last executing test programs: 4m39.753647196s ago: executing program 2 (id=9): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newnexthop={0x5c, 0x68, 0x215, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x1, 0x0, 0x2d06d38c7c00ac3}, [@NHA_GROUP={0x44, 0x2, [{0x0, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0xff}, {0x1, 0x32}, {0x1, 0xbe}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000840) 4m39.686579419s ago: executing program 2 (id=11): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, &(0x7f0000000040)) 4m36.656464309s ago: executing program 2 (id=37): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x800, 0xfffc, {0x4, 0x1}, {0x17, 0x2}, @cond=[{0x7, 0x4, 0x200, 0xde2d, 0xb, 0xfbfe}, {0xff, 0x3, 0xfffb, 0x801, 0xffff, 0xba}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000001c0)=""/147) 4m36.656208561s ago: executing program 2 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 4m35.246424635s ago: executing program 2 (id=41): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf259429000008000300", @ANYRES32=r3, @ANYBLOB="0a001a0008021100000000000a001a"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20044000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r5, {0x7, 0x1f, 0x80000007, 0x10000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r8 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x110, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r11) sendmsg$ETHTOOL_MSG_FEATURES_GET(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x14, r12, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r8, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r8, 0x22d0, 0x20, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4m34.396193388s ago: executing program 2 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x81, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 4m19.386014968s ago: executing program 32 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x81, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 2m8.812420328s ago: executing program 0 (id=1661): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d30000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000073f000/0x800000)=nil, &(0x7f0000296000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x1ff, 0xfffb, 0xe, 0x0, "1c9656926ba28081"}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) io_uring_enter(r0, 0x6989, 0x0, 0x29, 0x0, 0x0) r6 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) io_uring_enter(r6, 0x2217, 0x7721, 0x16, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.id\x00') 2m8.63029352s ago: executing program 0 (id=1664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.578656955s ago: executing program 0 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 2m8.480480136s ago: executing program 0 (id=1668): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r5 = syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r8, 0x64e10, 0x16201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) syz_usb_disconnect(r5) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x428903) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffefffffdffff, 0x494280) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r8, 0x64e10, 0x16201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) syz_usb_disconnect(r5) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x428903) (async) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffefffffdffff, 0x494280) (async) 2m7.494236097s ago: executing program 0 (id=1678): syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x2d4}, &(0x7f00000000c0), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020011}, 0x0) iopl(0x3) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) 2m6.608357136s ago: executing program 0 (id=1688): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x4) ioctl$FICLONE(r0, 0x40049409, r0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000100)=""/254, 0xfe}], 0x2, 0x8, 0x5c, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x5, 0x98}, {0x69, 0xfd}, 0xf5a, 0x1, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x40000) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000440)={0x5b5, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000008d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r3 = signalfd(r1, &(0x7f0000008dc0)={[0x6]}, 0x8) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000008e00), &(0x7f0000008e40)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000008ec0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000008f80)={&(0x7f0000008e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000008f40)={&(0x7f0000008f00)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000008fc0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000009180)={&(0x7f0000009040)={0x104, 0x1, 0x8, 0x201, 0x70bd2a, 0x25dfdbfc, {0x5, 0x0, 0x4}, [@typed={0xd4, 0xe5, 0x0, 0x0, @binary="bf123efcb1bb2e19895a9958be2224bc9b12afd884e4a6fa7dc4e2ec013c33ce45aaad6175a3fc0e107210671b79f949c7f20b518c577447482658279fbf6716c5ca2a98024f3c14d0432e7431aa6c67a16b4d067bb6e9e3e71330d49e822a234e5407f70f123cb0a2d44c4fbda8aef3a36c104849e316b44a94eee3875f9f7348a7630d249e15f1a90ed0400db76134b47657e99fcb8bf4e224fd9cc731a2b1d47d5228e0f97a74e9a9286492fe9655bcf478805d1ea2cc9833ce67dd82220f76d8da38505f9077882217a3d1bbc43f"}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x142, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x64}, @nested={0x4, 0x14a}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2200c800}, 0x8814) syz_open_dev$ndb(&(0x7f0000009200), 0x0, 0x240) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000009240)=0xfc) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000009280)={{0x2, 0xffffffff, 0xc, 0x4, 0x400, 0xf}, 0x24e, [0x10000, 0x0, 0x4, 0x6ff, 0x40, 0x1, 0x9, 0x10, 0x2, 0xffffffff, 0x40, 0x60, 0x800, 0xfffffff9, 0x2, 0xfffffffe, 0x1ff, 0x2, 0x1, 0x1, 0x8, 0x101, 0x8, 0x7, 0x2ffb, 0x6, 0x8, 0xf, 0x9, 0x6, 0x4, 0x9, 0x5, 0x9, 0x7, 0x0, 0x5, 0x4, 0xd228, 0xc676, 0x0, 0x9, 0x9, 0x6, 0x9, 0x318f, 0x7, 0x3, 0x6, 0x4, 0x2, 0xbe, 0xad, 0x9, 0x5, 0xf, 0x66f2b47c, 0x5, 0x2, 0x5, 0x2b4b, 0x7f, 0xb, 0x4, 0xf0b, 0x2, 0xa437, 0x6, 0xe, 0x7, 0x10001, 0x5401, 0xbf2dfc6, 0x42e1fa2a, 0x7e4, 0xe, 0x1, 0x0, 0xdb0e, 0x3, 0x9, 0x3, 0x2, 0x4, 0x2, 0x80000001, 0x8, 0xfffffff9, 0x5, 0x4b, 0xdc7, 0x3765, 0x5, 0x101, 0x4e41, 0x9, 0x8, 0x400, 0x0, 0x1, 0x6, 0x6, 0x2, 0x8, 0x4, 0x6, 0x80000000, 0xffffffff, 0x8, 0x9, 0x376, 0x1, 0xa, 0x3, 0xfff, 0x2, 0x2, 0x100, 0xffff7d5e, 0x8000, 0xfffffffe, 0xffff8001, 0x0, 0x6, 0xffff1d17, 0x3, 0x9, 0x2a85, 0x8, 0x0, 0x7ff, 0x8, 0x4, 0x10, 0x0, 0x8, 0x0, 0x8, 0x1, 0x1, 0x200, 0x5, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x8, 0x1, 0x3252, 0xd, 0x5a9, 0x9, 0x8000, 0x7, 0x3, 0xb7, 0x1, 0xef, 0x9, 0x4, 0x8, 0x9, 0xce, 0x101, 0x6, 0x401, 0x3, 0x80000001, 0x5, 0x39, 0x1, 0x7, 0x7f, 0xfffffff9, 0x2, 0xfffff000, 0xc, 0x1, 0x3ff, 0x9, 0x617e1592, 0xff, 0x394, 0x4, 0x6, 0x2, 0x6, 0x6, 0x9, 0x8, 0x5, 0x5, 0x9, 0x0, 0xd, 0xb9d, 0x44, 0x7, 0x7, 0xf, 0x5, 0x8, 0x7, 0x1, 0xffff, 0xd, 0x1, 0x1, 0x92, 0x7, 0x9, 0x1, 0x9d4, 0xfffffff7, 0x1000, 0xfffffffc, 0x9, 0x3, 0x0, 0x4, 0x1, 0xffffffff, 0x3, 0xffff, 0x2, 0x0, 0x8, 0x8, 0x6, 0x4, 0xffffffff, 0x3, 0x7, 0x5, 0x0, 0x0, 0xab, 0x4, 0x7fffffff, 0x6, 0x6, 0x401, 0x8, 0x0, 0xff, 0x3, 0x1, 0xffffff01, 0x7, 0x0, 0x0, 0x2, 0xcac, 0x0, 0x5, 0x3, 0x4, 0xfff, 0x3, 0xdb2d, 0x9, 0x2, 0x880, 0xfff, 0x491, 0x3, 0x5, 0xec, 0x6, 0x2, 0x8, 0xfffffff1, 0x9, 0x9, 0x0, 0x7, 0x401, 0x5, 0x6, 0xffffffff, 0x1, 0x400, 0x40, 0x5, 0x81, 0x5, 0x81, 0xa4c, 0xffffffff, 0x2, 0x6016d3fc, 0x29f2, 0x3, 0x1, 0x7f, 0x6, 0x6, 0x4, 0x6, 0x8, 0x9, 0xf, 0x306e, 0x2, 0x3, 0xfffffff7, 0x3, 0xf, 0x3, 0x3, 0x9, 0x2, 0x77, 0x9, 0x9, 0x3, 0x3, 0x3, 0xa, 0x47, 0x3, 0x9, 0x4a, 0x51b4, 0x6, 0x1, 0x2, 0x22, 0x4, 0x5, 0x3, 0x3, 0x2, 0x81, 0x3, 0x216, 0x18a, 0x0, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x56, 0x10000, 0x0, 0x0, 0x7fff, 0x80000001, 0x2, 0x40, 0x91e, 0xb, 0x98, 0x100, 0x8, 0x8001, 0xc, 0x5b2e, 0x0, 0x1c0, 0x4, 0x2, 0x6, 0x40, 0xffff, 0x8, 0x1cea4117, 0x80, 0x73, 0x6, 0xff, 0x3, 0x7, 0x0, 0x226a5149, 0xffc0, 0x100, 0x3, 0x80000000, 0x2, 0x8, 0x9, 0x8, 0x7, 0x7ae0, 0x9, 0x1, 0x1, 0xfffffffe, 0x80, 0x4, 0x5, 0x0, 0xfffffffa, 0xd5, 0x3, 0x2, 0x4, 0x8001, 0x1, 0x1, 0x8, 0xc, 0x40, 0xfff, 0x2, 0x3, 0x400, 0x81, 0x9, 0x5, 0x7, 0xf, 0x80000001, 0x0, 0x1, 0x2, 0x101, 0x43, 0x6, 0xa, 0x0, 0x88a, 0x2, 0x7, 0x0, 0x1, 0x7, 0xfffff73a, 0xb, 0x8000, 0x7fffffff, 0xffff5c9e, 0xb, 0x0, 0x1, 0x0, 0x7fff, 0x942b, 0xe, 0x5, 0x81, 0x8, 0xe, 0x1, 0xe7f5, 0xffff, 0xbc, 0x4, 0xfffffffb, 0xdc9, 0x7, 0x0, 0x9, 0xfffffffc, 0x3, 0xfffffff7, 0xc0f0, 0x5e, 0x5, 0x3, 0xe, 0x7, 0x5f, 0x72, 0x3c, 0x95, 0x48000, 0x2, 0x1, 0x28e, 0x0, 0x2, 0x0, 0x10001, 0xcea, 0x200, 0x0, 0x4, 0x2, 0x2, 0x421, 0x1000, 0x0, 0xf92, 0x9, 0x1, 0x7, 0x7, 0x2, 0x80000001, 0x9, 0x7f, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x1, 0x6, 0xdb79, 0x5, 0x4, 0x6, 0x7cc, 0x9, 0x7f, 0xfffffff0, 0x400, 0x8, 0x4, 0x643a74b0, 0x779, 0x90b, 0x401, 0x2, 0x6, 0x3, 0x4, 0x7ff, 0x7, 0x8, 0x9, 0x1, 0x5, 0x2, 0x1c3, 0x1, 0x401, 0x10001, 0x100, 0x80, 0x4, 0x6, 0x8001, 0x807, 0x1a, 0x4, 0x2, 0x5, 0xffffffff, 0x5, 0x9, 0xb8c, 0x4, 0x6, 0x8, 0x69bc0473, 0xc, 0x5, 0x9, 0x8000, 0x800, 0x2, 0x3, 0x3, 0x1, 0xe, 0xfffffffd, 0x9, 0x1, 0x9, 0x7, 0xc, 0x8, 0x2, 0x800, 0xf, 0x1, 0x9, 0x1, 0x2, 0x81, 0x1, 0x8, 0x2, 0x7, 0x6ec1, 0x8, 0xa813, 0x6, 0x0, 0x0, 0xffff, 0x1, 0x1, 0x1e, 0x1000, 0x8, 0x7fffffff, 0x2, 0x1, 0x1, 0x3, 0x8, 0x8, 0x0, 0x0, 0xa, 0x5, 0x2, 0xc4, 0xc62a, 0x3, 0x2, 0x200, 0xf, 0x9, 0x1, 0x7, 0x4, 0x6, 0x3, 0x4, 0x7, 0x8, 0x3, 0x6, 0x6, 0x1, 0xffff, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0xb07, 0x9, 0x10001, 0xa1ea, 0x2, 0xfff, 0x6, 0x8, 0x7, 0x8, 0x200, 0xa, 0x4, 0x0, 0x2, 0x9, 0xee52, 0x5, 0x2, 0x6, 0x10000, 0x9, 0x3ff, 0x7fff, 0x0, 0x8, 0x80, 0x9, 0x4, 0x800, 0x4ef0, 0x6, 0x7fff, 0x81, 0xfffffffd, 0x5, 0x1ff, 0x7, 0x80000001, 0x0, 0xa776, 0x5, 0x4, 0x1, 0x9, 0x9, 0x2, 0x7, 0x9, 0xfff, 0x2, 0x7fffffff, 0x200, 0xa, 0x2, 0x0, 0x5, 0x2, 0x41d2d985, 0x7, 0x200, 0x2, 0x9, 0x8, 0xffff0415, 0x7ff, 0x6, 0x1, 0x1, 0x48, 0x0, 0x2, 0x40, 0x2, 0x3, 0x4, 0x0, 0x8, 0x29, 0x0, 0xfffffffc, 0x6, 0x29, 0x4, 0x0, 0x0, 0x6, 0x100, 0x2, 0x6, 0x3, 0x8, 0x0, 0xffff, 0xffffffff, 0x3, 0x9, 0x0, 0x10, 0xa71, 0x101, 0xfb, 0x5, 0x4, 0x7ff, 0x371, 0x2, 0x7, 0x48, 0xffffffff, 0x10000, 0x4, 0x2f, 0x80, 0xe, 0x8000, 0x6, 0x9, 0x100, 0xc, 0x6, 0x4, 0x7, 0x1, 0xe73, 0x7f, 0x80000000, 0xd32, 0x40, 0xed23, 0xff, 0x3, 0xd, 0x5, 0x2, 0x5, 0xff, 0xc00, 0x3, 0xfffffff7, 0x101, 0x6, 0x55, 0x8, 0x80000001, 0xfffffffa, 0x7, 0x6, 0x7, 0x5, 0x8, 0xffff02c9, 0x7ff, 0x1, 0x6, 0xd1, 0x5, 0x8, 0x200, 0xe3a, 0x218b, 0xffff, 0x9, 0xf39, 0x8, 0x2, 0x8, 0x7fc, 0x7fff, 0x1, 0xde7, 0x9, 0x5, 0x40, 0x2, 0x7, 0x8, 0x1, 0x9, 0x0, 0x7fff, 0x3, 0x8, 0x8, 0x96e, 0x2, 0x728, 0x401, 0xd8, 0x9, 0x5, 0x4, 0xffffff57, 0x4, 0x1, 0x0, 0x81, 0x55de, 0x1, 0x73eec519, 0x100, 0xbe97, 0x4, 0x8001, 0x4bd4, 0x2, 0xb1b0, 0xa81, 0x900, 0x6, 0x4, 0x0, 0x5, 0xafc, 0xffff, 0x7fffffff, 0x5, 0x2, 0x1ff, 0x7ec5bd9b, 0x4, 0xe997, 0x10, 0x5, 0x5, 0xdeb, 0x9, 0x10, 0x0, 0x97, 0x4, 0x5, 0x800, 0x7dd, 0x0, 0x6, 0x81, 0x6, 0x3, 0x5, 0x800, 0x2, 0x7, 0x43e, 0x0, 0x8, 0xff5, 0x10, 0x0, 0xf, 0x4, 0x0, 0x3, 0x8, 0xff, 0x3ff, 0x0, 0x401, 0x7, 0x5, 0xfffffffe, 0x1, 0xcaf, 0x8, 0x8, 0x2cbf983e, 0x8, 0x80000001, 0xa, 0x9, 0x3ff, 0x9, 0x80, 0x7, 0x8, 0x7d6, 0x1, 0xd94, 0x6, 0x3294, 0x2, 0x0, 0x8, 0x7, 0x6, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0x6, 0x4, 0x1, 0x3, 0xffffff9f, 0x8, 0x1, 0x200, 0x400, 0xe, 0x1, 0x8, 0x1000, 0x1, 0xffffff4a, 0xfffffffc, 0x0, 0x401, 0xffffffff, 0x3, 0x5, 0xfe, 0x88c, 0x9, 0x0, 0x739, 0xfffffffa, 0x60, 0x2, 0x9, 0x100, 0xfff, 0x100, 0x0, 0x80000001, 0xfffffff8, 0x80000, 0x1, 0x6, 0x9, 0xf, 0x4, 0xfffffffb, 0x200, 0x2, 0x9, 0x7796, 0x8, 0x7, 0xd, 0x4, 0x3, 0x7, 0x10000, 0x7, 0x8, 0xc3, 0x3, 0x3, 0x101, 0x2, 0x9, 0xda81, 0x2, 0xe562, 0x8, 0x1000, 0x3, 0xc, 0x6fe, 0x3, 0x9, 0x0, 0x9, 0x400, 0xffff0000, 0x9, 0x5, 0x0, 0x7, 0x9, 0xe9d, 0x1, 0xc62, 0x82, 0x81, 0x4c91, 0x9, 0x7, 0x3, 0x400, 0x1, 0x3, 0x0, 0x4, 0x7, 0x9, 0xcb8f, 0xffffffff, 0xfffffff8]}) syz_emit_ethernet(0x5a, &(0x7f000000a2c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "0203ba0107bcb27132e8b975554e1d89b80c684438ec81e07c35902b3a1e39ef1a8c2d01fe627574418d2bffc5730fe3cd201fbd12cbc854c660ebbb792d145c"}}}}, &(0x7f000000a340)={0x0, 0x1, [0xd45, 0x382, 0x77d, 0xe6]}) syz_emit_ethernet(0x42, &(0x7f000000a380)={@empty, @random="06dcf6202392", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="2458f137a406", @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @mcast2}}}}, &(0x7f000000a400)={0x0, 0x1, [0x3ff, 0xca5, 0xce9, 0x78a]}) fstat(r0, &(0x7f000000a4c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f000000a440)='./file0\x00', &(0x7f000000a480), 0x50, &(0x7f000000a540)={[{@xattr}, {@subsystem='memory'}], [{@uid_lt={'uid<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'nl80211\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, '[*'}}, {@smackfsdef={'smackfsdef', 0x3d, '(#[$)'}}, {@flag='nolazytime'}]}) r6 = syz_clone(0xc00, &(0x7f000000a600)="1e3a56abda42c10cc50ab6d12943cc7ec4ffd7a75fd529c2ed64f6eff98aab1968d60b3423ad86470ca26515f1", 0x2d, &(0x7f000000a640), &(0x7f000000a680), &(0x7f000000a6c0)="954fe8e86415e97741cabff6ea6a591477d10e6e796dbf1112419cbdce4c70584ddfc22dea9058d3cb0fe2083d7c4238de02c527b479c23f1fbecafa") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f000000a740)={{0x9, 0x3, 0x5, 0x7, '\x00', 0x2745}, 0x2, 0x400, 0x8, r6, 0x1, 0xb9, 'syz0\x00', &(0x7f000000a700)=['+\x00'], 0x2}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f000000a940)={&(0x7f000000a880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a900)={&(0x7f000000a8c0)={0x20, 0x3fa, 0x8, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f000000a9c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f000000a980)={0xffffffffffffffff}, 0x106, 0x5007ae24d196cab6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f000000aa00)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e24, 0xff, @private1, 0x6}}}, 0x90) sendmsg$nl_generic(r0, &(0x7f000000c000)={&(0x7f000000aac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000bfc0)={&(0x7f000000ab00)={0x1490, 0x1a, 0x819, 0x70bd25, 0x25dfdbfb, {0x17}, [@nested={0xd1, 0xcd, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid=r5}, @generic="7bd37a60bd807a5f28f1f3fe486fa6ee8300c64c5f2bcd3df3f8deaaff8ae0a3f836087d2df973680c2f3bcaaa90430b67d0247c02c51346d3e0c0", @typed={0x7, 0x1, 0x0, 0x0, @str=':]\x00'}, @typed={0x4, 0xb}, @generic="aedd1e44ba68df66b2a18fe419bfa4f909d891196a9d0211ef5d84ed131b0083a9698b8697aa27ef8859b51a7ed6adb138ed4427379518ea9984a3deba542069e0a486aec3a6ef04353ddb82554adbe140947ca6616464334fa429d8b0bd11bb8f87668306bf6753dba57a38d0a9aaa416460d8a90d15e6870329b1b7fcf"]}, @typed={0x7b, 0x6f, 0x0, 0x0, @binary="d7c160006817d101ad264258142dd5d5bc8e9c80ff05e7c6581176e8e5e56cc654c4a5ac6f69c8b82c7e5c3f8708816eea5f8ecd462612164a742c597904892cce808fea7ef226c1bfc4ce894119e4e6e9bc8b4fd4f6f33e8bce9a06112d3de963c3bba1ab22660f905effa0d41df2df68a59bb675a197"}, @generic="7b14d14e0a0e3ae038f8a65baa771be847c38cfef90fcd12729f3474a66254515cd2a9aafecfb3b3e5f6a3b421c24882d7c12ea3c9982b80bef3786f73c0c54f1c59e4780932349686e3fcc4725b41385877032a6afacbd79e32d7701614422bb2721e108688e2defff071e38cbcf2162eb3614421772bc6bffab123de7b933aac79c32d4e84b9c2fdfb5e24ed5c766e31e60c7aa6003b7ff34be1fdbf1dfcad551d217de4d1ea3ca591031c6650dbbb50afc3023f58a8b1e0368a3d198e809260f616ada0fc9a04f98402e66db55f942cb496130caa87feb5a6b97ea34cc1207f93", @generic="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", @nested={0x82, 0xe3, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="89824dcdf7a6dfd2aa968f3fe354534baef8e4c40c66e6300ff9164250c114246fc38fd84b371e4c85d714b9491e40dc8237681f24b7e94df9c03b99da105b5936d6e6cdff32e2c18b705279b3d1dafc758c07858a0b4c4169eb6135cf2900b5f3f3c8f6f0d0de612837b27f073b742b3be9db1b00d32d483a09"]}, @generic="216573e4a4f2a4616a820432e05e02df3af181ec3f98cbd736833c9e879778464fe8572d7395aa7e468285a3c861b0b505747d62481c7d0c14b924af37d35c905980adece00856a54f03be708f7c591cd58c6b36efa0c6cee4d26bc20f090cd6afbcbaa810a095a2b2a3698828601936716a6eaab4d78caa416057de1e3158ae8d06eab1b513fcbcaab60c16d23412e8b72f1350ea5ef7bb8efb46534122acfcfc8e2f6f0225f466c26ff02ceff0bdae28694792beb8ed7d", @nested={0x1004, 0xc4, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0xb2, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xd9, 0x0, 0x0, @pid=r6}]}, 0x1490}, 0x1, 0x0, 0x0, 0x891}, 0x20008000) 1m54.93401142s ago: executing program 1 (id=1794): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180)={0x1}) 1m54.933087004s ago: executing program 1 (id=1795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5d}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 13) 1m54.353663611s ago: executing program 1 (id=1798): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m54.353487774s ago: executing program 1 (id=1799): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) (rerun: 64) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 1m52.681963304s ago: executing program 1 (id=1819): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 1m51.519133811s ago: executing program 33 (id=1688): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x4) ioctl$FICLONE(r0, 0x40049409, r0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000100)=""/254, 0xfe}], 0x2, 0x8, 0x5c, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x5, 0x98}, {0x69, 0xfd}, 0xf5a, 0x1, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x40000) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000440)={0x5b5, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000008d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r3 = signalfd(r1, &(0x7f0000008dc0)={[0x6]}, 0x8) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000008e00), &(0x7f0000008e40)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000008ec0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000008f80)={&(0x7f0000008e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000008f40)={&(0x7f0000008f00)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000008fc0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000009180)={&(0x7f0000009040)={0x104, 0x1, 0x8, 0x201, 0x70bd2a, 0x25dfdbfc, {0x5, 0x0, 0x4}, [@typed={0xd4, 0xe5, 0x0, 0x0, @binary="bf123efcb1bb2e19895a9958be2224bc9b12afd884e4a6fa7dc4e2ec013c33ce45aaad6175a3fc0e107210671b79f949c7f20b518c577447482658279fbf6716c5ca2a98024f3c14d0432e7431aa6c67a16b4d067bb6e9e3e71330d49e822a234e5407f70f123cb0a2d44c4fbda8aef3a36c104849e316b44a94eee3875f9f7348a7630d249e15f1a90ed0400db76134b47657e99fcb8bf4e224fd9cc731a2b1d47d5228e0f97a74e9a9286492fe9655bcf478805d1ea2cc9833ce67dd82220f76d8da38505f9077882217a3d1bbc43f"}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x142, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x64}, @nested={0x4, 0x14a}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2200c800}, 0x8814) syz_open_dev$ndb(&(0x7f0000009200), 0x0, 0x240) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000009240)=0xfc) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000009280)={{0x2, 0xffffffff, 0xc, 0x4, 0x400, 0xf}, 0x24e, [0x10000, 0x0, 0x4, 0x6ff, 0x40, 0x1, 0x9, 0x10, 0x2, 0xffffffff, 0x40, 0x60, 0x800, 0xfffffff9, 0x2, 0xfffffffe, 0x1ff, 0x2, 0x1, 0x1, 0x8, 0x101, 0x8, 0x7, 0x2ffb, 0x6, 0x8, 0xf, 0x9, 0x6, 0x4, 0x9, 0x5, 0x9, 0x7, 0x0, 0x5, 0x4, 0xd228, 0xc676, 0x0, 0x9, 0x9, 0x6, 0x9, 0x318f, 0x7, 0x3, 0x6, 0x4, 0x2, 0xbe, 0xad, 0x9, 0x5, 0xf, 0x66f2b47c, 0x5, 0x2, 0x5, 0x2b4b, 0x7f, 0xb, 0x4, 0xf0b, 0x2, 0xa437, 0x6, 0xe, 0x7, 0x10001, 0x5401, 0xbf2dfc6, 0x42e1fa2a, 0x7e4, 0xe, 0x1, 0x0, 0xdb0e, 0x3, 0x9, 0x3, 0x2, 0x4, 0x2, 0x80000001, 0x8, 0xfffffff9, 0x5, 0x4b, 0xdc7, 0x3765, 0x5, 0x101, 0x4e41, 0x9, 0x8, 0x400, 0x0, 0x1, 0x6, 0x6, 0x2, 0x8, 0x4, 0x6, 0x80000000, 0xffffffff, 0x8, 0x9, 0x376, 0x1, 0xa, 0x3, 0xfff, 0x2, 0x2, 0x100, 0xffff7d5e, 0x8000, 0xfffffffe, 0xffff8001, 0x0, 0x6, 0xffff1d17, 0x3, 0x9, 0x2a85, 0x8, 0x0, 0x7ff, 0x8, 0x4, 0x10, 0x0, 0x8, 0x0, 0x8, 0x1, 0x1, 0x200, 0x5, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x8, 0x1, 0x3252, 0xd, 0x5a9, 0x9, 0x8000, 0x7, 0x3, 0xb7, 0x1, 0xef, 0x9, 0x4, 0x8, 0x9, 0xce, 0x101, 0x6, 0x401, 0x3, 0x80000001, 0x5, 0x39, 0x1, 0x7, 0x7f, 0xfffffff9, 0x2, 0xfffff000, 0xc, 0x1, 0x3ff, 0x9, 0x617e1592, 0xff, 0x394, 0x4, 0x6, 0x2, 0x6, 0x6, 0x9, 0x8, 0x5, 0x5, 0x9, 0x0, 0xd, 0xb9d, 0x44, 0x7, 0x7, 0xf, 0x5, 0x8, 0x7, 0x1, 0xffff, 0xd, 0x1, 0x1, 0x92, 0x7, 0x9, 0x1, 0x9d4, 0xfffffff7, 0x1000, 0xfffffffc, 0x9, 0x3, 0x0, 0x4, 0x1, 0xffffffff, 0x3, 0xffff, 0x2, 0x0, 0x8, 0x8, 0x6, 0x4, 0xffffffff, 0x3, 0x7, 0x5, 0x0, 0x0, 0xab, 0x4, 0x7fffffff, 0x6, 0x6, 0x401, 0x8, 0x0, 0xff, 0x3, 0x1, 0xffffff01, 0x7, 0x0, 0x0, 0x2, 0xcac, 0x0, 0x5, 0x3, 0x4, 0xfff, 0x3, 0xdb2d, 0x9, 0x2, 0x880, 0xfff, 0x491, 0x3, 0x5, 0xec, 0x6, 0x2, 0x8, 0xfffffff1, 0x9, 0x9, 0x0, 0x7, 0x401, 0x5, 0x6, 0xffffffff, 0x1, 0x400, 0x40, 0x5, 0x81, 0x5, 0x81, 0xa4c, 0xffffffff, 0x2, 0x6016d3fc, 0x29f2, 0x3, 0x1, 0x7f, 0x6, 0x6, 0x4, 0x6, 0x8, 0x9, 0xf, 0x306e, 0x2, 0x3, 0xfffffff7, 0x3, 0xf, 0x3, 0x3, 0x9, 0x2, 0x77, 0x9, 0x9, 0x3, 0x3, 0x3, 0xa, 0x47, 0x3, 0x9, 0x4a, 0x51b4, 0x6, 0x1, 0x2, 0x22, 0x4, 0x5, 0x3, 0x3, 0x2, 0x81, 0x3, 0x216, 0x18a, 0x0, 0x3, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x56, 0x10000, 0x0, 0x0, 0x7fff, 0x80000001, 0x2, 0x40, 0x91e, 0xb, 0x98, 0x100, 0x8, 0x8001, 0xc, 0x5b2e, 0x0, 0x1c0, 0x4, 0x2, 0x6, 0x40, 0xffff, 0x8, 0x1cea4117, 0x80, 0x73, 0x6, 0xff, 0x3, 0x7, 0x0, 0x226a5149, 0xffc0, 0x100, 0x3, 0x80000000, 0x2, 0x8, 0x9, 0x8, 0x7, 0x7ae0, 0x9, 0x1, 0x1, 0xfffffffe, 0x80, 0x4, 0x5, 0x0, 0xfffffffa, 0xd5, 0x3, 0x2, 0x4, 0x8001, 0x1, 0x1, 0x8, 0xc, 0x40, 0xfff, 0x2, 0x3, 0x400, 0x81, 0x9, 0x5, 0x7, 0xf, 0x80000001, 0x0, 0x1, 0x2, 0x101, 0x43, 0x6, 0xa, 0x0, 0x88a, 0x2, 0x7, 0x0, 0x1, 0x7, 0xfffff73a, 0xb, 0x8000, 0x7fffffff, 0xffff5c9e, 0xb, 0x0, 0x1, 0x0, 0x7fff, 0x942b, 0xe, 0x5, 0x81, 0x8, 0xe, 0x1, 0xe7f5, 0xffff, 0xbc, 0x4, 0xfffffffb, 0xdc9, 0x7, 0x0, 0x9, 0xfffffffc, 0x3, 0xfffffff7, 0xc0f0, 0x5e, 0x5, 0x3, 