last executing test programs: 12m6.819842204s ago: executing program 32 (id=898): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x149}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) setxattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x49, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3934076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) 11m50.229591909s ago: executing program 33 (id=905): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) inotify_init() 11m48.340418988s ago: executing program 34 (id=900): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mq_open(0x0, 0x42, 0x54, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r3, &(0x7f0000000a00)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r2, 0x6}, 0x50) connect$netlink(r2, &(0x7f0000000ac0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000e00), 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000e40)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000e80)="55a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) preadv2(r0, 0x0, 0x0, 0xff, 0x6, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000b80), 0x2}}, 0x20) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 11m4.728263899s ago: executing program 1 (id=1012): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)="1a875a821132417d9ef0e60ee12e62edd85d2a688d19cf491498dd06d4eae3", 0x1f}, {&(0x7f00000005c0)="896b39ba0064b334ffafc05ec105ef47c30cf14b49ecb1ae8b8eb4a569edacd8104197bba63a1dc138d2d3db6d41ecabf5568957b3bf62e456aa344684fe7e69eefa730a19e1f5ffbca0453499bd74910dc5aaec7ea2d26cab8cab5ccd5f2ef2c84216c2b74a1d427564134bc19ca6bc99ae56a47f5dca3491e29dd3b218d11c7b678bc4929cd023caafedd3188b0e1d700a39dc8bf46f4148ac440cd2a8832ad0a4be0c8aacbdbbcde7c5f263ed82b1523106b18fd61c73e90186ebe0f607d5468f49678fd00d12f509e25e5fd2355d1f6640656c0bf3ee5a6d3743f189f9d2ea0b5421e6e2c8e7d525b5fd2d2411faf6dd9117", 0xf4}, {&(0x7f00000006c0)="f6a8b5a94adfa284f5b0617d26f968bdbe027a4c2809214a9522ea111b1af3a18289dda7cb6c16d4baaf24b2a518ef027893de028abd9d3c38831f45e10e76f2f9954b2509f53dba18e0389c55e298adf4a6e82dff872f82868da90f7b41565adf75a16a8afb037d637868ebbceaf6de8b352a7ad4b8ba2a4ce6dd939ed74d54ff6a5dd238fdb0245e3abe549eacdec100f8bfafbb415219ae542d093992d39be89c226fc3b7f02d40665630575fb436ccff8f8b8e0cca059cb92f8cfe555ed3db660a5bf93ca2054201", 0xca}, {&(0x7f00000007c0)="fdc0a4a92c421b65ff7a4122f3c5794c7230b25ba2b0473640f3c1509f", 0x1d}, {&(0x7f0000000800)="15f4c15f95ad05225792b05129b08853741458", 0x13}, {&(0x7f0000000840)}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000880), 0x4) sendto$inet(r0, &(0x7f00000008c0)='<', 0x381, 0x805, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, '\x00', 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x1003ffffffc]}, 0x8, 0x0) poll(&(0x7f0000000280)=[{r2, 0x5}], 0x1, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000200)=0x3) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000340)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 11m3.909719042s ago: executing program 5 (id=1007): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) inotify_init() 11m3.90886149s ago: executing program 1 (id=1008): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x20001000) inotify_init() 11m2.768539507s ago: executing program 1 (id=1010): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000840)=0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b2", 0x1, 0x24000045, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000005c0)="520000002300010100020600"/41, 0x29) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0x2, 0x0, [{0x44, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0xbb}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0xff, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x14, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xdb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xf6, '\x00', 0x5}, {0x44, 0xff, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x4, 0x4, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x0, 0x4, '\x00', 0xff}]}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), 0x1dd}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 11m2.698673363s ago: executing program 5 (id=1011): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000040", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000615000/0x1000)=nil, 0x1000}}) 10m59.183043253s ago: executing program 1 (id=1013): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000000340)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='status\x00') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000003c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r6, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x0, 0x609, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000500)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000540)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x300, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000400)={0x15, 0x6, 0x9c95, 0xad4a, 0x80}) 10m59.129407194s ago: executing program 5 (id=1015): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000004c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r4 = socket(0x10, 0x3, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000140)) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x400) 10m54.426385843s ago: executing program 5 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000780)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{r2, r1, 0x1, [0x0, 0xf7df]}, {r2, r3, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x20001) r5 = syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x2800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000240)={0x0, 0x0, 0x100f, 0x1, 0x0, 0xdfffffff, 0x8}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000f80)=""/4101) sendmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f00000020c0)=':', 0x1}], 0x1}}], 0x1, 0x80c4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) fgetxattr(r6, &(0x7f0000002100)=@random={'user.', '-,{\xb0X\a2\x18\x16\x02_\xec\xdf\xcc\x8b\x15\x03p\xac\xfc\r\xc6%K\x03\xf1\x98\xa9\r-\x00'}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002180)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r8, &(0x7f0000002340)=ANY=[@ANYBLOB="0800080006000600080014000000450a0014006600000b0690786c010101ffffffff"], 0x22) 10m52.161399267s ago: executing program 5 (id=1022): openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000080)=0xfffffffd, 0xfe58) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x0) 10m43.981002784s ago: executing program 1 (id=1033): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000400), 0x76, 0x1) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000580)) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x40, 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r3, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000001580)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001680), &(0x7f00000016c0)}, 0x2c) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r0, 0x8, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x12, 0x1e, 0x1c, "339f020bbe070000000000000000000000000d0ec0c1b4e9b1c436c1c50d38ef2a565ef1e83323691c58d6650000000000000000000000000000000000000004", "a9103939c787a16c1ca43f80026d1a8554fe581b59de9737f090da72a964a02447a75df8a67772fd29f35239d200000000000000000000000000000000ecff00", "24431a1c77a68e060000000000000000000000006c30000000003437ef2600", [0x4f56, 0x3]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)="02510e0e27a4562f263ab227ffc529601ec9dd0f7ea06feffa7315114f2ebbb805e7e4665b231ab10e37227d14e668c74232899195a6743bc0cd84c6001482240e081b9281046a6f2dfa3f389919e28994dc48c0ed61a8662dc7e0f194b966443591dcdeb2fa9a0735b7fac1ab26ae8ede96e67e7f4a52d0952ab1d69da8732072209532e60c07e3c8764dcc213b", 0x8e) read$FUSE(r5, &(0x7f0000002ac0)={0x2020}, 0xfffffffffffffed6) 10m38.139480864s ago: executing program 5 (id=1026): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000041e41d1444d4c0ba5e386e"], 0x8) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x80000000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900200016000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 10m38.13923323s ago: executing program 1 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @remote}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x4, 0x1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e81920"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(0x0, 0x0) close(0x3) 10m29.465355412s ago: executing program 35 (id=1023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000840)=0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b2", 0x1, 0x24000045, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000005c0)="520000002300010100020600"/41, 0x29) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0x2, 0x0, [{0x44, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0xbb}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0xff, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x14, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xdb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xf6, '\x00', 0x5}, {0x44, 0xff, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x4, 0x4, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x0, 0x4, '\x00', 0xff}]}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), 0x1dd}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 9m57.833062129s ago: executing program 36 (id=1026): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000041e41d1444d4c0ba5e386e"], 0x8) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x80000000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900200016000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 9m57.458655659s ago: executing program 37 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @remote}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x4, 0x1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e81920"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(0x0, 0x0) close(0x3) 9m46.908953917s ago: executing program 8 (id=1030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000540)={0x5, 0xa, 0x2, 0x0, 0x4}) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000380)="3300000008000601010003000001", 0xe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0xfcd5) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0xe, 0x1, 0x2, 0x8, 0x2, 0x4}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='65535\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000}) 9m45.976601475s ago: executing program 8 (id=1046): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x80, 0x0, 0x0, 0xa0000) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 9m44.516130226s ago: executing program 8 (id=1049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0x2}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xa, 0x8, 0x0, 0x80}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r11, r10, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 9m43.132447415s ago: executing program 8 (id=1053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000001340)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f000001a380)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 9m39.515173088s ago: executing program 8 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, 0x0, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000640)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000ac0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000b00)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000e00)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000180)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6116, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1000, 0x0, 0x3e4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x80, 0x2, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x12e, 0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r15, 0xc008ae88, &(0x7f0000000600)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) ioctl$KVM_RUN(r15, 0xae80, 0x0) acct(&(0x7f00000003c0)='./debug/kcov\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) 9m38.352970148s ago: executing program 7 (id=1064): write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = fsopen(&(0x7f0000000100)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='uid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x28041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x2c}}, 0x0) r3 = syz_io_uring_setup(0x26af, &(0x7f00000006c0)={0x0, 0xa30d, 0x10000, 0x0, 0x3a5}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) io_uring_enter(r3, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r3, 0xed4, 0x3766, 0x1, 0x0, 0x0) 9m35.887258843s ago: executing program 6 (id=1067): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000fc0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000001040)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000010c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001100)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m35.002302614s ago: executing program 7 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x880, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x2284, &(0x7f0000001540)=@type=0x1) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x10240, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000600)={'sit0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r7}, 0x10) bind$can_raw(r5, &(0x7f00000000c0), 0x10) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000480)={"9b12bdea51563defd81f59dda4602dbb1211088eae3596ba54209bad32f3", 0x81, 0x2, 0x0, 0x7fff, 0x9, 0x3, 0x0, 0x1, [0x1000, 0xe979, 0x3ff, 0x81, 0x8, 0x8, 0x8, 0x401, 0x3dd4000, 0xc98a, 0xc, 0x1000, 0x40, 0xf7, 0xfff, 0x7ff, 0x8a, 0x5, 0x401]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$unix(0x1, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1a0, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xcc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20040041}, 0x4040840) 9m34.072544435s ago: executing program 7 (id=1069): r0 = gettid() timer_create(0x0, &(0x7f0000000d40)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000d80)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000001e80), 0x12) connect$x25(r1, &(0x7f0000001ec0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x21) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x5, 0xbc, &(0x7f0000000740)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x8}, 0x94) r3 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000840)={0x51, 0xfffb, 0xfff, {0x803, 0x5d5}, {0x2, 0x2}, @period={0x59, 0x2, 0x8, 0x6d, 0x9ee, {0x401, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000880)='encrypted\x00', &(0x7f00000008c0), &(0x7f0000000900), 0xca, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="040e040a0404"], 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x190) write(r4, &(0x7f00000009c0)='get', 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) lseek(r5, 0x7, 0x4) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x35e5, 0x2, 0xac, 0x7}, 0x33, [0xf2dc4bb, 0x4, 0x9, 0x348, 0x2fb, 0x4, 0x80, 0x2b, 0xfffffff8, 0x1, 0x3, 0xea, 0x5, 0xe, 0xa, 0x80, 0x8, 0xc, 0x401, 0x4, 0xfffffffd, 0x7, 0x0, 0x3, 0x5d00, 0x0, 0x5, 0x7ff, 0x1ff, 0x0, 0x6, 0xffffffff, 0x0, 0x4, 0x400ff, 0x7, 0x3, 0x2ec, 0x5, 0x320b, 0x200007, 0x8, 0x34f42322, 0x10000, 0xf7d3, 0x5, 0x100, 0x9, 0x10000, 0xa, 0x2e70, 0x1, 0xfffffffe, 0x7, 0x8, 0x2, 0x6, 0xa72, 0x3, 0x6, 0x6, 0xb, 0xfffffffe, 0xb], [0x0, 0x0, 0x0, 0x3, 0x9, 0x6c6, 0x9, 0x0, 0xbd, 0x103, 0x1000, 0x8, 0x2, 0x6, 0x9, 0x4, 0x0, 0x1, 0x0, 0xd8, 0x5, 0x1, 0x338a76b2, 0xd9b, 0x3, 0xd, 0x56, 0xfffff609, 0x6, 0x0, 0x9, 0x5, 0x105, 0x5, 0xfffffff2, 0x7, 0x7, 0x1000, 0x10000, 0x8001, 0x612, 0xffffffff, 0x10, 0x401, 0x8000, 0x7fff, 0x3, 0x3, 0x5a83, 0x7, 0x1, 0xffffffff, 0x9, 0x1, 0x9cbb, 0x69, 0xff, 0xfffffffa, 0x3, 0xfffffac3, 0x8e800000, 0x8, 0x3, 0x4], [0x1ff, 0x7, 0x800, 0x3, 0x9, 0x1000, 0xfffffffb, 0xc0000000, 0x2, 0x9, 0x40, 0x5, 0x26, 0xc2e2, 0xfffffffd, 0x101002, 0x275, 0x2, 0x5, 0x200, 0x3, 0x10000, 0x4, 0x5287, 0xe, 0x32, 0xdfb2, 0x8, 0x1, 0x80000000, 0x4, 0xb, 0x3, 0x6, 0x1, 0xa, 0x5290, 0x4, 0x4, 0x1ff, 0x8000009a, 0x5, 0x1000, 0x8, 0xc, 0x5, 0x1ae3, 0xb, 0x4, 0xa8, 0x1, 0x9, 0xd5, 0x10000, 0x7, 0x6, 0xd2, 0x4, 0x8000, 0x7, 0xbb, 0x2429, 0x753, 0x5], [0x8, 0x3e, 0x9, 0xffffffff, 0x2, 0x4b, 0x20000, 0x3, 0xfffffffb, 0x6, 0x200000e4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x8000, 0xfffffffc, 0x1, 0x4, 0x10, 0x4, 0x3, 0xffff, 0xc37, 0xfffffffd, 0x2, 0x5, 0x7, 0x8, 0x3, 0x7, 0x4, 0x1, 0x6, 0x3, 0x7, 0x1ff, 0x7, 0x6, 0x10008, 0x1ff, 0xfc, 0x5, 0x9, 0xa, 0x7, 0x20, 0x7fff, 0x8, 0x5, 0x100, 0x8, 0x6, 0x2, 0xfffffff2, 0x6, 0x10, 0x80, 0x7, 0xffff, 0x3, 0x800014f, 0xfffffffb]}, 0x45c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000500), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001f00)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 9m33.76010466s ago: executing program 6 (id=1070): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x3}, {0x2, "d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b4d213a7c30096df9de2001a14988837dc1a5"}}}}, 0x47) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x805, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000007311a1080000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r1, 0x1, 0x1, 0x7, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r7, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r7, r2, 0x1e, 0x201c, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 9m32.217473386s ago: executing program 6 (id=1073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, &(0x7f0000001800), &(0x7f0000001840)) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000140)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0xa08412, 0x0) 9m27.076015397s ago: executing program 7 (id=1075): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) r15 = gettid() timer_create(0x7, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r15}, &(0x7f0000000600)=0x0) r17 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r17, 0xc058534f, &(0x7f0000000e80)={{0x0, 0x1}, 0x0, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x1}) timer_settime(r16, 0x1, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r18 = syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0) ioctl$SG_IO(r18, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x5, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000780)="a109a81b13", 0x0, 0x0, 0x10012, 0x0, 0x0}) syz_ublk_setup_queues(r14, r12, &(0x7f0000000480)={0x0, 0x1, 0x1f00, 0x1, 0x133}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x800, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x100, 0x3, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='smaps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x2, &(0x7f0000000e00)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r19, 0xf50f, 0x0) write$UHID_DESTROY(r19, &(0x7f0000000580), 0x4) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x4000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x12fe, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xa9a, 0x0, 0x0}}, 0x0) 9m25.853615287s ago: executing program 6 (id=1077): socket$netlink(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000300)={@my=0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x488, 0xffffffff, 0xc8, 0x0, 0x1bc, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x6a4}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x8a, 0xc9}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xdc, 0x204, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x4, {0x9}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xb7, 'system_u:object_r:fsadm_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) mknodat$md(0xffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000140)='.