11965] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 250.930176][T11965] loop2: partition table partially beyond EOD, truncated [ 250.932593][T11965] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 251.334073][ T5382] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.336374][ T5382] loop2: partition table partially beyond EOD, truncated [ 251.339053][ T5382] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 251.513942][ T5382] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.516400][ T5382] loop2: partition table partially beyond EOD, truncated [ 251.519307][ T5382] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 251.639854][T11980] dlm: no locking on control device [ 251.651576][T11979] vivid-004: kernel_thread() failed [ 252.261027][T11997] 9pnet_fd: Insufficient options for proto=fd [ 253.370517][T12021] 9p: Unknown Cache mode or invalid value mmap 1 [ 264.232596][ T5332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.236395][ T5332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.240366][ T5332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.242768][ T5332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.293099][T12246] lo speed is unknown, defaulting to 1000 [ 264.630740][ T7004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.692694][T12246] chnl_net:caif_netlink_parms(): no params data found [ 264.732191][ T7004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.789073][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.791394][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.793744][T12246] bridge_slave_0: entered allmulticast mode [ 264.809284][T12246] bridge_slave_0: entered promiscuous mode [ 264.821355][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.823712][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.827054][T12246] bridge_slave_1: entered allmulticast mode [ 264.829451][T12246] bridge_slave_1: entered promiscuous mode [ 264.840241][ T7004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.871358][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.875782][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.913643][T12246] team0: Port device team_slave_0 added [ 264.921061][ T7004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.945962][T12246] team0: Port device team_slave_1 added [ 265.031787][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.034752][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.054807][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.072662][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.078355][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.099983][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.167015][T12246] hsr_slave_0: entered promiscuous mode [ 265.169703][T12246] hsr_slave_1: entered promiscuous mode [ 265.440395][ T7004] bond0 (unregistering): Released all slaves [ 265.464676][ T7004] bond1 (unregistering): (slave veth11): Releasing active interface [ 265.471329][ T7004] bond1 (unregistering): Released all slaves [ 265.483494][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 265.496416][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.499341][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.502500][T12290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.528618][ T29] lo speed is unknown, defaulting to 1000 [ 265.534653][ T29] syz0: Port: 1 Link ACTIVE [ 265.565646][ T7004] tipc: Left network mode [ 265.573542][T12246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.583760][T12246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.587760][ T7004] IPVS: stopping master sync thread 9539 ... [ 265.597524][T12246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.602265][T12246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.632132][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.638415][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.642125][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.644618][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.649546][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.651785][ T6983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.666631][T12246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.740269][ T7004] hsr_slave_0: left promiscuous mode [ 265.742364][ T7004] hsr_slave_1: left promiscuous mode [ 265.747683][ T7004] veth1_macvtap: left promiscuous mode [ 265.749505][ T7004] veth0_macvtap: left promiscuous mode [ 265.842028][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.927584][T12246] veth0_vlan: entered promiscuous mode [ 265.932840][T12246] veth1_vlan: entered promiscuous mode [ 265.947104][T12246] veth0_macvtap: entered promiscuous mode [ 265.951444][T12246] veth1_macvtap: entered promiscuous mode [ 265.962028][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.969164][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.975326][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.978477][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.981727][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.985369][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.008980][ T6983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.011552][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.021240][ T6983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.023808][ T6983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.324728][ T5332] Bluetooth: hci3: command tx timeout [ 266.417891][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 266.421333][T12370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1430'. [ 266.429726][T12370] bond0 (unregistering): Released all slaves [ 267.109260][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.112006][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.114396][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.117035][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.119381][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.122019][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.124365][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.127354][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.130011][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.132526][ T1021] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 267.138642][ T1021] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 267.306811][T12400] fido_id[12400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.334854][ T5343] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 268.404817][ T5332] Bluetooth: hci3: command tx timeout [ 269.181303][T12486] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1459'. [ 269.232776][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.237156][T12486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.241750][T12486] bond0 (unregistering): Released all slaves [ 269.390271][T12490] netlink: 'syz.2.1460': attribute type 2 has an invalid length. [ 269.392642][T12490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.341800][T12502] overlayfs: failed to clone upperpath [ 270.494734][ T5332] Bluetooth: hci3: command tx timeout [ 270.591253][T12510] overlayfs: failed to clone upperpath [ 270.613696][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 270.619315][ T40] audit: type=1804 audit(2000000033.159:700): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1465" name="bus" dev="tmpfs" ino=2080 res=1 errno=0 [ 270.927130][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 271.143381][T12526] dlm: no locking on control device [ 271.436350][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1472'. [ 271.439514][T12540] netlink: 'syz.2.1472': attribute type 13 has an invalid length. [ 271.743904][T12546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1477'. [ 272.045339][T12555] syzkaller0: entered promiscuous mode [ 272.047110][T12555] syzkaller0: entered allmulticast mode [ 272.317206][T12577] ptrace attach of ""[12578] was attempted by "/syz-executor exec"[12577] [ 272.565235][ T5332] Bluetooth: hci3: command tx timeout [ 273.677169][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'. [ 273.738673][T12609] 9p: Unknown Cache mode or invalid value fscach [ 274.106710][T12612] fuse: Unknown parameter 'ft' [ 274.113569][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1497'. [ 274.600191][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1509'. [ 274.603298][T12654] ip_vti0: entered promiscuous mode [ 274.606327][T12654] ip_vti0: entered allmulticast mode [ 274.710284][T12656] input: syz0 as /devices/virtual/input/input20 [ 275.494229][ T6246] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 275.654672][ T6246] usb 10-1: Using ep0 maxpacket: 8 [ 275.657732][ T6246] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.662316][ T6246] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.667078][ T6246] usb 10-1: config 0 interface 0 has no altsetting 0 [ 275.669185][ T6246] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 275.671990][ T6246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.677915][ T40] audit: type=1326 audit(2000000038.219:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.1512" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7fc00000 [ 275.685272][ T6246] usb 10-1: config 0 descriptor?? [ 275.858725][T12683] wg2: entered allmulticast mode [ 276.627099][ T40] audit: type=1326 audit(2000000039.169:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.633974][ T40] audit: type=1326 audit(2000000039.169:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.640897][ T40] audit: type=1326 audit(2000000039.169:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.647871][ T40] audit: type=1326 audit(2000000039.169:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.655081][ T40] audit: type=1326 audit(2000000039.169:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.661745][ T40] audit: type=1326 audit(2000000039.169:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.669934][ T40] audit: type=1326 audit(2000000039.169:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.676809][ T40] audit: type=1326 audit(2000000039.169:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 276.683443][ T40] audit: type=1326 audit(2000000039.169:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.4.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 277.076769][ T6246] hid_parser_main: 7 callbacks suppressed [ 277.076787][ T6246] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 277.098487][ T6246] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 277.124627][ T6246] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 277.156773][ T6246] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 277.179409][ T6246] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 277.190499][ T6246] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 277.283174][ T6246] usb 10-1: USB disconnect, device number 2 [ 277.784772][T12742] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 277.787124][T12742] UDF-fs: Scanning with blocksize 2048 failed [ 277.789992][T12742] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 277.792359][T12742] UDF-fs: Scanning with blocksize 4096 failed [ 278.467023][T12763] autofs: Unknown parameter 'xPÅÔ7-Î Aªù:ãj÷ý`Néö)k_Un ôâO¾µñ‚±j‚“—¿Å÷„çyªð¹ºv­—É+k¬£QÅh¨`N [ 278.467023][T12763] ¿' [ 278.871672][T12770] batman_adv: batadv0: Adding interface: gretap1 [ 278.874234][T12770] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.882644][T12770] batman_adv: batadv0: Interface activated: gretap1 [ 280.225276][T12807] tipc: Started in network mode [ 280.227255][T12807] tipc: Node identity , cluster identity 4711 [ 280.229733][T12807] tipc: Failed to obtain node identity [ 280.231952][T12807] tipc: Enabling of bearer rejected, failed to enable media [ 280.254321][T12807] syzkaller0: entered promiscuous mode [ 280.257240][T12807] syzkaller0: entered allmulticast mode [ 281.257837][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 281.299716][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1550'. [ 281.430067][T12823] tipc: Enabling of bearer rejected, failed to enable media [ 281.433960][T12825] ip_vti0: entered promiscuous mode [ 281.437558][T12825] ip_vti0: entered allmulticast mode [ 281.698555][T12839] input: syz0 as /devices/virtual/input/input21 [ 282.931296][ T5985] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 283.196795][T12853] dlm: no locking on control device [ 283.292367][T12848] lo speed is unknown, defaulting to 1000 [ 283.317293][T12848] lo speed is unknown, defaulting to 1000 [ 283.342011][T12848] lo speed is unknown, defaulting to 1000 [ 283.376291][T12848] lo speed is unknown, defaulting