0xe, 0x7, 0x5f, 0x72, 0x3c, 0x95, 0x48000, 0x2, 0x1, 0x28e, 0x0, 0x2, 0x0, 0x10001, 0xcea, 0x200, 0x0, 0x4, 0x2, 0x2, 0x421, 0x1000, 0x0, 0xf92, 0x9, 0x1, 0x7, 0x7, 0x2, 0x80000001, 0x9, 0x7f, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x1, 0x6, 0xdb79, 0x5, 0x4, 0x6, 0x7cc, 0x9, 0x7f, 0xfffffff0, 0x400, 0x8, 0x4, 0x643a74b0, 0x779, 0x90b, 0x401, 0x2, 0x6, 0x3, 0x4, 0x7ff, 0x7, 0x8, 0x9, 0x1, 0x5, 0x2, 0x1c3, 0x1, 0x401, 0x10001, 0x100, 0x80, 0x4, 0x6, 0x8001, 0x807, 0x1a, 0x4, 0x2, 0x5, 0xffffffff, 0x5, 0x9, 0xb8c, 0x4, 0x6, 0x8, 0x69bc0473, 0xc, 0x5, 0x9, 0x8000, 0x800, 0x2, 0x3, 0x3, 0x1, 0xe, 0xfffffffd, 0x9, 0x1, 0x9, 0x7, 0xc, 0x8, 0x2, 0x800, 0xf, 0x1, 0x9, 0x1, 0x2, 0x81, 0x1, 0x8, 0x2, 0x7, 0x6ec1, 0x8, 0xa813, 0x6, 0x0, 0x0, 0xffff, 0x1, 0x1, 0x1e, 0x1000, 0x8, 0x7fffffff, 0x2, 0x1, 0x1, 0x3, 0x8, 0x8, 0x0, 0x0, 0xa, 0x5, 0x2, 0xc4, 0xc62a, 0x3, 0x2, 0x200, 0xf, 0x9, 0x1, 0x7, 0x4, 0x6, 0x3, 0x4, 0x7, 0x8, 0x3, 0x6, 0x6, 0x1, 0xffff, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0xb07, 0x9, 0x10001, 0xa1ea, 0x2, 0xfff, 0x6, 0x8, 0x7, 0x8, 0x200, 0xa, 0x4, 0x0, 0x2, 0x9, 0xee52, 0x5, 0x2, 0x6, 0x10000, 0x9, 0x3ff, 0x7fff, 0x0, 0x8, 0x80, 0x9, 0x4, 0x800, 0x4ef0, 0x6, 0x7fff, 0x81, 0xfffffffd, 0x5, 0x1ff, 0x7, 0x80000001, 0x0, 0xa776, 0x5, 0x4, 0x1, 0x9, 0x9, 0x2, 0x7, 0x9, 0xfff, 0x2, 0x7fffffff, 0x200, 0xa, 0x2, 0x0, 0x5, 0x2, 0x41d2d985, 0x7, 0x200, 0x2, 0x9, 0x8, 0xffff0415, 0x7ff, 0x6, 0x1, 0x1, 0x48, 0x0, 0x2, 0x40, 0x2, 0x3, 0x4, 0x0, 0x8, 0x29, 0x0, 0xfffffffc, 0x6, 0x29, 0x4, 0x0, 0x0, 0x6, 0x100, 0x2, 0x6, 0x3, 0x8, 0x0, 0xffff, 0xffffffff, 0x3, 0x9, 0x0, 0x10, 0xa71, 0x101, 0xfb, 0x5, 0x4, 0x7ff, 0x371, 0x2, 0x7, 0x48, 0xffffffff, 0x10000, 0x4, 0x2f, 0x80, 0xe, 0x8000, 0x6, 0x9, 0x100, 0xc, 0x6, 0x4, 0x7, 0x1, 0xe73, 0x7f, 0x80000000, 0xd32, 0x40, 0xed23, 0xff, 0x3, 0xd, 0x5, 0x2, 0x5, 0xff, 0xc00, 0x3, 0xfffffff7, 0x101, 0x6, 0x55, 0x8, 0x80000001, 0xfffffffa, 0x7, 0x6, 0x7, 0x5, 0x8, 0xffff02c9, 0x7ff, 0x1, 0x6, 0xd1, 0x5, 0x8, 0x200, 0xe3a, 0x218b, 0xffff, 0x9, 0xf39, 0x8, 0x2, 0x8, 0x7fc, 0x7fff, 0x1, 0xde7, 0x9, 0x5, 0x40, 0x2, 0x7, 0x8, 0x1, 0x9, 0x0, 0x7fff, 0x3, 0x8, 0x8, 0x96e, 0x2, 0x728, 0x401, 0xd8, 0x9, 0x5, 0x4, 0xffffff57, 0x4, 0x1, 0x0, 0x81, 0x55de, 0x1, 0x73eec519, 0x100, 0xbe97, 0x4, 0x8001, 0x4bd4, 0x2, 0xb1b0, 0xa81, 0x900, 0x6, 0x4, 0x0, 0x5, 0xafc, 0xffff, 0x7fffffff, 0x5, 0x2, 0x1ff, 0x7ec5bd9b, 0x4, 0xe997, 0x10, 0x5, 0x5, 0xdeb, 0x9, 0x10, 0x0, 0x97, 0x4, 0x5, 0x800, 0x7dd, 0x0, 0x6, 0x81, 0x6, 0x3, 0x5, 0x800, 0x2, 0x7, 0x43e, 0x0, 0x8, 0xff5, 0x10, 0x0, 0xf, 0x4, 0x0, 0x3, 0x8, 0xff, 0x3ff, 0x0, 0x401, 0x7, 0x5, 0xfffffffe, 0x1, 0xcaf, 0x8, 0x8, 0x2cbf983e, 0x8, 0x80000001, 0xa, 0x9, 0x3ff, 0x9, 0x80, 0x7, 0x8, 0x7d6, 0x1, 0xd94, 0x6, 0x3294, 0x2, 0x0, 0x8, 0x7, 0x6, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0x6, 0x4, 0x1, 0x3, 0xffffff9f, 0x8, 0x1, 0x200, 0x400, 0xe, 0x1, 0x8, 0x1000, 0x1, 0xffffff4a, 0xfffffffc, 0x0, 0x401, 0xffffffff, 0x3, 0x5, 0xfe, 0x88c, 0x9, 0x0, 0x739, 0xfffffffa, 0x60, 0x2, 0x9, 0x100, 0xfff, 0x100, 0x0, 0x80000001, 0xfffffff8, 0x80000, 0x1, 0x6, 0x9, 0xf, 0x4, 0xfffffffb, 0x200, 0x2, 0x9, 0x7796, 0x8, 0x7, 0xd, 0x4, 0x3, 0x7, 0x10000, 0x7, 0x8, 0xc3, 0x3, 0x3, 0x101, 0x2, 0x9, 0xda81, 0x2, 0xe562, 0x8, 0x1000, 0x3, 0xc, 0x6fe, 0x3, 0x9, 0x0, 0x9, 0x400, 0xffff0000, 0x9, 0x5, 0x0, 0x7, 0x9, 0xe9d, 0x1, 0xc62, 0x82, 0x81, 0x4c91, 0x9, 0x7, 0x3, 0x400, 0x1, 0x3, 0x0, 0x4, 0x7, 0x9, 0xcb8f, 0xffffffff, 0xfffffff8]}) syz_emit_ethernet(0x5a, &(0x7f000000a2c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "0203ba0107bcb27132e8b975554e1d89b80c684438ec81e07c35902b3a1e39ef1a8c2d01fe627574418d2bffc5730fe3cd201fbd12cbc854c660ebbb792d145c"}}}}, &(0x7f000000a340)={0x0, 0x1, [0xd45, 0x382, 0x77d, 0xe6]}) syz_emit_ethernet(0x42, &(0x7f000000a380)={@empty, @random="06dcf6202392", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="2458f137a406", @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @mcast2}}}}, &(0x7f000000a400)={0x0, 0x1, [0x3ff, 0xca5, 0xce9, 0x78a]}) fstat(r0, &(0x7f000000a4c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f000000a440)='./file0\x00', &(0x7f000000a480), 0x50, &(0x7f000000a540)={[{@xattr}, {@subsystem='memory'}], [{@uid_lt={'uid<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'nl80211\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, '[*'}}, {@smackfsdef={'smackfsdef', 0x3d, '(#[$)'}}, {@flag='nolazytime'}]}) r6 = syz_clone(0xc00, &(0x7f000000a600)="1e3a56abda42c10cc50ab6d12943cc7ec4ffd7a75fd529c2ed64f6eff98aab1968d60b3423ad86470ca26515f1", 0x2d, &(0x7f000000a640), &(0x7f000000a680), &(0x7f000000a6c0)="954fe8e86415e97741cabff6ea6a591477d10e6e796dbf1112419cbdce4c70584ddfc22dea9058d3cb0fe2083d7c4238de02c527b479c23f1fbecafa") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f000000a740)={{0x9, 0x3, 0x5, 0x7, '\x00', 0x2745}, 0x2, 0x400, 0x8, r6, 0x1, 0xb9, 'syz0\x00', &(0x7f000000a700)=['+\x00'], 0x2}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f000000a940)={&(0x7f000000a880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a900)={&(0x7f000000a8c0)={0x20, 0x3fa, 0x8, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f000000a9c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f000000a980)={0xffffffffffffffff}, 0x106, 0x5007ae24d196cab6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f000000aa00)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e24, 0xff, @private1, 0x6}}}, 0x90) sendmsg$nl_generic(r0, &(0x7f000000c000)={&(0x7f000000aac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000bfc0)={&(0x7f000000ab00)={0x1490, 0x1a, 0x819, 0x70bd25, 0x25dfdbfb, {0x17}, [@nested={0xd1, 0xcd, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid=r5}, @generic="7bd37a60bd807a5f28f1f3fe486fa6ee8300c64c5f2bcd3df3f8deaaff8ae0a3f836087d2df973680c2f3bcaaa90430b67d0247c02c51346d3e0c0", @typed={0x7, 0x1, 0x0, 0x0, @str=':]\x00'}, @typed={0x4, 0xb}, @generic="aedd1e44ba68df66b2a18fe419bfa4f909d891196a9d0211ef5d84ed131b0083a9698b8697aa27ef8859b51a7ed6adb138ed4427379518ea9984a3deba542069e0a486aec3a6ef04353ddb82554adbe140947ca6616464334fa429d8b0bd11bb8f87668306bf6753dba57a38d0a9aaa416460d8a90d15e6870329b1b7fcf"]}, @typed={0x7b, 0x6f, 0x0, 0x0, @binary="d7c160006817d101ad264258142dd5d5bc8e9c80ff05e7c6581176e8e5e56cc654c4a5ac6f69c8b82c7e5c3f8708816eea5f8ecd462612164a742c597904892cce808fea7ef226c1bfc4ce894119e4e6e9bc8b4fd4f6f33e8bce9a06112d3de963c3bba1ab22660f905effa0d41df2df68a59bb675a197"}, @generic="7b14d14e0a0e3ae038f8a65baa771be847c38cfef90fcd12729f3474a66254515cd2a9aafecfb3b3e5f6a3b421c24882d7c12ea3c9982b80bef3786f73c0c54f1c59e4780932349686e3fcc4725b41385877032a6afacbd79e32d7701614422bb2721e108688e2defff071e38cbcf2162eb3614421772bc6bffab123de7b933aac79c32d4e84b9c2fdfb5e24ed5c766e31e60c7aa6003b7ff34be1fdbf1dfcad551d217de4d1ea3ca591031c6650dbbb50afc3023f58a8b1e0368a3d198e809260f616ada0fc9a04f98402e66db55f942cb496130caa87feb5a6b97ea34cc1207f93", @generic="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", @nested={0x82, 0xe3, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="89824dcdf7a6dfd2aa968f3fe354534baef8e4c40c66e6300ff9164250c114246fc38fd84b371e4c85d714b9491e40dc8237681f24b7e94df9c03b99da105b5936d6e6cdff32e2c18b705279b3d1dafc758c07858a0b4c4169eb6135cf2900b5f3f3c8f6f0d0de612837b27f073b742b3be9db1b00d32d483a09"]}, @generic="216573e4a4f2a4616a820432e05e02df3af181ec3f98cbd736833c9e879778464fe8572d7395aa7e468285a3c861b0b505747d62481c7d0c14b924af37d35c905980adece00856a54f03be708f7c591cd58c6b36efa0c6cee4d26bc20f090cd6afbcbaa810a095a2b2a3698828601936716a6eaab4d78caa416057de1e3158ae8d06eab1b513fcbcaab60c16d23412e8b72f1350ea5ef7bb8efb46534122acfcfc8e2f6f0225f466c26ff02ceff0bdae28694792beb8ed7d", @nested={0x1004, 0xc4, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0xb2, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xd9, 0x0, 0x0, @pid=r6}]}, 0x1490}, 0x1, 0x0, 0x0, 0x891}, 0x20008000) 1m50.906950347s ago: executing program 1 (id=1841): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 11) 1m50.796130879s ago: executing program 34 (id=1841): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 11) 1m23.263401086s ago: executing program 6 (id=2246): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000100a000084"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m23.191053441s ago: executing program 6 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x20048851) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00+4\x00\x00', @ANYRES32=r4, @ANYBLOB="01002dbd7008fddbdf250b000000440002800800060008000000080003000000000006000b000200000008000400000000000800080006000000080007000900000006000f007f000000080003000100000008000400749f0000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[], 0xb}, 0x24000000) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x48810}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000000900)={0x830, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xb74}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe3cc}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x30, 0x2, 0x8}, {0x2de, 0x16, 0x80, 0x1ff}, {0xa6, 0x4, 0x81, 0xf}, {0x7, 0xff, 0x7, 0xaa}, {0x5, 0x9b, 0x1, 0x80}, {0x8, 0x6, 0x78, 0x6}]}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8d5}}}]}}]}, 0x830}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m22.858378964s ago: executing program 6 (id=2248): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x2000000, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m22.383405336s ago: executing program 6 (id=2256): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000087050000000000000500000000000100"]) 1m22.213293448s ago: executing program 6 (id=2259): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', r0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r1}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x12003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m22.112299827s ago: executing program 6 (id=2260): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x10100) sync() ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m6.397232349s ago: executing program 35 (id=2260): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x10100) sync() ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 42.107519358s ago: executing program 5 (id=2659): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$CDROMRESET(r0, 0x5312) (fail_nth: 1) 41.921858148s ago: executing program 5 (id=2661): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) sendmmsg$inet(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001280)="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", 0x130}], 0x1}}], 0x1, 0x48090) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/179, 0xb3}], 0x1}, 0x3ff}], 0x2, 0x0, &(0x7f0000002a00)={0x0, 0x989680}) close(0x4) 41.921598727s ago: executing program 5 (id=2662): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket(0x1, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 41.745323263s ago: executing program 5 (id=2664): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)=0x10, 0x8, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x810090, &(0x7f0000000440)={[{@metacopy_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}, {@nfs_export_on}], [{@pcr={'pcr', 0x3d, 0x1e}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'workdir'}}, {@appraise}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@flag='sync'}, {@hash}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x800, 0xc2) r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) stat(&(0x7f0000000980)='./bus\x00', &(0x7f0000001b80)) 41.669731414s ago: executing program 5 (id=2666): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}]}}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="50df2b", 0x3, 0x60000800, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x8}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r2, 0x100101) accept4(r2, 0x0, 0x0, 0x80800) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000)={0x1, 0x40}, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 41.14547624s ago: executing program 5 (id=2674): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000040)="6d2e9500f9f0e582d6839ebc99ae9bbd93df94376d3226d756bb63518965e05b4f51496d3e78dcb12eded35eb8e31660947f19c10ec54869e5772a34902d02d94c09b71a7ca84d22c98c5ef094dc1a2bd503") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x80}) 41.079639735s ago: executing program 36 (id=2674): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000040)="6d2e9500f9f0e582d6839ebc99ae9bbd93df94376d3226d756bb63518965e05b4f51496d3e78dcb12eded35eb8e31660947f19c10ec54869e5772a34902d02d94c09b71a7ca84d22c98c5ef094dc1a2bd503") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x80}) 14.324790403s ago: executing program 3 (id=3048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 13.394960191s ago: executing program 3 (id=3057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) bind$inet(r0, &(0x7f00000002c0)={0x2, 0xe22}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x6b, 0xfffe, 0x80000000, 0xfffffffe}, 0x14) shutdown(r0, 0x2) r1 = syz_io_uring_setup(0x46f7, &(0x7f00000009c0)={0x0, 0x40f4, 0x80, 0x0, 0x224}, &(0x7f0000000980)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) r4 = syz_io_uring_setup(0x39, &(0x7f0000000400)={0x0, 0x6fbe, 0x100, 0x0, 0x367}, &(0x7f00000004c0)=0x0, &(0x7f0000000a40)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x81, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x20, 0x6000, @fd_index=0x5, 0x3, &(0x7f0000000300)="ffebde88317d794ab3c768c6d4b1b685882a7d0c62faf1060257a338eb833fd3b85f94852f52915f6d18163088e628dfae84c52efe5285a607816abf0ae7b715fdd63d59519027532422d35e62e13fcac1b12431c4e59cfef907a1cb058ada04149f8bd0925f06761fd1ab11976dcde475026a10eee7428440b934ce6a61592dd0431ecc2ff49da73ca80e33beef3b058f4130a4a1517d13757a47c74ff82303ebeb97", 0xa3, 0x4, 0x0, {0x0, r7}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000031c0), 0xe00, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$CDROMREADAUDIO(r10, 0x530e, &(0x7f0000000040)={@lba=0x6, 0x1, 0x21, &(0x7f0000003200)=""/33}) ioctl$int_in(r10, 0x5421, &(0x7f0000000200)=0x10000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4c000}, 0x20040040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xd29b, 0x8000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={r11, 0x28}, &(0x7f0000000640)=0x8) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000880)="900000001c004a817393278b0374001400012e89c7dce61ac560401051a2d708f37ac8da1a297e00a2c5fed0759cb068d036016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b39096f125a48dea2219131cbb0a3a27727056b5788a789370348f23ed7ef8e98904a76de4f738322eaa89a046407ed3c50500f789fa0c503388c7c16137486ffdf5e9a66e29589113000000000000", 0xca, 0x48080, 0x0, 0xfffffffffffffe08) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f0000000700)=0x10029d0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000013c0)={0xe8, 0x0, &(0x7f0000000c00)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x2, 0x1, 0x21}, @fda={0x66646185, 0x6, 0x1, 0x37}, @fda={0x66646185, 0x5, 0x1, 0x2f}}, &(0x7f00000001c0)={0x0, 0x20, 0xfffffffffffffe8d}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b80)={@flat=@binder={0x73622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000780)=""/139, 0x8b, 0x1, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000b00)=""/84, 0x54, 0x2, 0x38}}, &(0x7f0000000840)={0x0, 0x18, 0x40}}, 0x40}, @clear_death={0x400c630f, 0x2}], 0x1, 0x0, &(0x7f00000003c0)='S'}) unshare(0x48020200) 13.018290936s ago: executing program 3 (id=3065): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) timer_create(0xefe5b9899fda1222, 0x0, &(0x7f0000001d40)) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}], r1}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="85000000c2f0ffffdaf248a400000000950e2ad7c0c7b557d8ea7348ce5f1217d0b9048a6d8c36f624376558749c2a9c170667fa2ffc6e83a1a08d78f9045ef6b0b28ec6eec260dbf3f0b9165b1a9b6dcee318a7627897101aa20287527cbf57be1d8a07cfa0e0f8e99a9fba628865c1559ca490d4407169721fb54a41f194c0738e9438d9c0ee7b9e9cbfcced05bb339276e4f5d79d6db3484e6fea615ca98a4daca94e4cc46b00"/183], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) 12.85532139s ago: executing program 3 (id=3067): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x22403, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x0) r3 = fsopen(&(0x7f00000000c0)='udf\x00', 0x0) tee(r0, r3, 0xfffffffffffffffb, 0x10) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0) socket$netlink(0x10, 0x3, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x2043}}}, 0x7) 1.509422188s ago: executing program 4 (id=3085): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xa}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="98f527", 0x3}], 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.369641353s ago: executing program 4 (id=3088): r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r0, &(0x7f00000002c0)=""/4096, 0x1000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) 1.29118481s ago: executing program 7 (id=3089): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "0500000000c97900"}, 0x10}}, 0x44001) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "0500000000c97900"}, 0x10}}, 0x44001) (async) 1.290546272s ago: executing program 4 (id=3090): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x5, @random="c476ba4500f5", 'tunl0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x86a242, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="a193", 0x2}], 0x1, 0x7, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000080)={0xfd31, r4}) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000000d6de5cc3400a1c9f4d403cb65898ee6402314a9b0b22ec9ab7481cc2dc9a7002e906c3cf9fb17ccdb733fe1608ba3a38268bf3e3926833d19581eb3dcd0240a465aebb3e86b290e16f01708929fb8122288218f9e6b956179dbf067076398cc421c176a313d73cf211165c1c703afbab7d84123443911f181fa1775156c8d933cd1104684a0fd65e315fc920e2a6f9862f70aebc1", @ANYRES32=0x0, @ANYBLOB="804200000000000014001280090001007663616e000000000400028008003a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 1.166206619s ago: executing program 4 (id=3093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, &(0x7f0000000240)=""/233, 0xe9}, 0x120) r4 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) 1.110952834s ago: executing program 7 (id=3094): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x5}, 0x14) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) 1.110722365s ago: executing program 7 (id=3095): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_GETVERSION(r0, 0x40025b0c, &(0x7f0000000040)) 1.005839928s ago: executing program 4 (id=3096): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) syz_clone(0x3f240400, 0x0, 0xfffffffffffffcf6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000000000008519fe25b0fb7b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)=@delsa={0x28, 0x12, 0x1, 0x0, 0x25dfdbff, {@in=@local, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xb}}}, 0x24}}, 0x800) socket(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) fstat(r2, &(0x7f0000000240)) (async) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) (async) syz_clone(0x3f240400, 0x0, 0xfffffffffffffcf6, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000000000008519fe25b0fb7b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)=@delsa={0x28, 0x12, 0x1, 0x0, 0x25dfdbff, {@in=@local, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xb}}}, 0x24}}, 0x800) (async) 1.005617256s ago: executing program 4 (id=3097): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3c7, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x6c, 0x70, 0xd9, 0x8, 0x6e0, 0xf110, 0xdc8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b5, 0x4, 0x6, 0xf, 0x98, 0x0, [{{0x9, 0x4, 0x81, 0x9, 0x1, 0x80, 0x83, 0xa4, 0x6, [], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x8, 0xa, 0x2}}]}}, {{0x9, 0x4, 0x35, 0x1, 0x6, 0xa6, 0xdc, 0x12, 0x40, [@hid_hid={0x9, 0x21, 0x1000, 0xd5, 0x1, {0x22, 0xa11}}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf5d, 0x3, 0x0, "3992f0b3cf"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x408, 0x5, 0x4f, 0x1}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x2, 0xff, 0x5, [@generic={0x3e, 0x30, "0c10de1fd18b98c96d6ebbc4739f210b1273075ac3abfedae28ad43b5c1da5b6c92b6b19587bcb109648d4d6a76a24e6c01179371577d9bd618daf48"}]}}, {{0x9, 0x5, 0xc, 0x12, 0x400, 0x2, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xc}]}}, {{0x9, 0x5, 0x8891ab8e65b47f8a, 0x11, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xa, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x7, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xb1ad}, @generic={0x7c, 0x8, "4cd6d1839f7d723359a724bddbc797750f8db301c170a706399e60478ed3d041ec245d0520171b09aa4e7df81f7d4a67ff4b4db8e77d8f4bb5000274daa06b5cd52aa0ffedb0a2d6c7e710c0696cb4eda33b123c3c3bcc2350125f16f91236423040b262155aff076dbb23d5497ca676a450286f36b2ec62225f"}]}}]}}, {{0x9, 0x4, 0x63, 0x86, 0x5, 0xd0, 0x55, 0x18, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "04fba85ded"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1200, 0xd, 0x9}, [@obex={0x5, 0x24, 0x15, 0x9}, @mdlm_detail={0x46, 0x24, 0x13, 0xf, "e14180d58073b33dc35777dee89e507ed66736a7d29f8b23916066bf28f8935caa962d0352421114366931797457ea732520c42f324f36f88e30dd361794f9d2b10c"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x7, 0x8}, @obex={0x5, 0x24, 0x15, 0x7ef}, @mdlm={0x15, 0x24, 0x12, 0xfffe}]}, @generic={0x24, 0x11, "abef1a87463d6281c7be1b809045caff798ee89941a40a63cb18cc5cbc9f05c2b390"}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0xe6, 0x4, 0xb, [@generic={0x48, 0x23, "6a6f1eaa06479daeaa84d8c41c5a1a53da500a672e33f590a9e0e7be5643a848c561e21c9c5a8b15b6093bc207aa7be0b143c22b00f2c8046e3c441bae08d882028016561df1"}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x4, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x3, 0x10, 0x2, [@generic={0xff, 