\x00', 0x0, 0x1000, 0x0) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) r3 = fsopen(&(0x7f00000008c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000940)='127.0.0.1:6789:/\x00', 0x0) r4 = io_uring_setup(0x1, &(0x7f0000000a40)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000ac0)={0xf000, 0x0, 0x8, 0x0, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)={&(0x7f0000000bc0)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x3, &(0x7f0000001c80)=ANY=[], &(0x7f0000001cc0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000001d80)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000009c0)='source\x00', &(0x7f0000000a00)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$RUN_ARRAY(r2, 0x400c0930, &(0x7f0000000380)) openat$md_node(0xffffff9c, &(0x7f0000001dc0)='./md1\x00', 0x0, 0x0) ioctl$STOP_ARRAY(r2, 0x932, 0x0) ioctl$STOP_ARRAY(r2, 0x932, 0x0) 9m24.848342846s ago: executing program 6 (id=1078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket$unix(0x1, 0x5, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x4, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 9m23.681331831s ago: executing program 38 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, 0x0, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000640)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000ac0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000b00)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000e00)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000180)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6116, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1000, 0x0, 0x3e4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x80, 0x2, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x12e, 0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r15, 0xc008ae88, &(0x7f0000000600)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) ioctl$KVM_RUN(r15, 0xae80, 0x0) acct(&(0x7f00000003c0)='./debug/kcov\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) 9m23.391064867s ago: executing program 7 (id=1080): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x8, 0x2}, 0x50) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x301400, 0x4e) syz_open_dev$video(0x0, 0x7ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000980)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x20) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r0, r3, 0x0, 0x7ffff004) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x7ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9m15.6923097s ago: executing program 6 (id=1082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, &(0x7f0000000180)={[0x3ae, 0x5]}, 0x8, 0x80000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9m15.619643377s ago: executing program 7 (id=1083): syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000070, 0x1e1082) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0x8000, 0x2, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0x200b}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) socket$inet6_sctp(0xa, 0x5, 0x84) 9m7.665655971s ago: executing program 9 (id=1085): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000340)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000001600)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="c800", 0x4000}], 0x1) socket$unix(0x1, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) recvfrom$inet6(r4, &(0x7f0000000440)=""/4096, 0x1000, 0x12060, &(0x7f0000001440)={0xa, 0x4e24, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2f8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2cc, 0x4, 0x0, 0x1, [{0x2c8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2b8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_XOR={0x29c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "8d98006790008b3fb3cfac7a1ba971c8244ba2c55563d41d08232c57d174f4dc2f9185d082c9d43604243ec15b252ae45d3015186495d6c3245856e76827353db0481ef9188ba838b5028f36f1f02aadf2b84cb673b63c8d94a18595284623e97669a34dbd86a05a3f887b3b73837cbdb9c3ebd7c0387b51fd73da1d99de296f782cbe65da75081d53"}, @NFTA_DATA_VALUE={0xa9, 0x1, "d5ce34ea0510c479f5c04a875b3a38ca1d61e6013da4a555b596661e3d8f33d541c404e795ea66d43b130878045aaf80217e9064fb1014571e6e5a89f4871f849f131aeb6c846cc6d21b6e2a9050a0a7ac94f2b335d2058b8f9b776d3dc87ab79b57ca69b4af0027c086629ef50e7dd71d15cad24c0588f4178891a26965861a702de31189ada30020bb7696e23590380c9a4dde1a26e2b124986f186dc5fb578862cdb671"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "037a141cab00122dc1269808fd6111cf09474cece1a8705f2f4e782521618ed4bb79366636a3dbd7057977873c0d56095e8d8b86869f6b504305805807aabc2c6d49914f5ce7e470fae1caab21054be43786db772fa97d456bae8630336a8a71f7818814f5905018aa9a319edc0a557a20cf584e8aca243e6265da2d9c1059614261b1437576623676402679463fb1a00e4026d4e1fddf1f061d97682428cb0dab4f5d9fcac8de2254856c5e7e1836b8e6151cea0ae434c8e55aa8a559dfe75ce22a1c06c7f33d28a3b0b540f8dedafba154d173b51f7a00ccc9523da498d232d0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xb1a4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x320}}, 0x24044010) syz_emit_ethernet(0x5e, &(0x7f0000001680)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x8) 9m7.643628714s ago: executing program 39 (id=1082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, &(0x7f0000000180)={[0x3ae, 0x5]}, 0x8, 0x80000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9m6.331510367s ago: executing program 9 (id=1087): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x0, 0x1, 0x401}}, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void}, 0x53) nanosleep(&(0x7f0000000580)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=ANY=[@ANYBLOB="10000200080211000001080211000000080211000000200001000000010001"], 0x56) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000006c0)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000740)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000001c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x40040) write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r5, 0x0, 0x12) close_range(r4, 0xffffffffffffffff, 0x0) 9m3.568235115s ago: executing program 9 (id=1088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8840) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x10}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000500)=0x63ba, 0x4) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x800, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x60040000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10b042, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r4, 0x0, 0xa20, 0x8000c65) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x6000, 0x0) 9m3.527109391s ago: executing program 40 (id=1083): syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000070, 0x1e1082) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0x8000, 0x2, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0x200b}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) socket$inet6_sctp(0xa, 0x5, 0x84) 9m2.979674513s ago: executing program 9 (id=1090): socket$inet6(0xa, 0x1, 0x8010000000000084) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x4, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x2, 0x4, 0x1, 0x0, 0xffffffff}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={@mcast2={0xff, 0x5}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x7, 0x4450290}) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580), 0x171}}], 0x400000000000172, 0x4001c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, {"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", 0x1000}}, 0x1006) r4 = fsopen(&(0x7f0000001900)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000001980)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000c80)={r5, 0x3, 0x2, @random="655a191e915c"}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000cc0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="1700000000000000fb805b6061447879c8db8b0e77eeb5ee62836a921ffd91696eb94a013ba2269fe7854422a64c5665e481073aa3ef540bb7b13f1817a3ba55d4dac3e13390efa9e0bb414a7ea324b5814981fd6250a5", @ANYRES32=r6, @ANYBLOB, @ANYRES64], 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x1f, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r7, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f00000003c0)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x23a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "7e918a", 0x204, 0x3a, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0xff}, {[@hopopts={0x67, 0x30, '\x00', [@jumbo={0xc2, 0x4, 0xfa}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x4000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x8, 0x5e, "39c0e7f387fe5a892f9ef71edfe774cabd965f992adc53ec9d724aa7d56b3174f048dd09949dd775de9461a98f474fd968f3bb6ab7751f506337ab5448f0de65f6ad2a5fded5ae2c88725f48f409e5adbf7eff8e7792bfa85cb96eb04d78"}, @ra={0x5, 0x2, 0x2}, @generic={0x0, 0xfb, "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"}, @jumbo={0xc2, 0x4, 0x9}]}, @srh={0x76, 0x4, 0x4, 0x2, 0x6, 0x20, 0xfffd, [@dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x3f}]}, @fragment={0x2, 0x0, 0xb, 0x1, 0x0, 0xd, 0x65}, @fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x7, 0x64}], @mlv2_query={0x82, 0x0, 0x0, 0x2005, 0x2, @local, 0x5, 0x1, 0x3, 0x4, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r9, 0x5, 0x1, 0x0, &(0x7f0000000700)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40480a4) 8m39.986429702s ago: executing program 41 (id=1092): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000e00)=""/90, 0x1d, 0x5a, 0x1, 0x7}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x16, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000a80)="090000000000d3574c1a957a0e00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c40)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000c80)={r5, 0x3, 0x2, @random="655a191e915c"}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000cc0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="1700000000000000fb805b6061447879c8db8b0e77eeb5ee62836a921ffd91696eb94a013ba2269fe7854422a64c5665e481073aa3ef540bb7b13f1817a3ba55d4dac3e13390efa9e0bb414a7ea324b5814981fd6250a5", @ANYRES32=r6, @ANYBLOB, @ANYRES64], 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x1f, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r7, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f00000003c0)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x23a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "7e918a", 0x204, 0x3a, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0xff}, {[@hopopts={0x67, 0x30, '\x00', [@jumbo={0xc2, 0x4, 0xfa}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x4000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x8, 0x5e, "39c0e7f387fe5a892f9ef71edfe774cabd965f992adc53ec9d724aa7d56b3174f048dd09949dd775de9461a98f474fd968f3bb6ab7751f506337ab5448f0de65f6ad2a5fded5ae2c88725f48f409e5adbf7eff8e7792bfa85cb96eb04d78"}, @ra={0x5, 0x2, 0x2}, @generic={0x0, 0xfb, "f33ee94a2a0b555bc5751e188ae88b149bbd6bd015b4e2dd86db34eff7474bdc4818bbbf3f10c997b426dcca80fa20f67c933d32a4d5ab272cf7f185d9adc1cac4af4c8a6c26a5bb59e4df5a62a35ff91395f00d618820af67a74c0ac1174ed7e729c910f2fabdfc569a6bb06ff045e59e4e4451d33a88c2282259785356d42fa83aaea656e284cc299521b973e80d38f5554bfa02a2741a000641ad2513867f2d16b8752ae2fc6a7abff1f2084377306dbaf31e7bba00cd22b5a4b67972d3335df220f6b0d474f2a5c0475f99063b0cd75fb48d5036e2d2d44049aedc34110046b5c3bc6fce666c24d6d70124754386d6fa8e70c5c0f832bc52e0"}, @jumbo={0xc2, 0x4, 0x9}]}, @srh={0x76, 0x4, 0x4, 0x2, 0x6, 0x20, 0xfffd, [@dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x3f}]}, @fragment={0x2, 0x0, 0xb, 0x1, 0x0, 0xd, 0x65}, @fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x7, 0x64}], @mlv2_query={0x82, 0x0, 0x0, 0x2005, 0x2, @local, 0x5, 0x1, 0x3, 0x4, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r9, 0x5, 0x1, 0x0, &(0x7f0000000700)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40480a4) 10.01346316s ago: executing program 2 (id=2489): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x93, 0xa}, 0x1, 0x40, 0x8, {0xfa, 0x5}, 0x42, 0x400}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x1, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 8.866450016s ago: executing program 0 (id=2494): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x93, 0xa}, 0x1, 0x40, 0x8, {0xfa, 0x5}, 0x42, 0x400}) 8.443818138s ago: executing program 0 (id=2495): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 8.153806649s ago: executing program 0 (id=2496): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 6.181014199s ago: executing program 2 (id=2498): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 5.372647497s ago: executing program 2 (id=2502): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000100)) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) r5 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) write$6lowpan_control(r3, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setuid(0xee01) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 5.357048813s ago: executing program 3 (id=2503): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 5.148987337s ago: executing program 3 (id=2505): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) write$midi(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000d00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000d40)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000d80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000dc0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8", 0x19a, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000f80)='nv', 0x2) recvfrom$inet(r1, &(0x7f0000000fc0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$vim2m(&(0x7f0000001080), 0x3, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xb0, 0x4, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x95, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xeb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x5, 0x8}}}}}]}}]}}, 0x0) r3 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff07) 4.875843707s ago: executing program 0 (id=2507): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x93, 0xa}, 0x1, 0x40, 0x8, {0xfa, 0x5}, 0x42, 0x400}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x1, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 4.232950514s ago: executing program 2 (id=2508): mount(&(0x7f0000000040)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4000840}, 0x50008800) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x8, 0x0, 0x31237648, 0x6, 0x500000, 0x31b6}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x8d, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r3, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r3, &(0x7f00000003c0)="2c000000100005000300ecffffff0000000000000000000001000000010000000c0003006261746164723000116407e130bee3a12b87a43ffc203dfbb67a4d987ef8950cc1ef6fbf9e9d07fb105e743fea71e26aca82064fec7f5e381d907060f127576e920260ba9c7695b595d49966d2f372304f57d74807f90b7b74141357eb0d4e16fb72650f78665f17b88b3be7eb8cf7fb857a1b8d5efb471a18a000000000000000", 0xa5) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="ffffffffffff0200000000024305040f320000000001020000000002000c0098968001010008000003e8000003e8", 0x2e) nanosleep(&(0x7f0000000380)={0x1}, 0x0) 2.415677637s ago: executing program 4 (id=2517): kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) 