to 1000 [ 283.397381][T12848] lo speed is unknown, defaulting to 1000 [ 283.418290][T12848] lo speed is unknown, defaulting to 1000 [ 283.442352][T12848] lo speed is unknown, defaulting to 1000 [ 283.464259][T12848] lo speed is unknown, defaulting to 1000 [ 283.489314][T12848] lo speed is unknown, defaulting to 1000 [ 283.517434][T12848] lo speed is unknown, defaulting to 1000 [ 283.547379][T12848] lo speed is unknown, defaulting to 1000 [ 283.580036][T12848] lo speed is unknown, defaulting to 1000 [ 283.616442][T12848] lo speed is unknown, defaulting to 1000 [ 283.647537][T12848] lo speed is unknown, defaulting to 1000 [ 283.675402][T12848] lo speed is unknown, defaulting to 1000 [ 283.708489][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1557'. [ 285.907369][T12920] netlink: 'syz.4.1570': attribute type 2 has an invalid length. [ 285.910654][T12920] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1570'. [ 286.298759][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1575'. [ 286.330046][T12934] overlayfs: failed to clone upperpath [ 286.721390][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 286.738573][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 286.773004][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 286.783926][T12948] random: crng reseeded on system resumption [ 287.798801][T12967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1584'. [ 289.148031][T13039] netlink: 'syz.0.1591': attribute type 20 has an invalid length. [ 289.649793][T13053] random: crng reseeded on system resumption [ 289.688663][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 289.691702][T13055] lo: entered promiscuous mode [ 289.693286][T13055] lo: entered allmulticast mode [ 289.696545][T13055] tunl0: entered promiscuous mode [ 289.699106][T13055] tunl0: entered allmulticast mode [ 289.701734][T13055] gre0: entered promiscuous mode [ 289.703610][T13055] gre0: entered allmulticast mode [ 289.707986][T13055] gretap0: entered promiscuous mode [ 289.710345][T13055] gretap0: entered allmulticast mode [ 289.712939][T13055] erspan0: entered promiscuous mode [ 289.715373][T13055] erspan0: entered allmulticast mode [ 289.720267][T13055] ip_vti0: entered promiscuous mode [ 289.721991][T13055] ip_vti0: entered allmulticast mode [ 289.724136][T13055] ip6_vti0: entered promiscuous mode [ 289.727536][T13056] overlayfs: failed to resolve './file1': -2 [ 289.729700][T13055] ip6_vti0: entered allmulticast mode [ 289.731971][T13055] sit0: entered promiscuous mode [ 289.733610][T13055] sit0: entered allmulticast mode [ 289.737422][T13055] ip6tnl0: entered promiscuous mode [ 289.739271][T13055] ip6tnl0: entered allmulticast mode [ 289.741906][T13055] ip6gre0: entered promiscuous mode [ 289.760795][T13055] ip6gre0: entered allmulticast mode [ 289.773316][T13055] syz_tun: entered promiscuous mode [ 289.780272][T13055] syz_tun: entered allmulticast mode [ 289.780917][T13055] ip6gretap0: entered promiscuous mode [ 289.780928][T13055] ip6gretap0: entered allmulticast mode [ 289.781521][T13055] vcan0: entered promiscuous mode [ 289.781530][T13055] vcan0: entered allmulticast mode [ 289.781774][T13055] bond0: entered promiscuous mode [ 289.781783][T13055] bond_slave_0: entered promiscuous mode [ 289.781842][T13055] bond_slave_1: entered promiscuous mode [ 289.781891][T13055] bond0: entered allmulticast mode [ 289.781898][T13055] bond_slave_0: entered allmulticast mode [ 289.781905][T13055] bond_slave_1: entered allmulticast mode [ 289.782380][T13055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.782815][T13055] team0: entered promiscuous mode [ 289.782825][T13055] team_slave_0: entered promiscuous mode [ 289.794842][T13055] team_slave_1: entered promiscuous mode [ 289.818435][T13055] team0: entered allmulticast mode [ 289.820975][T13055] team_slave_0: entered allmulticast mode [ 289.823031][T13055] team_slave_1: entered allmulticast mode [ 289.863155][T13055] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.865954][T13055] dummy0: entered promiscuous mode [ 289.867697][T13055] dummy0: entered allmulticast mode [ 289.870044][T13055] nlmon0: entered promiscuous mode [ 289.871825][T13055] nlmon0: entered allmulticast mode [ 289.882519][T13055] caif0: entered promiscuous mode [ 289.884194][T13055] caif0: entered allmulticast mode [ 289.887246][T13055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.225077][T13081] dlm: no locking on control device [ 290.381765][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 290.590378][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 290.590390][ T40] audit: type=1326 audit(2000000053.129:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.0.1610" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23579 code=0x0 [ 290.771062][T13106] tmpfs: Bad value for 'mpol' [ 290.872635][T13122] netlink: 'syz.4.1615': attribute type 6 has an invalid length. [ 290.876915][T13122] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1615'. [ 290.881122][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1615'. [ 290.884079][T13122] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 290.887618][T13120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1615'. [ 290.956254][T13127] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 290.960107][T13127] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 291.168004][T13149] 9pnet_fd: Insufficient options for proto=fd [ 291.203000][T13154] lo speed is unknown, defaulting to 1000 [ 291.233775][T13155] netlink: 'syz.4.1622': attribute type 37 has an invalid length. [ 292.134534][T13167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.144826][T13167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.148335][T13173] bridge1: entered promiscuous mode [ 292.150209][T13167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 292.162317][T13167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 292.240448][T13184] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 292.395832][T13189] __nla_validate_parse: 1 callbacks suppressed [ 292.395851][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 292.405091][T13189] gtp0: entered promiscuous mode [ 292.407259][T13189] gtp0: entered allmulticast mode [ 293.266898][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'. [ 293.266925][T13229] ip_vti0: entered promiscuous mode [ 293.266939][T13229] ip_vti0: entered allmulticast mode [ 293.904229][ T40] audit: type=1800 audit(2000000056.439:750): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1650" name="bus" dev="9p" ino=35913973 res=0 errno=0 [ 294.164667][ T5985] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.164705][ T5332] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.318957][ T40] audit: type=1326 audit(2000000056.859:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.1654" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 294.344152][T13276] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1653'. [ 294.352690][T13276] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 294.450543][T13278] random: crng reseeded on system resumption [ 294.453384][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1654'. [ 294.460396][ T40] audit: type=1326 audit(2000000056.999:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.1654" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 294.935102][T13286] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1656'. [ 294.941113][T13286] batadv1: entered allmulticast mode [ 295.015746][T13286] input: syz1 as /devices/virtual/input/input22 [ 295.023183][T13285] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1656'. [ 295.050529][T13285] batadv1: entered allmulticast mode [ 295.051283][T13290] afs: Unknown parameter '00000000000000000000' [ 295.079784][T13290] lo speed is unknown, defaulting to 1000 [ 295.108536][T13290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 295.190077][T13295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1658'. [ 295.728916][T13326] netlink: 'syz.5.1668': attribute type 1 has an invalid length. [ 296.176152][T13341] netlink: 'syz.2.1673': attribute type 3 has an invalid length. [ 296.209390][T13333] fuse: Bad value for 'user_id' [ 296.211135][T13333] fuse: Bad value for 'user_id' [ 296.244759][ T5332] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.254719][ T5332] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.581678][T13371] MPI: mpi too large (124808 bits) [ 296.584534][ T40] audit: type=1326 audit(2000000059.119:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 296.594708][ T40] audit: type=1326 audit(2000000059.129:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 296.604442][ T40] audit: type=1326 audit(2000000059.129:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 296.612423][ T40] audit: type=1326 audit(2000000059.129:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 296.648346][T13381] overlayfs: failed to clone upperpath [ 296.991721][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 297.086120][T13398] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1683'. [ 297.089008][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1683'. [ 297.548619][T13426] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.621391][T13426] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.649558][T13437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 297.651659][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.654422][T13437] vhci_hcd vhci_hcd.0: Device attached [ 297.839103][T13426] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.964725][ T53] usb 46-1: SetAddress Request (2) to port 0 [ 297.966984][ T53] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 298.196525][T13426] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.264745][ T6977] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.271871][ T6977] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.279163][ T6977] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.285350][ T6977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.325861][ T5985] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.772848][T13438] vhci_hcd: connection reset by peer [ 298.793996][ T13] vhci_hcd: stop threads [ 298.796809][ T13] vhci_hcd: release socket [ 298.799752][ T13] vhci_hcd: disconnect device [ 299.077196][T13472] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 299.087725][T13472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.137902][T13472] bond0: (slave veth5): Enslaving as an active interface with a down link [ 299.151698][T13472] vlan3: entered allmulticast mode [ 299.153953][T13472] veth0_to_bond: entered allmulticast mode [ 299.517295][T13491] overlayfs: failed to resolve './file0': -2 [ 300.215933][T13506] __nla_validate_parse: 1 callbacks suppressed [ 300.215947][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 300.404904][ T5332] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.840134][T13527] Illegal XDP return value 4294967274 on prog (id 517) dev N/A, expect packet loss! [ 301.289557][T13543] netlink: 4632 bytes leftover after parsing attributes in process `syz.2.1723'. [ 301.455872][T13551] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 302.189788][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 302.196033][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 302.201350][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 302.260434][T13572] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1731'. [ 302.265486][T13572] program syz.5.1731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.461487][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 302.464158][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 304.070385][ T53] usb 46-1: device descriptor read/8, error -110 [ 304.428996][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1741'. [ 304.495316][ T53] usb usb46-port1: attempt power cycle [ 305.884671][ T6246] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 306.037349][ T6246] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 306.040572][ T6246] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.043649][ T6246] usb 10-1: Product: syz [ 306.045548][ T6246] usb 10-1: Manufacturer: syz [ 306.047310][ T6246] usb 10-1: SerialNumber: syz [ 306.070758][ T6246] usb 10-1: config 0 descriptor?? [ 306.330212][T13644] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1748'. [ 306.336849][ T6019] usb 10-1: USB disconnect, device number 3 [ 306.742534][T13646] IPv6: sit1: Disabled Multicast RS [ 306.748461][T13646] sit1: entered allmulticast mode [ 306.794768][ T6246] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 306.903541][T13654] mmap: syz.0.1755 (13654): VmData 45912064 