0xf, "bbc60fb15c71a91bf9068067b9d6272a5987bf0c88d3b8069dc09bf0e65f3385543d9b80c0db69a36e04f1e8a41502269da01c55002e3203d9653dcc5884163421acba324581db5d307f421772af7e133df667fd945d8e6dffe8651c9aa9e4cd322007332ef7ccea33123b1e2dd4a381e440d475a66eacf0cfa2460a93c36245f61d610ea1a3ff72fac141733d8679c8f9833fbd2cf4ebd810691202d06a9cbf6830a7d030153cbce8f74396f86838a903ac1bf5816bf6dffe1ae7b71b7d67133e6009c117a57e755b606beddc0288831241c76b2f882d05cc133952437cfa2243ef96601451f4f2c263489b0d4eab8ec8c42ab360bd047e29aeaf9fca"}, @uac_iso={0x7, 0x25, 0x1, 0xc8dcbd6bba5ba442, 0x40, 0x2}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x9, 0xfc}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x36, 0x7, 0x99}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7f, 0x6, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0x16, 0x5, 0x2, 0x42, 0xe8, 0x6a, 0x67, [@generic={0x9, 0x30, "60ce727e7467a7"}], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x61, 0xd, [@generic={0xc, 0x2, "aff071f0074c4960e666"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0xce, 0x3, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x821}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xe9, 0xfa, 0x3, 0x8, 0x5}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "7a6e627b3201137ffccb04d19bc1f76a"}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42c}}, {0x33, &(0x7f0000000540)=@string={0x33, 0x3, "24efe786463b7822bfe9eb90178e4020ef34d19c98dcaf6c430075c11717d9828d0800000088ff6af97966a021522db8a6"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaabb0000080007"], 0x30}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, &(0x7f0000000040)) 653.363133ms ago: executing program 8 (id=3099): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x8) 653.230072ms ago: executing program 8 (id=3100): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000000000008000300000000009500000000000000e7138cea3e142e14a436fdcc8ab6086f8e55e4"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) getsockname(r0, &(0x7f0000000140)=@in={0x2, 0x0, @local}, &(0x7f00000001c0)=0x80) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 587.104138ms ago: executing program 8 (id=3101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x8000004, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x13, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x17a, @time={0x5, 0x1000000}, 0x0, {0x0, 0x5}}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x2}) 499.010924ms ago: executing program 7 (id=3102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c001a8008000100"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x400}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x98, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x35}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x40094) 439.717116ms ago: executing program 7 (id=3103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 439.431496ms ago: executing program 8 (id=3104): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000001c0)={0x7f, 0x38, [0xa97, 0xa07, 0x7fff, 0xb8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x202, @tick, 0x0, {0x40}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007b01"]) 437.032083ms ago: executing program 3 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}], 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xdd) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="5bb86bfba4bb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x2001, 0x880d, 0x48, 0x0, @wg=@cookie={0x3, 0x6, "c3c649c5ddc06026fe83810e0fda3c7bb12fa2d65a6b4ac7", "ca46d9fee7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001080}, 0x40083) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000003c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40408d1}, 0x1000c880) ioctl$KVM_RUN(r5, 0xae80, 0x0) 384.244154ms ago: executing program 7 (id=3105): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getresuid(&(0x7f0000002400)=0x0, &(0x7f0000002440), &(0x7f0000002480)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x1d0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r4 = getegid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002e40)={@cgroup=r5, r5, 0x2e, 0x2000, 0x0, @value=r7}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002e00)=r6, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r9, r5, 0x4, r5}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002540)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000002640)=0xe8) getresgid(&(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)=0x0) stat(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() fstat(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002e80)=r6, 0x4) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002d40)={&(0x7f0000000080)={0x50, 0x0, 0xe, {0x7, 0x2b, 0x7fffffff, 0x2400109, 0x10, 0xfffb, 0x3, 0x0, 0x0, 0x0, 0x1, 0x6}}, &(0x7f0000000100)={0x18, 0x0, 0x5, {0x5}}, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x2}}, &(0x7f00000001c0)={0x18, 0x0, 0x80}, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x7f}}, &(0x7f0000002280)={0x28, 0x0, 0x5, {{0x200, 0x9, 0x2, 0xffffffffffffffff}}}, &(0x7f00000022c0)={0x60, 0x0, 0x6, {{0xf6, 0x4, 0xfffffffffffffffb, 0x2e5a8812, 0x4, 0xffffff01, 0x5, 0x200}}}, &(0x7f0000002340)={0x18, 0x0, 0x80, {0x4}}, &(0x7f0000002380)={0x20, 0x0, 0x7, {'/dev/input/mice\x00'}}, &(0x7f00000023c0)={0x20, 0x0, 0x800, {0x0, 0x2}}, &(0x7f00000024c0)={0x78, 0x0, 0x3, {0x9, 0xc, 0x0, {0x0, 0x7, 0x8, 0x54e93488, 0x1, 0x1, 0x1, 0x6, 0x5e6, 0x6000, 0x100, r2, r4, 0x8, 0x4}}}, &(0x7f0000002740)={0x90, 0x0, 0x100000000, {0x1, 0x3, 0x5c0, 0xfffffffffffffffd, 0x68fa692f, 0x1, {0x2, 0x7fff, 0x101, 0x0, 0xffffffffffffffff, 0x92, 0x5, 0x8, 0x4, 0x6000, 0x1, r10, r11, 0xffffff7d}}}, &(0x7f0000002800)={0x30, 0x0, 0x6, [{0x4, 0xffffffff, 0x5, 0x7f, ':)#]{'}]}, &(0x7f0000002900)={0xb0, 0x0, 0x9, [{{0x2, 0x1, 0x2fd4, 0xede, 0x7fffffff, 0x80, {0x4, 0x401, 0x100000001, 0xfffffffffffffffa, 0x2, 0x299, 0x6, 0x3, 0xa1f, 0x0, 0x101, 0xee01, r12, 0x7, 0x4}}, {0x2, 0x8, 0x1, 0x200, ')'}}]}, &(0x7f00000029c0)={0xa0, 0xffffffffffffffda, 0x10, {{0x2, 0x1, 0x5, 0xb, 0x0, 0x81, {0x3, 0x3, 0xff, 0x94d3, 0x1, 0x87, 0x7, 0x0, 0x7, 0x2000, 0x6, 0x0, r13, 0x2, 0x7f}}, {0x0, 0x14}}}, &(0x7f0000002a80)={0x20, 0x0, 0x7f, {0x800, 0x0, 0xe01, 0x6}}, &(0x7f0000002c00)={0x130, 0xffffffffffffffda, 0x0, {0x10, 0xe3, 0x0, '\x00', {0x800, 0x4, 0x5, 0xff, r14, r15, 0x2000, '\x00', 0x0, 0x1, 0x866c, 0x0, {0xd024, 0x1ff}, {0x0, 0x3}, {0x7, 0x80000}, {0x7, 0x4}, 0x2, 0x800, 0xa, 0x4}}}}) r16 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r16, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 118.490634ms ago: executing program 8 (id=3106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xa}) 183.406µs ago: executing program 8 (id=3107): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x2040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x309, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x2, 0x2}, 0x6) lchown(&(0x7f0000000180)='./bus\x00', r9, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) clock_getres(0x851be745dab4a093, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x600, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) 0s ago: executing program 3 (id=3108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x1e, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x92}, @jmp={0x5, 0x0, 0xc, 0x5, 0x5, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000400)={r3, 0x3}, 0x8) kernel console output (not intermixed with test programs): ] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 285.083023][ T841] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 285.085931][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.094304][T14512] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 285.103269][ T841] hub 10-1:1.0: bad descriptor, ignoring hub [ 285.105202][ T841] hub 10-1:1.0: probe with driver hub failed with error -5 [ 285.107678][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 285.109365][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 285.122992][ T841] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 285.125611][ T841] cdc_wdm 10-1:1.0: Unknown control protocol [ 285.234250][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.271026][T14537] bridge0: entered promiscuous mode [ 285.273481][T14537] ip6gretap0: entered promiscuous mode [ 285.277187][T14537] debugfs: 'hsr1' already exists in 'hsr' [ 285.279004][T14537] Cannot create hsr debugfs directory [ 285.414902][ T57] usb 10-1: USB disconnect, device number 6 [ 285.476323][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.525185][T14561] syz_tun: entered allmulticast mode [ 285.529225][T14560] syz_tun: left allmulticast mode [ 285.634958][T14567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.637560][ T5945] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.713864][T14567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.746693][ T156] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 285.883846][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.887102][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.890162][T14575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.914592][ T156] usb 10-1: unable to get BOS descriptor or descriptor too short [ 285.921831][ T156] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 285.925085][ T156] usb 10-1: can't read configurations, error -71 [ 285.933213][T14581] veth0_macvtap: left promiscuous mode [ 286.119615][ T6061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.124123][T14584] xfrm0 speed is unknown, defaulting to 1000 [ 286.245550][T14588] xfrm0 speed is unknown, defaulting to 1000 [ 286.282040][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.410381][ T7510] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 286.497753][T14641] binder_alloc: 14640: pid 14640 spamming oneway? 1 buffers allocated for a total size of 4096 [ 286.581916][ T7510] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.585070][ T7510] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.588103][ T7510] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.636925][ T7510] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 286.640725][ T7510] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 286.653081][ T7510] usb 9-1: Product: syz [ 286.654892][ T7510] usb 9-1: Manufacturer: syz [ 286.656863][ T7510] usb 9-1: SerialNumber: syz [ 286.762907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.832525][T14658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.886531][ T7510] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.040882][ T841] usb 8-1: USB disconnect, device number 33 [ 287.122658][ T29] usb 9-1: USB disconnect, device number 26 [ 287.126809][ T29] usblp1: removed [ 287.165172][ T57] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 287.325256][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.328468][ T57] usb 12-1: unable to get BOS descriptor or descriptor too short [ 287.333333][ T57] usb 12-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 287.336706][ T57] usb 12-1: config 1 interface 0 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.340783][ T57] usb 12-1: config 1 interface 0 has no altsetting 0 [ 287.742993][T14702] __nla_validate_parse: 12 callbacks suppressed [ 287.743010][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2609'. [ 287.814716][T14710] sctp: [Deprecated]: syz.5.2610 (pid 14710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.814716][T14710] Use struct sctp_sack_info instead [ 287.836921][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.842941][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.846969][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.851154][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.854654][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.893837][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 287.896811][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2611'. [ 287.904956][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 287.907781][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2611'. [ 287.910895][ T1176] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.913686][ T1176] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.935503][ T1145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.945690][ T1176] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.948537][ T1176] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.988030][T14712] xfrm0 speed is unknown, defaulting to 1000 [ 288.041752][ T1145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.139220][ T1145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.202045][T14712] chnl_net:caif_netlink_parms(): no params data found [ 288.221067][ T841] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 288.233468][ T1145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.336310][T14712] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.339158][T14712] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.341680][T14712] bridge_slave_0: entered allmulticast mode [ 288.344452][T14712] bridge_slave_0: entered promiscuous mode [ 288.348092][T14712] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.351312][T14712] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.353813][T14712] bridge_slave_1: entered allmulticast mode [ 288.356646][T14712] bridge_slave_1: entered promiscuous mode [ 288.381927][ T841] usb 10-1: Using ep0 maxpacket: 16 [ 288.391339][ T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.401207][T14712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.403503][ T841] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.408503][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.411875][ T841] usb 10-1: Product: syz [ 288.413691][ T841] usb 10-1: Manufacturer: syz [ 288.416430][ T841] usb 10-1: SerialNumber: syz [ 288.419599][T14712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.422235][ T841] usb 10-1: config 0 descriptor?? [ 288.431729][ T841] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.440112][ T841] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 288.488512][T14712] team0: Port device team_slave_0 added [ 288.501817][T14712] team0: Port device team_slave_1 added [ 288.804374][ T1145] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 288.807653][ T1145] bond0 (unregistering): Released all slaves [ 288.882112][ T1145] bond1 (unregistering): Released all slaves [ 288.888407][ T1145] bond2 (unregistering): Released all slaves [ 288.894757][ T1145] bond3 (unregistering): Released all slaves [ 288.917957][T14712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.921032][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.928932][T14712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.946787][T14712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.949589][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.960044][T14712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.970633][ T1145] tipc: Left network mode [ 289.053418][T14712] hsr_slave_0: entered promiscuous mode [ 289.055900][T14712] hsr_slave_1: entered promiscuous mode [ 289.058042][T14712] debugfs: 'hsr0' already exists in 'hsr' [ 289.059928][T14712] Cannot create hsr debugfs directory [ 289.080525][ T841] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 289.505340][ T1145] hsr_slave_0: left promiscuous mode [ 289.508291][ T1145] hsr_slave_1: left promiscuous mode [ 289.511207][ T1145] veth1_vlan: left allmulticast mode [ 289.644270][ T1145] team0 (unregistering): Port device macvlan1 removed [ 290.035996][ T5945] Bluetooth: hci4: command tx timeout [ 290.052152][ T57] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.055518][ T57] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.060842][ T57] usb 12-1: can't set config #1, error -71 [ 290.063951][ T57] usb 12-1: USB disconnect, device number 4 [ 290.430846][ T57] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 290.588655][ T57] usb 12-1: Using ep0 maxpacket: 8 [ 290.593577][ T57] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 290.598393][ T57] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 290.602870][ T57] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.607043][ T57] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.613467][ T57] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.617315][ T57] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.631473][ T841] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 290.635174][ T55] net_ratelimit: 3 callbacks suppressed [ 290.635188][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.639660][ T6061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.643236][ T841] em28xx 10-1:0.0: board has no eeprom [ 290.645689][T15763] em28xx 10-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 290.717712][ T841] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 290.720719][ T841] em28xx 10-1:0.0: dvb set to bulk mode. [ 290.741008][ T55] em28xx 10-1:0.0: Binding DVB extension [ 290.798336][ T55] em28xx 10-1:0.0: Registering input extension [ 290.805900][T14727] netlink: 'syz.5.2612': attribute type 12 has an invalid length. [ 290.810675][ T55] usb 10-1: USB disconnect, device number 9 [ 290.814251][ T55] em28xx 10-1:0.0: Disconnecting em28xx [ 290.816206][ T55] em28xx 10-1:0.0: Closing input extension [ 290.850284][ T57] usb 12-1: usb_control_msg returned -32 [ 290.852093][ T57] usbtmc 12-1:16.0: can't read capabilities [ 290.871857][ T55] em28xx 10-1:0.0: Freeing device [ 291.100785][T14712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.104936][T14712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.111502][T14712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.116415][T14712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.205448][T14712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.208679][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 291.214021][T15873] hsr_slave_0: left promiscuous mode [ 291.216454][T15873] hsr_slave_1: left promiscuous mode [ 291.236377][T14712] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.242067][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.244496][T10249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.250546][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.253285][T10246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.364089][T14712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.505053][T14712] veth0_vlan: entered promiscuous mode [ 291.511113][T14712] veth1_vlan: entered promiscuous mode [ 291.533800][T14712] veth0_macvtap: entered promiscuous mode [ 291.539688][T14712] veth1_macvtap: entered promiscuous mode [ 291.552806][T14712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.558837][T14712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.566876][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.569657][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.572944][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.575744][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.634129][T10248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.638684][T10248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.649784][T10248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.652346][T10248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.744002][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.957926][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 292.027137][T15949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 292.122573][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 292.122589][ T40] audit: type=1326 audit(1764892319.988:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.3.2634" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81e698f749 code=0x0 [ 292.141263][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.144787][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.149428][ T10] usb 9-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 292.152384][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.154937][ T10] usb 9-1: Product: syz [ 292.156265][ T10] usb 9-1: Manufacturer: syz [ 292.157752][ T10] usb 9-1: SerialNumber: syz [ 292.160662][ T10] usb 9-1: config 0 descriptor?? [ 292.268237][ T5931] Bluetooth: hci4: command tx timeout [ 292.385499][ T10] usb 9-1: USB disconnect, device number 27 [ 292.692796][T15974] FAULT_INJECTION: forcing a failure. [ 292.692796][T15974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.697016][T15974] CPU: 1 UID: 0 PID: 15974 Comm: syz.5.2637 Not tainted syzkaller #0 PREEMPT(full) [ 292.697031][T15974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.697038][T15974] Call Trace: [ 292.697053][T15974] [ 292.697058][T15974] dump_stack_lvl+0x16c/0x1f0 [ 292.697084][T15974] should_fail_ex+0x512/0x640 [ 292.697105][T15974] _copy_from_iter+0x29f/0x1720 [ 292.697121][T15974] ? _copy_from_iter+0x15d/0x1720 [ 292.697134][T15974] ? __pfx__copy_from_iter+0x10/0x10 [ 292.697149][T15974] ? __pfx__copy_from_iter+0x10/0x10 [ 292.697162][T15974] ? _copy_from_iter+0x15d/0x1720 [ 292.697177][T15974] copy_page_from_iter+0xde/0x180 [ 292.697192][T15974] skb_copy_datagram_from_iter+0x2a0/0x740 [ 292.697210][T15974] tun_get_user+0x1850/0x3cc0 [ 292.697232][T15974] ? __pfx_tun_get_user+0x10/0x10 [ 292.697248][T15974] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 292.697266][T15974] ? find_held_lock+0x2b/0x80 [ 292.697281][T15974] ? tun_get+0x191/0x370 [ 292.697297][T15974] tun_chr_write_iter+0xdc/0x210 [ 292.697313][T15974] vfs_write+0x7d3/0x11d0 [ 292.697324][T15974] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 292.697340][T15974] ? __pfx_vfs_write+0x10/0x10 [ 292.697349][T15974] ? find_held_lock+0x2b/0x80 [ 292.697370][T15974] ksys_write+0x12a/0x250 [ 292.697380][T15974] ? __pfx_ksys_write+0x10/0x10 [ 292.697395][T15974] do_syscall_64+0xcd/0xfa0 [ 292.697407][T15974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.697422][T15974] RIP: 0033:0x7f401b18f749 [ 292.697431][T15974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.697441][T15974] RSP: 002b:00007f401c029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.697451][T15974] RAX: ffffffffffffffda RBX: 00007f401b3e5fa0 RCX: 00007f401b18f749 [ 292.697458][T15974] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 