2.375149699s ago: executing program 4 (id=2518): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 2.245442881s ago: executing program 4 (id=2519): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f000000a3c0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x6}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x1ff) 1.314671672s ago: executing program 2 (id=2520): r0 = syz_open_dev$radio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000440)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) setns(0xc9, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x7f, 0x10, {{0x8, 0x4, 0x3, 0x21, 0x20, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0xc5, [@loopback, @remote]}]}}}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team_slave_0\x00', 0xe200}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000300), 0x12) listen(r3, 0x1) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x3, 0xfa18, 0x8}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000640)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000800), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.314331492s ago: executing program 4 (id=2521): socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) syz_usb_connect$uac2(0x1, 0x83, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x1}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) bind$l2tp(r0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000640)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.223679688s ago: executing program 3 (id=2522): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 1.138568958s ago: executing program 0 (id=2523): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 969.37632ms ago: executing program 3 (id=2524): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 793.420806ms ago: executing program 0 (id=2525): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 603.622881ms ago: executing program 4 (id=2526): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 566.983877ms ago: executing program 3 (id=2527): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 480.318034ms ago: executing program 4 (id=2528): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000680)=""/70, 0x4a}], 0x1, 0x8, 0x101) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002f00090827bd7000fddbdf250400000007000b0005"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000580)='dns_resolver\x00', 0x0, 0x0, 0x0, r7) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local, 0x1}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r9, 0x0, 0x3}}, 0x20) openat$iommufd(0xffffff9c, &(0x7f0000000300), 0x311100, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@any, 0xffff7fff}, 0x1, 0x0, 0x10001}) 76.89953ms ago: executing program 3 (id=2529): mount(&(0x7f0000000040)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4000840}, 0x50008800) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x8, 0x0, 0x31237648, 0x6, 0x500000, 0x31b6}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x8d, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r3, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r3, &(0x7f00000003c0)="2c000000100005000300ecffffff0000000000000000000001000000010000000c0003006261746164723000116407e130bee3a12b87a43ffc203dfbb67a4d987ef8950cc1ef6fbf9e9d07fb105e743fea71e26aca82064fec7f5e381d907060f127576e920260ba9c7695b595d49966d2f372304f57d74807f90b7b74141357eb0d4e16fb72650f78665f17b88b3be7eb8cf7fb857a1b8d5efb471a18a000000000000000", 0xa5) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="ffffffffffff0200000000024305040f320000000001020000000002000c0098968001010008000003e8000003e8", 0x2e) nanosleep(&(0x7f0000000380)={0x1}, 0x0) 0s ago: executing program 2 (id=2530): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)={0x32, 0x2, 0x2, 0x8, 0x0, [@mcast2]}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6028d}, [@IFLA_MTU={0x8, 0x4, 0x182b356d}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x1, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1', 0x1) kernel console output (not intermixed with test programs): ptor, different from the interface descriptor's value: 2 [ 907.234181][ T41] usb 5-1: config 1 interface 0 has no altsetting 0 [ 907.236462][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.236474][ T41] usb 5-1: Product: syz [ 907.236482][ T41] usb 5-1: Manufacturer: syz [ 907.236491][ T41] usb 5-1: SerialNumber: syz [ 907.412581][ T1610] usbhid 8-1:1.0: can't add hid device: -71 [ 907.412647][ T1610] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 907.416812][ T1610] usb 8-1: USB disconnect, device number 28 [ 907.481426][ T41] usbhid 5-1:1.0: can't add hid device: -71 [ 907.481544][ T41] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 907.497574][ T41] usb 5-1: USB disconnect, device number 34 [ 908.356904][ T1610] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 908.502944][ T1610] usb 5-1: Using ep0 maxpacket: 32 [ 908.503743][ T1610] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 908.506258][ T1610] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.506284][ T1610] usb 5-1: config 1 interface 0 has no altsetting 0 [ 908.509242][ T1610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.509264][ T1610] usb 5-1: Product: syz [ 908.509280][ T1610] usb 5-1: Manufacturer: syz [ 908.509296][ T1610] usb 5-1: SerialNumber: syz [ 908.723669][T15520] Invalid ELF header magic: != ELF [ 908.755235][ T1610] usbhid 5-1:1.0: can't add hid device: -71 [ 908.755306][ T1610] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 908.757035][ T1610] usb 5-1: USB disconnect, device number 35 [ 909.259010][T15527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1971'. [ 909.448220][ T42] audit: type=1326 audit(1794886975.674:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15523 comm="syz.2.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 909.448419][ T42] audit: type=1326 audit(1794886975.674:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15523 comm="syz.2.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 909.448907][ T42] audit: type=1326 audit(1794886975.674:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15523 comm="syz.2.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 909.449268][ T42] audit: type=1326 audit(1794886975.674:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15523 comm="syz.2.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 909.451804][ T42] audit: type=1326 audit(1794886975.684:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15523 comm="syz.2.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 910.358219][ T41] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 910.535780][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 910.940798][ C1] net_ratelimit: 156 callbacks suppressed [ 910.996039][T15553] pim6reg: entered allmulticast mode [ 911.688007][T15553] pim6reg: left allmulticast mode [ 913.687286][T15571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1984'. [ 913.901112][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 913.901152][ T41] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 913.902040][ T41] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 913.902069][ T41] usb 7-1: can't read configurations, error -71 [ 914.913114][ T42] audit: type=1326 audit(1794886981.206:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.4.1985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 914.913734][ T42] audit: type=1326 audit(1794886981.206:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.4.1985" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 914.914392][ T42] audit: type=1326 audit(1794886981.206:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.4.1985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 914.917383][ T42] audit: type=1326 audit(1794886981.206:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.4.1985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 915.339775][T15593] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 916.008252][ C0] net_ratelimit: 61 callbacks suppressed [ 917.961774][T12027] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 918.083414][ T42] audit: type=1326 audit(1794886984.403:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.2.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 918.083535][ T42] audit: type=1326 audit(1794886984.403:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.2.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 918.083797][ T42] audit: type=1326 audit(1794886984.403:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.2.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 918.084009][ T42] audit: type=1326 audit(1794886984.403:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.2.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 918.084107][ T42] audit: type=1326 audit(1794886984.403:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.2.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 918.092808][T15664] xt_REDIRECT: bad MAP_IPS. [ 918.110754][T12027] usb 5-1: Using ep0 maxpacket: 32 [ 918.111681][T12027] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 918.113471][T12027] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.113513][T12027] usb 5-1: config 1 interface 0 has no altsetting 0 [ 918.116262][T12027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.116284][T12027] usb 5-1: Product: syz [ 918.116301][T12027] usb 5-1: Manufacturer: syz [ 918.116328][T12027] usb 5-1: SerialNumber: syz [ 918.351607][T12027] usbhid 5-1:1.0: can't add hid device: -71 [ 918.351723][T12027] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 918.359027][T12027] usb 5-1: USB disconnect, device number 36 [ 918.793212][ T42] audit: type=1326 audit(1794886985.109:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15674 comm="syz.2.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 920.182822][ T5798] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 921.089302][ C2] net_ratelimit: 175 callbacks suppressed [ 921.462919][ T42] kauditd_printk_skb: 299 callbacks suppressed [ 921.462931][ T42] audit: type=1326 audit(1794886987.797:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 921.462958][ T42] audit: type=1326 audit(1794886987.797:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 921.463237][ T42] audit: type=1326 audit(1794886987.797:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 921.463441][ T42] audit: type=1326 audit(1794886987.797:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 921.463546][ T42] audit: type=1326 audit(1794886987.797:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 921.678438][ T42] audit: type=1326 audit(1794886988.019:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.2.2019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 921.678467][ T42] audit: type=1326 audit(1794886988.019:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.2.2019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 921.679100][ T42] audit: type=1326 audit(1794886988.019:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.2.2019" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 921.679324][ T42] audit: type=1326 audit(1794886988.019:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.2.2019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 921.680223][ T42] audit: type=1326 audit(1794886988.019:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.2.2019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 922.054738][T15740] No buffer was provided with the request [ 922.729016][T15752] Invalid ELF header magic: != ELF [ 923.576062][T15762] device-mapper: thin: Deletion of thin device 0 failed. [ 926.221839][T15791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 926.399536][ C2] net_ratelimit: 332 callbacks suppressed [ 926.526144][T15795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2036'. [ 926.704782][T15781] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 926.704812][T15781] overlayfs: failed to look up (tracing) for ino (-66) [ 926.792439][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 926.792451][ T42] audit: type=1326 audit(1795411281.191:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 926.792478][ T42] audit: type=1326 audit(1795411281.191:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 926.792718][ T42] audit: type=1326 audit(1795411281.191:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 926.792944][ T42] audit: type=1326 audit(1795411281.191:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 926.793028][ T42] audit: type=1326 audit(1795411281.191:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 926.825531][T15801] jffs2: notice: (15801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 926.833282][T15801] fuse: fd is not a fuse device [ 926.835038][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 926.835603][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 927.138437][T10333] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 927.243701][ T42] audit: type=1326 audit(1795411281.655:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 927.254007][ T42] audit: type=1326 audit(1795411281.675:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 927.254203][ T42] audit: type=1326 audit(1795411281.675:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 927.254434][ T42] audit: type=1326 audit(1795411281.675:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 927.254569][ T42] audit: type=1326 audit(1795411281.675:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 927.827152][T10333] usb 5-1: Using ep0 maxpacket: 32 [ 927.827990][T10333] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 927.829057][T10333] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.829081][T10333] usb 5-1: config 1 interface 0 has no altsetting 0 [ 927.830941][T10333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.830953][T10333] usb 5-1: Product: syz [ 927.830962][T10333] usb 5-1: Manufacturer: syz [ 927.830971][T10333] usb 5-1: SerialNumber: syz [ 928.190780][T10333] usbhid 5-1:1.0: can't add hid device: -71 [ 928.190858][T10333] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 928.204354][T10333] usb 5-1: USB disconnect, device number 37 [ 928.295931][T15825] Invalid ELF header magic: != ELF [ 929.246272][T15843] overlay: Unknown parameter '/' [ 929.891336][T15831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2047'. [ 929.903800][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.903849][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.796774][T15862] fuse: fd is not a fuse device [ 931.445365][T11032] net_ratelimit: 99 callbacks suppressed [ 931.601232][ T41] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 931.747920][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 931.748663][ T41] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 931.924156][ T41] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.924184][ T41] usb 5-1: config 1 interface 0 has no altsetting 0 [ 932.118950][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.118961][ T41] usb 5-1: Product: syz [ 932.118970][ T41] usb 5-1: Manufacturer: syz [ 932.118978][ T41] usb 5-1: SerialNumber: syz [ 932.403369][T15876] sctp_transport_update_pmtu: 45 callbacks suppressed [ 932.403539][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.407557][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.426839][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.436833][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.446210][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.454464][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.466722][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.467917][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.469926][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.470636][T15876] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.071245][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 933.071259][ T42] audit: type=1800 audit(1795411287.629:1948): pid=15850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2049" name="bus" dev="ramfs" ino=53809 res=0 errno=-4 [ 933.792214][ T41] usbhid 5-1:1.0: can't add hid device: -71 [ 933.792282][ T41] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 933.805360][ T41] usb 5-1: USB disconnect, device number 38 [ 934.159389][T15883] device-mapper: thin: Deletion of thin device 0 failed. [ 934.163394][T15887] device-mapper: thin: Deletion of thin device 0 failed. [ 934.929337][ T42] audit: type=1326 audit(1795411289.525:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.3.2063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 934.929384][ T42] audit: type=1326 audit(1795411289.525:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.3.2063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 934.955162][ T42] audit: type=1326 audit(1795411289.556:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.3.2063" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 934.955219][ T42] audit: type=1326 audit(1795411289.556:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.3.2063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 934.955258][ T42] audit: type=1326 audit(1795411289.556:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.3.2063" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 935.952665][T15909] device-mapper: thin: Deletion of thin device 0 failed. [ 936.959322][ C3] net_ratelimit: 242 callbacks suppressed [ 937.343105][T15936] device-mapper: thin: Deletion of thin device 0 failed. [ 937.498190][T15943] dummy0 speed is unknown, defaulting to 1000 [ 939.032951][T15964] device-mapper: thin: Deletion of thin device 0 failed. [ 939.298540][T15971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2081'. [ 939.298596][T15971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2081'. [ 940.614199][T15990] device-mapper: thin: Deletion of thin device 0 failed. [ 941.262149][ T42] audit: type=1326 audit(1795411295.950:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 941.262772][ T42] audit: type=1326 audit(1795411295.950:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 941.263338][ T42] audit: type=1326 audit(1795411295.950:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 941.263597][ T42] audit: type=1326 audit(1795411295.950:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.2.