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 306.967532][ T6246] usb 10-1: unable to get BOS descriptor or descriptor too short [ 306.971149][ T6246] usb 10-1: not running at top speed; connect to a high speed hub [ 306.975421][ T6246] usb 10-1: config 1 interface 0 has no altsetting 0 [ 306.980640][ T6246] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 306.986499][ T6246] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.989957][ T6246] usb 10-1: Manufacturer: п [ 306.991936][ T6246] usb 10-1: SerialNumber: syz [ 307.141883][T13662] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 307.144895][ T53] usb usb46-port1: unable to enumerate USB device [ 307.160732][T13662] overlayfs: failed to clone upperpath [ 307.217310][ T6246] usb 10-1: USB disconnect, device number 4 [ 308.056201][T13678] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 308.059057][T13678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.068322][T13678] vhci_hcd vhci_hcd.0: Device attached [ 308.324741][ T6120] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 308.393887][T13687] vhci_hcd: connection reset by peer [ 308.396690][ T6996] vhci_hcd: stop threads [ 308.398382][ T6996] vhci_hcd: release socket [ 308.400331][ T6996] vhci_hcd: disconnect device [ 308.528626][T13701] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.1770'. [ 308.532666][T13701] netlink: zone id is out of range [ 308.545416][T13701] netlink: zone id is out of range [ 308.548086][T13701] netlink: zone id is out of range [ 308.554654][T13701] netlink: zone id is out of range [ 308.556980][T13701] netlink: zone id is out of range [ 308.559222][T13701] netlink: zone id is out of range [ 308.562809][T13701] netlink: zone id is out of range [ 308.564462][T13701] netlink: zone id is out of range [ 308.567118][T13701] netlink: zone id is out of range [ 308.568879][T13701] netlink: zone id is out of range [ 308.688885][T13709] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 308.700511][T13709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.713215][T13709] bond3: (slave geneve2): making interface the new active one [ 308.718092][T13709] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 308.721544][ T6996] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.729045][ T6996] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.738067][ T6996] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.744678][ T6996] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.071048][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 309.110251][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 309.817530][T13743] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1783'. [ 311.273785][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 311.284416][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 311.314485][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 311.321006][T13778] atomic_op ffff88806c0c6998 conn xmit_atomic 0000000000000000 [ 311.324500][T13763] ceph: No mds server is up or the cluster is laggy [ 311.351036][T13782] veth1_macvtap: left promiscuous mode [ 311.353265][T13782] macsec0: entered promiscuous mode [ 311.355605][T13782] macsec0: entered allmulticast mode [ 312.569738][T13810] fuse: Unknown parameter 'fYÿ0xffffffffffffffff0x0000000000000006k§^˜¦ªHUtDé¤e\Þ±_dÈÖ•ÜÒ*‰êâ\ksý´ÛÔ³y}B2UÖôÜ–ñDÐ~÷ø¶´@¸t®-£Öy.Z ]ÆVIÃ' [ 312.592723][ T6977] tipc: Subscription rejected, illegal request [ 313.434702][ T6120] vhci_hcd: vhci_device speed not set [ 314.441896][ T40] audit: type=1326 audit(2000000076.979:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.449206][ T40] audit: type=1326 audit(2000000076.979:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.456076][ T40] audit: type=1326 audit(2000000076.979:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.463721][ T40] audit: type=1326 audit(2000000076.989:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.471023][ T40] audit: type=1326 audit(2000000076.989:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13837 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.477997][ T40] audit: type=1326 audit(2000000076.989:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.484866][ T40] audit: type=1326 audit(2000000076.989:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.599675][ T40] audit: type=1326 audit(2000000077.139:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13837 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 314.615046][ T40] audit: type=1326 audit(2000000077.159:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2598 code=0x7ffc0000 [ 314.623079][ T40] audit: type=1326 audit(2000000077.159:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 315.880970][T13850] overlayfs: overlapping lowerdir path [ 315.884177][T13850] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 315.887183][T13850] pim6reg1: linktype set to 780 [ 316.648619][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.651327][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.009945][T13868] fuse: Unknown parameter 'NJ’p_id' [ 319.060956][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 319.286228][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 319.297682][T13913] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 319.297682][T13913] program syz.4.1824 not setting count and/or reply_len properly [ 319.449930][T13921] 9pnet_fd: Insufficient options for proto=fd [ 319.475065][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 321.024405][ T5332] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 321.278607][T13967] dlm: no locking on control device [ 321.912977][T13974] random: crng reseeded on system resumption [ 321.951587][T13974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.956573][T13974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.961261][T13974] batman_adv: batadv0: Interface deactivated: gretap1 [ 321.964501][T13974] batman_adv: batadv0: Removing interface: gretap1 [ 322.542625][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 322.711573][T13991] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 322.713679][T13991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.716633][T13991] vhci_hcd vhci_hcd.0: Device attached [ 322.915620][T14016] vhci_hcd: connection closed [ 322.915840][ T6983] vhci_hcd: stop threads [ 322.918849][ T6983] vhci_hcd: release socket [ 322.920265][ T6983] vhci_hcd: disconnect device [ 322.945291][T14027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1853'. [ 323.204447][T14035] ip6gre1: entered promiscuous mode [ 323.206547][T14035] ip6gre1: entered allmulticast mode [ 324.379289][T14059] tmpfs: Bad value for 'mpol' [ 324.488524][T14068] net_ratelimit: 4052 callbacks suppressed [ 324.488591][T14068] openvswitch: netlink: IP tunnel dst address not specified [ 324.519180][T14068] lo speed is unknown, defaulting to 1000 [ 324.700137][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 325.061798][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 325.061814][ T40] audit: type=1326 audit(2000000087.599:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.081994][ T40] audit: type=1326 audit(2000000087.619:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.099942][ T40] audit: type=1326 audit(2000000087.619:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.109481][ T40] audit: type=1326 audit(2000000087.619:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.118978][ T40] audit: type=1326 audit(2000000087.619:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.127644][ T40] audit: type=1326 audit(2000000087.619:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.136799][ T40] audit: type=1326 audit(2000000087.619:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.145285][ T40] audit: type=1326 audit(2000000087.619:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.154291][ T40] audit: type=1326 audit(2000000087.619:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.163066][ T40] audit: type=1326 audit(2000000087.619:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 325.516736][T14083] syzkaller1: entered promiscuous mode [ 325.518819][T14083] syzkaller1: entered allmulticast mode [ 325.522530][T14074] uprobe: syz.0.1865:14074 failed to unregister, leaking uprobe [ 325.532368][T14083] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 325.850309][T14091] sctp: [Deprecated]: syz.0.1869 (pid 14091) Use of int in max_burst socket option deprecated. [ 325.850309][T14091] Use struct sctp_assoc_value instead [ 326.892174][T14116] lo speed is unknown, defaulting to 1000 [ 326.894187][T14116] lo speed is unknown, defaulting to 1000 [ 326.897637][T14116] lo speed is unknown, defaulting to 1000 [ 326.914830][T14116] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 326.929416][T14116] lo speed is unknown, defaulting to 1000 [ 326.937146][T14116] lo speed is unknown, defaulting to 1000 [ 326.939419][T14116] lo speed is unknown, defaulting to 1000 [ 326.941541][T14116] lo speed is unknown, defaulting to 1000 [ 326.945020][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 326.945333][T14116] lo speed is unknown, defaulting to 1000 [ 326.967771][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.971977][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.982553][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.989933][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.993162][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.996593][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 326.999675][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 327.003828][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 328.063036][ T6055] lo speed is unknown, defaulting to 1000 [ 329.278042][T14181] /dev/nullb0: Can't open blockdev [ 329.324018][T14182] ªªªªª»: renamed from hsr0 [ 329.828765][T14200] __nla_validate_parse: 27 callbacks suppressed [ 329.828816][T14200] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1897'. [ 329.839610][T14200] batadv0: entered allmulticast mode [ 329.889458][T14205] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 329.891721][T14205] PKCS7: Only support pkcs7_signedData type [ 329.894830][T14207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1899'. [ 329.943846][ T5985] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 330.180792][T14214] dlm: no locking on control device [ 331.033712][T14219] tmpfs: Unknown parameter 'usrquota)½p' [ 333.023299][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 333.023309][ T40] audit: type=1326 audit(2000000095.559:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.5.1913" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 333.034351][ T40] audit: type=1326 audit(2000000095.559:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.5.1913" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 333.300215][T14278] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1918'. [ 333.324288][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1919'. [ 333.385723][T14279] hid-generic 0003:0627:0001.0001: pid 14279 passed too short report [ 333.533509][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1921'. [ 334.394086][ T40] audit: type=1800 audit(2000000096.929:813): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1927" name="/" dev="9p" ino=2 res=0 errno=0 [ 334.473197][ T5332] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 334.839891][T14317] dlm: no locking on control device [ 336.015792][ T40] audit: type=1800 audit(2000000098.529:814): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1937" name="file1" dev="tmpfs" ino=2774 res=0 errno=0 [ 336.112011][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'. [ 336.542557][T14353] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1940'. [ 336.546254][T14354] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1940'. [ 337.170846][T14365] can0: slcan on pty28. [ 337.235550][T14366] can0 (unregistered): slcan off pty28. [ 337.421394][T14369] random: crng reseeded on system resumption [ 338.293038][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 338.661483][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1951'. [ 340.930025][T14427] ªªªªª»: renamed from hsr0 [ 342.003461][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1968'. [ 342.003570][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 342.081540][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 342.344356][T14474] dlm: no locking on control device [ 342.671849][T14473] lo speed is unknown, defaulting to 1000 [ 342.675772][T14473] lo speed is unknown, defaulting to 1000 [ 342.766816][ T5343] libceph: connect (1)[c::]:6789 error -101 [ 342.769527][ T5343] libceph: mon0 (1)[c::]:6789 connect error [ 342.817195][T14491] ceph: No mds server is up or the cluster is laggy [ 342.888123][T14502] policy can only be matched on NF_INET_PRE_ROUTING [ 342.888138][T14502] unable to load match [ 343.074326][T14497] cgroup: fork rejected by pids controller in /syz2 [ 343.103194][T14536] netlink: 'syz.4.1980': attribute type 13 has an invalid length. [ 343.106640][T14536] netlink: 'syz.4.1980': attribute type 17 has an invalid length. [ 343.109349][T14536] lo: left promiscuous mode [ 343.112071][T14536] lo: left allmulticast mode [ 343.119170][T14536] tunl0: left promiscuous mode [ 343.120999][T14536] tunl0: left allmulticast mode [ 343.122931][T14536] gre0: left promiscuous mode [ 343.125233][T14536] gre0: left allmulticast mode [ 343.127008][T14536] gretap0: left promiscuous mode [ 343.128944][T14536] gretap0: left allmulticast mode [ 343.204463][T14536] erspan0: left promiscuous mode [ 343.206547][T14536] erspan0: left allmulticast mode [ 343.256521][T14536] ip_vti0: left promiscuous mode [ 343.259090][T14536] ip_vti0: left allmulticast mode [ 343.262644][T14536] ip6_vti0: left promiscuous mode [ 343.265303][T14536] ip6_vti0: left allmulticast mode [ 343.268140][T14536] sit0: left promiscuous mode [ 343.270152][T14536] sit0: left allmulticast mode [ 343.272549][T14536] ip6tnl0: left promiscuous mode [ 343.275161][T14536] ip6tnl0: left allmulticast mode [ 343.280410][T14536] ip6gre0: left promiscuous mode [ 343.282277][T14536] ip6gre0: left allmulticast mode [ 343.284537][T14536] syz_tun: left promiscuous mode [ 343.287437][T14536] syz_tun: left allmulticast mode [ 343.356979][T14536] ip6gretap0: left promiscuous mode [ 343.360416][T14536] ip6gretap0: left allmulticast mode [ 343.419769][T14536] vcan0: left promiscuous mode [ 343.422650][T14536] vcan0: left allmulticast mode [ 343.427231][T14536] bond0: left promiscuous mode [ 343.429401][T14536] bond_slave_0: left promiscuous mode [ 343.433116][T14536] bond_slave_1: left promiscuous mode [ 343.436313][T14536] bond0: left allmulticast mode [ 343.438751][T14536] bond_slave_0: left allmulticast mode [ 343.442394][T14536] bond_slave_1: left allmulticast mode [ 343.448408][T14536] team0: left promiscuous mode [ 343.450588][T14536] team_slave_0: left promiscuous mode [ 343.454308][T14536] team_slave_1: left promiscuous mode [ 343.458399][T14536] team0: left allmulticast mode [ 343.460654][T14536] team_slave_0: left allmulticast mode [ 343.463073][T14536] team_slave_1: left allmulticast mode [ 343.467955][T14536] dummy0: left promiscuous mode [ 343.469983][T14536] dummy0: left allmulticast mode [ 343.471928][T14536] nlmon0: left promiscuous mode [ 343.473674][T14536] nlmon0: left allmulticast mode [ 343.476297][T14536] caif0: left promiscuous mode [ 343.478534][T14536] caif0: left allmulticast mode [ 343.480787][T14536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.746240][T14577] netlink: 83 bytes leftover after parsing attributes in process `syz.5.1983'. [ 343.894395][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 343.948633][T14591] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 343.950784][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.966338][T14591] vhci_hcd vhci_hcd.0: Device attached [ 344.168206][T14599] dlm: no locking on control device [ 344.284731][ T5343] usb 48-1: SetAddress Request (2) to port 0 [ 344.286755][ T5343] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 345.100081][T14615] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 345.701534][T14592] vhci_hcd: connection reset by peer [ 345.704398][ T6997] vhci_hcd: stop threads [ 345.709373][ T6997] vhci_hcd: release socket [ 345.713333][ T6997] vhci_hcd: disconnect device [ 345.726435][T14635] /dev/nullb0: Can't open blockdev [ 345.734004][T14639] syz_tun: entered promiscuous mode [ 345.746500][T14639] batadv_slave_0: entered promiscuous mode [ 345.908367][T14644] lo speed is unknown, defaulting to 1000 [ 345.912257][T14644] lo speed is unknown, defaulting to 1000 [ 346.436502][T14651] netlink: 'syz.5.2003': attribute type 4 has an invalid length. [ 347.785562][T14684] team0: Port device dummy0 removed [ 347.789489][T14684] bridge_slave_0: left allmulticast mode [ 347.791920][T14684] bridge_slave_0: left promiscuous mode [ 347.793872][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.817270][T14684] bridge_slave_1: left allmulticast mode [ 347.824687][T14684] bridge_slave_1: left promiscuous mode [ 347.838101][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.844396][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 347.863809][T14684] bond0: (slave bond_slave_0): Releasing backup interface [ 347.873165][T14684] bond0: (slave bond_slave_1): Releasing backup interface [ 347.882493][T14684] team0: Port device team_slave_1 removed [ 347.884500][T14684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.887990][T14684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.897988][T14684] team0: Port device geneve0 removed [ 347.900069][T14684] batadv1: left allmulticast mode [ 347.902050][T14686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.905146][T14684] batadv1: left promiscuous mode [ 347.907831][T14684] bridge0: port 3(batadv1) entered disabled state [ 347.916930][T14688] netlink: 'syz.0.2012': attribute type 10 has an invalid length. [ 347.932575][T14684] bond3: (slave geneve2): Releasing active interface [ 347.959275][T14687] team0: Mode changed to "loadbalance" [ 347.965713][T14688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.969423][T14688] team0: Port device bond0 added [ 347.972122][ T7004] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.978709][ T7004] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.984193][ T7004] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.993944][ T7004] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.998666][T14690] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.051828][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 348.069906][T14684] team0 (unregistering): Port device bond0 removed [ 348.082329][T14690] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.207340][T14690] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.279387][T14690] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.377968][ T6983] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.399839][ T6983] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.407740][ T6977] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.418952][ T6977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.625765][T14704] trusted_key: encrypted_key: insufficient parameters specified [ 348.715044][T14706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.834775][ T5343] usb 48-1: device descriptor read/8, error -110 [ 350.118053][T14731] tmpfs: Unknown parameter 'usrquota˜Â' [ 350.246489][ T5343] usb usb48-port1: attempt power cycle [ 350.376881][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 350.562390][ T40] audit: type=1800 audit(2000000113.099:815): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2032" name="/newroot/539/file0" dev="tmpfs" ino=2925 res=0 errno=0 [ 350.834951][ T5343] usb usb48-port1: unable to enumerate USB device [ 351.287971][T14819] lo: entered promiscuous mode [ 351.290203][T14819] tunl0: entered promiscuous mode [ 351.292131][T14819] gre0: entered promiscuous mode [ 351.293946][T14819] gretap0: entered promiscuous mode [ 351.295939][T14819] erspan0: entered promiscuous mode [ 351.298133][T14819] ip6_vti0: entered promiscuous mode [ 351.299856][T14819] sit0: entered promiscuous mode [ 351.301562][T14819] ip6tnl0: entered promiscuous mode [ 351.303571][T14819] ip6gre0: entered promiscuous mode [ 351.305476][T14819] syz_tun: entered promiscuous mode [ 351.307191][T14819] ip6gretap0: entered promiscuous mode [ 351.309035][T14819] vcan0: entered promiscuous mode [ 351.311578][T14819] nlmon0: entered promiscuous mode [ 351.313404][T14819] caif0: entered promiscuous mode [ 351.315393][T14819] vxcan0: entered promiscuous mode [ 351.317029][T14819] vxcan1: entered promiscuous mode [ 351.318663][T14819] veth0: entered promiscuous mode [ 351.320340][T14819] veth1: entered promiscuous mode [ 351.322184][T14819] wg0: entered promiscuous mode [ 351.324326][T14819] wg1: entered promiscuous mode [ 351.326252][T14819] wg2: entered promiscuous mode [ 351.327863][T14819] veth0_to_bridge: entered promiscuous mode [ 351.329778][T14819] bridge_slave_0: entered promiscuous mode [ 351.331706][T14819] veth1_to_bridge: entered promiscuous mode [ 351.333696][T14819] bridge_slave_1: entered promiscuous mode [ 351.335694][T14819] veth0_to_bond: entered promiscuous mode [ 351.337666][T14819] bond_slave_0: entered promiscuous mode [ 351.339642][T14819] veth1_to_bond: entered promiscuous mode [ 351.341547][T14819] bond_slave_1: entered promiscuous mode [ 351.343367][T14819] veth0_to_team: entered promiscuous mode [ 351.346219][T14819] C: entered promiscuous mode [ 351.347752][T14819] veth1_to_team: entered promiscuous mode [ 351.349551][T14819] team_slave_1: entered promiscuous mode [ 351.352860][T14819] veth0_to_batadv: entered promiscuous mode [ 351.355144][T14819] batadv_slave_0: entered promiscuous mode [ 351.358661][T14819] veth1_to_batadv: entered promiscuous mode [ 351.362983][T14819] batadv_slave_1: entered promiscuous mode [ 351.365126][T14819] xfrm0: entered promiscuous mode [ 351.366751][T14819] veth0_to_hsr: entered promiscuous mode [ 351.368604][T14819] veth1_to_hsr: entered promiscuous mode [ 351.370468][T14819] ªªªªª»: entered promiscuous mode [ 351.372275][T14819] vlan0: entered promiscuous mode [ 351.374123][T14819] vlan1: entered promiscuous mode [ 351.375899][T14819] macvlan0: entered promiscuous mode [ 351.377914][T14819] macvlan1: entered promiscuous mode [ 351.379619][T14819] ipvlan0: entered promiscuous mode [ 351.381449][T14819] ipvlan1: entered promiscuous mode [ 351.383354][T14819] macvtap0: entered promiscuous mode [ 351.385311][T14819] macsec0: entered promiscuous mode [ 351.387317][T14819] geneve0: entered promiscuous mode [ 351.389279][T14819] geneve1: entered promiscuous mode [ 351.390977][T14819] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 351.393279][T14819] bond1: entered promiscuous mode [ 351.395205][T14819] vlan2: entered promiscuous mode [ 351.397148][T14819] pim6reg: entered promiscuous mode [ 351.398876][T14819] geneve2: entered promiscuous mode [ 351.400897][T14819] veth2: entered promiscuous mode [ 351.402788][T14819] veth3: entered promiscuous mode [ 351.404474][T14819] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 351.407804][T14819] vxlan0: entered promiscuous mode [ 351.410611][T14819] bond0: entered promiscuous mode [ 351.412738][T14819] veth4: entered promiscuous mode [ 351.414899][T14819] veth5: entered promiscuous mode [ 351.416857][T14819] vxlan1: entered promiscuous mode [ 351.418516][T14819] netdevsim netdevsim2 eth0: entered promiscuous mode [ 351.420587][T14819] netdevsim netdevsim2 eth1: entered promiscuous mode [ 351.422924][T14819] netdevsim netdevsim2 eth2: entered promiscuous mode [ 351.425638][T14819] netdevsim netdevsim2 eth3: entered promiscuous mode [ 351.427823][ T6977] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.430408][ T6977] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.433056][ T6977] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.435844][ T6977] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.756649][T14832] : entered promiscuous mode [ 352.115585][T14840] lo speed is unknown, defaulting to 1000 [ 352.118719][T14840] lo speed is unknown, defaulting to 1000 [ 352.471038][T14846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 352.666261][T14857] netlink: 'syz.0.2050': attribute type 13 has an invalid length. [ 353.801498][ T6977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.805756][ T6977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.096113][T14920] trusted_key: encrypted_key: insufficient parameters specified [ 355.099557][T14921] trusted_key: encrypted_key: insufficient parameters specified [ 355.111801][T14921] debugfs: 'ttyS3' already exists in 'caif_serial' [ 355.226853][T14925] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2070'. [ 355.987116][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2073'. [ 355.994238][T14952] vlan2: entered promiscuous mode [ 355.996966][T14952] bridge0: entered promiscuous mode [ 356.172970][T14977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2078'. [ 356.176712][T14977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2078'. [ 356.181849][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.187761][T14977] bond0: (slave rose0): Enslaving as an