292.697464][T15974] RBP: 00007f401c029090 R08: 0000000000000000 R09: 0000000000000000 [ 292.697470][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.697476][T15974] R13: 00007f401b3e6038 R14: 00007f401b3e5fa0 R15: 00007ffc316a1e68 [ 292.697489][T15974] [ 292.888703][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.910401][T15980] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 292.961088][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 293.003625][T15987] /dev/nullb0: Can't open blockdev [ 293.066191][ T40] audit: type=1400 audit(1764892320.876:805): avc: denied { module_load } for pid=15999 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 293.066339][T16001] Invalid ELF header type: 2 != 1 [ 293.109512][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2643'. [ 293.112442][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2643'. [ 293.118246][T16004] tipc: Enabled bearer , priority 0 [ 293.142330][T16004] syzkaller0: entered promiscuous mode [ 293.144602][T16004] syzkaller0: entered allmulticast mode [ 293.147886][T16004] tipc: Resetting bearer [ 293.153440][T16003] tipc: Resetting bearer [ 293.320704][ T29] usb 12-1: USB disconnect, device number 5 [ 293.523551][T16027] FAULT_INJECTION: forcing a failure. [ 293.523551][T16027] name failslab, interval 1, probability 0, space 0, times 0 [ 293.528138][T16027] CPU: 0 UID: 0 PID: 16027 Comm: syz.7.2645 Not tainted syzkaller #0 PREEMPT(full) [ 293.528159][T16027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.528170][T16027] Call Trace: [ 293.528177][T16027] [ 293.528184][T16027] dump_stack_lvl+0x16c/0x1f0 [ 293.528205][T16027] should_fail_ex+0x512/0x640 [ 293.528223][T16027] ? fs_reclaim_acquire+0xae/0x150 [ 293.528245][T16027] should_failslab+0xc2/0x120 [ 293.528264][T16027] __kmalloc_noprof+0xdd/0x880 [ 293.528285][T16027] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.528309][T16027] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.528326][T16027] tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.528347][T16027] ? tomoyo_profile+0x47/0x60 [ 293.528370][T16027] tomoyo_path_number_perm+0x245/0x580 [ 293.528384][T16027] ? tomoyo_path_number_perm+0x237/0x580 [ 293.528402][T16027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.528439][T16027] ? find_held_lock+0x2b/0x80 [ 293.528479][T16027] ? find_held_lock+0x2b/0x80 [ 293.528498][T16027] ? hook_file_ioctl_common+0x145/0x410 [ 293.528527][T16027] ? __fget_files+0x20e/0x3c0 [ 293.528550][T16027] security_file_ioctl+0x9b/0x240 [ 293.528570][T16027] __x64_sys_ioctl+0xb7/0x210 [ 293.528592][T16027] do_syscall_64+0xcd/0xfa0 [ 293.528610][T16027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.528626][T16027] RIP: 0033:0x7f16d318f749 [ 293.528640][T16027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.528659][T16027] RSP: 002b:00007f16d4009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.528674][T16027] RAX: ffffffffffffffda RBX: 00007f16d33e5fa0 RCX: 00007f16d318f749 [ 293.528684][T16027] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 293.528693][T16027] RBP: 00007f16d4009090 R08: 0000000000000000 R09: 0000000000000000 [ 293.528702][T16027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.528712][T16027] R13: 00007f16d33e6038 R14: 00007f16d33e5fa0 R15: 00007fffbc78e218 [ 293.528735][T16027] [ 293.528742][T16027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.886934][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.973366][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.074253][T16046] overlayfs: failed to resolve './file1': -2 [ 294.487188][ T5931] Bluetooth: hci4: command 0x040f tx timeout [ 294.549262][T16003] tipc: Disabling bearer [ 294.562222][ T7510] tipc: Node number set to 764988776 [ 294.759535][T16064] netlink: 'syz.5.2651': attribute type 1 has an invalid length. [ 294.773862][T16064] bond2: entered promiscuous mode [ 294.776096][T16064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.783818][T16064] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2651'. [ 294.787439][T16064] bond2: entered allmulticast mode [ 294.805341][T16064] bond2: (slave bridge4): making interface the new active one [ 294.808441][T16064] bridge4: entered promiscuous mode [ 294.810715][T16064] bridge4: entered allmulticast mode [ 294.816096][T16064] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 294.939457][T16114] input: syz0 as /devices/virtual/input/input58 [ 295.082364][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.199636][ T5997] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 295.203771][T16137] FAULT_INJECTION: forcing a failure. [ 295.203771][T16137] name failslab, interval 1, probability 0, space 0, times 0 [ 295.208136][T16137] CPU: 2 UID: 0 PID: 16137 Comm: syz.5.2659 Not tainted syzkaller #0 PREEMPT(full) [ 295.208153][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.208163][T16137] Call Trace: [ 295.208178][T16137] [ 295.208184][T16137] dump_stack_lvl+0x16c/0x1f0 [ 295.208220][T16137] should_fail_ex+0x512/0x640 [ 295.208247][T16137] ? fs_reclaim_acquire+0xae/0x150 [ 295.208270][T16137] should_failslab+0xc2/0x120 [ 295.208287][T16137] __kmalloc_noprof+0xdd/0x880 [ 295.208302][T16137] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 295.208318][T16137] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 295.208330][T16137] tomoyo_realpath_from_path+0xc2/0x6e0 [ 295.208344][T16137] ? tomoyo_profile+0x47/0x60 [ 295.208359][T16137] tomoyo_path_number_perm+0x245/0x580 [ 295.208369][T16137] ? tomoyo_path_number_perm+0x237/0x580 [ 295.208385][T16137] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.208418][T16137] ? find_held_lock+0x2b/0x80 [ 295.208451][T16137] ? find_held_lock+0x2b/0x80 [ 295.208464][T16137] ? hook_file_ioctl_common+0x145/0x410 [ 295.208481][T16137] ? __fget_files+0x20e/0x3c0 [ 295.208495][T16137] security_file_ioctl+0x9b/0x240 [ 295.208508][T16137] __x64_sys_ioctl+0xb7/0x210 [ 295.208524][T16137] do_syscall_64+0xcd/0xfa0 [ 295.208536][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.208547][T16137] RIP: 0033:0x7f401b18f749 [ 295.208556][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.208566][T16137] RSP: 002b:00007f401c029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.208576][T16137] RAX: ffffffffffffffda RBX: 00007f401b3e5fa0 RCX: 00007f401b18f749 [ 295.208583][T16137] RDX: 0000000000000000 RSI: 0000000000005312 RDI: 0000000000000003 [ 295.208589][T16137] RBP: 00007f401c029090 R08: 0000000000000000 R09: 0000000000000000 [ 295.208595][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.208601][T16137] R13: 00007f401b3e6038 R14: 00007f401b3e5fa0 R15: 00007ffc316a1e68 [ 295.208615][T16137] [ 295.208620][T16137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.341167][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2662'. [ 295.357221][T16147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.367248][T16147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.369610][T16147] bond3: (slave gtp0): The slave device specified does not support setting the MAC address [ 295.374238][ T5997] usb 12-1: Using ep0 maxpacket: 32 [ 295.375534][T16147] bond3: (slave gtp0): Error -95 calling set_mac_address [ 295.377329][ T5997] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 295.382832][ T5997] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 295.386750][ T5997] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.391068][ T5997] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 295.398816][ T5997] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 295.401527][ T5997] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.404105][ T5997] usb 12-1: Product: syz [ 295.405450][ T5997] usb 12-1: Manufacturer: syz [ 295.407059][ T5997] usb 12-1: SerialNumber: syz [ 295.413228][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 295.419274][ T5997] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input59 [ 295.500660][T16197] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 295.505493][T16197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.607605][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.648737][ T5997] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 295.651794][ T5997] (id 0x00) [ 295.714557][ T5997] rc_core: IR keymap rc-imon-pad not found [ 295.716526][ T5997] Registered IR keymap rc-empty [ 295.718528][ T5997] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 295.722786][ T5997] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 295.855263][ T5997] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 295.862882][ T5997] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input60 [ 295.871660][ T5997] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:6> initialized [ 295.985788][ T40] audit: type=1400 audit(1764892323.606:806): avc: denied { lock } for pid=16226 comm="syz.4.2670" path="socket:[75591]" dev="sockfs" ino=75591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 296.057201][T16115] imon:vfd_write: invalid payload size [ 296.059432][T16115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.061293][T16237] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 296.062335][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.069291][ T5997] usb 12-1: USB disconnect, device number 6 [ 296.109762][T10248] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.113286][T10248] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.182754][T10248] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.187137][T10248] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.194536][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.241407][T10248] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.245626][T10248] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.280369][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.318455][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.324674][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.328846][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.332681][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.342921][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.343745][T10248] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.349190][T10248] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.453146][T16262] xfrm0 speed is unknown, defaulting to 1000 [ 296.482169][T10248] bridge_slave_1: left allmulticast mode [ 296.484099][T10248] bridge_slave_1: left promiscuous mode [ 296.486509][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.491071][T10248] bridge_slave_0: left allmulticast mode [ 296.492891][T10248] bridge_slave_0: left promiscuous mode [ 296.495330][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.537100][ T10] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 296.629018][T10249] smc: removing ib device syz1 [ 296.678965][T16292] FAULT_INJECTION: forcing a failure. [ 296.678965][T16292] name failslab, interval 1, probability 0, space 0, times 0 [ 296.682904][T16292] CPU: 1 UID: 0 PID: 16292 Comm: syz.7.2679 Not tainted syzkaller #0 PREEMPT(full) [ 296.682917][T16292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.682924][T16292] Call Trace: [ 296.682928][T16292] [ 296.682933][T16292] dump_stack_lvl+0x16c/0x1f0 [ 296.682946][T16292] should_fail_ex+0x512/0x640 [ 296.682959][T16292] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 296.682977][T16292] should_failslab+0xc2/0x120 [ 296.682990][T16292] kmem_cache_alloc_node_noprof+0x78/0x770 [ 296.683006][T16292] ? __alloc_skb+0x2b2/0x380 [ 296.683022][T16292] ? __alloc_skb+0x2b2/0x380 [ 296.683034][T16292] ? __pfx_netlink_insert+0x10/0x10 [ 296.683048][T16292] __alloc_skb+0x2b2/0x380 [ 296.683061][T16292] ? __pfx___alloc_skb+0x10/0x10 [ 296.683074][T16292] ? netlink_autobind.isra.0+0x158/0x370 [ 296.683093][T16292] netlink_alloc_large_skb+0x69/0x140 [ 296.683109][T16292] netlink_sendmsg+0x698/0xdd0 [ 296.683127][T16292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.683147][T16292] ____sys_sendmsg+0xa98/0xc70 [ 296.683159][T16292] ? copy_msghdr_from_user+0x10a/0x160 [ 296.683173][T16292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.683190][T16292] ___sys_sendmsg+0x134/0x1d0 [ 296.683204][T16292] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.683217][T16292] ? __lock_acquire+0x622/0x1c90 [ 296.683244][T16292] __sys_sendmsg+0x16d/0x220 [ 296.683258][T16292] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.683281][T16292] do_syscall_64+0xcd/0xfa0 [ 296.683292][T16292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.683303][T16292] RIP: 0033:0x7f16d318f749 [ 296.683312][T16292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.683322][T16292] RSP: 002b:00007f16d4009038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.683332][T16292] RAX: ffffffffffffffda RBX: 00007f16d33e5fa0 RCX: 00007f16d318f749 [ 296.683339][T16292] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 0000000000000003 [ 296.683345][T16292] RBP: 00007f16d4009090 R08: 0000000000000000 R09: 0000000000000000 [ 296.683351][T16292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.683357][T16292] R13: 00007f16d33e6038 R14: 00007f16d33e5fa0 R15: 00007fffbc78e218 [ 296.683372][T16292] [ 296.773183][ T5931] Bluetooth: hci4: command 0x040f tx timeout [ 296.779217][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.786862][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.790920][ T10] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 296.795584][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.810725][T10248] bond1 (unregistering): (slave gre1): Releasing backup interface [ 296.811978][ T40] audit: type=1400 audit(1764892324.372:807): avc: denied { setattr } for pid=16294 comm="syz.7.2680" name="sequencer" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 296.813478][T10248] gre1 (unregistering): left promiscuous mode [ 296.813571][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.813750][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.813948][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.814601][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.814877][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.823802][ T10] usb 8-1: config 0 descriptor?? [ 296.880055][T16300] FAULT_INJECTION: forcing a failure. [ 296.880055][T16300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.884295][T16300] CPU: 3 UID: 0 PID: 16300 Comm: syz.7.2681 Not tainted syzkaller #0 PREEMPT(full) [ 296.884309][T16300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.884316][T16300] Call Trace: [ 296.884320][T16300] [ 296.884325][T16300] dump_stack_lvl+0x16c/0x1f0 [ 296.884339][T16300] should_fail_ex+0x512/0x640 [ 296.884355][T16300] should_fail_alloc_page+0xe7/0x130 [ 296.884369][T16300] prepare_alloc_pages+0x3c2/0x610 [ 296.884399][T16300] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 296.884420][T16300] ? ip_finish_output2+0x839/0x21a0 [ 296.884435][T16300] ? __pfx_ip_finish_output2+0x10/0x10 [ 296.884445][T16300] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.884460][T16300] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 296.884476][T16300] ? __pfx_ip_finish_output+0x10/0x10 [ 296.884485][T16300] ? find_held_lock+0x2b/0x80 [ 296.884499][T16300] ? ip_output+0x2b8/0xa90 [ 296.884510][T16300] ? ip_output+0x2c2/0xa90 [ 296.884521][T16300] ? ip_send_skb+0x17b/0x590 [ 296.884530][T16300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.884545][T16300] ? policy_nodemask+0xea/0x4e0 [ 296.884559][T16300] alloc_pages_mpol+0x1fb/0x550 [ 296.884577][T16300] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 296.884589][T16300] ? udp_sendmsg+0x3c8/0x2870 [ 296.884602][T16300] folio_alloc_mpol_noprof+0x36/0x2f0 [ 296.884617][T16300] vma_alloc_folio_noprof+0xed/0x1e0 [ 296.884631][T16300] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 296.884645][T16300] ? rcu_read_unlock+0x2d/0xb0 [ 296.884664][T16300] do_wp_page+0x11d8/0x52b0 [ 296.884679][T16300] ? __pfx_do_wp_page+0x10/0x10 [ 296.884693][T16300] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.884705][T16300] ? ___pte_offset_map+0x2ad/0x4f0 [ 296.884720][T16300] __handle_mm_fault+0x1ae3/0x2aa0 [ 296.884736][T16300] ? mt_find+0x3e2/0xa20 [ 296.884749][T16300] ? __pfx___handle_mm_fault+0x10/0x10 [ 296.884762][T16300] ? __pfx_mt_find+0x10/0x10 [ 296.884780][T16300] ? find_vma+0xbf/0x140 [ 296.884801][T16300] ? __pfx_find_vma+0x10/0x10 [ 296.884815][T16300] handle_mm_fault+0x589/0xd10 [ 296.884831][T16300] ? __pkru_allows_pkey+0x21/0xb0 [ 296.884843][T16300] do_user_addr_fault+0x7a6/0x1370 [ 296.884855][T16300] ? rcu_is_watching+0x12/0xc0 [ 296.884871][T16300] exc_page_fault+0x64/0xc0 [ 296.884881][T16300] asm_exc_page_fault+0x26/0x30 [ 296.884892][T16300] RIP: 0010:__put_user_4+0xd/0x20 [ 296.884902][T16300] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 296.884912][T16300] RSP: 0018:ffffc900254cfce0 EFLAGS: 00050202 [ 296.884921][T16300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 296.884928][T16300] RDX: ffff88800df98000 RSI: ffffffff892856a9 RDI: ffffffff8bf073c0 [ 296.884934][T16300] RBP: 0000000000000001 R08: 0f6c850f7c064f93 R09: 0000000000000000 [ 296.884940][T16300] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000040000 [ 296.884946][T16300] R13: 0000200000008000 R14: 00000000000003ff R15: 0000000000000400 [ 296.884957][T16300] ? __sys_sendmmsg+0x229/0x420 [ 296.884974][T16300] __sys_sendmmsg+0x234/0x420 [ 296.884990][T16300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 296.885009][T16300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.885027][T16300] ? fput+0x9b/0xd0 [ 296.885040][T16300] ? ksys_write+0x1ac/0x250 [ 296.885050][T16300] ? __pfx_ksys_write+0x10/0x10 [ 296.885062][T16300] __x64_sys_sendmmsg+0x9c/0x100 [ 296.885076][T16300] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.885086][T16300] do_syscall_64+0xcd/0xfa0 [ 296.885097][T16300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.885107][T16300] RIP: 0033:0x7f16d318f749 [ 296.885116][T16300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.885125][T16300] RSP: 002b:00007f16d4009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.885134][T16300] RAX: ffffffffffffffda RBX: 00007f16d33e5fa0 RCX: 00007f16d318f749 [ 296.885141][T16300] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 296.885147][T16300] RBP: 00007f16d4009090 R08: 0000000000000000 R09: 0000000000000000 [ 296.885153][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.885159][T16300] R13: 00007f16d33e6038 R14: 00007f16d33e5fa0 R15: 00007fffbc78e218 [ 296.885174][T16300] [ 297.065724][T16258] FAULT_INJECTION: forcing a failure. [ 297.065724][T16258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.074808][T16258] CPU: 1 UID: 0 PID: 16258 Comm: syz.3.2677 Not tainted syzkaller #0 PREEMPT(full) [ 297.074827][T16258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.074836][T16258] Call Trace: [ 297.074843][T16258] [ 297.074849][T16258] dump_stack_lvl+0x16c/0x1f0 [ 297.074872][T16258] should_fail_ex+0x512/0x640 [ 297.074897][T16258] should_fail_alloc_page+0xe7/0x130 [ 297.074920][T16258] prepare_alloc_pages+0x3c2/0x610 [ 297.074944][T16258] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 297.074973][T16258] ? find_held_lock+0x2b/0x80 [ 297.074995][T16258] ? is_bpf_text_address+0x8a/0x1a0 [ 297.075018][T16258] ? bpf_ksym_find+0x127/0x1c0 [ 297.075043][T16258] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.075067][T16258] ? is_bpf_text_address+0x94/0x1a0 [ 297.075087][T16258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.075111][T16258] ? __kernel_text_address+0xd/0x40 [ 297.075130][T16258] ? unwind_get_return_address+0x59/0xa0 [ 297.075145][T16258] ? arch_stack_walk+0xa6/0x100 [ 297.075162][T16258] ? __lock_acquire+0x622/0x1c90 [ 297.075173][T16258] ? __pfx_stack_trace_save+0x10/0x10 [ 297.075187][T16258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.075202][T16258] ? policy_nodemask+0xea/0x4e0 [ 297.075216][T16258] alloc_pages_mpol+0x1fb/0x550 [ 297.075229][T16258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.075240][T16258] ? ima_match_policy+0x7ed/0x22d0 [ 297.075260][T16258] folio_alloc_mpol_noprof+0x36/0x2f0 [ 297.075276][T16258] vma_alloc_folio_noprof+0xed/0x1e0 [ 297.075290][T16258] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 297.075304][T16258] ? rcu_read_unlock+0x2d/0xb0 [ 297.075323][T16258] do_wp_page+0x2084/0x52b0 [ 297.075344][T16258] ? __pfx_do_wp_page+0x10/0x10 [ 297.075365][T16258] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.075385][T16258] ? ___pte_offset_map+0x2ad/0x4f0 [ 297.075409][T16258] __handle_mm_fault+0x1ae3/0x2aa0 [ 297.075438][T16258] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.075453][T16258] ? __pte_offset_map_lock+0x174/0x310 [ 297.075463][T16258] ? vm_normal_page+0x1c4/0x320 [ 297.075475][T16258] ? __pfx_vm_normal_page+0x10/0x10 [ 297.075490][T16258] ? folio_walk_start+0x179/0x1380 [ 297.075504][T16258] handle_mm_fault+0x589/0xd10 [ 297.075522][T16258] break_ksm+0x223/0x630 [ 297.075538][T16258] ? __pfx_break_ksm+0x10/0x10 [ 297.075560][T16258] unmerge_ksm_pages+0x173/0x1e0 [ 297.075579][T16258] run_store+0x7bb/0xac0 [ 297.075600][T16258] ? __lock_acquire+0x622/0x1c90 [ 297.075610][T16258] ? __pfx_run_store+0x10/0x10 [ 297.075632][T16258] ? find_held_lock+0x2b/0x80 [ 297.075647][T16258] ? __pfx_run_store+0x10/0x10 [ 297.075662][T16258] kobj_attr_store+0x58/0x80 [ 297.075673][T16258] ? __pfx_kobj_attr_store+0x10/0x10 [ 297.075684][T16258] sysfs_kf_write+0xf2/0x150 [ 297.075699][T16258] kernfs_fop_write_iter+0x3af/0x570 [ 297.075709][T16258] ? __pfx_sysfs_kf_write+0x10/0x10 [ 297.075723][T16258] vfs_write+0x7d3/0x11d0 [ 297.075734][T16258] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 297.075745][T16258] ? __pfx___mutex_lock+0x10/0x10 [ 297.075757][T16258] ? __pfx_vfs_write+0x10/0x10 [ 297.075777][T16258] ksys_write+0x12a/0x250 [ 297.075787][T16258] ? __pfx_ksys_write+0x10/0x10 [ 297.075802][T16258] do_syscall_64+0xcd/0xfa0 [ 297.075813][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.075824][T16258] RIP: 0033:0x7f81e698f749 [ 