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 941.263637][ T42] audit: type=1326 audit(1795411295.950:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.2.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 941.264275][ T42] audit: type=1326 audit(1795411295.950:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.2.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 941.264300][ T42] audit: type=1326 audit(1795411295.950:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.2.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 941.264321][ T42] audit: type=1326 audit(1795411295.950:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.2.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 941.267948][ T42] audit: type=1326 audit(1795411295.950:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 941.267991][ T42] audit: type=1326 audit(1795411295.950:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 942.009483][ C2] net_ratelimit: 171 callbacks suppressed [ 942.323062][T16030] Invalid ELF header magic: != ELF ** 354 printk messages dropped ** [ 946.481912][T16078] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 947.273098][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 947.273112][ T42] audit: type=1800 audit(1795411302.022:1978): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2104" name="bus" dev="ramfs" ino=55037 res=0 errno=-4 [ 947.410903][T16086] device-mapper: thin: Deletion of thin device 0 failed. [ 947.718878][ C3] net_ratelimit: 114 callbacks suppressed [ 947.905208][ T42] audit: type=1326 audit(1795411302.657:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.0.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 947.905264][ T42] audit: type=1326 audit(1795411302.657:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.0.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 947.905945][ T42] audit: type=1326 audit(1795411302.657:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.0.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 947.906397][ T42] audit: type=1326 audit(1795411302.657:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.0.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 947.906688][ T42] audit: type=1326 audit(1795411302.657:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.0.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 947.953776][T16094] device-mapper: thin: Deletion of thin device 0 failed. [ 948.383804][ T42] audit: type=1326 audit(1795935591.142:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 948.384355][ T42] audit: type=1326 audit(1795935591.142:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 948.384380][ T42] audit: type=1326 audit(1795935591.142:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 948.384401][ T42] audit: type=1326 audit(1795935591.142:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 951.043716][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 952.803397][ C3] net_ratelimit: 229 callbacks suppressed [ 953.028376][T16162] device-mapper: thin: Deletion of thin device 0 failed. [ 953.217447][T16164] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 953.674661][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 953.674678][ T42] audit: type=1326 audit(1795935596.559:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.2.2137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 953.674850][ T42] audit: type=1326 audit(1795935596.559:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.2.2137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 953.675299][ T42] audit: type=1326 audit(1795935596.559:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.2.2137" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 953.675822][ T42] audit: type=1326 audit(1795935596.559:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.2.2137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 953.678114][ T42] audit: type=1326 audit(1795935596.559:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.2.2137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 955.408465][ T42] audit: type=1326 audit(1795935598.330:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.4.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 955.415655][ T42] audit: type=1326 audit(1795935598.340:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.4.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 955.415700][ T42] audit: type=1326 audit(1795935598.340:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.4.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 955.415738][ T42] audit: type=1326 audit(1795935598.340:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.4.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 955.600514][ T42] audit: type=1326 audit(1795935598.534:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.0.2135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 956.290429][T16209] device-mapper: thin: Deletion of thin device 0 failed. [ 956.342816][T16212] dummy0 speed is unknown, defaulting to 1000 [ 957.442841][T16230] device-mapper: thin: Deletion of thin device 0 failed. [ 957.889342][ C3] net_ratelimit: 508 callbacks suppressed [ 958.549648][T16256] device-mapper: thin: Deletion of thin device 0 failed. [ 958.622436][T16261] 9pnet_virtio: no channels available for device syz [ 959.402022][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 959.402039][ T42] audit: type=1800 audit(1795935602.164:2037): pid=16269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2152" name="file0" dev="overlay" ino=1402 res=0 errno=-22 [ 959.940270][ T42] audit: type=1326 audit(1795935602.947:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.3.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 959.940299][ T42] audit: type=1326 audit(1795935602.947:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.3.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 959.940321][ T42] audit: type=1326 audit(1795935602.947:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.3.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 959.940343][ T42] audit: type=1326 audit(1795935602.947:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.3.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 959.940364][ T42] audit: type=1326 audit(1795935602.947:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.3.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 960.159323][ T34] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 960.287384][ T5882] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 960.350021][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 960.352183][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 960.352218][ T34] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 960.353270][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.353292][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 960.353326][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.355290][ T34] usb 5-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 960.355303][ T34] usb 5-1: Product: syz [ 960.355312][ T34] usb 5-1: Manufacturer: syz [ 960.355328][ T34] usb 5-1: SerialNumber: syz [ 960.454423][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 960.454913][ T5882] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 960.455746][ T5882] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.455760][ T5882] usb 7-1: config 1 interface 0 has no altsetting 0 [ 960.458605][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.458615][ T5882] usb 7-1: Product: syz [ 960.458623][ T5882] usb 7-1: Manufacturer: syz [ 960.458631][ T5882] usb 7-1: SerialNumber: syz [ 960.707075][ T5882] usbhid 7-1:1.0: can't add hid device: -71 [ 960.707186][ T5882] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 960.719142][ T5882] usb 7-1: USB disconnect, device number 37 [ 960.929711][ T34] cdc_ncm 5-1:1.0: skipping garbage [ 960.929734][ T34] cdc_ncm 5-1:1.0: skipping garbage [ 960.929747][ T34] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 960.929780][ T34] cdc_ncm 5-1:1.0: bind() failure [ 960.936098][ T34] usb 5-1: USB disconnect, device number 39 [ 961.333609][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 961.369284][ T5798] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 962.052973][T16297] device-mapper: thin: Deletion of thin device 0 failed. [ 962.791069][T16309] device-mapper: thin: Deletion of thin device 0 failed. [ 962.827548][ T42] audit: type=1800 audit(1795935605.871:2043): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2154" name="bus" dev="ramfs" ino=55400 res=0 errno=-4 [ 962.927373][ C1] net_ratelimit: 138 callbacks suppressed [ 964.254700][T16333] device-mapper: thin: Deletion of thin device 0 failed. [ 964.390199][T16341] device-mapper: thin: Deletion of thin device 0 failed. [ 964.467126][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 964.635020][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 964.637103][ T34] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 964.638000][ T34] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 964.638014][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 964.639643][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.639653][ T34] usb 8-1: Product: syz [ 964.639661][ T34] usb 8-1: Manufacturer: syz [ 964.639668][ T34] usb 8-1: SerialNumber: syz [ 964.870008][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 964.870078][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 964.876678][ T34] usb 8-1: USB disconnect, device number 29 [ 965.360817][ T42] audit: type=1326 audit(1795935608.454:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.2171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 965.360916][ T42] audit: type=1326 audit(1795935608.454:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.2171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 965.361287][ T42] audit: type=1326 audit(1795935608.454:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.2171" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 965.361454][ T42] audit: type=1326 audit(1795935608.454:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.2171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 965.361563][ T42] audit: type=1326 audit(1795935608.454:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.2171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 965.967567][T16369] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 966.219971][ T42] audit: type=1326 audit(1795935609.324:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 966.220216][ T42] audit: type=1326 audit(1795935609.324:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 966.220925][ T42] audit: type=1326 audit(1795935609.324:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2173" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 966.221397][ T42] audit: type=1326 audit(1795935609.324:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 966.221797][ T42] audit: type=1326 audit(1795935609.324:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 966.501268][T16380] device-mapper: thin: Deletion of thin device 0 failed. [ 966.681056][ T5882] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 966.839229][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 966.839720][ T5882] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 966.842479][ T5882] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.842502][ T5882] usb 8-1: config 1 interface 0 has no altsetting 0 [ 966.844410][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.844427][ T5882] usb 8-1: Product: syz [ 966.844439][ T5882] usb 8-1: Manufacturer: syz [ 966.844452][ T5882] usb 8-1: SerialNumber: syz [ 967.007544][ T5869] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 967.041976][T16397] fuse: fd is not a fuse device [ 967.205335][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 967.206384][ T5869] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 967.208997][ T5869] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.209011][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 967.213382][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.213427][ T5869] usb 7-1: Product: syz [ 967.213460][ T5869] usb 7-1: Manufacturer: syz [ 967.213494][ T5869] usb 7-1: SerialNumber: syz [ 967.546432][ T5869] usbhid 7-1:1.0: can't add hid device: -71 [ 967.546968][ T5869] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 967.560279][ T5869] usb 7-1: USB disconnect, device number 38 [ 967.755279][ T5882] usbhid 8-1:1.0: can't add hid device: -71 [ 967.755384][ T5882] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 967.764941][ T5882] usb 8-1: USB disconnect, device number 30 [ 967.908661][ C3] net_ratelimit: 213 callbacks suppressed [ 971.494027][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 971.494039][ T42] audit: type=1326 audit(1795935614.645:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.0.2196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 971.494156][ T42] audit: type=1326 audit(1795935614.645:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.0.2196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 971.494525][ T42] audit: type=1326 audit(1795935614.645:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.0.2196" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 971.494878][ T42] audit: type=1326 audit(1795935614.645:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.0.2196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 971.495276][ T42] audit: type=1326 audit(1795935614.645:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.0.2196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 972.268332][T16478] 9pnet_virtio: no channels available for device syz [ 972.314425][ T42] audit: type=1326 audit(1795935615.471:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.3.2198" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 972.314972][ T42] audit: type=1326 audit(1795935615.471:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.3.2198" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 972.322467][ T42] audit: type=1326 audit(1795935615.482:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.3.2198" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 972.322514][ T42] audit: type=1326 audit(1795935615.482:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.3.2198" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 972.322553][ T42] audit: type=1326 audit(1795935615.482:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.3.2198" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 973.063074][ C3] net_ratelimit: 453 callbacks suppressed [ 975.762344][T16511] device-mapper: thin: Deletion of thin device 0 failed. [ 976.201822][ T34] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 976.360967][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 976.361769][ T34] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 976.364537][ T34] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.364563][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 976.367000][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.367019][ T34] usb 7-1: Product: syz [ 976.367034][ T34] usb 7-1: Manufacturer: syz [ 976.367049][ T34] usb 7-1: SerialNumber: syz [ 976.388557][T16527] overlayfs: failed to clone upperpath [ 976.435839][T16529] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2211'. [ 976.695186][ T34] usbhid 7-1:1.0: can't add hid device: -71 [ 976.695298][ T34] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 976.697625][ T34] usb 7-1: USB disconnect, device number 39 [ 977.006284][T16536] netlink: 'syz.4.2213': attribute type 4 has an invalid length. [ 977.006303][T16536] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2213'. [ 977.603496][ T42] audit: type=1326 audit(1795935620.736:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603553][ T42] audit: type=1326 audit(1795935620.746:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603592][ T42] audit: type=1326 audit(1795935620.746:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603630][ T42] audit: type=1326 audit(1795935620.746:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603670][ T42] audit: type=1326 audit(1795935620.746:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603710][ T42] audit: type=1326 audit(1795935620.757:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603748][ T42] audit: type=1326 audit(1795935620.757:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603786][ T42] audit: type=1326 audit(1795935620.757:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603831][ T42] audit: type=1326 audit(1795935620.757:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.603870][ T42] audit: type=1326 audit(1795935620.757:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.2.2214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 