active interface with an up link [ 356.216589][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 356.237373][T14984] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 356.272694][T14984] io-wq is not configured for unbound workers [ 356.296154][T14984] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2080'. [ 356.367416][T14972] lo speed is unknown, defaulting to 1000 [ 356.369587][T14972] lo speed is unknown, defaulting to 1000 [ 356.409840][T14994] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2081'. [ 356.655687][T15016] fuse: Unknown parameter 'user_i00000000000000000000' [ 358.464386][T15084] 9pnet_fd: Insufficient options for proto=fd [ 358.609610][T15098] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 358.611873][T15098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 358.614479][T15098] vhci_hcd vhci_hcd.0: Device attached [ 358.854845][ T6038] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 358.878433][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 358.921029][T15107] overlayfs: failed to clone upperpath [ 358.924422][T15107] overlayfs: failed to clone upperpath [ 358.929301][T15107] overlayfs: failed to clone upperpath [ 358.933857][T15107] overlayfs: failed to clone upperpath [ 358.937506][T15107] overlayfs: failed to clone upperpath [ 358.938512][T15111] efs: device does not support 512 byte blocks [ 358.941410][T15111] device does not support 512 byte blocks [ 358.941410][T15111] [ 358.941754][T15107] overlayfs: failed to clone upperpath [ 358.948588][T15107] overlayfs: failed to clone upperpath [ 358.951133][T15107] overlayfs: failed to clone upperpath [ 358.953904][T15107] overlayfs: failed to clone upperpath [ 358.956865][T15107] overlayfs: failed to clone upperpath [ 358.959187][T15107] overlayfs: failed to clone upperpath [ 358.961493][T15107] overlayfs: failed to clone upperpath [ 358.963914][T15107] overlayfs: failed to clone upperpath [ 358.966642][T15107] overlayfs: failed to clone upperpath [ 358.968890][T15107] overlayfs: failed to clone upperpath [ 358.971369][T15107] overlayfs: failed to clone upperpath [ 358.974436][T15107] overlayfs: failed to clone upperpath [ 359.000127][T15121] overlayfs: failed to clone upperpath [ 359.385346][T15099] vhci_hcd: connection reset by peer [ 359.390935][ T7004] vhci_hcd: stop threads [ 359.393131][ T7004] vhci_hcd: release socket [ 359.397463][ T7004] vhci_hcd: disconnect device [ 359.988079][T15144] binder: 15141:15144 ioctl 4018620d 0 returned -22 [ 360.070886][ T40] audit: type=1326 audit(2000000122.609:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15139 comm="syz.5.2113" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 360.773151][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2116'. [ 360.866136][ T1021] IPVS: starting estimator thread 0... [ 360.955144][T15164] IPVS: using max 36 ests per chain, 86400 per kthread [ 361.050794][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.560354][T15160] tipc: Failed to remove unknown binding: 66,1,1/0:889494855/889494857 [ 361.563172][T15160] tipc: Failed to remove unknown binding: 66,1,1/0:889494855/889494857 [ 361.759030][T15182] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 362.264116][ T6996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.273378][ T6996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.166257][ T6038] vhci_hcd: vhci_device speed not set [ 364.565897][T15262] overlayfs: failed to clone upperpath [ 365.656223][T15301] overlayfs: failed to clone upperpath [ 365.714514][T15303] netlink: 'syz.0.2153': attribute type 5 has an invalid length. [ 365.717875][T15303] netlink: 'syz.0.2153': attribute type 7 has an invalid length. [ 365.991624][T15315] netlink: zone id is out of range [ 365.993647][T15315] netlink: zone id is out of range [ 365.997488][T15315] netlink: zone id is out of range [ 366.005086][T15315] netlink: del zone limit has 4 unknown bytes [ 366.011775][ T5332] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 366.402047][T15327] kernel read not supported for file /eth0 (pid: 15327 comm: syz.4.2160) [ 366.405184][ T40] audit: type=1800 audit(2000000128.949:817): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2160" name="eth0" dev="mqueue" ino=43218 res=0 errno=0 [ 366.483507][T15331] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 366.491441][T15331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.802010][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 367.620549][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 367.626130][T15380] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2170'. [ 367.703855][T15386] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 367.706672][T15386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 367.711163][T15386] vhci_hcd vhci_hcd.0: Device attached [ 367.714630][T15394] vhci_hcd: connection closed [ 367.715604][ T6983] vhci_hcd: stop threads [ 367.718422][ T6983] vhci_hcd: release socket [ 367.720000][ T6983] vhci_hcd: disconnect device [ 367.904670][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.522195][T15423] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2180'. [ 369.525880][T15423] 0ªX¹¦D: renamed from macvtap0 [ 369.532595][T15423] 0ªX¹¦D: left promiscuous mode [ 369.534278][T15423] 0ªX¹¦D: entered allmulticast mode [ 369.539242][T15423] veth0_macvtap: entered allmulticast mode [ 369.557342][T15423] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 369.880004][T15432] lo speed is unknown, defaulting to 1000 [ 369.885943][T15432] lo speed is unknown, defaulting to 1000 [ 370.334540][T15439] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2184'. [ 370.491563][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.699864][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2186'. [ 370.806627][T15446] lo speed is unknown, defaulting to 1000 [ 370.808888][T15446] lo speed is unknown, defaulting to 1000 [ 371.548808][T15470] overlayfs: failed to clone upperpath [ 371.861628][T15476] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2194'. [ 372.035621][T15481] pim6reg1: entered promiscuous mode [ 372.037680][T15481] pim6reg1: entered allmulticast mode [ 372.776088][T15505] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.2202'. [ 372.784281][T15505] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 372.860667][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.5.2202 Not tainted syzkaller #0 PREEMPT(full) [ 372.860715][T15505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.860729][T15505] Call Trace: [ 372.860737][T15505] [ 372.860746][T15505] dump_stack_lvl+0x16c/0x1f0 [ 372.860801][T15505] sysfs_warn_dup+0x7f/0xa0 [ 372.860835][T15505] sysfs_do_create_link_sd+0x124/0x140 [ 372.860860][T15505] sysfs_create_link+0x61/0xc0 [ 372.860884][T15505] device_add+0x62c/0x1aa0 [ 372.860904][T15505] ? __pfx_device_add+0x10/0x10 [ 372.860921][T15505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 372.860951][T15505] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 372.860979][T15505] wiphy_register+0x1df4/0x29f0 [ 372.861007][T15505] ? netdev_run_todo+0x864/0x1320 [ 372.861036][T15505] ? __dev_printk+0x210/0x270 [ 372.861062][T15505] ? __pfx_wiphy_register+0x10/0x10 [ 372.861092][T15505] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 372.861122][T15505] ieee80211_register_hw+0x24a9/0x4060 [ 372.861156][T15505] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 372.861185][T15505] ? net_generic+0xea/0x2a0 [ 372.861214][T15505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 372.861244][T15505] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 372.861270][T15505] ? __hrtimer_setup+0x176/0x280 [ 372.861302][T15505] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 372.861330][T15505] ? trace_kmalloc+0x2b/0xd0 [ 372.861358][T15505] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 372.861386][T15505] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 372.861406][T15505] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 372.861428][T15505] ? __asan_memcpy+0x3c/0x60 [ 372.861451][T15505] hwsim_new_radio_nl+0xb51/0x12c0 [ 372.861473][T15505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 372.861497][T15505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 372.861544][T15505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 372.861582][T15505] genl_family_rcv_msg_doit+0x206/0x2f0 [ 372.861615][T15505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.861652][T15505] ? bpf_lsm_capable+0x9/0x10 [ 372.861672][T15505] ? security_capable+0x7e/0x260 [ 372.861694][T15505] ? ns_capable+0xd7/0x110 [ 372.861717][T15505] genl_rcv_msg+0x55c/0x800 [ 372.861750][T15505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.861778][T15505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 372.861803][T15505] netlink_rcv_skb+0x155/0x420 [ 372.861829][T15505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.861860][T15505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.861892][T15505] ? netlink_deliver_tap+0x1ae/0xd30 [ 372.861919][T15505] genl_rcv+0x28/0x40 [ 372.861944][T15505] netlink_unicast+0x5aa/0x870 [ 372.861980][T15505] ? __pfx_netlink_unicast+0x10/0x10 [ 372.862006][T15505] ? __asan_memset+0x23/0x50 [ 372.862027][T15505] ? __build_skb_around+0x278/0x3b0 [ 372.862050][T15505] ? is_vmalloc_addr+0x86/0xa0 [ 372.862076][T15505] netlink_sendmsg+0x8d1/0xdd0 [ 372.862116][T15505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.862149][T15505] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 372.862180][T15505] ____sys_sendmsg+0xa95/0xc70 [ 372.862216][T15505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.862250][T15505] ? get_compat_msghdr+0x11a/0x170 [ 372.862278][T15505] ? try_to_wake_up+0xa67/0x1870 [ 372.862300][T15505] ? rcu_is_watching+0x12/0xc0 [ 372.862322][T15505] ___sys_sendmsg+0x134/0x1d0 [ 372.862348][T15505] ? lock_release+0x201/0x2f0 [ 372.862376][T15505] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.862401][T15505] ? futex_private_hash_put+0x11c/0x300 [ 372.862430][T15505] ? rcu_is_watching+0x12/0xc0 [ 372.862461][T15505] __sys_sendmsg+0x16d/0x220 [ 372.862487][T15505] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.862524][T15505] ? __secure_computing+0x21c/0x320 [ 372.862550][T15505] __do_fast_syscall_32+0x7c/0x3a0 [ 372.862580][T15505] do_fast_syscall_32+0x32/0x80 [ 372.862609][T15505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.862637][T15505] RIP: 0023:0xf70ee579 [ 372.862651][T15505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 372.862672][T15505] RSP: 002b:00000000f549c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 372.862701][T15505] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 372.862714][T15505] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.862726][T15505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.862739][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.862752][T15505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.862771][T15505] [ 374.046116][T15534] dlm: no locking on control device [ 374.317324][T15537] siw: device registration error -23 [ 374.361349][ T40] audit: type=1326 audit(2000000136.899:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.374064][ T40] audit: type=1326 audit(2000000136.899:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.388447][ T40] audit: type=1326 audit(2000000136.917:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.397900][ T40] audit: type=1326 audit(2000000136.917:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.408155][ T40] audit: type=1326 audit(2000000136.917:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.418572][ T40] audit: type=1326 audit(2000000136.917:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.434945][ T40] audit: type=1326 audit(2000000136.917:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.445465][ T40] audit: type=1326 audit(2000000136.917:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.455365][ T40] audit: type=1326 audit(2000000136.927:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 374.465821][ T40] audit: type=1326 audit(2000000136.927:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.2.2212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 375.424075][T15577] netlink: 'syz.5.2224': attribute type 3 has an invalid length. [ 375.507420][T15580] bridge_slave_0: left allmulticast mode [ 375.509975][T15580] bridge_slave_0: left promiscuous mode [ 375.513013][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.520099][T15580] bridge_slave_1: left allmulticast mode [ 375.522237][T15580] bridge_slave_1: left promiscuous mode [ 375.526157][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.540177][T15580] team0: Port device team_slave_0 removed [ 375.549967][T15580] team0: Port device team_slave_1 removed [ 375.552978][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.556918][T15580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.560361][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.573290][T15580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.606849][T15581] team0: Mode changed to "loadbalance" [ 375.691850][T15586] can0: slcan on ttyS3. [ 375.704422][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2224'. [ 375.756299][T15585] can0 (unregistered): slcan off ttyS3. [ 375.788055][T15581] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.938209][T15581] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.022171][T15581] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.084351][T15581] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.193111][ T6977] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.207638][ T7004] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.217151][ T7004] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.224887][ T7004] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.377426][T15615] lo speed is unknown, defaulting to 1000 [ 376.405195][T15615] lo speed is unknown, defaulting to 1000 [ 376.728251][ T5985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.731589][ T5985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.734263][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.739188][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.741618][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.752363][T15622] lo speed is unknown, defaulting to 1000 [ 376.754489][T15622] lo speed is unknown, defaulting to 1000 [ 376.811220][T15622] chnl_net:caif_netlink_parms(): no params data found [ 376.853808][T15629] siw: device registration error -23 [ 376.891429][T15622] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.894840][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.897159][T15622] bridge_slave_0: entered allmulticast mode [ 376.899467][T15622] bridge_slave_0: entered promiscuous mode [ 376.899875][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 376.902322][T15622] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.906677][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 376.907839][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.914428][T15622] bridge_slave_1: entered allmulticast mode [ 376.916926][T15622] bridge_slave_1: entered promiscuous mode [ 377.042296][ T5985] Bluetooth: hci3: ACL packet for unknown connection handle 2308 [ 377.043761][T15622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.078475][T15622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.112802][T15622] team0: Port device team_slave_0 added [ 377.116143][T15622] team0: Port device team_slave_1 added [ 377.137510][T15622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.139749][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.149189][T15622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.153068][T15622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.155534][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.164122][T15622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.093663][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.252873][T15622] hsr_slave_0: entered promiscuous mode [ 378.255925][T15622] hsr_slave_1: entered promiscuous mode [ 378.258114][T15622] debugfs: 'hsr0' already exists in 'hsr' [ 378.261221][T15622] Cannot create hsr debugfs directory [ 378.296000][T15646] syzkaller0: entered promiscuous mode [ 378.297836][T15646] syzkaller0: entered allmulticast mode [ 378.805395][ T5985] Bluetooth: hci1: command tx timeout [ 379.138985][ T6997] bond0 (unregistering): Released all slaves [ 379.145186][ T6997] bond1 (unregistering): Released all slaves [ 379.149816][ T6997] bond2 (unregistering): Released all slaves [ 379.156548][ T6997] bond3 (unregistering): Released all slaves [ 379.241064][ T6997] : left promiscuous mode [ 379.337755][ T6997] tipc: Left network mode [ 379.484729][ T53] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 379.886499][T15657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.914941][T15657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.937081][ T6997] hsr_slave_0: left promiscuous mode [ 379.949562][ T6997] hsr_slave_1: left promiscuous mode [ 380.767039][T15674] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2250'. [ 380.799430][T15674] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2250'. [ 380.887809][ T5985] Bluetooth: hci1: command tx timeout [ 380.954624][ T6059] lo speed is unknown, defaulting to 1000 [ 380.956577][ T6059] infiniband syz0: ib_query_port failed (-19) [ 380.974148][T15622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.981172][T15622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.986112][T15622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.993644][T15622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.057073][T15622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.082520][T15622] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.086914][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.089229][ T7004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.094519][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.097445][ T6983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.271623][T15622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.331110][T15622] veth0_vlan: entered promiscuous mode [ 381.345399][T15622] veth1_vlan: entered promiscuous mode [ 381.366553][T15622] veth0_macvtap: entered promiscuous mode [ 381.371325][T15622] veth1_macvtap: entered promiscuous mode [ 381.379301][T15622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.386484][T15622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.393594][ T6977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.396582][ T6977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.399792][ T6977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.402521][ T6977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.430800][ T6983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.435093][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.460812][ T6983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.463347][ T6983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.540697][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 381.698898][ T6997] IPVS: stop unused estimator thread 0... [ 382.081457][ T5332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.083994][ T5332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.087278][ T5332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.090256][ T5332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.092835][ T5332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.109494][T15714] lo speed is unknown, defaulting to 1000 [ 382.436801][T15714] chnl_net:caif_netlink_parms(): no params data found [ 382.626107][T15714] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.653294][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.661589][T15714] bridge_slave_0: entered allmulticast mode [ 382.664042][T15714] bridge_slave_0: entered promiscuous mode [ 382.668273][T15714] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.670980][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.676485][T15714] bridge_slave_1: entered allmulticast mode [ 382.725252][T15714] bridge_slave_1: entered promiscuous mode [ 382.843678][T15714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.874870][T15714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.946036][T15714] team0: Port device team_slave_0 added [ 382.952204][T15714] team0: Port device team_slave_1 added [ 383.064799][ T5985] Bluetooth: hci1: command tx timeout [ 383.112142][T15714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.164136][T15714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.234855][T15714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.289297][T15714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.291901][T15714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.316020][T15714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.783389][T15740] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 383.791286][T15714] hsr_slave_0: entered promiscuous mode [ 383.793398][T15714] hsr_slave_1: entered promiscuous mode [ 383.795751][T15714] debugfs: 'hsr0' already exists in 'hsr' [ 383.797568][T15714] Cannot create hsr debugfs directory [ 383.878704][T15742] netlink: 'syz.4.2261': attribute type 27 has an invalid length. [ 383.926188][T15742] wg2: left allmulticast mode [ 383.928295][T15742] batadv_slave_0: left promiscuous mode [ 383.944229][T15742] vti0: left promiscuous mode [ 383.976017][T15709] lo speed is unknown, defaulting to 1000 [ 383.977856][T15709] syz2: Port: 1 Link DOWN [ 384.027884][T15745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.030539][T15745] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.037370][T15745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.042389][ T5878] lo speed is unknown, defaulting to 1000 [ 384.045058][ T5878] syz2: Port: 1 Link ACTIVE [ 384.047009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e8aec00: rx timeout, send abort [ 384.050633][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e8aec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 384.175883][ T5985] Bluetooth: hci4: command tx timeout [ 384.240162][T15714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.245344][T15714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.249925][T15714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.253577][T15714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.305206][T15714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.313651][T15714] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.318647][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.320991][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.331397][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.333643][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.498425][T15714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.517682][T15714] veth0_vlan: entered promiscuous mode [ 384.525627][T15714] veth1_vlan: entered promiscuous mode [ 384.538048][T15714] veth0_macvtap: entered promiscuous mode [ 384.565172][T15714] veth1_macvtap: entered promiscuous mode [ 384.571927][T15714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.582385][T15714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.592427][ T6996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.596592][ T6996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.602797][ T6996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.613605][ T6996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.630427][ T6977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.633033][ T6977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.645780][ T6983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.648304][ T6983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.755355][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2269'. [ 385.001375][T15790] siw: device registration error -23 [ 385.134796][ T5985] Bluetooth: hci1: command tx timeout [ 385.414017][T15777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.417217][T15777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.419680][T15777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 385.422745][T15777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 385.426889][T15777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.429290][T15777] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.433316][T15777] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.614269][T15799] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2273' resets device [ 385.839365][T15812] can0: slcan on pty28. [ 385.874764][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 385.874776][ T40] audit: type=1804 audit(2000000148.407:835): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2277" name="/newroot/410/bus" dev="tmpfs" ino=2190 res=1 errno=0 [ 386.797292][T15809] can0 (unregistered): slcan off pty28. [ 386.884693][ T5985] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.326415][T15843] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 387.331001][T15709] IPVS: starting estimator thread 0... [ 387.414777][T15844] IPVS: using max 57 ests per chain, 136800 per kthread [ 387.445509][ T5332] Bluetooth: hci4: command 0x040f tx timeout [ 387.447563][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.494832][T15843] nbd0: detected capacity change from 0 to 127 [ 387.513668][ T5985] block nbd0: Receive control failed (result -104) [ 387.645727][T15856] siw: device registration error -23 [ 388.312547][T15865] lo speed is unknown, defaulting to 1000 [ 389.534689][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.537268][ T5985] Bluetooth: hci4: command 0x040f tx timeout [ 390.245881][T15905] fuse: Unknown parameter 'smackfsroot' [ 390.248653][T15903] fuse: Unknown parameter 'smackfsroot' [ 390.985872][T15939] fuse: Bad value for 'fd' [ 391.025145][T15945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.029912][T15945] autofs4:pid:15945:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 391.116236][T15948] wg2: entered allmulticast mode [ 391.176655][T15952] Invalid ELF header type: 3 != 1 [ 391.206333][T15954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2310'. [ 391.926022][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 391.928050][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 392.163928][T15942] hub 2-0:1.0: USB hub found [ 392.165646][T15942] hub 2-0:1.0: 2 ports detected [ 392.259267][T15966] siw: device registration error -23 [ 392.850531][T15979] sp0: Synchronizing with TNC [ 392.926283][T15985] netlink: 'syz.5.2317': attribute type 4 has an invalid length. [ 392.939397][T15985] netlink: 'syz.5.2317': attribute type 4 has an invalid length. [ 393.013150][ T40] audit: type=1326 audit(2000000155.547:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.025098][ T40] audit: type=1326 audit(2000000155.547:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.034931][ T40] audit: type=1326 audit(2000000155.557:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.043647][ T40] audit: type=1326 audit(2000000155.557:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.055669][ T40] audit: type=1326 audit(2000000155.557:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.062804][ T40] audit: type=1326 audit(2000000155.557:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.070030][ T40] audit: type=1326 audit(2000000155.557:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.077089][ T40] audit: type=1326 audit(2000000155.557:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.083909][ T40] audit: type=1326 audit(2000000155.557:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.091057][ T40] audit: type=1326 audit(2000000155.557:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.4.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 393.373335][T15970] [U] è` [ 393.875804][T15995] tc_dump_action: action bad kind [ 393.903003][T16000] tmpfs: Bad value for 'mpol' [ 394.004776][ T5985] Bluetooth: hci4: command 0x040f tx timeout [ 395.153217][T15997] lo speed is unknown, defaulting to 1000 [ 395.344724][ T53] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 395.498099][ T53] usb 10-1: config 195 has an invalid interface number: 145 but max is 0 [ 395.501554][ T53] usb 10-1: config 195 has no interface number 0 [ 395.509280][ T53] usb 10-1: config 195 interface 145 has no altsetting 0 [ 395.529995][ T53] usb 10-1: New USB device found, idVendor=055f, idProduct=c211, bcdDevice=9b.e4 [ 395.533801][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.582775][ T53] usb 10-1: Product: syz [ 395.584522][ T53] usb 10-1: Manufacturer: syz [ 395.594790][ T53] usb 10-1: SerialNumber: syz [ 396.059985][T15997] lo speed is unknown, defaulting to 1000 [ 396.084693][ T5985] Bluetooth: hci4: command 0x040f tx timeout [ 397.141200][ T53] gspca_main: sunplus-2.14.0 probing 055f:c211 [ 397.144977][ T53] gspca_sunplus: reg_r err -71 [ 397.323493][T16066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2341'. [ 397.330423][T16066] syz.2.2341: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.337226][T16066] CPU: 3 UID: 0 PID: 16066 Comm: syz.2.2341 Not tainted syzkaller #0 PREEMPT(full) [ 397.337256][T16066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 397.337268][T16066] Call Trace: [ 397.337273][T16066] [ 397.337282][T16066] dump_stack_lvl+0x16c/0x1f0 [ 397.337311][T16066] warn_alloc+0x248/0x3a0 [ 397.337352][T16066] ? __pfx_warn_alloc+0x10/0x10 [ 397.337375][T16066] ? __pfx_stack_trace_save+0x10/0x10 [ 397.337402][T16066] ? kasan_save_stack+0x42/0x60 [ 397.337423][T16066] ? kasan_save_stack+0x33/0x60 [ 397.337444][T16066] ? kasan_save_track+0x14/0x30 [ 397.337463][T16066] ? xskq_create+0x52/0x1d0 [ 397.337483][T16066] ? xsk_setsockopt+0x74e/0x9a0 [ 397.337499][T16066] ? do_sock_setsockopt+0xf3/0x1d0 [ 397.337526][T16066] ? xskq_create+0xfb/0x1d0 [ 397.337546][T16066] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 397.337568][T16066] ? xskq_create+0xfb/0x1d0 [ 397.337590][T16066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.337614][T16066] ? xskq_create+0xfb/0x1d0 [ 397.337631][T16066] vmalloc_user_noprof+0x9e/0xe0 [ 397.337648][T16066] ? xskq_create+0xfb/0x1d0 [ 397.337667][T16066] xskq_create+0xfb/0x1d0 [ 397.337689][T16066] xsk_setsockopt+0x74e/0x9a0 [ 397.337705][T16066] ? __pfx_aa_sk_perm+0x10/0x10 [ 397.337729][T16066] ? __pfx_xsk_setsockopt+0x10/0x10 [ 397.337748][T16066] ? aa_sock_opt_perm+0xfd/0x1c0 [ 397.337768][T16066] ? __pfx_xsk_setsockopt+0x10/0x10 [ 397.337784][T16066] do_sock_setsockopt+0xf3/0x1d0 [ 397.337813][T16066] __sys_setsockopt+0x120/0x1a0 [ 397.337839][T16066] __ia32_sys_setsockopt+0xbc/0x160 [ 397.337858][T16066] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 397.337886][T16066] __do_fast_syscall_32+0x7c/0x3a0 [ 397.337910][T16066] do_fast_syscall_32+0x32/0x80 [ 397.337935][T16066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.337960][T16066] RIP: 0023:0xf7f98579 [ 397.337972][T16066] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 397.337992][T16066] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 397.338009][T16066] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000011b [ 397.338022][T16066] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 397.338033][T16066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.338041][T16066] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 397.338053][T16066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.338071][T16066] [ 397.338078][T16066] Mem-Info: [ 397.427381][T16066] active_anon:4050 inactive_anon:701 isolated_anon:0 [ 397.427381][T16066] active_file:2527 inactive_file:1271 isolated_file:0 [ 397.427381][T16066] unevictable:3787 dirty:270 writeback:0 [ 397.427381][T16066] slab_reclaimable:6552 slab_unreclaimable:62036 [ 397.427381][T16066] mapped:25319 shmem:4644 pagetables:1549 [ 397.427381][T16066] sec_pagetables:339 bounce:0 [ 397.427381][T16066] kernel_misc_reclaimable:0 [ 397.427381][T16066] free:59372 free_pcp:19249 free_cma:0 [ 397.444257][T16066] Node 0 active_anon:848kB inactive_anon:4kB active_file:300kB inactive_file:4kB unevictable:3612kB isolated(anon):0kB isolated(file):0kB mapped:5904kB dirty:96kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8336kB pagetables:1776kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 397.454671][T16066] Node 1 active_anon:15352kB inactive_anon:2800kB active_file:9808kB inactive_file:5080kB unevictable:3536kB isolated(anon):8000kB isolated(file):0kB mapped:95372kB dirty:984kB writeback:0kB shmem:15040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6824kB pagetables:4420kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB [ 397.465903][T16066] Node 0 DMA free:2076kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:224kB free_cma:0kB [ 397.477014][T16066] lowmem_reserve[]: 0 288 288 288 288 [ 397.479460][T16066] Node 0 DMA32 free:16808kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:376KB active_anon:848kB inactive_anon:4kB active_file:300kB inactive_file:4kB unevictable:3536kB writepending:96kB present:1032196kB managed:295148kB mlocked:76kB bounce:0kB free_pcp:9988kB local_pcp:3036kB free_cma:0kB [ 397.493207][T16066] lowmem_reserve[]: 0 0 0 0 0 [ 397.494964][T16066] Node 1 DMA32 free:212764kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15352kB inactive_anon:2800kB active_file:9808kB inactive_file:5080kB unevictable:7536kB writepending:984kB present:1048432kB managed:948220kB mlocked:8100kB bounce:0kB free_pcp:72652kB local_pcp:19476kB free_cma:0kB [ 397.506723][T16066] lowmem_reserve[]: 0 0 0 0 0 [ 397.508848][T16066] Node 0 DMA: 5*4kB (UM) 17*8kB (UM) 18*16kB (UM) 7*32kB (UM) 2*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 397.514757][T16066] Node 0 DMA32: 281*4kB (UMH) 334*8kB (UH) 102*16kB (UMH) 109*32kB (UMH) 72*64kB (UM) 19*128kB (M) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16724kB [ 397.520040][T16066] Node 1 DMA32: 3*4kB (U) 332*8kB (UM) 1*16kB (E) 259*32kB (UE) 174*64kB (UME) 193*128kB (UME) 112*256kB (UME) 84*512kB (UME) 82*1024kB (UME) 3*2048kB (UM) 1*4096kB (U) = 212700kB [ 397.525903][T16066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.528905][T16066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.531878][T16066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.535380][T16066] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 397.538412][T16066] 9570 total pagecache pages [ 397.539854][T16066] 1132 pages in swap cache [ 397.541256][T16066] Free swap = 82964kB [ 397.542554][T16066] Total swap = 124996kB [ 397.543903][T16066] 524155 pages RAM [ 397.545191][T16066] 0 pages HighMem/MovableOnly [ 397.546716][T16066] 209473 pages reserved [ 397.548091][T16066] 0 pages cma reserved [ 398.136945][T16090] block device autoloading is deprecated and will be removed. [ 398.157518][T16090] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 398.274342][ T53] sunplus 10-1:195.145: probe with driver sunplus failed with error -71 [ 398.281974][ T53] usb 10-1: USB disconnect, device number 6 [ 399.017614][ T6120] Process accounting resumed [ 400.197798][T16148] siw: device registration error -23 [ 400.200234][T16106] kexec: Could not allocate control_code_buffer [ 400.304066][T16151] netlink: 'syz.4.2356': attribute type 10 has an invalid length. [ 400.310739][T16151] syz_tun: entered promiscuous mode [ 400.316504][T16151] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 400.646940][T16155] siw: device registration error -23 [ 402.315068][T16171] siw: device registration error -23 [ 403.200519][T16193] syz_tun: left promiscuous mode [ 403.218049][ T53] lo speed is unknown, defaulting to 1000 [ 403.220277][ T53] syz2: Port: 1 Link DOWN [ 403.228604][T16199] bpf: Bad value for 'mode' [ 403.421866][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2374'. [ 403.903830][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'. [ 404.269664][T16251] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 404.271815][T16251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 404.274675][T16251] vhci_hcd vhci_hcd.0: Device attached [ 404.587848][ T29] usb 46-1: SetAddress Request (6) to port 0 [ 404.590502][ T29] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 404.663471][ T5985] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 404.867257][T16252] vhci_hcd: connection reset by peer [ 404.872306][ T6977] vhci_hcd: stop threads [ 404.873999][ T6977] vhci_hcd: release socket [ 404.876191][ T6977] vhci_hcd: disconnect device [ 404.976119][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2385'. [ 406.420214][T16299] syz.2.2397 (16299): drop_caches: 2 [ 406.422262][T16299] syz.2.2397 (16299): drop_caches: 2 [ 407.020591][T16321] /dev/nullb0: Can't open blockdev [ 408.840542][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2413'. [ 408.987825][T16372] overlayfs: missing 'lowerdir' [ 409.024543][T16374] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2415'. [ 409.077180][T16382] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 409.079899][T16382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2418'. [ 409.082814][T16382] nbd: illegal input index 1048576 [ 409.236847][T16380] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2417'. [ 409.237471][T16387] siw: device registration error -23 [ 409.248873][T16380] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2417'. [ 409.688210][ T29] usb 46-1: device descriptor read/8, error -110 [ 410.117397][ T40] kauditd_printk_skb: 275 callbacks suppressed [ 410.117407][ T40] audit: type=1800 audit(2000000172.657:1121): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2424" name="file1" dev="overlay" ino=219 res=0 errno=0 [ 410.126086][ T40] audit: type=1800 audit(2000000172.657:1122): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2424" name="file1" dev="overlay" ino=219 res=0 errno=0 [ 410.395032][ T29] usb usb46-port1: attempt power cycle [ 410.516598][T16408] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2426'. [ 