297.075834][T16258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.075844][T16258] RSP: 002b:00007f81e77ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.075855][T16258] RAX: ffffffffffffffda RBX: 00007f81e6be5fa0 RCX: 00007f81e698f749 [ 297.075861][T16258] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 297.075867][T16258] RBP: 00007f81e77ed090 R08: 0000000000000000 R09: 0000000000000000 [ 297.075873][T16258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.075879][T16258] R13: 00007f81e6be6038 R14: 00007f81e6be5fa0 R15: 00007ffc6f020318 [ 297.075894][T16258] [ 297.086573][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 297.137335][ T6061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.138397][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 297.246318][ T10] usb 8-1: USB disconnect, device number 34 [ 297.601466][T10248] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 297.604152][T10248] bridge4 (unregistering): left promiscuous mode [ 297.606238][T10248] bridge4 (unregistering): left allmulticast mode [ 297.730406][T10248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.734853][T10248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.738510][T10248] bond0 (unregistering): Released all slaves [ 297.810497][T10248] bond1 (unregistering): Released all slaves [ 297.884447][T10248] bond2 (unregistering): Released all slaves [ 297.964671][T10248] bond3 (unregistering): Released all slaves [ 297.973127][ T53] xfrm0 speed is unknown, defaulting to 1000 [ 297.975693][ T53] syz1: Port: 1 Link DOWN [ 298.074308][T10248] tipc: Disabling bearer [ 298.090568][T10248] tipc: Left network mode [ 298.141529][ T29] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 298.177916][T16262] chnl_net:caif_netlink_parms(): no params data found [ 298.324592][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.329278][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.333375][ T29] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 298.343600][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.354096][ T29] usb 8-1: config 0 descriptor?? [ 298.432935][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.433012][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.433107][T16262] bridge_slave_0: entered allmulticast mode [ 298.433887][T16262] bridge_slave_0: entered promiscuous mode [ 298.449011][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.449089][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.449212][T16262] bridge_slave_1: entered allmulticast mode [ 298.450520][T16262] bridge_slave_1: entered promiscuous mode [ 298.505351][ T5931] Bluetooth: hci3: command tx timeout [ 298.583975][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.592761][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.657859][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 298.661089][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 298.673041][ T29] usb 8-1: USB disconnect, device number 35 [ 298.798224][T10248] hsr_slave_0: left promiscuous mode [ 298.801895][T10248] hsr_slave_1: left promiscuous mode [ 298.808654][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.812716][T10248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.819364][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.822617][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.904721][T10248] veth1_macvtap: left promiscuous mode [ 298.907206][T10248] veth0_macvtap: left promiscuous mode [ 298.909730][T10248] veth1_vlan: left promiscuous mode [ 298.913091][T10248] veth0_vlan: left promiscuous mode [ 298.944038][ T5931] Bluetooth: hci4: command 0x040f tx timeout [ 298.960022][T16930] Invalid logical block size (2) [ 299.030913][ T121] block nbd0: Possible stuck request ffff888027b7e000: control (read@0,1024B). Runtime 90 seconds [ 299.035309][ T121] block nbd0: Possible stuck request ffff888027b7e1c0: control (read@1024,1024B). Runtime 90 seconds [ 299.040642][ T121] block nbd0: Possible stuck request ffff888027b7e380: control (read@2048,1024B). Runtime 90 seconds [ 299.044843][ T121] block nbd0: Possible stuck request ffff888027b7e540: control (read@3072,1024B). Runtime 90 seconds [ 299.672809][T10248] team0 (unregistering): Port device team_slave_1 removed [ 299.754878][T10248] team0 (unregistering): Port device team_slave_0 removed [ 300.028738][T16946] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2699'. [ 300.136162][T16950] netlink: 'syz.4.2700': attribute type 16 has an invalid length. [ 300.139396][T16950] netlink: 'syz.4.2700': attribute type 17 has an invalid length. [ 300.250448][ T40] audit: type=1400 audit(1764892327.597:808): avc: denied { connect } for pid=16959 comm="syz.7.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.281011][ T40] audit: type=1400 audit(1764892327.616:809): avc: denied { create } for pid=16965 comm="syz.7.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.349321][T16966] SELinux: ebitmap: truncated map [ 300.355547][ T40] audit: type=1400 audit(1764892327.681:810): avc: denied { read } for pid=16965 comm="syz.7.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.389026][T16966] SELinux: failed to load policy [ 300.461200][T16262] team0: Port device team_slave_0 added [ 300.465561][T16262] team0: Port device team_slave_1 added [ 300.499128][T16966] syzkaller1: entered promiscuous mode [ 300.500909][T16966] syzkaller1: entered allmulticast mode [ 300.535692][T16966] block nbd7: NBD_DISCONNECT [ 300.621428][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.624755][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.633024][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.637528][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.639672][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.649042][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.730400][ T5931] Bluetooth: hci3: command tx timeout [ 300.739973][T16262] hsr_slave_0: entered promiscuous mode [ 300.747110][T16262] hsr_slave_1: entered promiscuous mode [ 300.749346][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 300.751571][T16262] Cannot create hsr debugfs directory [ 300.960670][T16262] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 300.965439][T16262] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 300.970008][T16262] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 300.973981][T16262] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 301.032735][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.049977][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.059603][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.061995][T10247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.069733][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.071993][T10248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.231771][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 301.240102][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.292720][T17501] binder_alloc: 17500: binder_alloc_buf, no vma [ 301.396498][T16262] veth0_vlan: entered promiscuous mode [ 301.401544][T16262] veth1_vlan: entered promiscuous mode [ 301.417531][T16262] veth0_macvtap: entered promiscuous mode [ 301.423420][T16262] veth1_macvtap: entered promiscuous mode [ 301.442655][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.453659][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.460124][T10245] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.463595][T10245] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.466875][T10245] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.470447][T10245] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.519688][T10249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.527755][T10249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.546408][T10246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.548926][T10246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.598472][T17532] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2675'. [ 301.760237][ T841] net_ratelimit: 15 callbacks suppressed [ 301.760247][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.910643][T17561] binder_alloc: 17560: binder_alloc_buf, no vma [ 301.938182][ T40] audit: type=1400 audit(1764892329.158:811): avc: denied { create } for pid=17563 comm="syz.8.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.946148][ T40] audit: type=1400 audit(1764892329.177:812): avc: denied { shutdown } for pid=17563 comm="syz.8.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.017735][T17575] Invalid source name [ 302.019057][T17575] UBIFS error (pid: 17575): cannot open "/dev/sg0", error -22 [ 302.282920][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2728'. [ 302.288705][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2728'. [ 302.314614][ T5997] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 302.397979][ T40] audit: type=1400 audit(1764892329.588:813): avc: denied { setattr } for pid=17602 comm="syz.4.2731" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.485777][ T5997] usb 13-1: Using ep0 maxpacket: 8 [ 302.489878][ T5997] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 302.493303][ T5997] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.496634][ T5997] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.539953][T17624] netlink: 'syz.4.2736': attribute type 38 has an invalid length. [ 302.553108][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2737'. [ 302.677691][ T40] audit: type=1400 audit(1764892329.850:814): avc: denied { mounton } for pid=17642 comm="syz.4.2742" path="/bus" dev="bpf" ino=80205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 302.680291][T17644] overlayfs: upper fs does not support tmpfile. [ 302.870758][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.977145][ T5997] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 303.149835][ T5997] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.152845][ T5997] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.155879][ T5997] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.162734][ T5997] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 303.165570][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 303.168066][ T5997] usb 9-1: Product: syz [ 303.180478][ T5997] usb 9-1: Manufacturer: syz [ 303.181977][ T5997] usb 9-1: SerialNumber: syz [ 303.219227][ T40] audit: type=1400 audit(1764892330.364:815): avc: denied { connect } for pid=17578 comm="syz.8.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.225706][ T156] hid (null): unknown global tag 0xc [ 303.227467][ T156] hid (null): global environment stack underflow [ 303.237418][ T156] hid-generic 0002:0004:80000000.0006: unknown global tag 0xc [ 303.240146][ T156] hid-generic 0002:0004:80000000.0006: item 0 1 1 12 parsing failed [ 303.243240][ T156] hid-generic 0002:0004:80000000.0006: probe with driver hid-generic failed with error -22 [ 303.406446][ T5997] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 303.625012][ T40] audit: type=1400 audit(1764892330.747:816): avc: denied { read write } for pid=17650 comm="syz.4.2743" name="lp0" dev="devtmpfs" ino=3714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 303.632599][T17651] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 303.640429][ T40] audit: type=1400 audit(1764892330.747:817): avc: denied { open } for pid=17650 comm="syz.4.2743" path="/dev/usb/lp0" dev="devtmpfs" ino=3714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 303.640588][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.672635][ T29] usb 9-1: USB disconnect, device number 28 [ 303.676423][ T29] usblp0: removed [ 303.811714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.812185][ T5931] Bluetooth: hci3: command tx timeout [ 303.815117][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.982974][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.040875][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 305.086823][T17769] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.108271][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.181848][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.231900][T17780] netlink: 'syz.3.2758': attribute type 8 has an invalid length. [ 305.236380][T17780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2758'. [ 305.272806][T17788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2760'. [ 305.279869][T17788] netlink: 'syz.3.2760': attribute type 12 has an invalid length. [ 305.282125][ T1955] usb 13-1: USB disconnect, device number 2 [ 305.283156][T17788] netlink: 'syz.3.2760': attribute type 29 has an invalid length. [ 305.290075][T17788] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2760'. [ 305.401653][T17804] No buffer was provided with the request [ 305.535428][T17819] netlink: 'syz.8.2765': attribute type 1 has an invalid length. [ 305.553623][T17819] bond1 (unregistering): Released all slaves [ 305.597645][T17887] __nla_validate_parse: 1 callbacks suppressed [ 305.597661][T17887] netlink: 5664 bytes leftover after parsing attributes in process `syz.7.2766'. [ 305.661330][ T40] audit: type=1400 audit(1764892332.645:818): avc: denied { wake_alarm } for pid=17889 comm="syz.7.2767" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.788592][T17902] macvtap1: entered promiscuous mode [ 305.791002][T17902] macvtap1: entered allmulticast mode [ 305.793734][T17902] veth1_to_bridge: entered promiscuous mode [ 305.796353][T17902] veth1_to_bridge: entered allmulticast mode [ 305.800686][T17902] team0: Device macvtap1 failed to register rx_handler [ 305.813221][T17902] veth1_to_bridge: left allmulticast mode [ 305.816140][T17902] veth1_to_bridge: left promiscuous mode [ 306.209307][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.317697][T17926] binder: 17924:17926 ioctl c0306201 200000000640 returned -22 [ 306.324014][T17926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 306.411250][T17939] netlink: 'syz.3.2776': attribute type 2 has an invalid length. [ 306.414635][T17939] netlink: 'syz.3.2776': attribute type 1 has an invalid length. [ 306.480858][T17935] ip6erspan0: entered promiscuous mode [ 306.489027][T17935] input: syz0 as /devices/virtual/input/input61 [ 306.544748][ T40] audit: type=1400 audit(1764892333.477:819): avc: denied { open } for pid=17953 comm="syz.7.2777" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=82232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.865186][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2782'. [ 306.918809][T17990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2784'. [ 307.224667][ T53] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 307.325264][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.395826][ T53] usb 13-1: Using ep0 maxpacket: 8 [ 307.405638][ T53] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.416186][ T53] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.426066][ T53] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.435698][ T53] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.441746][ T53] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.445769][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.533167][ T40] audit: type=1400 audit(1764892334.393:820): avc: denied { ioctl } for pid=18023 comm="syz.7.2790" path="/104/file0/cpuset.memory_pressure_enabled" dev="9p" ino=74186985 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.538311][T18029] tipc: Enabled bearer , priority 0 [ 307.556144][T18028] tipc: Disabling bearer [ 307.672615][ T53] usb 13-1: usb_control_msg returned -32 [ 307.674994][ T53] usbtmc 13-1:16.0: can't read capabilities [ 307.686282][ T53] usb 13-1: USB disconnect, device number 3 [ 307.926190][T18068] input: syz0 as /devices/virtual/input/input62 [ 307.931718][T18068] FAULT_INJECTION: forcing a failure. [ 307.931718][T18068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.937289][T18068] CPU: 3 UID: 0 PID: 18068 Comm: syz.4.2797 Not tainted syzkaller #0 PREEMPT(full) [ 307.937311][T18068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.937322][T18068] Call Trace: [ 307.937338][T18068] [ 307.937345][T18068] dump_stack_lvl+0x16c/0x1f0 [ 307.937380][T18068] should_fail_ex+0x512/0x640 [ 307.937410][T18068] _copy_from_user+0x2e/0xd0 [ 307.937448][T18068] input_event_from_user+0x133/0x3b0 [ 307.937475][T18068] ? __pfx_input_event_from_user+0x10/0x10 [ 307.937499][T18068] ? __pfx___might_resched+0x10/0x10 [ 307.937520][T18068] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.937545][T18068] ? input_event+0xb6/0xd0 [ 307.937568][T18068] uinput_write+0xbb4/0x12b0 [ 307.937593][T18068] ? __pfx_uinput_write+0x10/0x10 [ 307.937613][T18068] ? bpf_lsm_file_permission+0x9/0x10 [ 307.937629][T18068] ? security_file_permission+0x71/0x210 [ 307.937650][T18068] ? rw_verify_area+0xcf/0x6c0 [ 307.937674][T18068] ? __pfx_uinput_write+0x10/0x10 [ 307.937691][T18068] vfs_write+0x2a0/0x11d0 [ 307.937711][T18068] ? __pfx_vfs_write+0x10/0x10 [ 307.937724][T18068] ? find_held_lock+0x2b/0x80 [ 307.937744][T18068] ? __fget_files+0x204/0x3c0 [ 307.937765][T18068] ? __fget_files+0x20e/0x3c0 [ 307.937787][T18068] ksys_write+0x1f8/0x250 [ 307.937802][T18068] ? __pfx_ksys_write+0x10/0x10 [ 307.937824][T18068] do_syscall_64+0xcd/0xfa0 [ 307.937842][T18068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.937858][T18068] RIP: 0033:0x7f82e398f749 [ 307.937871][T18068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.937886][T18068] RSP: 002b:00007f82e1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.937901][T18068] RAX: ffffffffffffffda RBX: 00007f82e3be5fa0 RCX: 00007f82e398f749 [ 307.937911][T18068] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 307.937920][T18068] RBP: 00007f82e1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.937929][T18068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.937938][T18068] R13: 00007f82e3be6038 R14: 00007f82e3be5fa0 R15: 00007ffc961bff98 [ 307.937963][T18068] [ 308.111199][T18088] FAULT_INJECTION: forcing a failure. [ 308.111199][T18088] name failslab, interval 1, probability 0, space 0, times 0 [ 308.116625][T18088] CPU: 1 UID: 0 PID: 18088 Comm: syz.3.2801 Not tainted syzkaller #0 PREEMPT(full) [ 308.116647][T18088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.116659][T18088] Call Trace: [ 308.116665][T18088] [ 308.116672][T18088] dump_stack_lvl+0x16c/0x1f0 [ 308.116706][T18088] should_fail_ex+0x512/0x640 [ 308.116728][T18088] ? __kmalloc_cache_noprof+0x5f/0x780 [ 308.116755][T18088] should_failslab+0xc2/0x120 [ 308.116777][T18088] __kmalloc_cache_noprof+0x72/0x780 [ 308.116803][T18088] ? drm_atomic_state_alloc+0xb8/0x120 [ 308.116829][T18088] ? drm_atomic_state_alloc+0xb8/0x120 [ 308.116848][T18088] drm_atomic_state_alloc+0xb8/0x120 [ 308.116869][T18088] drm_mode_atomic_ioctl+0x393/0x2600 [ 308.116894][T18088] ? avc_has_extended_perms+0x33a/0x1090 [ 308.116923][T18088] ? avc_has_extended_perms+0x47c/0x1090 [ 308.116951][T18088] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 308.116973][T18088] ? __lock_acquire+0xb8a/0x1c90 [ 308.117007][T18088] ? drm_is_current_master+0x2c/0x40 [ 308.117031][T18088] ? do_raw_spin_unlock+0x172/0x230 [ 308.117054][T18088] drm_ioctl_kernel+0x1f4/0x3e0 [ 308.117071][T18088] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 308.117092][T18088] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 308.117114][T18088] drm_ioctl+0x5c9/0xc30 [ 308.117132][T18088] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 308.117151][T18088] ? __pfx_drm_ioctl+0x10/0x10 [ 308.117176][T18088] ? selinux_file_ioctl+0x180/0x270 [ 308.117193][T18088] ? selinux_file_ioctl+0xb4/0x270 [ 308.117211][T18088] ? __pfx_drm_ioctl+0x10/0x10 [ 308.117226][T18088] __x64_sys_ioctl+0x18e/0x210 [ 308.117249][T18088] do_syscall_64+0xcd/0xfa0 [ 308.117266][T18088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.117282][T18088] RIP: 0033:0x7f81e698f749 [ 308.117294][T18088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.117309][T18088] RSP: 002b:00007f81e77ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.117326][T18088] RAX: ffffffffffffffda RBX: 00007f81e6be5fa0 RCX: 00007f81e698f749 [ 308.117337][T18088] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000012 [ 308.117347][T18088] RBP: 00007f81e77ed090 R08: 0000000000000000 R09: 0000000000000000 [ 308.117358][T18088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.117368][T18088] R13: 00007f81e6be6038 R14: 00007f81e6be5fa0 R15: 00007ffc6f020318 [ 308.117394][T18088] [ 308.225175][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.331678][T18104] binder: BINDER_SET_CONTEXT_MGR already set [ 308.333849][T18104] binder: 18102:18104 ioctl 4018620d 200000000040 returned -16 [ 308.434035][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.437245][ T40] audit: type=1326 audit(1764892335.243:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18112 comm="syz.8.2807" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe0158f749 code=0x0 [ 308.444417][ T6061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.449146][ T40] audit: type=1400 audit(1764892335.253:822): avc: denied { ioctl } for pid=18108 comm="syz.3.2806" path="socket:[81463]" dev="sockfs" ino=81463 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 308.644916][T18123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=18123 comm=syz.4.2810 [ 308.649894][T18123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2810'. [ 308.685426][ T40] audit: type=1400 audit(1764892335.477:823): avc: denied { setopt } for pid=18124 comm="syz.4.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.942273][ T40] audit: type=1400 audit(1764892335.711:824): avc: denied { setopt } for pid=18143 comm="syz.7.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 308.966734][ T40] audit: type=1400 audit(1764892335.729:825): avc: denied { setopt } for pid=18145 comm="syz.4.