977.799647][T16538] 9pnet_virtio: no channels available for device syz [ 978.468679][ C1] net_ratelimit: 65 callbacks suppressed [ 979.241458][T16558] device-mapper: thin: Deletion of thin device 0 failed. [ 979.836300][T16570] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 982.264421][T16591] device-mapper: thin: Deletion of thin device 0 failed. [ 982.352744][T16600] team0: Device xfrm0 is of different type [ 982.626049][T16598] dummy0 speed is unknown, defaulting to 1000 [ 982.967629][ T9613] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 983.116847][ T9613] usb 7-1: Using ep0 maxpacket: 32 [ 983.117475][ T9613] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 983.118613][ T9613] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.118638][ T9613] usb 7-1: config 1 interface 0 has no altsetting 0 [ 983.217672][ T9613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.217711][ T9613] usb 7-1: Product: syz [ 983.217728][ T9613] usb 7-1: Manufacturer: syz [ 983.217744][ T9613] usb 7-1: SerialNumber: syz [ 983.485176][ C3] net_ratelimit: 103 callbacks suppressed [ 983.528915][ T9613] usbhid 7-1:1.0: can't add hid device: -71 [ 983.529034][ T9613] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 983.557309][ T9613] usb 7-1: USB disconnect, device number 40 [ 984.307335][ T5869] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 984.463045][T16627] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 984.468297][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 984.492506][ T5869] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 984.959234][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 984.959251][ T42] audit: type=1326 audit(1795935628.181:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16617 comm="syz.0.2238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 984.973504][ T42] audit: type=1326 audit(1795935628.201:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16617 comm="syz.0.2238" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 984.973552][ T42] audit: type=1326 audit(1795935628.201:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16617 comm="syz.0.2238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 984.973588][ T42] audit: type=1326 audit(1795935628.201:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16617 comm="syz.0.2238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 985.075510][ T5869] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.075531][ T5869] usb 8-1: config 1 interface 0 has no altsetting 0 [ 985.103072][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.103083][ T5869] usb 8-1: Product: syz [ 985.103090][ T5869] usb 8-1: Manufacturer: syz [ 985.103098][ T5869] usb 8-1: SerialNumber: syz [ 985.458463][ T5869] usbhid 8-1:1.0: can't add hid device: -71 [ 985.459289][ T5869] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 985.533518][ T5869] usb 8-1: USB disconnect, device number 31 [ 985.666038][T16637] 9pnet_virtio: no channels available for device syz [ 986.416881][T16643] device-mapper: thin: Deletion of thin device 0 failed. [ 987.266969][ T42] audit: type=1326 audit(1795935630.499:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.267103][ T42] audit: type=1326 audit(1795935630.499:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.273549][ T42] audit: type=1326 audit(1795935630.509:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.273772][ T42] audit: type=1326 audit(1795935630.509:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.276552][ T42] audit: type=1326 audit(1795935630.509:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.277368][ T42] audit: type=1326 audit(1795935630.509:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.4.2239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 987.770282][ T5869] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 987.919386][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 987.922156][ T5869] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 987.927091][ T5869] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.927157][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 987.948833][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.952207][ T5869] usb 7-1: Product: syz [ 987.952253][ T5869] usb 7-1: Manufacturer: syz [ 987.952286][ T5869] usb 7-1: SerialNumber: syz [ 988.212148][ T5869] usbhid 7-1:1.0: can't add hid device: -71 [ 988.212211][ T5869] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 988.214983][ T5869] usb 7-1: USB disconnect, device number 41 [ 988.666967][ C2] net_ratelimit: 351 callbacks suppressed [ 988.981999][T16698] device-mapper: thin: Deletion of thin device 0 failed. [ 989.163796][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 989.234761][T16713] device-mapper: thin: Deletion of thin device 0 failed. [ 989.944283][ T42] kauditd_printk_skb: 639 callbacks suppressed [ 989.944301][ T42] audit: type=1326 audit(1795935633.197:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.945629][ T42] audit: type=1326 audit(1795935633.197:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.946901][ T42] audit: type=1326 audit(1795935633.197:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.948148][ T42] audit: type=1326 audit(1795935633.197:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.949397][ T42] audit: type=1326 audit(1795935633.197:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.950709][ T42] audit: type=1326 audit(1795935633.197:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 989.951948][ T42] audit: type=1326 audit(1795935633.197:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 990.009046][ T42] audit: type=1326 audit(1795935633.247:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 990.025878][ T42] audit: type=1326 audit(1795935633.267:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 990.026911][ T42] audit: type=1326 audit(1795935633.267:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 990.582907][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.582935][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.721396][T16749] device-mapper: thin: Deletion of thin device 0 failed. [ 991.417011][T16766] device-mapper: thin: Deletion of thin device 0 failed. [ 991.439213][ T5869] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 991.608746][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 991.609560][ T5869] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 991.611342][ T5869] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.611368][ T5869] usb 5-1: config 1 interface 0 has no altsetting 0 [ 991.615233][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.615253][ T5869] usb 5-1: Product: syz [ 991.615268][ T5869] usb 5-1: Manufacturer: syz [ 991.615284][ T5869] usb 5-1: SerialNumber: syz [ 991.794989][T16772] netlink: 'syz.4.2261': attribute type 3 has an invalid length. [ 991.852370][ T5869] usbhid 5-1:1.0: can't add hid device: -71 [ 991.852438][ T5869] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 991.859573][ T5869] usb 5-1: USB disconnect, device number 40 [ 992.137981][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2262'. [ 992.138016][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2262'. [ 992.324624][T16788] netlink: 'syz.4.2262': attribute type 10 has an invalid length. [ 992.324641][T16788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2262'. [ 992.805828][ T5869] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 992.988062][ T5869] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 992.988096][ T5869] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 992.990614][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.990676][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 992.993075][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.993094][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 992.995698][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.995718][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 992.998843][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.998904][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 993.001538][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.001599][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 993.004807][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.004825][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 993.006230][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.006250][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 993.008715][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.008735][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 993.012913][ T5869] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 993.012934][ T5869] usb 5-1: Product: syz [ 993.012947][ T5869] usb 5-1: Manufacturer: syz [ 993.012963][ T5869] usb 5-1: SerialNumber: syz [ 993.019410][ T5869] usb 5-1: config 0 descriptor?? [ 993.253433][ T5869] usb 5-1: USB disconnect, device number 41 [ 993.652975][T16817] device-mapper: thin: Deletion of thin device 0 failed. [ 993.933280][ C3] net_ratelimit: 257 callbacks suppressed [ 994.082812][ T5869] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 994.162550][ T34] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 994.233519][ T5869] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 994.239855][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.239873][ T5869] usb 7-1: Product: syz [ 994.239886][ T5869] usb 7-1: Manufacturer: syz [ 994.239899][ T5869] usb 7-1: SerialNumber: syz [ 994.252407][ T5869] usb 7-1: USB2VGA dongle found at address 42 [ 994.254507][ T5869] usb 7-1: Allocated 8 output buffers [ 994.322152][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 994.324738][ T34] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 994.325678][ T34] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.325694][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 994.327601][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.327613][ T34] usb 5-1: Product: syz [ 994.327621][ T34] usb 5-1: Manufacturer: syz [ 994.327629][ T34] usb 5-1: SerialNumber: syz [ 994.562115][T16833] device-mapper: thin: Deletion of thin device 0 failed. [ 994.578647][ T34] usbhid 5-1:1.0: can't add hid device: -71 [ 994.578754][ T34] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 994.595100][ T34] usb 5-1: USB disconnect, device number 42 [ 994.616615][ T5869] usb 7-1: Failed to early initialize device [ 994.619860][ T5869] usb 7-1: USB disconnect, device number 42 [ 995.117232][ T42] kauditd_printk_skb: 346 callbacks suppressed [ 995.117245][ T42] audit: type=1326 audit(1795935638.370:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 995.117420][ T42] audit: type=1326 audit(1795935638.370:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 995.117859][ T42] audit: type=1326 audit(1795935638.370:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2276" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 995.118202][ T42] audit: type=1326 audit(1795935638.370:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 995.118367][ T42] audit: type=1326 audit(1795935638.370:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 995.372880][T16856] device-mapper: thin: Deletion of thin device 0 failed. [ 996.479354][T16870] device-mapper: thin: Deletion of thin device 0 failed. [ 996.587943][ T5869] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 996.617101][ T42] audit: type=1326 audit(1795935639.873:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 996.617148][ T42] audit: type=1326 audit(1795935639.873:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 996.617341][ T42] audit: type=1326 audit(1795935639.873:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 996.617383][ T42] audit: type=1326 audit(1795935639.873:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 996.617423][ T42] audit: type=1326 audit(1795935639.873:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 996.739012][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 996.739735][ T5869] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 996.741425][ T5869] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.741440][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 996.743646][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.743657][ T5869] usb 7-1: Product: syz [ 996.743665][ T5869] usb 7-1: Manufacturer: syz [ 996.743672][ T5869] usb 7-1: SerialNumber: syz [ 996.797701][T16703] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 996.825482][T16884] device-mapper: thin: Deletion of thin device 0 failed. [ 997.026225][ T5869] usbhid 7-1:1.0: can't add hid device: -71 [ 997.026294][ T5869] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 997.031024][ T5869] usb 7-1: USB disconnect, device number 43 [ 997.036459][T16703] usb 5-1: Using ep0 maxpacket: 32 [ 997.038681][T16703] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 997.042683][T16703] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.042699][T16703] usb 5-1: config 1 interface 0 has no altsetting 0 [ 997.044484][T16703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.044496][T16703] usb 5-1: Product: syz [ 997.044504][T16703] usb 5-1: Manufacturer: syz [ 997.044513][T16703] usb 5-1: SerialNumber: syz [ 997.263581][T16703] usbhid 5-1:1.0: can't add hid device: -71 [ 997.263654][T16703] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 997.271603][T16703] usb 5-1: USB disconnect, device number 43 [ 997.729205][T16894] device-mapper: thin: Deletion of thin device 0 failed. [ 997.839055][T16897] device-mapper: thin: Deletion of thin device 0 failed. [ 997.898729][ T5798] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 999.122505][ C0] net_ratelimit: 130 callbacks suppressed [ 999.631644][ T9613] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 999.781350][ T9613] usb 5-1: Using ep0 maxpacket: 16 [ 999.783219][ T9613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 999.783244][ T9613] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0201, bcdDevice=0.40 [ 999.784136][ T9613] usb 5-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 999.784180][ T9613] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 999.786015][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.786027][ T9613] usb 5-1: Product: syz [ 999.786035][ T9613] usb 5-1: Manufacturer: syz [ 999.786044][ T9613] usb 5-1: SerialNumber: syz [ 1000.012188][T16922] device-mapper: thin: Deletion of thin device 0 failed. [ 1000.027635][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. ** 5599 printk messages dropped ** ** 6 printk messages dropped ** ** 109 printk messages dropped ** ** 31 printk messages dropped ** ** 21 printk messages dropped ** ** 104 printk messages dropped ** ** 86 printk messages dropped ** ** 89 printk messages dropped ** ** 112 printk messages dropped ** ** 53 printk messages dropped ** ** 59 printk messages dropped ** ** 66 printk messages dropped ** ** 127 printk messages dropped ** ** 104 printk messages dropped ** ** 92 printk messages dropped ** ** 82 printk messages dropped ** ** 23 printk messages dropped ** ** 1 printk messages dropped ** ** 71 printk messages dropped ** ** 53 printk messages dropped ** ** 147 printk messages dropped ** ** 174 printk messages dropped ** ** 73 printk messages dropped ** ** 3 printk messages dropped ** ** 25 printk messages dropped ** ** 47 printk messages dropped ** ** 92 printk messages dropped ** ** 125 printk messages dropped ** ** 51 printk messages dropped ** ** 65 printk messages dropped ** ** 141 printk messages dropped ** ** 123 printk messages dropped ** ** 101 printk messages dropped ** ** 62 printk messages dropped ** ** 2 printk messages dropped ** ** 42 printk messages dropped ** ** 87 printk messages dropped ** ** 181 printk messages dropped ** ** 104 printk messages dropped ** ** 41 printk messages dropped ** ** 99 printk messages dropped ** ** 147 printk messages dropped ** ** 132 printk messages dropped ** ** 29 printk messages dropped ** ** 42 printk messages dropped ** ** 124 printk messages dropped ** ** 81 printk messages dropped ** ** 75 printk messages dropped ** ** 35 printk messages dropped ** ** 4 printk messages dropped ** ** 177 printk messages dropped ** ** 124 printk messages dropped ** ** 126 printk messages dropped ** [ 1000.286110][T16935] device-mapper: thin: Deletion of thin device 0 failed. [ 1000.380674][ T5869] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1000.540064][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 1000.540538][ T5869] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1000.541442][ T5869] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.541467][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1000.543097][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.543108][ T5869] usb 7-1: Product: syz [ 1000.543115][ T5869] usb 7-1: Manufacturer: syz [ 1000.543123][ T5869] usb 7-1: SerialNumber: syz [ 1000.612187][ T9613] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1000.612543][ T9613] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1000.621200][T16951] device-mapper: thin: Deletion of thin device 0 failed. [ 1000.671374][ T9613] usb 5-1: USB disconnect, device number 44 [ 1000.942864][T16530] udevd[16530]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1001.669256][ T5869] usbhid 7-1:1.0: can't add hid device: -71 [ 1001.669346][ T5869] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1001.800058][ T5869] usb 7-1: USB disconnect, device number 44 [ 1002.513629][ T42] kauditd_printk_skb: 949 callbacks suppressed [ 1002.514198][ T42] audit: type=1326 audit(1795935645.783:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.515252][ T42] audit: type=1326 audit(1795935645.783:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.515954][ T42] audit: type=1326 audit(1795935645.783:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.516204][ T42] audit: type=1326 audit(1795935645.783:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.516886][ T42] audit: type=1326 audit(1795935645.783:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.517485][ T42] audit: type=1326 audit(1795935645.783:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.517517][ T42] audit: type=1326 audit(1795935645.783:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.518276][ T42] audit: type=1326 audit(1795935645.783:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.518779][ T42] audit: type=1326 audit(1795935645.783:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1002.518952][ T42] audit: type=1326 audit(1795935645.783:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.0.