410.965671][T16415] nvme_fabrics: missing parameter 'transport=%s' [ 410.967925][T16415] nvme_fabrics: missing parameter 'nqn=%s' [ 411.111486][ T29] usb usb46-port1: unable to enumerate USB device [ 411.401103][T16432] siw: device registration error -23 [ 412.292526][T16434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.297547][T16454] ------------[ cut here ]------------ [ 412.299363][T16454] WARNING: CPU: 3 PID: 16454 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.300172][T16434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.302823][T16454] Modules linked in: [ 412.307129][T16454] CPU: 3 UID: 0 PID: 16454 Comm: syz.4.2436 Not tainted syzkaller #0 PREEMPT(full) [ 412.307146][T16454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 412.307153][T16454] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.307171][T16454] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 06 50 80 0e 00 75 0b c6 05 fd 4f 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 412.307181][T16454] RSP: 0018:ffffc900033bf7d0 EFLAGS: 00010246 [ 412.307194][T16454] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 412.307201][T16454] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000000000040d40 [ 412.307246][T16454] RBP: 0000000000000031 R08: 0000000000000005 R09: 0000000000000009 [ 412.307254][T16454] R10: 0000000000000031 R11: 000000000000001e R12: 0000000000040d40 [ 412.307260][T16454] R13: 1ffff92000677f0f R14: ffffffff9ae70a24 R15: 0000000000000031 [ 412.307267][T16454] FS: 0000000000000000(0000) GS:ffff8880977c4000(0063) knlGS:00000000f54ceb40 [ 412.307290][T16454] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 412.307299][T16454] CR2: 0000000057f9b4c0 CR3: 0000000028a65000 CR4: 0000000000352ef0 [ 412.307305][T16454] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 412.307312][T16454] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 412.307318][T16454] Call Trace: [ 412.307322][T16454] [ 412.307326][T16454] ? __do_fast_syscall_32+0x7c/0x3a0 [ 412.307341][T16454] ? do_fast_syscall_32+0x32/0x80 [ 412.307354][T16454] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.307371][T16454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 412.307387][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.307398][T16454] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 412.307415][T16454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.307431][T16454] ? policy_nodemask+0xea/0x4e0 [ 412.307445][T16454] alloc_pages_mpol+0x1fb/0x550 [ 412.307458][T16454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 412.307473][T16454] ? v9fs_fid_get_acl+0x7a/0x120 [ 412.307488][T16454] ___kmalloc_large_node+0xed/0x160 [ 412.307504][T16454] ? v9fs_fid_get_acl+0x7a/0x120 [ 412.307518][T16454] __kmalloc_large_node_noprof+0x1c/0x70 [ 412.307534][T16454] __kmalloc_noprof.cold+0xc/0x61 [ 412.307549][T16454] ? __pfx_iget5_locked+0x10/0x10 [ 412.307568][T16454] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 412.307584][T16454] ? p9_req_put+0x1c6/0x250 [ 412.307597][T16454] v9fs_fid_get_acl+0x7a/0x120 [ 412.307612][T16454] v9fs_get_acl+0x3f4/0x530 [ 412.307627][T16454] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 412.307640][T16454] v9fs_mount+0x4fd/0xa90 [ 412.307648][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.307658][T16454] ? __pfx_v9fs_mount+0x10/0x10 [ 412.307667][T16454] ? aa_get_newest_label+0xd2/0x250 [ 412.307679][T16454] ? apparmor_capable+0x114/0x1d0 [ 412.307690][T16454] ? __pfx_v9fs_mount+0x10/0x10 [ 412.307699][T16454] legacy_get_tree+0x10c/0x220 [ 412.307711][T16454] vfs_get_tree+0x8b/0x340 [ 412.307721][T16454] path_mount+0x1513/0x2000 [ 412.307735][T16454] ? __pfx_path_mount+0x10/0x10 [ 412.307748][T16454] ? kmem_cache_free+0x2d1/0x4d0 [ 412.307760][T16454] ? putname+0x154/0x1a0 [ 412.307773][T16454] ? getname_flags.part.0+0x1c5/0x550 [ 412.307791][T16454] ? __ia32_sys_mount+0x28b/0x310 [ 412.307803][T16454] __ia32_sys_mount+0x28b/0x310 [ 412.307816][T16454] ? __pfx___ia32_sys_mount+0x10/0x10 [ 412.307830][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.307841][T16454] __do_fast_syscall_32+0x7c/0x3a0 [ 412.307855][T16454] do_fast_syscall_32+0x32/0x80 [ 412.307869][T16454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.307881][T16454] RIP: 0023:0xf70de579 [ 412.307889][T16454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 412.307899][T16454] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 412.307909][T16454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 412.307915][T16454] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000140 [ 412.307922][T16454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.308282][T16454] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 412.308289][T16454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.308299][T16454] [ 412.308304][T16454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.308311][T16454] CPU: 3 UID: 0 PID: 16454 Comm: syz.4.2436 Not tainted syzkaller #0 PREEMPT(full) [ 412.308323][T16454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 412.308329][T16454] Call Trace: [ 412.308333][T16454] [ 412.308336][T16454] dump_stack_lvl+0x3d/0x1f0 [ 412.308350][T16454] vpanic+0x6e8/0x7a0 [ 412.308365][T16454] ? __pfx_vpanic+0x10/0x10 [ 412.308380][T16454] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.308393][T16454] panic+0xca/0xd0 [ 412.308406][T16454] ? __pfx_panic+0x10/0x10 [ 412.308422][T16454] ? check_panic_on_warn+0x1f/0xb0 [ 412.308437][T16454] check_panic_on_warn+0xab/0xb0 [ 412.308452][T16454] __warn+0xf6/0x3c0 [ 412.308466][T16454] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.308479][T16454] report_bug+0x3c3/0x580 [ 412.308490][T16454] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.308503][T16454] handle_bug+0x184/0x210 [ 412.308517][T16454] exc_invalid_op+0x17/0x50 [ 412.308531][T16454] asm_exc_invalid_op+0x1a/0x20 [ 412.308540][T16454] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 412.308553][T16454] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 06 50 80 0e 00 75 0b c6 05 fd 4f 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 412.308563][T16454] RSP: 0018:ffffc900033bf7d0 EFLAGS: 00010246 [ 412.308571][T16454] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 412.308577][T16454] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000000000040d40 [ 412.308583][T16454] RBP: 0000000000000031 R08: 0000000000000005 R09: 0000000000000009 [ 412.308589][T16454] R10: 0000000000000031 R11: 000000000000001e R12: 0000000000040d40 [ 412.308595][T16454] R13: 1ffff92000677f0f R14: ffffffff9ae70a24 R15: 0000000000000031 [ 412.308605][T16454] ? __do_fast_syscall_32+0x7c/0x3a0 [ 412.308618][T16454] ? do_fast_syscall_32+0x32/0x80 [ 412.308631][T16454] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.308646][T16454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 412.308662][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.308672][T16454] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 412.308688][T16454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.308703][T16454] ? policy_nodemask+0xea/0x4e0 [ 412.308716][T16454] alloc_pages_mpol+0x1fb/0x550 [ 412.308730][T16454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 412.308744][T16454] ? v9fs_fid_get_acl+0x7a/0x120 [ 412.308758][T16454] ___kmalloc_large_node+0xed/0x160 [ 412.308774][T16454] ? v9fs_fid_get_acl+0x7a/0x120 [ 412.308788][T16454] __kmalloc_large_node_noprof+0x1c/0x70 [ 412.308804][T16454] __kmalloc_noprof.cold+0xc/0x61 [ 412.308818][T16454] ? __pfx_iget5_locked+0x10/0x10 [ 412.308832][T16454] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 412.308847][T16454] ? p9_req_put+0x1c6/0x250 [ 412.308860][T16454] v9fs_fid_get_acl+0x7a/0x120 [ 412.308875][T16454] v9fs_get_acl+0x3f4/0x530 [ 412.308890][T16454] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 412.308903][T16454] v9fs_mount+0x4fd/0xa90 [ 412.308911][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.308921][T16454] ? __pfx_v9fs_mount+0x10/0x10 [ 412.308930][T16454] ? aa_get_newest_label+0xd2/0x250 [ 412.308943][T16454] ? apparmor_capable+0x114/0x1d0 [ 412.308958][T16454] ? __pfx_v9fs_mount+0x10/0x10 [ 412.308971][T16454] legacy_get_tree+0x10c/0x220 [ 412.308986][T16454] vfs_get_tree+0x8b/0x340 [ 412.308997][T16454] path_mount+0x1513/0x2000 [ 412.309029][T16454] ? __pfx_path_mount+0x10/0x10 [ 412.309044][T16454] ? kmem_cache_free+0x2d1/0x4d0 [ 412.309054][T16454] ? putname+0x154/0x1a0 [ 412.309067][T16454] ? getname_flags.part.0+0x1c5/0x550 [ 412.309089][T16454] ? __ia32_sys_mount+0x28b/0x310 [ 412.309101][T16454] __ia32_sys_mount+0x28b/0x310 [ 412.309118][T16454] ? __pfx___ia32_sys_mount+0x10/0x10 [ 412.309131][T16454] ? rcu_is_watching+0x12/0xc0 [ 412.309142][T16454] __do_fast_syscall_32+0x7c/0x3a0 [ 412.309156][T16454] do_fast_syscall_32+0x32/0x80 [ 412.309169][T16454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.309186][T16454] RIP: 0023:0xf70de579 [ 412.309194][T16454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 412.309203][T16454] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 412.309212][T16454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 412.309219][T16454] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000140 [ 412.309225][T16454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.309231][T16454] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 412.309237][T16454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.309245][T16454] [ 412.310724][T16454] Kernel Offset: disabled VM DIAGNOSIS: 11:12:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000004ff17 RCX=ffffffff822c2233 RDX=ffff8880214ba440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000344f488 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000007f17 R11=00000000000079da R12=ffff888040a7b6e0 R13=0000000000000001 R14=0000000000000000 R15=0000000000007f17 RIP=ffffffff81bb07eb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f544adc0 CR3=0000000062726000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc900033cf060 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=746f6f7465756c42 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c7604 CR3=0000000062726000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84e90bbb RDX=ffff888024dec880 RSI=ffffffff84e90c6e RDI=0000000000000001 RBP=ffffc90002a2f320 RSP=ffffc90002a2f1e0 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000002 R11=0000000000000012 R12=1ffff92000545e46 R13=0000000000000002 R14=0000000000000001 R15=ffffffff8c1656b9 RIP=ffffffff81bb0e21 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe17f3d9300 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c9cb246000 CR3=0000000050757000 CR4=00352ef0 DR0=0000000000000d76 DR1=0000000000000000 DR2=0000000000000007 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000098b 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080604011fe4 02080005b9820800 01080006001dee3c 0000222d00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080151880801a006 0501800201000000 0806040107c63080 8080800800010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040806408080a008 0004080002808008 000ffdc080020c01 41dc00040004b084 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80080000021fffff feb8080008044bbe 006b636f73762f76 65642f01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffe9080003 0000000208060008 0004013dbe00020d c205baee08000100 ZMM24=b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a b3f3d28ab3f3d28a ZMM25=6325291063252910 6325291063252910 6325291063252910 6325291063252910 6325291063252910 6325291063252910 6325291063252910 6325291063252910 ZMM26=4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f 4648b89f4648b89f ZMM27=f2029190f2029190 f2029190f2029190 f2029190f2029190 f2029190f2029190 f2029190f2029190 f2029190f2029190 f2029190f2029190 f2029190f2029190 ZMM28=000001c0000001bf 000001be000001bd 000001bc000001bb 000001ba000001b9 000001b8000001b7 000001b6000001b5 000001b4000001b3 000001b2000001b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c4140000c4140000 c4140000c4140000 c4140000c4140000 c4140000c4140000 c4140000c4140000 c4140000c4140000 c4140000c4140000 c4140000c4140000 info registers vcpu 3 CPU#3 RAX=0000000000000008 RBX=ffffffff8ba5f97f RCX=0000000000000000 RDX=0000000000000800 RSI=ffffffff8d166820 RDI=0000000000000000 RBP=ffffffff8d166820 RSP=ffffc900033bf060 R8 =0000000000000001 R9 =0000000000000025 R10=0000000000000025 R11=000000000000001e R12=0000000000000000 R13=ffffffff8ba5f979 R14=0000000000000800 R15=0000000000000020 RIP=ffffffff81bb09ff RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057f9b4c0 CR3=0000000028a65000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000