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 308.985367][T18149] loop9: detected capacity change from 0 to 7 [ 308.990299][T18149] Dev loop9: unable to read RDB block 7 [ 308.992992][T18149] loop9: AHDI p2 [ 308.994742][T18149] loop9: partition table partially beyond EOD, truncated [ 309.061834][T18154] syz.4.2820: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.068327][T18154] CPU: 3 UID: 0 PID: 18154 Comm: syz.4.2820 Not tainted syzkaller #0 PREEMPT(full) [ 309.068342][T18154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.068349][T18154] Call Trace: [ 309.068360][T18154] [ 309.068364][T18154] dump_stack_lvl+0x16c/0x1f0 [ 309.068387][T18154] warn_alloc+0x248/0x3a0 [ 309.068404][T18154] ? __pfx_warn_alloc+0x10/0x10 [ 309.068425][T18154] ? xskq_create+0xfb/0x1d0 [ 309.068439][T18154] ? __vmalloc_node_noprof+0xad/0xf0 [ 309.068454][T18154] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 309.068473][T18154] ? xskq_create+0xfb/0x1d0 [ 309.068497][T18154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.068515][T18154] ? xskq_create+0xfb/0x1d0 [ 309.068529][T18154] vmalloc_user_noprof+0x9e/0xe0 [ 309.068542][T18154] ? xskq_create+0xfb/0x1d0 [ 309.068557][T18154] xskq_create+0xfb/0x1d0 [ 309.068572][T18154] xsk_setsockopt+0x74e/0x9a0 [ 309.068586][T18154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.068599][T18154] ? find_held_lock+0x2b/0x80 [ 309.068616][T18154] ? selinux_socket_setsockopt+0x6a/0x80 [ 309.068634][T18154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.068648][T18154] do_sock_setsockopt+0xf3/0x1d0 [ 309.068666][T18154] __sys_setsockopt+0x1a0/0x230 [ 309.068683][T18154] __x64_sys_setsockopt+0xbd/0x160 [ 309.068695][T18154] ? do_syscall_64+0x91/0xfa0 [ 309.068705][T18154] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.068716][T18154] do_syscall_64+0xcd/0xfa0 [ 309.068727][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.068738][T18154] RIP: 0033:0x7f82e398f749 [ 309.068747][T18154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.068757][T18154] RSP: 002b:00007f82e1bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.068767][T18154] RAX: ffffffffffffffda RBX: 00007f82e3be6090 RCX: 00007f82e398f749 [ 309.068774][T18154] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000009 [ 309.068780][T18154] RBP: 00007f82e3a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 309.068786][T18154] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 309.068792][T18154] R13: 00007f82e3be6128 R14: 00007f82e3be6090 R15: 00007ffc961bff98 [ 309.068806][T18154] [ 309.068810][T18154] Mem-Info: [ 309.141474][T18154] active_anon:31311 inactive_anon:1098 isolated_anon:0 [ 309.141474][T18154] active_file:1838 inactive_file:47535 isolated_file:0 [ 309.141474][T18154] unevictable:1768 dirty:5428 writeback:0 [ 309.141474][T18154] slab_reclaimable:11153 slab_unreclaimable:90573 [ 309.141474][T18154] mapped:39328 shmem:19819 pagetables:1603 [ 309.141474][T18154] sec_pagetables:318 bounce:0 [ 309.141474][T18154] kernel_misc_reclaimable:0 [ 309.141474][T18154] free:381055 free_pcp:18653 free_cma:0 [ 309.155704][T18154] Node 0 active_anon:100276kB inactive_anon:4392kB active_file:7352kB inactive_file:183996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:144712kB dirty:18244kB writeback:0kB shmem:50516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17392kB pagetables:5860kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB [ 309.166173][T18154] Node 1 active_anon:24968kB inactive_anon:0kB active_file:0kB inactive_file:6144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12600kB dirty:3468kB writeback:0kB shmem:28760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:304kB pagetables:552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.176256][T18154] Node 0 DMA free:5384kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:600kB inactive_anon:0kB active_file:0kB inactive_file:1024kB unevictable:0kB writepending:1024kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:928kB local_pcp:100kB free_cma:0kB [ 309.186032][T18154] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 309.187941][T18154] Node 0 DMA32 free:35096kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99676kB inactive_anon:4392kB active_file:7352kB inactive_file:182972kB unevictable:3536kB writepending:17220kB zspages:0kB present:2080628kB managed:1269464kB mlocked:0kB bounce:0kB free_pcp:27008kB local_pcp:3824kB free_cma:0kB [ 309.198516][T18154] lowmem_reserve[]: 0 0 0 0 0 [ 309.200082][T18154] Node 1 Normal free:1483976kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24968kB inactive_anon:0kB active_file:0kB inactive_file:6144kB unevictable:3536kB writepending:3468kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:45860kB local_pcp:32528kB free_cma:0kB [ 309.211468][T18154] lowmem_reserve[]: 0 0 0 0 0 [ 309.213031][T18154] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 0*16kB 1*32kB (M) 6*64kB (M) 3*128kB (UM) 4*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 5424kB [ 309.217902][T18154] Node 0 DMA32: 717*4kB (UM) 410*8kB (UME) 222*16kB (UME) 106*32kB (UME) 59*64kB (UME) 32*128kB (UME) 17*256kB (UME) 5*512kB (ME) 3*1024kB (UM) 2*2048kB (UM) 0*4096kB = 35044kB [ 309.223504][T18154] Node 1 Normal: 2*4kB (ME) 48*8kB (UM) 92*16kB (ME) 70*32kB (ME) 69*64kB (ME) 63*128kB (ME) 37*256kB (UME) 9*512kB (UME) 37*1024kB (UME) 27*2048kB (UM) 332*4096kB (M) = 1483720kB [ 309.229255][T18154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.232259][T18154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.235340][T18154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.238470][T18154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.241435][T18154] 69188 total pagecache pages [ 309.242946][T18154] 0 pages in swap cache [ 309.244320][T18154] Free swap = 124996kB [ 309.245726][T18154] Total swap = 124996kB [ 309.247138][T18154] 1048443 pages RAM [ 309.248442][T18154] 0 pages HighMem/MovableOnly [ 309.249969][T18154] 281764 pages reserved [ 309.251323][T18154] 0 pages cma reserved [ 309.348693][ C1] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 309.352614][ C1] sr 2:0:0:0: [sr0] tag#24 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 309.356341][T18171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2822'. [ 309.545969][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.595414][T18187] netlink: 'syz.4.2826': attribute type 2 has an invalid length. [ 309.621676][T18190] netlink: 'syz.7.2827': attribute type 1 has an invalid length. [ 309.664914][T18192] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2828'. [ 309.668215][T18192] unsupported nlmsg_type 40 [ 309.819123][T18204] tmpfs: Cannot change global quota limit on remount [ 309.898052][T18215] openvswitch: netlink: IP tunnel dst address not specified [ 310.047904][T18221] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2834'. [ 310.051324][T18221] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2834'. [ 310.225045][T18232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.229518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.250913][T18235] binder: BINDER_SET_CONTEXT_MGR already set [ 310.255044][T18235] binder: 18234:18235 ioctl 4018620d 200000000040 returned -16 [ 310.437494][T18255] loop9: detected capacity change from 0 to 7 [ 310.442173][T18255] Dev loop9: unable to read RDB block 7 [ 310.449003][T18255] loop9: AHDI p4 [ 310.450630][T18255] loop9: partition table partially beyond EOD, truncated [ 310.563284][T18273] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 310.566566][T18273] cramfs: wrong magic [ 310.609394][T18288] loop9: detected capacity change from 0 to 7 [ 310.616363][ T8702] Dev loop9: unable to read RDB block 7 [ 310.618165][ T8702] loop9: AHDI p3 p4 [ 310.619428][ T8702] loop9: partition table partially beyond EOD, truncated [ 310.622166][ T8702] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 310.636001][T18288] Dev loop9: unable to read RDB block 7 [ 310.636405][T18295] trusted_key: syz.4.2851 sent an empty control message without MSG_MORE. [ 310.638714][T18288] loop9: AHDI p3 p4 [ 310.643302][T18288] loop9: partition table partially beyond EOD, truncated [ 310.646732][T18288] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 310.660623][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.673300][ T8702] udevd[8702]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 310.695282][ T8702] udevd[8702]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 310.916791][T18318] netlink: 'syz.7.2856': attribute type 7 has an invalid length. [ 310.946717][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2858'. [ 310.963535][T18323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.976076][T18323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.977863][T18327] virtio-fs: tag not found [ 310.978426][T18323] bond1: (slave gtp1): The slave device specified does not support setting the MAC address [ 310.983665][T18323] bond1: (slave gtp1): Error -95 calling set_mac_address [ 311.407064][ T29] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 311.450027][T18386] 9pnet_virtio: no channels available for device syz [ 311.581052][ T29] usb 12-1: config 1 interface 0 has no altsetting 0 [ 311.584798][ T29] usb 12-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40 [ 311.587676][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.591092][ T29] usb 12-1: Product: syz [ 311.592952][ T29] usb 12-1: Manufacturer: syz [ 311.594771][ T29] usb 12-1: SerialNumber: syz [ 311.771102][T10245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.773669][T18412] netlink: 'syz.8.2871': attribute type 2 has an invalid length. [ 311.774767][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.776805][T18412] netlink: 'syz.8.2871': attribute type 1 has an invalid length. [ 311.776838][T18412] netlink: 'syz.8.2871': attribute type 1 has an invalid length. [ 311.789337][T18414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2872'. [ 311.792278][T18412] netlink: 'syz.8.2871': attribute type 1 has an invalid length. [ 311.795034][T18412] netlink: 14436 bytes leftover after parsing attributes in process `syz.8.2871'. [ 311.807083][T18412] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 18412 comm: syz.8.2871) [ 311.811371][ T40] audit: type=1800 audit(1764892338.393:826): pid=18412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2871" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=84344 res=0 errno=0 [ 311.885088][ T29] usbhid 12-1:1.0: can't add hid device: -71 [ 311.887143][ T29] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 311.894181][ T29] usb 12-1: USB disconnect, device number 7 [ 312.102551][ T1955] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 312.273982][ T1955] usb 9-1: Using ep0 maxpacket: 8 [ 312.278488][ T1955] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 312.283431][ T1955] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 312.288857][ T1955] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.292997][ T1955] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.298859][ T1955] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.302674][ T1955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.472130][T18482] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 312.505086][ T40] audit: type=1400 audit(1764892339.038:827): avc: denied { create } for pid=18484 comm="syz.8.2887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 312.535585][ T1955] usb 9-1: GET_CAPABILITIES returned 0 [ 312.537520][ T1955] usbtmc 9-1:16.0: can't read capabilities [ 312.654887][T18491] FAULT_INJECTION: forcing a failure. [ 312.654887][T18491] name failslab, interval 1, probability 0, space 0, times 0 [ 312.660529][T18491] CPU: 0 UID: 0 PID: 18491 Comm: syz.8.2889 Not tainted syzkaller #0 PREEMPT(full) [ 312.660553][T18491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.660564][T18491] Call Trace: [ 312.660581][T18491] [ 312.660588][T18491] dump_stack_lvl+0x16c/0x1f0 [ 312.660624][T18491] should_fail_ex+0x512/0x640 [ 312.660651][T18491] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 312.660673][T18491] should_failslab+0xc2/0x120 [ 312.660694][T18491] __kvmalloc_node_noprof+0x141/0x9c0 [ 312.660715][T18491] ? traverse.part.0.constprop.0+0x397/0x650 [ 312.660742][T18491] ? __kernel_text_address+0xd/0x40 [ 312.660767][T18491] ? traverse.part.0.constprop.0+0x397/0x650 [ 312.660793][T18491] traverse.part.0.constprop.0+0x397/0x650 [ 312.660829][T18491] seq_read_iter+0x93c/0x12d0 [ 312.660858][T18491] ? _kstrtoull+0x145/0x200 [ 312.660892][T18491] seq_read+0x3a3/0x570 [ 312.660919][T18491] ? __pfx_seq_read+0x10/0x10 [ 312.660951][T18491] ? import_ubuf+0x1b6/0x220 [ 312.660976][T18491] ? avc_policy_seqno+0x9/0x20 [ 312.661021][T18491] ? __pfx_seq_read+0x10/0x10 [ 312.661047][T18491] proc_reg_read+0x240/0x330 [ 312.661073][T18491] ? __pfx_proc_reg_read+0x10/0x10 [ 312.661096][T18491] vfs_readv+0x5c1/0x8b0 [ 312.661128][T18491] ? __pfx_vfs_readv+0x10/0x10 [ 312.661155][T18491] ? find_held_lock+0x2b/0x80 [ 312.661193][T18491] ? __fget_files+0x20e/0x3c0 [ 312.661219][T18491] ? do_preadv+0x1a6/0x270 [ 312.661244][T18491] do_preadv+0x1a6/0x270 [ 312.661271][T18491] ? __pfx_do_preadv+0x10/0x10 [ 312.661304][T18491] do_syscall_64+0xcd/0xfa0 [ 312.661324][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.661343][T18491] RIP: 0033:0x7efe0158f749 [ 312.661357][T18491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.661374][T18491] RSP: 002b:00007efe024d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 312.661391][T18491] RAX: ffffffffffffffda RBX: 00007efe017e5fa0 RCX: 00007efe0158f749 [ 312.661408][T18491] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 312.661419][T18491] RBP: 00007efe024d3090 R08: 0000000000000000 R09: 0000000000000000 [ 312.661429][T18491] R10: 0000000000000fb9 R11: 0000000000000246 R12: 0000000000000001 [ 312.661439][T18491] R13: 00007efe017e6038 R14: 00007efe017e5fa0 R15: 00007fff6941d3d8 [ 312.661465][T18491] [ 312.899898][ T55] net_ratelimit: 257 callbacks suppressed [ 312.899910][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.964162][ T55] usb 9-1: USB disconnect, device number 29 [ 313.421709][ T40] audit: type=1400 audit(1764892339.889:828): avc: denied { getopt } for pid=18603 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 313.441734][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.445740][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.548819][T18627] tipc: Enabled bearer , priority 0 [ 313.551864][T18627] syzkaller0: mtu less than device minimum [ 313.555736][T18626] tipc: Disabling bearer [ 313.672577][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2907'. [ 313.769365][T18678] Invalid logical block size (-4097) [ 313.852730][T18694] FAULT_INJECTION: forcing a failure. [ 313.852730][T18694] name failslab, interval 1, probability 0, space 0, times 0 [ 313.856787][T18694] CPU: 1 UID: 0 PID: 18694 Comm: syz.4.2923 Not tainted syzkaller #0 PREEMPT(full) [ 313.856802][T18694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.856809][T18694] Call Trace: [ 313.856844][T18694] [ 313.856849][T18694] dump_stack_lvl+0x16c/0x1f0 [ 313.856887][T18694] should_fail_ex+0x512/0x640 [ 313.856906][T18694] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 313.856924][T18694] should_failslab+0xc2/0x120 [ 313.856937][T18694] kmem_cache_alloc_noprof+0x75/0x6e0 [ 313.856953][T18694] ? security_file_alloc+0x34/0x2b0 [ 313.856969][T18694] ? security_file_alloc+0x34/0x2b0 [ 313.856981][T18694] security_file_alloc+0x34/0x2b0 [ 313.856995][T18694] init_file+0x93/0x4c0 [ 313.857008][T18694] alloc_empty_file+0x73/0x1e0 [ 313.857022][T18694] path_openat+0xda/0x2cb0 [ 313.857039][T18694] ? __pfx_path_openat+0x10/0x10 [ 313.857054][T18694] do_filp_open+0x20b/0x470 [ 313.857065][T18694] ? __pfx_do_filp_open+0x10/0x10 [ 313.857086][T18694] ? _raw_spin_unlock+0x28/0x50 [ 313.857101][T18694] ? alloc_fd+0x471/0x7d0 [ 313.857116][T18694] do_sys_openat2+0x11b/0x1d0 [ 313.857129][T18694] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.857143][T18694] ? __fget_files+0x20e/0x3c0 [ 313.857158][T18694] __x64_sys_creat+0xcc/0x120 [ 313.857172][T18694] ? __pfx___x64_sys_creat+0x10/0x10 [ 313.857186][T18694] ? __pfx_ksys_write+0x10/0x10 [ 313.857197][T18694] ? rcu_is_watching+0x12/0xc0 [ 313.857211][T18694] ? do_syscall_64+0x91/0xfa0 [ 313.857222][T18694] do_syscall_64+0xcd/0xfa0 [ 313.857233][T18694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.857244][T18694] RIP: 0033:0x7f82e398f749 [ 313.857253][T18694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.857263][T18694] RSP: 002b:00007f82e1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 313.857273][T18694] RAX: ffffffffffffffda RBX: 00007f82e3be5fa0 RCX: 00007f82e398f749 [ 313.857280][T18694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 313.857286][T18694] RBP: 00007f82e1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.857292][T18694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.857298][T18694] R13: 00007f82e3be6038 R14: 00007f82e3be5fa0 R15: 00007ffc961bff98 [ 313.857313][T18694] [ 313.930540][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.996578][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.097289][T18703] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 314.099364][T18703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.101977][T18703] vhci_hcd vhci_hcd.0: Device attached [ 314.111471][T18703] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 314.113818][T18703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 314.123559][T18703] vhci_hcd vhci_hcd.0: Device attached [ 314.127994][T18703] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 314.130798][T18703] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 314.134518][T18703] vhci_hcd vhci_hcd.0: Device attached [ 314.138862][T18708] vhci_hcd: connection closed [ 314.139030][T10245] vhci_hcd: stop threads [ 314.141016][T18704] vhci_hcd: connection closed [ 314.141135][T18706] vhci_hcd: connection closed [ 314.142729][T10245] vhci_hcd: release socket [ 314.142743][T10245] vhci_hcd: disconnect device [ 314.142915][T10245] vhci_hcd: stop threads [ 314.152321][T10245] vhci_hcd: release socket [ 314.154217][T10245] vhci_hcd: disconnect device [ 314.156659][T10245] vhci_hcd: stop threads [ 314.158419][T10245] vhci_hcd: release socket [ 314.160288][T10245] vhci_hcd: disconnect device [ 314.671076][T18731] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 314.673881][T18731] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 314.677226][T18731] vhci_hcd vhci_hcd.0: Device attached [ 314.683007][T18733] vhci_hcd: connection closed [ 314.683166][ T1145] vhci_hcd: stop threads [ 314.686486][ T1145] vhci_hcd: release socket [ 314.687997][ T1145] vhci_hcd: disconnect device [ 314.768906][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.802261][T18747] IPv6: NLM_F_REPLACE set, but no existing node found! [ 314.858971][ T40] audit: type=1400 audit(1764892341.244:829): avc: denied { node_bind } for pid=18753 comm="syz.4.2936" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 315.009230][ T40] audit: type=1400 audit(1764892341.385:830): avc: denied { read } for pid=18768 comm="syz.7.