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1003.920589][T16964] syz.2.2307: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1003.920639][T16964] CPU: 0 UID: 0 PID: 16964 Comm: syz.2.2307 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1003.920659][T16964] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1003.920665][T16964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1003.920673][T16964] Call Trace: [ 1003.920678][T16964] [ 1003.920684][T16964] dump_stack_lvl+0x100/0x190 [ 1003.920707][T16964] warn_alloc.cold+0x9e/0xb2 [ 1003.920723][T16964] ? __pfx_warn_alloc+0x10/0x10 [ 1003.920745][T16964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1003.920763][T16964] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1003.920785][T16964] __alloc_frozen_pages_noprof+0xaf3/0x3280 [ 1003.920812][T16964] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1003.920837][T16964] ? lock_acquire+0x1d1/0x380 [ 1003.920849][T16964] ? page_table_check_set+0x1aa/0x630 [ 1003.920875][T16964] __folio_alloc_noprof+0x16/0x260 [ 1003.920894][T16964] alloc_migration_target+0x1d7/0x6d0 [ 1003.920912][T16964] migrate_pages_batch+0x5c2/0x4700 [ 1003.920928][T16964] ? set_pte_range+0x470/0x9c0 [ 1003.920940][T16964] ? __pfx_alloc_migration_target+0x10/0x10 [ 1003.920957][T16964] ? rcu_read_unlock+0x2d/0xb0 [ 1003.920973][T16964] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1003.920989][T16964] ? finish_fault+0xaea/0x13e0 [ 1003.921006][T16964] ? folio_unlock+0xf5/0x190 [ 1003.921024][T16964] migrate_pages_sync+0x12c/0x880 [ 1003.921040][T16964] ? __pfx_alloc_migration_target+0x10/0x10 [ 1003.921059][T16964] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1003.921081][T16964] migrate_pages+0x1a79/0x2840 [ 1003.921099][T16964] ? __pfx_alloc_migration_target+0x10/0x10 [ 1003.921117][T16964] ? __pfx_migrate_pages+0x10/0x10 [ 1003.921145][T16964] ? mtree_load+0x3a4/0xb50 [ 1003.921165][T16964] move_pages_and_store_status+0xf1/0x230 [ 1003.921184][T16964] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1003.921208][T16964] kernel_move_pages+0xca4/0x14d0 [ 1003.921230][T16964] ? __pfx_kernel_move_pages+0x10/0x10 [ 1003.921245][T16964] ? __seccomp_filter+0x896/0x1130 ** 75 printk messages dropped ** ** 163 printk messages dropped ** ** 157 printk messages dropped ** ** 197 printk messages dropped ** ** 159 printk messages dropped ** ** 160 printk messages dropped ** ** 66 printk messages dropped ** [ 1004.713666][ C1] net_ratelimit: 98 callbacks suppressed [ 1004.843096][T16984] device-mapper: thin: Deletion of thin device 0 failed. [ 1005.248361][T16990] device-mapper: thin: Deletion of thin device 0 failed. [ 1005.309883][T17002] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 1005.340904][T16995] device-mapper: thin: Deletion of thin device 0 failed. [ 1006.141313][T17002] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 1006.581921][T17030] device-mapper: thin: Deletion of thin device 0 failed. [ 1006.777073][T17035] device-mapper: thin: Deletion of thin device 0 failed. [ 1007.159923][T17050] device-mapper: thin: Deletion of thin device 0 failed. [ 1007.161016][ T34] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1007.330188][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 1007.330989][ T34] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1007.332382][ T34] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1007.332419][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1007.334920][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.334940][ T34] usb 5-1: Product: syz [ 1007.334965][ T34] usb 5-1: Manufacturer: syz [ 1007.334979][ T34] usb 5-1: SerialNumber: syz [ 1007.575542][ T34] usbhid 5-1:1.0: can't add hid device: -71 [ 1007.575676][ T34] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1007.581519][ T34] usb 5-1: USB disconnect, device number 45 [ 1007.739801][ T9613] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1007.889535][ T9613] usb 7-1: Using ep0 maxpacket: 32 [ 1007.890280][ T9613] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1007.892270][ T9613] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1007.892296][ T9613] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1007.896596][ T9613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.896615][ T9613] usb 7-1: Product: syz [ 1007.896635][ T9613] usb 7-1: Manufacturer: syz [ 1007.896650][ T9613] usb 7-1: SerialNumber: syz [ 1008.422862][ T9613] usbhid 7-1:1.0: can't add hid device: -71 [ 1008.422931][ T9613] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1008.428364][ T9613] usb 7-1: USB disconnect, device number 45 [ 1009.513869][T17081] device-mapper: thin: Deletion of thin device 0 failed. [ 1009.757447][ C0] net_ratelimit: 63 callbacks suppressed [ 1011.990010][T17102] device-mapper: thin: Deletion of thin device 0 failed. [ 1012.951575][ T5883] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1013.333455][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 1013.336831][ T5883] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1013.672044][ T5883] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1013.672071][ T5883] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1013.675519][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.675539][ T5883] usb 8-1: Product: syz [ 1013.675553][ T5883] usb 8-1: Manufacturer: syz [ 1013.675568][ T5883] usb 8-1: SerialNumber: syz [ 1014.122259][ T5883] usbhid 8-1:1.0: can't add hid device: -71 [ 1014.122370][ T5883] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1014.126571][ T5883] usb 8-1: USB disconnect, device number 32 [ 1014.522403][T17134] Invalid ELF header magic: != ELF [ 1014.639136][T17134] overlay: Unknown parameter '/' [ 1015.021736][ C3] net_ratelimit: 345 callbacks suppressed [ 1015.040852][T17133] 9pnet_virtio: no channels available for device syz [ 1016.570403][T12027] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1016.591806][T17155] device-mapper: thin: Deletion of thin device 0 failed. [ 1016.730779][T12027] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1016.731681][T12027] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.731718][T12027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.740540][T12027] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1016.740657][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1016.740697][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1016.744301][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1016.744346][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1016.746925][T12027] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1016.749799][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1016.749843][T12027] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1016.759288][T12027] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1016.884834][ T42] kauditd_printk_skb: 129 callbacks suppressed [ 1016.884851][ T42] audit: type=1326 audit(1795935660.170:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.884967][ T42] audit: type=1326 audit(1795935660.170:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.918864][ T42] audit: type=1326 audit(1795935660.200:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.919074][ T42] audit: type=1326 audit(1795935660.200:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.919330][ T42] audit: type=1326 audit(1795935660.200:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.919377][ T42] audit: type=1326 audit(1795935660.200:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.919417][ T42] audit: type=1326 audit(1795935660.200:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.926183][ T42] audit: type=1326 audit(1795935660.210:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.926232][ T42] audit: type=1326 audit(1795935660.210:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1016.926270][ T42] audit: type=1326 audit(1795935660.210:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.3.2354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1017.909309][ T5883] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1018.058930][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 1018.061382][ T5883] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1018.062497][ T5883] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.062520][ T5883] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1018.064730][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.064745][ T5883] usb 7-1: Product: syz [ 1018.064757][ T5883] usb 7-1: Manufacturer: syz [ 1018.064765][ T5883] usb 7-1: SerialNumber: syz [ 1018.258792][ T5869] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1018.285105][ T5883] usbhid 7-1:1.0: can't add hid device: -71 [ 1018.285178][ T5883] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1018.288717][ T5883] usb 7-1: USB disconnect, device number 46 [ 1018.408697][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 1018.409389][ T5869] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1018.410532][ T5869] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.410552][ T5869] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1018.412671][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.412681][ T5869] usb 8-1: Product: syz [ 1018.412690][ T5869] usb 8-1: Manufacturer: syz [ 1018.412698][ T5869] usb 8-1: SerialNumber: syz [ 1018.641488][ T5869] usbhid 8-1:1.0: can't add hid device: -71 [ 1018.641666][ T5869] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1018.644728][ T5869] usb 8-1: USB disconnect, device number 33 [ 1018.905736][T17187] device-mapper: thin: Deletion of thin device 0 failed. [ 1019.434086][T10369] usb 5-1: USB disconnect, device number 46 [ 1019.923554][T10369] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1019.938642][T10369] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1019.972026][T10369] keyspan 5-1:1.0: device disconnected [ 1020.217091][ C3] net_ratelimit: 73 callbacks suppressed [ 1020.311715][T17210] device-mapper: thin: Deletion of thin device 0 failed. [ 1021.175545][T17209] 9pnet_virtio: no channels available for device syz [ 1021.236306][T12027] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1021.404140][T17219] 0x000000000000-0x000000010000 : "" [ 1021.413597][T12027] usb 8-1: Using ep0 maxpacket: 32 [ 1021.415380][T12027] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1021.426175][T17219] ftl_cs: FTL header not found. [ 1021.426485][T17219] FAULT_INJECTION: forcing a failure. [ 1021.426485][T17219] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.426513][T17219] CPU: 0 UID: 0 PID: 17219 Comm: syz.2.2370 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1021.426658][T17219] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1021.426669][T17219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1021.426682][T17219] Call Trace: [ 1021.426691][T17219] [ 1021.426700][T17219] dump_stack_lvl+0x100/0x190 [ 1021.426736][T17219] should_fail_ex.cold+0x5/0xa [ 1021.426767][T17219] should_failslab+0xc2/0x120 [ 1021.426792][T17219] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1021.426827][T17219] ? blk_alloc_queue+0x31/0x790 [ 1021.426861][T17219] blk_alloc_queue+0x31/0x790 [ 1021.426890][T17219] blk_mq_alloc_queue+0x174/0x290 [ 1021.426924][T17219] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 1021.426973][T17219] ? blk_mq_alloc_tag_set+0xbbd/0x12d0 [ 1021.427014][T17219] __blk_mq_alloc_disk+0x29/0x120 [ 1021.427047][T17219] add_mtd_blktrans_dev+0x7ad/0x1520 [ 1021.427086][T17219] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1021.427150][T17219] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1021.427182][T17219] ? mtdblock_add_mtd+0x4a/0x270 [ 1021.427220][T17219] mtdblock_add_mtd+0x1cc/0x270 [ 1021.427254][T17219] blktrans_notify_add+0xa2/0xf0 [ 1021.427286][T17219] add_mtd_device+0xb6d/0x1820 [ 1021.427315][T17219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1021.427346][T17219] ? __pfx_add_mtd_device+0x10/0x10 [ 1021.427379][T17219] mtd_add_partition+0x376/0x6a0 [ 1021.427409][T17219] ? __pfx_mtd_add_partition+0x10/0x10 [ 1021.427435][T17219] ? __might_fault+0xc5/0x140 [ 1021.427459][T17219] ? __might_fault+0xc5/0x140 [ 1021.427492][T17219] mtdchar_blkpg_ioctl+0x207/0x250 [ 1021.427519][T17219] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1021.427572][T17219] mtdchar_compat_ioctl+0x3d6/0x440 [ 1021.427604][T17219] ? find_held_lock+0x2b/0x80 [ 1021.427633][T17219] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 1021.427684][T17219] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 1021.427714][T17219] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1021.427768][T17219] __do_fast_syscall_32+0x14b/0x8c0 [ 1021.427801][T17219] do_fast_syscall_32+0x32/0x70 [ 1021.427829][T17219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.427856][T17219] RIP: 0023:0xf744efbc [ 1021.427874][T17219] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1021.427895][T17219] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1021.427917][T17219] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 1021.428041][T17219] RDX: 0000000080002700 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.428054][T17219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.428068][T17219] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1021.428081][T17219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.428111][T17219] [ 1021.430309][T12027] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1021.430333][T12027] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1021.549495][T12027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.549513][T12027] usb 8-1: Product: syz [ 1021.549549][T12027] usb 8-1: Manufacturer: syz [ 1021.549563][T12027] usb 8-1: SerialNumber: syz [ 1021.716887][T17223] device-mapper: thin: Deletion of thin device 0 failed. [ 1021.840029][T12027] usbhid 8-1:1.0: can't add hid device: -71 [ 1021.840090][T12027] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1021.841240][T12027] usb 8-1: USB disconnect, device number 34 [ 1023.307816][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 1023.307837][ T42] audit: type=1326 audit(1795935666.606:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1023.307881][ T42] audit: type=1326 audit(1795935666.606:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1023.311378][ T42] audit: type=1326 audit(1795935666.606:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1023.311833][ T42] audit: type=1326 audit(1795935666.606:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1023.312690][ T42] audit: type=1326 audit(1795935666.606:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1023.401130][T17252] overlayfs: failed to resolve './cgroup': -2 [ 1023.515199][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 1023.907011][T17261] 9pnet_virtio: no channels available for device syz [ 1023.917227][T17257] CIFS: Attempting to mount //::1/share [ 1024.492278][T17257] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1024.492320][T17257] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1024.619353][ T42] audit: type=1326 audit(1795935667.917:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.4.2382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1024.619404][ T42] audit: type=1326 audit(1795935667.917:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.4.2382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1024.621449][T17268] device-mapper: thin: Deletion of thin device 0 failed. [ 1025.003477][ T34] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1025.063497][T12027] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1025.153259][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 1025.153769][ T34] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1025.154659][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1025.156620][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1025.156631][ T34] usb 7-1: Product: syz [ 1025.156639][ T34] usb 7-1: Manufacturer: syz [ 1025.156646][ T34] usb 7-1: SerialNumber: syz [ 1025.158452][ T34] usb 7-1: config 0 descriptor?? [ 1025.159036][T17274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1025.160173][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 1025.160188][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1025.223229][T12027] usb 8-1: Using ep0 maxpacket: 32 [ 1025.224885][T12027] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1025.226141][T12027] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.226163][T12027] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1025.228946][T12027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.228962][T12027] usb 8-1: Product: syz [ 1025.228974][T12027] usb 8-1: Manufacturer: syz [ 1025.228986][T12027] usb 8-1: SerialNumber: syz [ 1025.310736][ T42] audit: type=1326 audit(1795935668.597:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.4.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1025.311145][ T42] audit: type=1326 audit(1795935668.597:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.4.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1025.345229][ T42] audit: type=1326 audit(1795935668.637:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.4.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1025.413360][ C3] net_ratelimit: 86 callbacks suppressed [ 1025.653299][ T34] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1025.802782][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 1025.803759][ T34] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1025.804901][ T34] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.804928][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1025.812786][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.812804][ T34] usb 5-1: Product: syz [ 1025.812818][ T34] usb 5-1: Manufacturer: syz [ 1025.812833][ T34] usb 5-1: SerialNumber: syz [ 1025.872856][T12027] usbhid 8-1:1.0: can't add hid device: -71 [ 1025.872925][T12027] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1025.877545][T12027] usb 8-1: USB disconnect, device number 35 [ 1026.260144][ T34] usbhid 5-1:1.0: can't add hid device: -71 [ 1026.260212][ T34] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1026.269758][ T34] usb 5-1: USB disconnect, device number 47 [ 1026.756073][T17296] device-mapper: thin: Deletion of thin device 0 failed. [ 1026.879223][T17302] device-mapper: thin: Deletion of thin device 0 failed. [ 1027.072763][T12027] usb 7-1: USB disconnect, device number 47 [ 1027.311715][T12027] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1027.480378][T12027] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1027.484254][T12027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1027.499320][T12027] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1027.499338][T12027] usb 7-1: Product: syz [ 1027.500189][T12027] usb 7-1: Manufacturer: syz [ 1027.500448][T12027] usb 7-1: SerialNumber: syz [ 1027.517435][T12027] usb 7-1: config 0 descriptor?? [ 1027.526151][T17283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1027.542172][T12027] hub 7-1:0.0: bad descriptor, ignoring hub [ 1027.542190][T12027] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1027.868536][T17322] syz.3.2398: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1027.868611][T17322] CPU: 3 UID: 0 PID: 17322 Comm: syz.3.2398 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1027.868630][T17322] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1027.868635][T17322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1027.868642][T17322] Call Trace: [ 1027.868647][T17322] [ 1027.868652][T17322] dump_stack_lvl+0x100/0x190 [ 1027.868675][T17322] warn_alloc.cold+0x9e/0xb2 [ 1027.868689][T17322] ? __pfx_warn_alloc+0x10/0x10 [ 1027.868705][T17322] ? kasan_save_track+0x14/0x30 [ 1027.868717][T17322] ? __kasan_kmalloc+0xaa/0xb0 [ 1027.868728][T17322] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1027.868744][T17322] ? xsk_setsockopt+0x743/0xab0 [ 1027.868757][T17322] ? __ia32_sys_setsockopt+0xbc/0x160 [ 1027.868774][T17322] ? __do_fast_syscall_32+0x14b/0x8c0 [ 1027.868798][T17322] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 1027.868817][T17322] ? xsk_setsockopt+0x743/0xab0 [ 1027.868834][T17322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1027.868848][T17322] ? kasan_save_track+0x14/0x30 [ 1027.868861][T17322] ? __kasan_kmalloc+0xaa/0xb0 [ 1027.868874][T17322] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1027.868891][T17322] ? xskq_create+0x52/0x290 [ 1027.868905][T17322] ? xsk_setsockopt+0x743/0xab0 [ 1027.868917][T17322] xskq_create+0x18f/0x290 [ 1027.868930][T17322] ? xsk_setsockopt+0x743/0xab0 [ 1027.868945][T17322] xsk_setsockopt+0x743/0xab0 [ 1027.868957][T17322] ? __pfx_aa_sk_perm+0x10/0x10 [ 1027.868975][T17322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1027.868988][T17322] ? find_held_lock+0x2b/0x80 [ 1027.869006][T17322] ? aa_sock_opt_perm+0x114/0x1e0 [ 1027.869022][T17322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1027.869038][T17322] do_sock_setsockopt+0xf3/0x1d0 [ 1027.869059][T17322] __sys_setsockopt+0x119/0x190 [ 1027.869097][T17322] __ia32_sys_setsockopt+0xbc/0x160 [ 1027.869117][T17322] ? __might_fault+0x111/0x140 [ 1027.869133][T17322] __do_fast_syscall_32+0x14b/0x8c0 [ 1027.869152][T17322] do_fast_syscall_32+0x32/0x70 [ 1027.869169][T17322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1027.869186][T17322] RIP: 0023:0xf7ff4fbc [ 1027.869196][T17322] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1027.869208][T17322] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1027.869222][T17322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 1027.869230][T17322] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1027.869238][T17322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.869245][T17322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1027.869252][T17322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1027.869268][T17322] [ 1027.869298][T17322] Mem-Info: [ 1027.869306][T17322] active_anon:1710 inactive_anon:2623 isolated_anon:0 [ 1027.869306][T17322] active_file:5556 inactive_file:9177 isolated_file:0 [ 1027.869306][T17322] unevictable:0 dirty:313 writeback:0 [ 1027.869306][T17322] slab_reclaimable:7184 slab_unreclaimable:64490 [ 1027.869306][T17322] mapped:24796 shmem:1830 pagetables:1932 [ 1027.869306][T17322] sec_pagetables:358 bounce:0 [ 1027.869306][T17322] kernel_misc_reclaimable:0 [ 1027.869306][T17322] free:30641 free_pcp:4125 free_cma:0 [ 1027.869337][T17322] Node 0 active_anon:32kB inactive_anon:44kB active_file:992kB inactive_file:700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7200kB pagetables:1024kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.869371][T17322] Node 1 active_anon:6808kB inactive_anon:10448kB active_file:21232kB inactive_file:36008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99072kB dirty:1248kB writeback:0kB shmem:7320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10076kB pagetables:6704kB sec_pagetables:228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.869403][T17322] Node 0 DMA free:3620kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.869439][T17322] lowmem_reserve[]: 0 256 256 256 256 [ 1027.869460][T17322] Node 0 DMA32 free:32052kB boost:25972kB min:37520kB low:40404kB high:43288kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28kB inactive_anon:44kB active_file:956kB inactive_file:692kB unevictable:0kB writepending:4kB zspages:1160kB present:1032196kB managed:262640kB mlocked:0kB bounce:0kB free_pcp:1024kB local_pcp:704kB free_cma:0kB [ 1027.869529][T17322] lowmem_reserve[]: 0 0 0 0 0 [ 1027.869563][T17322] Node 1 DMA32 free:86892kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:1056kB active_anon:6808kB inactive_anon:10348kB active_file:21232kB inactive_file:35708kB unevictable:0kB writepending:1248kB zspages:7344kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:15452kB local_pcp:1048kB free_cma:0kB [ 1027.869604][T17322] lowmem_reserve[]: 0 0 0 0 0 [ 1027.869625][T17322] Node 0 DMA: 139*4kB (U) 91*8kB (U) 30*16kB (U) 24*32kB (U) 11*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3620kB [ 1027.869703][T17322] Node 0 DMA32: 781*4kB (UME) 276*8kB (UME) 148*16kB (UME) 182*32kB (UME) 64*64kB (UME) 25*128kB (UME) 14*256kB (UME) 5*512kB (UM) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 32084kB [ 1027.869790][T17322] Node 1 DMA32: 572*4kB (UMEH) 778*8kB (UMEH) 789*16kB (UMEH) 385*32kB (UMEH) 191*64kB (UMEH) 63*128kB (UMEH) 37*256kB (UME) 10*512kB (UMH) 10*1024kB (M) 4*2048kB (M) 0*4096kB = 86768kB [ 1027.869878][T17322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.869887][T17322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1027.869897][T17322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.869906][T17322] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1027.869915][T17322] 18259 total pagecache pages [ 1027.869919][T17322] 1648 pages in swap cache [ 1027.869924][T17322] Free swap = 73964kB [ 1027.869928][T17322] Total swap = 124996kB [ 1027.869933][T17322] 524155 pages RAM [ 1027.869937][T17322] 0 pages HighMem/MovableOnly [ 1027.869941][T17322] 217603 pages reserved [ 1027.869945][T17322] 0 pages cma reserved [ 1027.881596][T17284] usb 7-1: USB disconnect, device number 48 [ 1028.458116][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 1028.458134][ T42] audit: type=1326 audit(1795935671.749:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.2399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1028.458186][ T42] audit: type=1326 audit(1795935671.749:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.2399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1028.458549][ T42] audit: type=1326 audit(1795935671.749:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.2399" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1028.458737][ T42] audit: type=1326 audit(1795935671.749:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.2399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1028.458780][ T42] audit: type=1326 audit(1795935671.749:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.2399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1028.604629][T17332] device-mapper: thin: Deletion of thin device 0 failed. [ 1028.960836][T17341] device-mapper: thin: Deletion of thin device 0 failed. [ 1028.970838][T17284] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1029.120525][T17284] usb 5-1: Using ep0 maxpacket: 32 [ 1029.121438][T17284] usb 5-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1029.122896][T17284] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.122920][T17284] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1029.125542][T17284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.125562][T17284] usb 5-1: Product: syz [ 1029.125577][T17284] usb 5-1: Manufacturer: syz [ 1029.125592][T17284] usb 5-1: SerialNumber: syz [ 1029.165557][ T42] audit: type=1326 audit(1795935672.460:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17343 comm="syz.2.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 1029.165586][ T42] audit: type=1326 audit(1795935672.460:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17343 comm="syz.2.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 1029.186948][T17349] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1029.186967][T17349] UDF-fs: Scanning with blocksize 2048 failed [ 1029.194355][T17349] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1029.194373][T17349] UDF-fs: Scanning with blocksize 4096 failed [ 1029.196326][ T42] audit: type=1326 audit(1795935672.490:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17343 comm="syz.2.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 1029.196638][ T42] audit: type=1326 audit(1795935672.490:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17343 comm="syz.2.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 1029.196812][ T42] audit: type=1326 audit(1795935672.490:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17343 comm="syz.2.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 1029.352950][T17284] usbhid 5-1:1.0: can't add hid device: -71 [ 1029.353081][T17284] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1029.356581][T17284] usb 5-1: USB disconnect, device number 48 [ 1029.398664][T17352] dummy0 speed is unknown, defaulting to 1000 [ 1029.939597][T17359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2410'. [ 1030.194997][T17359] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2410'. [ 1030.398857][T17371] device-mapper: thin: Deletion of thin device 0 failed. [ 1030.440877][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 1030.523316][T17374] device-mapper: thin: Deletion of thin device 0 failed. [ 1030.619372][ C3] net_ratelimit: 237 callbacks suppressed [ 1030.698568][T17377] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2414'. [ 1031.072564][T17385] veth0_vlan: left promiscuous mode [ 1031.231939][T17389] device-mapper: thin: Deletion of thin device 0 failed. [ 1031.380563][T17392] device-mapper: thin: Deletion of thin device 0 failed. [ 1031.398905][ T9485] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1031.432466][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.432702][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.432888][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.432928][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.432963][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.433013][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.433049][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.433086][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.433123][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.433163][T17398] netlink: 'syz.2.2420': attribute type 3 has an invalid length. [ 1031.553267][ T9485] usb 8-1: not running at top speed; connect to a high speed hub [ 1031.553284][ T9485] usb 8-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1031.558307][ T9485] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.558320][ T9485] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1031.558358][ T9485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.576978][T17414] device-mapper: thin: Deletion of thin device 0 failed. [ 1032.583471][T17411] device-mapper: thin: Deletion of thin device 0 failed. [ 1033.466255][ T5798] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 1033.491115][T17433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.557297][T17433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.558269][T17433] bond2: (slave wireguard4): The slave device specified does not support setting the MAC address [ 1033.559103][T17433] bond2: (slave wireguard4): Error -95 calling set_mac_address [ 1034.075061][T17441] device-mapper: thin: Deletion of thin device 0 failed. [ 1034.178963][ T9613] usb 8-1: USB disconnect, device number 36 [ 1034.276574][T17444] device-mapper: thin: Deletion of thin device 0 failed. [ 1034.399737][T17454] device-mapper: thin: Deletion of thin device 0 failed. [ 1034.528370][T17452] device-mapper: thin: Deletion of thin device 0 failed. [ 1034.898264][T17469] IPVS: ip_vs_add_dest(): server weight less than zero [ 1035.171533][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 1035.171549][ T42] audit: type=1326 audit(1795935678.454:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17467 comm="syz.0.2443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1035.171593][ T42] audit: type=1326 audit(1795935678.454:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17467 comm="syz.0.2443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1035.171630][ T42] audit: type=1326 audit(1795935678.454:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17467 comm="syz.0.2443" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1035.171667][ T42] audit: type=1326 audit(1795935678.454:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17467 comm="syz.0.2443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1035.171705][ T42] audit: type=1326 audit(1795935678.454:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17467 comm="syz.0.2443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1035.171743][ T42] audit: type=1326 audit(1795935678.474:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.3.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1035.171781][ T42] audit: type=1326 audit(1795935678.474:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.3.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1035.172409][ T42] audit: type=1326 audit(1795935678.474:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.3.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1035.172450][ T42] audit: type=1326 audit(1795935678.474:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.3.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1035.172488][ T42] audit: type=1326 audit(1795935678.474:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.3.2442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fbc code=0x7ffc0000 [ 1035.299450][T17478] device-mapper: thin: Deletion of thin device 0 failed. [ 1035.323844][T17481] device-mapper: thin: Deletion of thin device 0 failed. [ 1035.390289][T17484] device-mapper: thin: Deletion of thin device 0 failed. [ 1035.434078][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1035.502388][T17487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1035.502410][T17487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1035.661358][T17497] device-mapper: thin: Deletion of thin device 0 failed. [ 1035.844068][T17502] net_ratelimit: 149 callbacks suppressed [ 1035.845050][T17495] device-mapper: thin: Deletion of thin device 0 failed. [ 1036.841075][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 1037.225966][T17518] device-mapper: thin: Deletion of thin device 0 failed. [ 1037.669308][T17537] device-mapper: thin: Deletion of thin device 0 failed. [ 1037.779099][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1037.843419][T17540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1037.843432][T17540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1038.824303][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'. ** 9602 printk messages dropped ** ** 2012 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 51 printk messages dropped ** [ 1039.969943][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 1040.973993][T17581] bond0: Error: Cannot enslave bond to itself. [ 1041.002958][ C0] net_ratelimit: 350 callbacks suppressed [ 1042.449642][T17583] device-mapper: thin: Deletion of thin device 0 failed. [ 1042.451556][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 1042.451573][ T42] audit: type=1326 audit(1795935685.708:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.4.