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.070473][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2939'. [ 315.109927][ T40] audit: type=1326 audit(1764892341.478:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18780 comm="syz.7.2942" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16d318f749 code=0x0 [ 315.109978][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.406882][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2945'. [ 315.518832][T18806] FAULT_INJECTION: forcing a failure. [ 315.518832][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 315.522815][T18806] CPU: 3 UID: 0 PID: 18806 Comm: syz.8.2948 Not tainted syzkaller #0 PREEMPT(full) [ 315.522830][T18806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.522837][T18806] Call Trace: [ 315.522841][T18806] [ 315.522846][T18806] dump_stack_lvl+0x16c/0x1f0 [ 315.522860][T18806] should_fail_ex+0x512/0x640 [ 315.522874][T18806] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 315.522888][T18806] should_failslab+0xc2/0x120 [ 315.522901][T18806] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 315.522912][T18806] ? ovl_mount_dir+0x26/0x1f0 [ 315.522925][T18806] ? kstrdup+0x53/0x100 [ 315.522934][T18806] kstrdup+0x53/0x100 [ 315.522944][T18806] ovl_mount_dir+0x26/0x1f0 [ 315.522955][T18806] ovl_parse_param+0x10ae/0x1570 [ 315.522966][T18806] ? selinux_fs_context_parse_param+0xd8/0x130 [ 315.522980][T18806] ? __pfx_ovl_parse_param+0x10/0x10 [ 315.522990][T18806] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 315.523003][T18806] ? static_key_count+0x5a/0x70 [ 315.523016][T18806] ? __pfx_ovl_parse_param+0x10/0x10 [ 315.523027][T18806] vfs_parse_fs_param+0x20b/0x3c0 [ 315.523041][T18806] vfs_parse_fs_qstr+0x138/0x1c0 [ 315.523054][T18806] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 315.523071][T18806] ? ovl_next_opt+0x143/0x1c0 [ 315.523087][T18806] ? __pfx_ovl_next_opt+0x10/0x10 [ 315.523102][T18806] vfs_parse_monolithic_sep+0x18d/0x210 [ 315.523116][T18806] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 315.523129][T18806] ? alloc_fs_context+0x59b/0x9c0 [ 315.523144][T18806] path_mount+0x768/0x23a0 [ 315.523159][T18806] ? __pfx_path_mount+0x10/0x10 [ 315.523172][T18806] ? kmem_cache_free+0x2d4/0x6c0 [ 315.523181][T18806] ? putname+0x154/0x1a0 [ 315.523199][T18806] ? putname+0x154/0x1a0 [ 315.523211][T18806] ? putname+0x154/0x1a0 [ 315.523228][T18806] ? __x64_sys_mount+0x293/0x310 [ 315.523240][T18806] __x64_sys_mount+0x293/0x310 [ 315.523253][T18806] ? __pfx___x64_sys_mount+0x10/0x10 [ 315.523267][T18806] ? anon_inode_getfd+0x81/0xb0 [ 315.523284][T18806] do_syscall_64+0xcd/0xfa0 [ 315.523295][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.523307][T18806] RIP: 0033:0x7efe0158f749 [ 315.523316][T18806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.523327][T18806] RSP: 002b:00007efe024d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.523337][T18806] RAX: ffffffffffffffda RBX: 00007efe017e5fa0 RCX: 00007efe0158f749 [ 315.523344][T18806] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 315.523350][T18806] RBP: 00007efe024d3090 R08: 0000200000000200 R09: 0000000000000000 [ 315.523357][T18806] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 315.523363][T18806] R13: 00007efe017e6038 R14: 00007efe017e5fa0 R15: 00007fff6941d3d8 [ 315.523377][T18806] [ 316.041390][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2953'. [ 316.152425][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.156471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.221905][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.435280][ T841] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 316.606511][ T841] usb 9-1: Using ep0 maxpacket: 32 [ 316.609630][ T841] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.612897][ T841] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.623132][ T841] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 316.628194][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.633288][ T841] usb 9-1: config 0 descriptor?? [ 316.638201][ T841] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 317.250044][T18856] netlink: 'syz.8.2958': attribute type 11 has an invalid length. [ 317.253423][T18856] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.2958'. [ 317.356804][T18885] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2965'. [ 317.359450][T18885] netem: invalid attributes len -22 [ 317.360948][T18885] netem: change failed [ 317.517570][T18900] syzkaller1: entered promiscuous mode [ 317.519935][T18900] syzkaller1: entered allmulticast mode [ 317.525470][ T40] audit: type=1400 audit(1764892343.731:832): avc: denied { accept } for pid=18899 comm="syz.7.2968" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.657497][T18914] syzkaller1: entered promiscuous mode [ 317.659273][T18914] syzkaller1: entered allmulticast mode [ 318.003621][T18948] MINIX-fs: unable to read superblock [ 318.381531][T18980] netlink: 'syz.7.2985': attribute type 9 has an invalid length. [ 318.381552][T18980] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2985'. [ 318.384872][T18980] input: syz0 as /devices/virtual/input/input63 [ 318.467955][ T29] net_ratelimit: 3 callbacks suppressed [ 318.467966][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.520994][T18994] FAULT_INJECTION: forcing a failure. [ 318.520994][T18994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.521025][T18994] CPU: 0 UID: 0 PID: 18994 Comm: syz.7.2987 Not tainted syzkaller #0 PREEMPT(full) [ 318.521046][T18994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.521056][T18994] Call Trace: [ 318.521062][T18994] [ 318.521068][T18994] dump_stack_lvl+0x16c/0x1f0 [ 318.521083][T18994] should_fail_ex+0x512/0x640 [ 318.521099][T18994] should_fail_alloc_page+0xe7/0x130 [ 318.521114][T18994] prepare_alloc_pages+0x3c2/0x610 [ 318.521127][T18994] ? rcu_is_watching+0x12/0xc0 [ 318.521149][T18994] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 318.521168][T18994] ? rcu_is_watching+0x12/0xc0 [ 318.521181][T18994] ? trace_mm_page_alloc+0x11f/0x1a0 [ 318.521194][T18994] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 318.521226][T18994] ? __pfx_stack_trace_save+0x10/0x10 [ 318.521241][T18994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.521256][T18994] ? stack_depot_save_flags+0x29/0x9c0 [ 318.521274][T18994] ? alloc_vmap_area+0x648/0x29e0 [ 318.521285][T18994] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 318.521297][T18994] ? __vcalloc_noprof+0x4d/0x80 [ 318.521307][T18994] ? kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 318.521323][T18994] ? kvm_set_memslot+0x139/0x1380 [ 318.521336][T18994] ? kvm_set_memory_region+0xe53/0x1610 [ 318.521349][T18994] ? kvm_vm_ioctl+0x151b/0x3fd0 [ 318.521360][T18994] ? __x64_sys_ioctl+0x18e/0x210 [ 318.521373][T18994] ? do_syscall_64+0xcd/0xfa0 [ 318.521451][T18994] alloc_pages_bulk_noprof+0x77a/0x1410 [ 318.521475][T18994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.521490][T18994] ? policy_nodemask+0xea/0x4e0 [ 318.521505][T18994] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 318.521521][T18994] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.521540][T18994] kasan_populate_vmalloc+0x112/0x2d0 [ 318.521550][T18994] ? alloc_vmap_area+0x8b5/0x29e0 [ 318.521564][T18994] alloc_vmap_area+0x960/0x29e0 [ 318.521582][T18994] ? __pfx_alloc_vmap_area+0x10/0x10 [ 318.521598][T18994] __get_vm_area_node+0x1ca/0x330 [ 318.521614][T18994] __vmalloc_node_range_noprof+0x271/0x1480 [ 318.521627][T18994] ? __vcalloc_noprof+0x4d/0x80 [ 318.521638][T18994] ? __pfx_stack_trace_save+0x10/0x10 [ 318.521655][T18994] ? __vcalloc_noprof+0x4d/0x80 [ 318.521666][T18994] ? __pfx___mutex_trylock_common+0x10/0x10 [ 318.521679][T18994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.521693][T18994] ? trace_contention_end+0xdd/0x130 [ 318.521703][T18994] ? __mutex_lock+0x1c5/0x1060 [ 318.521718][T18994] ? __vcalloc_noprof+0x4d/0x80 [ 318.521727][T18994] __vmalloc_node_noprof+0xad/0xf0 [ 318.521740][T18994] ? __vcalloc_noprof+0x4d/0x80 [ 318.521752][T18994] __vcalloc_noprof+0x4d/0x80 [ 318.521763][T18994] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 318.521784][T18994] kvm_set_memslot+0x139/0x1380 [ 318.521799][T18994] ? kasan_save_track+0x14/0x30 [ 318.521811][T18994] kvm_set_memory_region+0xe53/0x1610 [ 318.521830][T18994] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 318.521849][T18994] kvm_vm_ioctl+0x151b/0x3fd0 [ 318.521867][T18994] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 318.521888][T18994] ? kasan_quarantine_put+0x10a/0x240 [ 318.521898][T18994] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.521910][T18994] ? find_held_lock+0x2b/0x80 [ 318.521923][T18994] ? tomoyo_path_number_perm+0x295/0x580 [ 318.521936][T18994] ? tomoyo_path_number_perm+0x18d/0x580 [ 318.521948][T18994] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 318.521958][T18994] ? __handle_mm_fault+0x5a8/0x2aa0 [ 318.521977][T18994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.522000][T18994] ? hook_file_ioctl_common+0x145/0x410 [ 318.522018][T18994] ? selinux_file_ioctl+0x180/0x270 [ 318.522030][T18994] ? selinux_file_ioctl+0xb4/0x270 [ 318.522043][T18994] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 318.522059][T18994] __x64_sys_ioctl+0x18e/0x210 [ 318.522090][T18994] do_syscall_64+0xcd/0xfa0 [ 318.522107][T18994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.522125][T18994] RIP: 0033:0x7f16d318f34b [ 318.522140][T18994] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 318.522154][T18994] RSP: 002b:00007f16d4007490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.522172][T18994] RAX: ffffffffffffffda RBX: 00007f16d4007be0 RCX: 00007f16d318f34b [ 318.522183][T18994] RDX: 00007f16d4007be0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 318.522194][T18994] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 318.522205][T18994] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 318.522214][T18994] R13: 0000200000fe8000 R14: 0000200000fe7000 R15: 00000000fec00000 [ 318.522233][T18994] [ 319.352043][T19051] syzkaller0: entered promiscuous mode [ 319.353923][T19051] syzkaller0: entered allmulticast mode [ 319.371682][ T156] usb 9-1: USB disconnect, device number 30 [ 319.446733][T19074] netlink: 4092 bytes leftover after parsing attributes in process `syz.8.2999'. [ 319.571941][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.574455][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.969268][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.973564][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.976658][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.980056][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.983405][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.987261][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.990997][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.994633][T19106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.038845][T19109] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3008'. [ 320.042621][T19109] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3008'. [ 320.557144][T19123] program syz.3.3012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.560130][T19123] ata1.00: invalid command format 0 [ 320.780407][ T40] audit: type=1800 audit(1764892346.778:833): pid=19139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.3016" name="/newroot/253/bus/#1383//deleted" dev="tmpfs" ino=1383 res=0 errno=0 [ 320.811149][ T7510] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 320.974827][ T7510] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.977952][ T7510] usb 13-1: config 0 has no interface number 0 [ 320.980196][ T7510] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 320.986084][ T7510] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 320.990658][ T7510] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.994759][ T7510] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.010006][ T7510] usb 13-1: config 0 descriptor?? [ 321.014519][T19125] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 321.019046][ T7510] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 321.047264][T19162] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3020'. [ 321.103580][T19170] macsec0: entered promiscuous mode [ 321.105527][T19170] macsec0: entered allmulticast mode [ 321.107302][T19170] veth1_macvtap: entered allmulticast mode [ 321.114205][T19170] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 321.117084][T19170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3023'. [ 321.251699][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.255911][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.499950][ T40] audit: type=1400 audit(1764892347.451:834): avc: denied { write } for pid=19124 comm="syz.8.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 321.500950][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.509236][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.732231][ T156] usb 13-1: USB disconnect, device number 4 [ 322.380100][T19235] netlink: 'syz.8.3037': attribute type 22 has an invalid length. [ 322.382647][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3037'. [ 322.390584][T19235] netlink: 'syz.8.3037': attribute type 22 has an invalid length. [ 322.390614][ T1212] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.392985][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3037'. [ 322.400705][ T1212] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.403679][ T1212] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.408005][ T1212] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.543520][T19257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.683298][T19267] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3042'. [ 322.773011][T19273] FAULT_INJECTION: forcing a failure. [ 322.773011][T19273] name failslab, interval 1, probability 0, space 0, times 0 [ 322.778431][T19273] CPU: 0 UID: 0 PID: 19273 Comm: syz.3.3047 Not tainted syzkaller #0 PREEMPT(full) [ 322.778455][T19273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.778466][T19273] Call Trace: [ 322.778473][T19273] [ 322.778482][T19273] dump_stack_lvl+0x16c/0x1f0 [ 322.778503][T19273] should_fail_ex+0x512/0x640 [ 322.778524][T19273] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 322.778554][T19273] should_failslab+0xc2/0x120 [ 322.778575][T19273] kmem_cache_alloc_node_noprof+0x78/0x770 [ 322.778601][T19273] ? __alloc_skb+0x2b2/0x380 [ 322.778629][T19273] ? __alloc_skb+0x2b2/0x380 [ 322.778649][T19273] ? __pfx_netlink_insert+0x10/0x10 [ 322.778672][T19273] __alloc_skb+0x2b2/0x380 [ 322.778694][T19273] ? __pfx___alloc_skb+0x10/0x10 [ 322.778718][T19273] ? netlink_autobind.isra.0+0x158/0x370 [ 322.778749][T19273] netlink_alloc_large_skb+0x69/0x140 [ 322.778775][T19273] netlink_sendmsg+0x698/0xdd0 [ 322.778805][T19273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.778838][T19273] ____sys_sendmsg+0xa98/0xc70 [ 322.778859][T19273] ? copy_msghdr_from_user+0x10a/0x160 [ 322.778882][T19273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.778911][T19273] ___sys_sendmsg+0x134/0x1d0 [ 322.778937][T19273] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.778957][T19273] ? __lock_acquire+0x622/0x1c90 [ 322.779005][T19273] __sys_sendmsg+0x16d/0x220 [ 322.779029][T19273] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.779080][T19273] do_syscall_64+0xcd/0xfa0 [ 322.779103][T19273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.779121][T19273] RIP: 0033:0x7f81e698f749 [ 322.779135][T19273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.779150][T19273] RSP: 002b:00007f81e77ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.779169][T19273] RAX: ffffffffffffffda RBX: 00007f81e6be5fa0 RCX: 00007f81e698f749 [ 322.779179][T19273] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 322.779190][T19273] RBP: 00007f81e77ed090 R08: 0000000000000000 R09: 0000000000000000 [ 322.779200][T19273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.779210][T19273] R13: 00007f81e6be6038 R14: 00007f81e6be5fa0 R15: 00007ffc6f020318 [ 322.779235][T19273] [ 323.032829][ T40] audit: type=1400 audit(1764892348.881:835): avc: denied { setcheckreqprot } for pid=19281 comm="syz.7.3050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 323.116805][T19286] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 323.522796][ T5931] Bluetooth: hci3: Unable to find connection for big 0x00 [ 323.526552][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3052'. [ 323.809033][T19310] QAT: failed to copy from user cfg_data. [ 323.971839][T19316] cdrom: dropping to single frame dma [ 324.020500][ T841] net_ratelimit: 66 callbacks suppressed [ 324.020512][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.146571][T19335] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3060'. [ 324.228381][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.233221][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.236278][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.239258][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.242389][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.245944][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.248805][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.252060][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.254736][T19367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.299003][ T40] audit: type=1400 audit(1764892350.068:836): avc: denied { setattr } for pid=19370 comm="syz.3.3065" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 324.417739][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 324.569498][T19407] cgroup: Name too long [ 327.851581][ T5343] udevd[5343]: worker [8138] /devices/virtual/block/nbd0 is taking a long time [ 329.572762][ T55] net_ratelimit: 55 callbacks suppressed [ 329.572774][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.535763][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.685651][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.202447][ T121] block nbd0: Possible stuck request ffff888027b7e000: control (read@0,1024B). Runtime 120 seconds [ 331.206892][ T121] block nbd0: Possible stuck request ffff888027b7e1c0: control (read@1024,1024B). Runtime 120 seconds [ 331.211761][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.211973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.219007][ T121] block nbd0: Possible stuck request ffff888027b7e380: control (read@2048,1024B). Runtime 120 seconds [ 331.223650][ T121] block nbd0: Possible stuck request ffff888027b7e540: control (read@3072,1024B). Runtime 120 seconds [ 331.798909][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.911095][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.253876][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.258183][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.023582][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.449470][T19446] FAULT_INJECTION: forcing a failure. [ 334.449470][T19446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.453687][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.8.3074 Not tainted syzkaller #0 PREEMPT(full) [ 334.453701][T19446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.453708][T19446] Call Trace: [ 334.453712][T19446] [ 334.453717][T19446] dump_stack_lvl+0x16c/0x1f0 [ 334.453731][T19446] should_fail_ex+0x512/0x640 [ 334.453747][T19446] _copy_from_user+0x2e/0xd0 [ 334.453761][T19446] kstrtouint_from_user+0xd6/0x1d0 [ 334.453777][T19446] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 334.453794][T19446] ? __lock_acquire+0xb8a/0x1c90 [ 334.453810][T19446] proc_fail_nth_write+0x83/0x220 [ 334.453824][T19446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.453840][T19446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.453851][T19446] vfs_write+0x2a0/0x11d0 [ 334.453864][T19446] ? __pfx___mutex_lock+0x10/0x10 [ 334.453876][T19446] ? __pfx_vfs_write+0x10/0x10 [ 334.453890][T19446] ? __fget_files+0x20e/0x3c0 [ 334.453905][T19446] ksys_write+0x12a/0x250 [ 334.453915][T19446] ? __pfx_ksys_write+0x10/0x10 [ 334.453929][T19446] do_syscall_64+0xcd/0xfa0 [ 334.453941][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.453952][T19446] RIP: 0033:0x7efe0158e1ff [ 334.453961][T19446] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 334.453971][T19446] RSP: 002b:00007efe024d3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 334.453981][T19446] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe0158e1ff [ 334.453988][T19446] RDX: 0000000000000001 RSI: 00007efe024d30a0 RDI: 000000000000000a [ 334.453994][T19446] RBP: 00007efe024d3090 R08: 0000000000000000 R09: 0000000000000000 [ 334.454000][T19446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 334.454006][T19446] R13: 00007efe017e6038 R14: 00007efe017e5fa0 R15: 00007fff6941d3d8 [ 334.454020][T19446] [ 334.552226][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.553290][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.560806][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.564764][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.568446][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.620248][T19475] pim6reg: entered allmulticast mode [ 334.627327][T19475] pim6reg: left allmulticast mode [ 334.637751][T10246] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.687553][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 334.718459][ T34] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 334.833777][T19458] chnl_net:caif_netlink_parms(): no params data found [ 334.890540][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 334.899681][ T34] usb 12-1: config index 0 descriptor too short (expected 65, got 36) [ 334.904725][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.909336][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.914307][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.920206][ T34] usb 12-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 334.924975][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.932207][ T34] usb 12-1: config 0 descriptor?? [ 334.940564][ T34] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input64 [ 334.949115][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 334.955773][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 334.967179][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 334.972349][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 334.982873][T19458] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.986093][T19458] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.989306][T19458] bridge_slave_0: entered allmulticast mode [ 334.999873][T19458] bridge_slave_0: entered promiscuous mode [ 335.004471][T19458] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.004550][ T8709] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.006798][T19458] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.012597][T19458] bridge_slave_1: entered allmulticast mode [ 335.013239][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.015613][T19458] bridge_slave_1: entered promiscuous mode [ 335.021741][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.044180][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.047957][ T5328] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.085769][T19458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.090845][T19458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.136490][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.150990][T19458] team0: Port device team_slave_0 added [ 335.151730][T19447] pxrc 12-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 335.164012][T19458] team0: Port device team_slave_1 added [ 335.251964][T19458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.254489][T19458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.257796][ T7510] usb 12-1: USB disconnect, device number 8 [ 335.264741][T19458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.296404][T19458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.299328][T19458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.310969][T19458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.390122][T19458] hsr_slave_0: entered promiscuous mode [ 335.393787][T19458] hsr_slave_1: entered promiscuous mode [ 335.396860][T19458] debugfs: 'hsr0' already exists in 'hsr' [ 335.399224][T19458] Cannot create hsr debugfs directory [ 335.599965][T20489] FAULT_INJECTION: forcing a failure. [ 335.599965][T20489] name failslab, interval 1, probability 0, space 0, times 0 [ 335.608405][T20489] CPU: 2 UID: 0 PID: 20489 Comm: syz.4.3084 Not tainted syzkaller #0 PREEMPT(full) [ 335.608431][T20489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.608443][T20489] Call Trace: [ 335.608450][T20489] [ 335.608458][T20489] dump_stack_lvl+0x16c/0x1f0 [ 335.608481][T20489] should_fail_ex+0x512/0x640 [ 335.608502][T20489] ? __kmalloc_cache_noprof+0x5f/0x780 [ 335.608530][T20489] should_failslab+0xc2/0x120 [ 335.608551][T20489] __kmalloc_cache_noprof+0x72/0x780 [ 335.608575][T20489] ? drm_crtc_create_fence+0x47/0x100 [ 335.608607][T20489] ? drm_crtc_create_fence+0x47/0x100 [ 335.608632][T20489] drm_crtc_create_fence+0x47/0x100 [ 335.608659][T20489] drm_mode_atomic_ioctl+0x11a3/0x2600 [ 335.608697][T20489] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 335.608718][T20489] ? __lock_acquire+0xb8a/0x1c90 [ 335.608752][T20489] ? drm_is_current_master+0x2c/0x40 [ 335.608774][T20489] ? do_raw_spin_unlock+0x172/0x230 [ 335.608797][T20489] drm_ioctl_kernel+0x1f4/0x3e0 [ 335.608813][T20489] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 335.608837][T20489] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 335.608864][T20489] drm_ioctl+0x5c9/0xc30 [ 335.608885][T20489] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 335.608907][T20489] ? __pfx_drm_ioctl+0x10/0x10 [ 335.608934][T20489] ? selinux_file_ioctl+0x180/0x270 [ 335.608954][T20489] ? selinux_file_ioctl+0xb4/0x270 [ 335.608981][T20489] ? __pfx_drm_ioctl+0x10/0x10 [ 335.608999][T20489] __x64_sys_ioctl+0x18e/0x210 [ 335.609027][T20489] do_syscall_64+0xcd/0xfa0 [ 335.609048][T20489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.609068][T20489] RIP: 0033:0x7f82e398f749 [ 335.609083][T20489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.609098][T20489] RSP: 002b:00007f82e1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.609117][T20489] RAX: ffffffffffffffda RBX: 00007f82e3be5fa0 RCX: 00007f82e398f749 [ 335.609127][T20489] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 335.609138][T20489] RBP: 00007f82e1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.609148][T20489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.609158][T20489] R13: 00007f82e3be6038 R14: 00007f82e3be5fa0 R15: 00007ffc961bff98 [ 335.609185][T20489] [ 335.810747][T19458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.814488][T19458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.959127][T20545] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 335.980998][T19458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.986042][T19458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.007505][T20557] binder: 20555:20557 ioctl 4018620d 0 returned -22 [ 336.010483][T20545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3090'. [ 336.090548][T19458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.093785][T19458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.176731][T19458] bond0: (slave netdevsim0): Releasing backup interface [ 336.181748][T19458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.185270][T19458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.230619][ T40] audit: type=1400 audit(1764892361.220:837): avc: denied { ioctl } for pid=20586 comm="syz.4.3096" path="socket:[91141]" dev="sockfs" ino=91141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.233517][T20580] tipc: Started in network mode [ 336.240919][T20580] tipc: Node identity c2bbccd34319, cluster identity 4711 [ 336.241049][T20580] tipc: Enabled bearer , priority 0 [ 336.248849][T20580] syzkaller0: entered promiscuous mode [ 336.251176][T20580] syzkaller0: entered allmulticast mode [ 336.254714][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.256828][T20580] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 336.274541][T20580] tipc: Resetting bearer [ 336.278639][T20579] tipc: Resetting bearer [ 336.292625][T20579] tipc: Disabling bearer [ 336.355511][T19458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.365567][T19458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 336.375721][T19458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 336.381261][T19458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.431592][T19458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.441754][T19458] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.447651][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.450747][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.458618][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.461523][T10245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.503954][T20619] fuse: Unknown parameter 'ÁßУÎf‘C è(»r-úQÓ–Îtÿ¦' [ 336.526471][ T55] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 336.584129][T19458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.608969][T19458] veth0_vlan: entered promiscuous mode [ 336.613885][T19458] veth1_vlan: entered promiscuous mode [ 336.630798][T19458] veth0_macvtap: entered promiscuous mode [ 336.637673][T19458] veth1_macvtap: entered promiscuous mode [ 336.651218][T19458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.659931][T19458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.666833][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.670777][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.677257][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.682398][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.687756][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 336.692516][T20635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.695660][ T55] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 336.710072][ T55] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.713700][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.748664][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.751585][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.762626][ T5931] Bluetooth: hci1: command tx timeout [ 336.778725][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.781233][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.805668][T20656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.809361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.814341][T20655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.820352][T20655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.831215][T20661] mkiss: ax0: crc mode is auto. [ 336.884251][T20668] xt_nfacct: accounting object `syz0' does not exist [ 337.157560][ T34] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 337.324640][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3107'. [ 337.327562][T20690] netem: invalid attributes len -22 [ 337.329657][T20690] netem: change failed [ 337.339575][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 337.340126][ T1145] ================================================================== [ 337.344436][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 337.344818][ T1145] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.348487][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 337.351554][ T1145] Read of size 1 at addr ffff8880548e4c09 by task kworker/u32:6/1145 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.351565][ T1145] [ 337.351571][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: kworker/u32:6 Not tainted syzkaller #0 PREEMPT(full) [ 337.351583][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.351591][ T1145] Workqueue: events_unbound commit_work [ 337.351603][ T1145] Call Trace: [ 337.351608][ T1145] [ 337.351613][ T1145] dump_stack_lvl+0x116/0x1f0 [ 337.351625][ T1145] print_report+0xcd/0x630 [ 337.351637][ T1145] ? __virt_addr_valid+0x81/0x610 [ 337.351651][ T1145] ? __phys_addr+0xe8/0x180 [ 337.351665][ T1145] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.351676][ T1145] kasan_report+0xe0/0x110 [ 337.351691][ T1145] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.351710][ T1145] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.351728][ T1145] ? preempt_schedule_thunk+0x16/0x30 [ 337.351747][ T1145] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 337.351759][ T1145] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 337.351775][ T1145] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 337.351788][ T1145] drm_atomic_helper_commit_tail+0xe1/0x110 [ 337.351800][ T1145] commit_tail+0x35b/0x400 [ 337.351812][ T1145] process_one_work+0x9cf/0x1b70 [ 337.351827][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 337.351840][ T1145] ? assign_work+0x1a0/0x250 [ 337.351850][ T1145] worker_thread+0x6c8/0xf10 [ 337.351864][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 337.351875][ T1145] kthread+0x3c5/0x780 [ 337.351885][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.351895][ T1145] ? rcu_is_watching+0x12/0xc0 [ 337.351909][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.351919][ T1145] ret_from_fork+0x675/0x7d0 [ 337.351932][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.351942][ T1145] ret_from_fork_asm+0x1a/0x30 [ 337.351959][ T1145] [ 337.351963][ T1145] [ 337.351966][ T1145] Allocated by task 20690: [ 337.351971][ T1145] kasan_save_stack+0x33/0x60 [ 337.351981][ T1145] kasan_save_track+0x14/0x30 [ 337.351991][ T1145] __kasan_kmalloc+0xaa/0xb0 [ 337.352000][ T1145] drm_atomic_helper_crtc_duplicate_state+0x70/0xd0 [ 337.352035][ T1145] drm_atomic_get_crtc_state+0x171/0x450 [ 337.352049][ T1145] drm_atomic_set_property+0xfbe/0x34d0 [ 337.352061][ T1145] drm_mode_atomic_ioctl+0x66f/0x2600 [ 337.352073][ T1145] drm_ioctl_kernel+0x1f4/0x3e0 [ 337.352083][ T1145] drm_ioctl+0x5c9/0xc30 [ 337.352091][ T1145] __x64_sys_ioctl+0x18e/0x210 [ 337.352105][ T1145] do_syscall_64+0xcd/0xfa0 [ 337.352114][ T1145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.352124][ T1145] [ 337.352126][ T1145] Freed by task 20689: [ 337.352132][ T1145] kasan_save_stack+0x33/0x60 [ 337.352141][ T1145] kasan_save_track+0x14/0x30 [ 337.352150][ T1145] __kasan_save_free_info+0x3b/0x60 [ 337.358324][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 337.360763][ T1145] __kasan_slab_free+0x5f/0x80 [ 337.360779][ T1145] kfree+0x2b8/0x6d0 [ 337.360793][ T1145] drm_atomic_state_default_clear+0x458/0xe40 [ 337.360805][ T1145] __drm_atomic_state_free+0x185/0x2b0 [ 337.360816][ T1145] drm_client_modeset_commit_atomic+0x6b2/0x7e0 [ 337.360829][ T1145] drm_client_modeset_commit_locked+0x14d/0x580 [ 337.360840][ T1145] drm_client_modeset_commit+0x4f/0x80 [ 337.360852][ T1145] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 337.360864][ T1145] drm_fbdev_client_restore+0x2c/0x40 [ 337.360880][ T1145] drm_client_dev_restore+0x1f6/0x2a0 [ 337.360890][ T1145] drm_release+0x2c4/0x360 [ 337.360900][ T1145] __fput+0x402/0xb70 [ 337.360911][ T1145] task_work_run+0x150/0x240 [ 337.360922][ T1145] exit_to_user_mode_loop+0xec/0x130 [ 337.360932][ T1145] do_syscall_64+0x426/0xfa0 [ 337.360941][ T1145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.360951][ T1145] [ 337.362282][ T34] usb 12-1: config 0 interface 0 has no altsetting 0 [ 337.365654][ T1145] The buggy address belongs to the object at ffff8880548e4c00 [ 337.365654][ T1145] which belongs to the cache kmalloc-512 of size 512 [ 337.487185][ T1145] The buggy address is located 9 bytes inside of [ 337.487185][ T1145] freed 512-byte region [ffff8880548e4c00, ffff8880548e4e00) [ 337.491361][ T1145] [ 337.492133][ T1145] The buggy address belongs to the physical page: [ 337.494150][ T1145] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880548e6c00 pfn:0x548e4 [ 337.497251][ T1145] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.499857][ T1145] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 337.502318][ T1145] page_type: f5(slab) [ 337.503589][ T1145] raw: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 337.506254][ T1145] raw: ffff8880548e6c00 000000000010000b 00000000f5000000 0000000000000000 [ 337.508947][ T1145] head: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 337.511635][ T1145] head: ffff8880548e6c00 000000000010000b 00000000f5000000 0000000000000000 [ 337.514365][ T1145] head: 00fff00000000002 ffffea0001523901 00000000ffffffff 00000000ffffffff [ 337.517176][ T1145] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 337.520745][ T1145] page dumped because: kasan: bad access detected [ 337.523414][ T1145] page_owner tracks the page as allocated [ 337.525799][ T1145] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5942, tgid 5942 (syz-executor), ts 57387055891, free_ts 57376842219 [ 337.534456][ T1145] post_alloc_hook+0x1af/0x220 [ 337.536497][ T1145] get_page_from_freelist+0x10a3/0x3a30 [ 337.538831][ T1145] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 337.541321][ T1145] alloc_pages_mpol+0x1fb/0x550 [ 337.543393][ T1145] new_slab+0x24a/0x360 [ 337.545166][ T1145] ___slab_alloc+0xd79/0x1a50 [ 337.547160][ T1145] __slab_alloc.constprop.0+0x63/0x110 [ 337.549469][ T1145] __kmalloc_cache_noprof+0x477/0x780 [ 337.551733][ T1145] binderfs_fill_super+0x73b/0x13a0 [ 337.553992][ T1145] get_tree_nodev+0xdd/0x190 [ 337.555963][ T1145] vfs_get_tree+0x8e/0x340 [ 337.557884][ T1145] path_mount+0x7b9/0x23a0 [ 337.559788][ T1145] __x64_sys_mount+0x293/0x310 [ 337.561831][ T1145] do_syscall_64+0xcd/0xfa0 [ 337.563762][ T1145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.566269][ T1145] page last free pid 5938 tgid 5938 stack trace: [ 337.568909][ T1145] __free_frozen_pages+0x7df/0x1160 [ 337.571119][ T1145] stack_depot_save_flags+0x352/0x9c0 [ 337.573433][ T1145] kasan_save_stack+0x42/0x60 [ 337.575416][ T1145] kasan_save_track+0x14/0x30 [ 337.577409][ T1145] __kasan_kmalloc+0xaa/0xb0 [ 337.579386][ T1145] __kmalloc_node_noprof+0x347/0x8a0 [ 337.581643][ T1145] alloc_slab_obj_exts+0x43/0xf0 [ 337.583754][ T1145] new_slab+0x283/0x360 [ 337.585533][ T1145] ___slab_alloc+0xd79/0x1a50 [ 337.587550][ T1145] __slab_alloc.constprop.0+0x63/0x110 [ 337.589847][ T1145] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 337.592395][ T1145] alloc_inode+0x64/0x240 [ 337.594235][ T1145] new_inode+0x22/0x1c0 [ 337.596026][ T1145] __debugfs_create_file+0x11c/0x6b0 [ 337.598260][ T1145] debugfs_create_file_short+0x41/0x60 [ 337.600531][ T1145] ieee80211_debugfs_recreate_netdev+0x4e6/0x17e0 [ 337.603185][ T1145] [ 337.604260][ T1145] Memory state around the buggy address: [ 337.606639][ T1145] ffff8880548e4b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.610086][ T1145] ffff8880548e4b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.613501][ T1145] >ffff8880548e4c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.616840][ T1145] ^ [ 337.618638][ T1145] ffff8880548e4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.621985][ T1145] ffff8880548e4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.625440][ T1145] ================================================================== [ 337.629755][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.642293][ T40] audit: type=1400 audit(1764892362.547:838): avc: denied { search } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.651921][ T34] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 337.655590][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.659186][ T34] usb 12-1: Product: syz [ 337.661252][ T34] usb 12-1: Manufacturer: syz [ 337.662798][ T34] usb 12-1: SerialNumber: syz [ 337.667502][ T34] usb 12-1: config 0 descriptor?? [ 337.683594][ T1145] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.685946][ T1145] CPU: 1 UID: 0 PID: 1145 Comm: kworker/u32:6 Not tainted syzkaller #0 PREEMPT(full) [ 337.689028][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.692573][ T1145] Workqueue: events_unbound commit_work [ 337.694381][ T1145] Call Trace: [ 337.695446][ T1145] [ 337.696461][ T1145] dump_stack_lvl+0x3d/0x1f0 [ 337.697980][ T1145] vpanic+0x640/0x6f0 [ 337.699254][ T1145] panic+0xca/0xd0 [ 337.700474][ T1145] ? __pfx_panic+0x10/0x10 [ 337.701908][ T1145] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.704413][ T1145] ? preempt_schedule_common+0x44/0xc0 [ 337.706559][ T1145] ? preempt_schedule_thunk+0x16/0x30 [ 337.708781][ T1145] ? check_panic_on_warn+0x1f/0xb0 [ 337.710962][ T1145] check_panic_on_warn+0xab/0xb0 [ 337.713057][ T1145] end_report+0x107/0x170 [ 337.714853][ T1145] kasan_report+0xee/0x110 [ 337.716722][ T1145] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.719667][ T1145] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0 [ 337.722488][ T1145] ? preempt_schedule_thunk+0x16/0x30 [ 337.724636][ T1145] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 337.727645][ T1145] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 337.730026][ T1145] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 337.732615][ T1145] drm_atomic_helper_commit_tail+0xe1/0x110 [ 337.735028][ T1145] commit_tail+0x35b/0x400 [ 337.736883][ T1145] process_one_work+0x9cf/0x1b70 [ 337.738940][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 337.740969][ T1145] ? assign_work+0x1a0/0x250 [ 337.742831][ T1145] worker_thread+0x6c8/0xf10 [ 337.744411][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 337.745862][ T1145] kthread+0x3c5/0x780 [ 337.747006][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.748396][ T1145] ? rcu_is_watching+0x12/0xc0 [ 337.749746][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.751039][ T1145] ret_from_fork+0x675/0x7d0 [ 337.752345][ T1145] ? __pfx_kthread+0x10/0x10 [ 337.753678][ T1145] ret_from_fork_asm+0x1a/0x30 [ 337.755039][ T1145] [ 337.756750][ T1145] Kernel Offset: disabled [ 337.758073][ T1145] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:32:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000021 RCX=ffffffff819bcf31 RDX=ffff88802953c900 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000601f7d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002b81 R12=1ffff92000c03efe R13=0000000000000000 R14=ffff88801e6ac900 R15=ffffc9000601f8a8 RIP=ffffffff81bce161 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82e1bd5d58 CR3=000000003dfcc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000400 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812be613 ffffffff812be62f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812be62f ffffffff812be613 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812be613 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe01615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe0161505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe01615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe0161506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe016150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe016151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ac2bd3 ffffffff81ac2b11 ffffffff81ac2aed ffffffff816187ae ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ceedae ffffffff817e3b47 ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff817e3b04 ffffffff817e3a9c ffffffff817e3a9c ffffffff817e3a82 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a4426e0 RCX=ffffffff81b0db41 RDX=ffff88806073c900 RSI=ffffffff81b0db1b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000efef298 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4884dd R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81b0db22 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b34ef1ff8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000287 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fffffff7 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3314c20b 00007ffc3314c20b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3314c710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3314c710 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7973602073736563 6f7270206e692073 6574756269727474 6120676e69737200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373602073736563 6572702064632073 6574756263727474 6120676463737200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74746120676e6973 7261702072657466 61207265766f7466 656c207365747962 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76697373696d7265 702074656b636f73 5f706d63693d7373 616c637420745f6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f706d6369 3d7373616c637420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3333393878303d64 6d636c74636f6920 31343131393d6f6e 69202273666b636f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000002 RBX=00000000ffffffff RCX=0000000000000000 RDX=0000000000000002 RSI=ffffffff8bf07340 RDI=0000000000000001 RBP=ffff88801d6886a8 RSP=ffffc90003b97718 R8 =0000000000000000 R9 =fffffbfff21042da R10=ffffffff908216d7 R11=0000000000000001 R12=ffffffff93a3cc80 R13=ffff88801d688000 R14=ffff88806a641c80 R15=ffff88806a641c90 RIP=ffffffff81891f43 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3e7117d60 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000287 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e65ba6c3 00007fa3e65ba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8cb94690 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555603b4c68 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e65bad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555603aeb3d 00005555603aeab0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555603b74a4 00005555603b74a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555603b4aa8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01018004088092ec 9808000100000008 06060119b6018004 01ee8a0800010800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06011bac00100001 c0034080100001b0 030180800401a003 0008000198030008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000190030e080001 8803500800018003 00100002e8100018 1000060075940fff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040fff ffffffffff040108 00060176860fffff ffffffff040fffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401f5e48caec4d4 dafdd91000040103 d40010000b80040f 800401c708000801 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85298415 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc900006df030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addb740 R15=ffffffff852983b0 RIP=ffffffff8529843f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=0000000037ebe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000287 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d4006f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d3215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d321505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d3215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d321506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d32150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d32151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000372e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000134 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000