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1042.451616][ T42] audit: type=1326 audit(1795935685.708:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.4.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1042.451655][ T42] audit: type=1326 audit(1795935685.708:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.4.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1042.451699][ T42] audit: type=1326 audit(1795935685.708:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.4.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1042.451738][ T42] audit: type=1326 audit(1795935685.708:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.4.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 1042.600148][T17597] fuse: fd is not a fuse device [ 1042.672110][T10369] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1042.822002][T10369] usb 7-1: Using ep0 maxpacket: 32 [ 1042.822580][T10369] usb 7-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1042.823679][T10369] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.823694][T10369] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1042.826468][T10369] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.826487][T10369] usb 7-1: Product: syz [ 1042.826500][T10369] usb 7-1: Manufacturer: syz [ 1042.826514][T10369] usb 7-1: SerialNumber: syz [ 1043.094944][T10369] usbhid 7-1:1.0: can't add hid device: -71 [ 1043.095100][T10369] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1043.100084][T10369] usb 7-1: USB disconnect, device number 49 [ 1043.199423][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1043.218784][T17610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1044.146366][T17621] device-mapper: thin: Deletion of thin device 0 failed. [ 1044.596704][T17633] device-mapper: thin: Deletion of thin device 0 failed. [ 1044.683878][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 1044.786928][T17644] syz.3.2491: vmalloc error: size 1422950432, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1044.787028][T17644] CPU: 3 UID: 0 PID: 17644 Comm: syz.3.2491 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1044.787063][T17644] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1044.787074][T17644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1044.787087][T17644] Call Trace: [ 1044.787095][T17644] [ 1044.787111][T17644] dump_stack_lvl+0x100/0x190 [ 1044.787151][T17644] warn_alloc.cold+0x9e/0xb2 [ 1044.787175][T17644] ? __pfx_warn_alloc+0x10/0x10 [ 1044.787205][T17644] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1044.787238][T17644] ? kasan_save_stack+0x3f/0x50 [ 1044.787261][T17644] ? kasan_save_stack+0x30/0x50 [ 1044.787281][T17644] ? kasan_save_track+0x14/0x30 [ 1044.787300][T17644] ? __kasan_kmalloc+0xaa/0xb0 [ 1044.787321][T17644] ? udmabuf_create+0xbd/0x1110 [ 1044.787343][T17644] ? udmabuf_ioctl+0x2b2/0x300 [ 1044.787363][T17644] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1044.787401][T17644] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 1044.787437][T17644] ? udmabuf_create+0x2e5/0x1110 [ 1044.787469][T17644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1044.787496][T17644] ? rcu_is_watching+0x13/0xc0 [ 1044.787532][T17644] __kvmalloc_node_noprof+0x3da/0x9b0 [ 1044.787565][T17644] ? udmabuf_create+0x2e5/0x1110 [ 1044.787587][T17644] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1044.787616][T17644] ? udmabuf_create+0x2e5/0x1110 [ 1044.787645][T17644] udmabuf_create+0x2e5/0x1110 [ 1044.787679][T17644] ? lock_acquire+0x1d1/0x380 [ 1044.787703][T17644] ? __might_fault+0xc5/0x140 [ 1044.787730][T17644] ? __pfx_udmabuf_create+0x10/0x10 [ 1044.787753][T17644] ? __might_fault+0xc5/0x140 [ 1044.787776][T17644] ? __might_fault+0xc5/0x140 [ 1044.787809][T17644] ? _copy_from_user+0x59/0xd0 [ 1044.787843][T17644] udmabuf_ioctl+0x2b2/0x300 [ 1044.787868][T17644] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1044.787891][T17644] ? find_held_lock+0x2b/0x80 [ 1044.787919][T17644] ? __fget_files+0x215/0x3d0 [ 1044.787944][T17644] ? hook_file_ioctl_common+0x140/0x440 [ 1044.787981][T17644] ? __fget_files+0x21f/0x3d0 [ 1044.788028][T17644] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1044.788055][T17644] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1044.788096][T17644] __do_fast_syscall_32+0x14b/0x8c0 [ 1044.788136][T17644] do_fast_syscall_32+0x32/0x70 [ 1044.788168][T17644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1044.788197][T17644] RIP: 0023:0xf7ff4fbc [ 1044.788216][T17644] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1044.788237][T17644] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1044.788259][T17644] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040087543 [ 1044.788275][T17644] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.788287][T17644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1044.788299][T17644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1044.788311][T17644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.788339][T17644] [ 1044.788512][T17644] Mem-Info: [ 1044.788525][T17644] active_anon:813 inactive_anon:4486 isolated_anon:0 [ 1044.788525][T17644] active_file:7448 inactive_file:3418 isolated_file:50 [ 1044.788525][T17644] unevictable:0 dirty:362 writeback:0 [ 1044.788525][T17644] slab_reclaimable:7207 slab_unreclaimable:64491 [ 1044.788525][T17644] mapped:27715 shmem:2872 pagetables:1955 [ 1044.788525][T17644] sec_pagetables:365 bounce:0 [ 1044.788525][T17644] kernel_misc_reclaimable:0 [ 1044.788525][T17644] free:30874 free_pcp:6666 free_cma:0 [ 1044.788579][T17644] Node 0 active_anon:32kB inactive_anon:52kB active_file:1096kB inactive_file:1220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7200kB pagetables:1032kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1044.788634][T17644] Node 1 active_anon:3220kB inactive_anon:17892kB active_file:28696kB inactive_file:12452kB unevictable:0kB isolated(anon):0kB isolated(file):200kB mapped:110748kB dirty:1448kB writeback:0kB shmem:11488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10128kB pagetables:6788kB sec_pagetables:256kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1044.788686][T17644] Node 0 DMA free:3624kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1044.788743][T17644] lowmem_reserve[]: 0 256 256 256 256 [ 1044.788779][T17644] Node 0 DMA32 free:28288kB boost:25972kB min:37520kB low:40404kB high:43288kB reserved_highatomic:2048kB free_highatomic:1548kB active_anon:28kB inactive_anon:52kB active_file:1060kB inactive_file:1212kB unevictable:0kB writepending:0kB zspages:1148kB present:1032196kB managed:262640kB mlocked:0kB bounce:0kB free_pcp:5564kB local_pcp:1276kB free_cma:0kB [ 1044.788838][T17644] lowmem_reserve[]: 0 0 0 0 0 [ 1044.788873][T17644] Node 1 DMA32 free:91584kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:1220kB active_anon:3220kB inactive_anon:17892kB active_file:28696kB inactive_file:12452kB unevictable:0kB writepending:1448kB zspages:7268kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:21096kB local_pcp:2024kB free_cma:0kB [ 1044.788939][T17644] lowmem_reserve[]: 0 0 0 0 0 [ 1044.788973][T17644] Node 0 DMA: 138*4kB (U) 92*8kB (U) 30*16kB (U) 24*32kB (U) 11*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3624kB [ 1044.789126][T17644] Node 0 DMA32: 302*4kB (UMEH) 237*8kB (UMEH) 84*16kB (UMEH) 109*32kB (UMEH) 86*64kB (UMEH) 30*128kB (UMEH) 15*256kB (UMEH) 4*512kB (UM) 1*1024kB (H) 2*2048kB (U) 0*4096kB = 28288kB [ 1044.789285][T17644] Node 1 DMA32: 589*4kB (UMEH) 652*8kB (UME) 389*16kB (UMEH) 493*32kB (UMEH) 267*64kB (UMEH) 74*128kB (UME) 52*256kB (UMEH) 23*512kB (UMEH) 10*1024kB (UM) 0*2048kB 0*4096kB = 91460kB [ 1044.789467][T17644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1044.789486][T17644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1044.789503][T17644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1044.789523][T17644] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1044.789540][T17644] 15423 total pagecache pages [ 1044.789550][T17644] 1637 pages in swap cache [ 1044.789557][T17644] Free swap = 74076kB [ 1044.789563][T17644] Total swap = 124996kB [ 1044.789570][T17644] 524155 pages RAM [ 1044.789576][T17644] 0 pages HighMem/MovableOnly [ 1044.789584][T17644] 217603 pages reserved [ 1044.789590][T17644] 0 pages cma reserved [ 1044.804628][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1044.814540][T17644] FAULT_INJECTION: forcing a failure. [ 1044.814540][T17644] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.814573][T17644] CPU: 3 UID: 0 PID: 17644 Comm: syz.3.2491 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1044.814604][T17644] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1044.814614][T17644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1044.814626][T17644] Call Trace: [ 1044.814634][T17644] [ 1044.814642][T17644] dump_stack_lvl+0x100/0x190 [ 1044.814680][T17644] should_fail_ex.cold+0x5/0xa [ 1044.814716][T17644] should_failslab+0xc2/0x120 [ 1044.814741][T17644] __kmalloc_noprof+0xfc/0x840 [ 1044.814773][T17644] ? inode_set_ctime_current+0x283/0x850 [ 1044.814802][T17644] ? security_inode_init_security+0x113/0x370 [ 1044.814833][T17644] security_inode_init_security+0x113/0x370 [ 1044.814857][T17644] ? __pfx_bpf_fs_initxattrs+0x10/0x10 [ 1044.814880][T17644] ? __pfx_security_inode_init_security+0x10/0x10 [ 1044.814914][T17644] bpf_mkobj_ops+0xdd/0x2a0 [ 1044.814942][T17644] bpf_fill_super+0x5e1/0x960 [ 1044.814970][T17644] ? __pfx_bpf_fill_super+0x10/0x10 [ 1044.814991][T17644] ? hook_capable+0x1bc/0x500 [ 1044.815019][T17644] ? rcu_is_watching+0x13/0xc0 [ 1044.815051][T17644] ? apparmor_capable+0x1d7/0x4d0 [ 1044.815087][T17644] ? __pfx_bpf_fill_super+0x10/0x10 [ 1044.815119][T17644] get_tree_nodev+0xdd/0x190 [ 1044.815141][T17644] vfs_get_tree+0x92/0x320 [ 1044.815173][T17644] vfs_cmd_create+0xd7/0x2a0 [ 1044.815208][T17644] __do_sys_fsconfig+0x55a/0xcb0 [ 1044.815258][T17644] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1044.815308][T17644] __do_fast_syscall_32+0x14b/0x8c0 [ 1044.815343][T17644] do_fast_syscall_32+0x32/0x70 [ 1044.815374][T17644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1044.815402][T17644] RIP: 0023:0xf7ff4fbc [ 1044.815421][T17644] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1044.815442][T17644] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 1044.815467][T17644] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000006 [ 1044.815482][T17644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.815496][T17644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1044.815509][T17644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1044.815524][T17644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.815554][T17644] [ 1045.770513][ T34] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1045.920346][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 1045.921110][ T34] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1045.922134][ T34] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.922164][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1045.924047][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.924067][ T34] usb 8-1: Product: syz [ 1045.924081][ T34] usb 8-1: Manufacturer: syz [ 1045.924096][ T34] usb 8-1: SerialNumber: syz [ 1046.120023][ C1] net_ratelimit: 144 callbacks suppressed [ 1046.360701][T17662] device-mapper: thin: Deletion of thin device 0 failed. [ 1046.739811][T17284] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1046.911133][T17284] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1046.912096][T17284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.912132][T17284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.926892][T17284] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1046.927057][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1046.927098][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1046.941481][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1046.941569][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1046.943694][T17284] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1046.945858][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1046.945982][T17284] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1046.971809][T17284] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1048.528347][T17675] device-mapper: thin: Deletion of thin device 0 failed. [ 1049.209778][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 1049.209843][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1049.220313][ T34] usb 8-1: USB disconnect, device number 37 [ 1049.385842][T17686] device-mapper: thin: Deletion of thin device 0 failed. [ 1049.397456][ T5798] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1049.416222][T17684] input: syz0 as /devices/virtual/input/input16 [ 1049.480155][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 1049.576489][T10369] usb 5-1: USB disconnect, device number 49 [ 1049.582515][T10369] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1049.598786][T10369] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1049.600970][T10369] keyspan 5-1:1.0: device disconnected [ 1049.749034][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1050.277929][ T5883] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1050.587552][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 1050.589896][ T5883] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 1050.593238][ T5883] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.593263][ T5883] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1050.615441][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.615459][ T5883] usb 8-1: Product: syz [ 1050.615474][ T5883] usb 8-1: Manufacturer: syz [ 1050.615487][ T5883] usb 8-1: SerialNumber: syz [ 1051.876849][ C0] net_ratelimit: 140 callbacks suppressed [ 1052.002196][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.002252][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 ** 28039 printk messages dropped ** ** 7 printk messages dropped ** [ 1052.846769][ T5883] usbhid 8-1:1.0: can't add hid device: -71 [ 1052.846881][ T5883] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1052.851976][ T5883] usb 8-1: USB disconnect, device number 38 [ 1053.544890][T17750] device-mapper: thin: Deletion of thin device 0 failed. [ 1053.650371][T17751] device-mapper: thin: Deletion of thin device 0 failed. [ 1053.787476][T17756] device-mapper: thin: Deletion of thin device 0 failed. [ 1054.060735][T17761] device-mapper: thin: Deletion of thin device 0 failed. [ 1054.224535][T17770] device-mapper: thin: Deletion of thin device 0 failed. [ 1054.225209][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 1054.666137][T17779] ================================================================== [ 1054.666146][T17779] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 1054.666167][T17779] Read of size 1 at addr ffff8880229e9480 by task syz.2.2530/17779 [ 1054.666178][T17779] [ 1054.666186][T17779] CPU: 0 UID: 0 PID: 17779 Comm: syz.2.2530 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1054.666206][T17779] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1054.666211][T17779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1054.666220][T17779] Call Trace: [ 1054.666225][T17779] [ 1054.666230][T17779] dump_stack_lvl+0x100/0x190 [ 1054.666253][T17779] print_report+0x13d/0x4b0 [ 1054.666272][T17779] ? __virt_addr_valid+0x239/0x430 [ 1054.666286][T17779] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1054.666300][T17779] kasan_report+0xdf/0x1c0 [ 1054.666315][T17779] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1054.666331][T17779] acpi_ns_get_attached_object+0x148/0x1b0 [ 1054.666345][T17779] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 1054.666360][T17779] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1054.666372][T17779] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 1054.666388][T17779] ? acpi_ds_create_operand+0x267/0xc20 [ 1054.666407][T17779] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 1054.666421][T17779] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 1054.666434][T17779] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 1054.666452][T17779] ? __asan_memset+0x23/0x50 [ 1054.666468][T17779] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1054.666489][T17779] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 1054.666512][T17779] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1054.666537][T17779] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 1054.666563][T17779] ? acpi_ut_trace_ptr+0x181/0x2a0 [ 1054.666581][T17779] acpi_ds_exec_end_op+0xb78/0x1e60 [ 1054.666618][T17779] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1054.666646][T17779] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1054.666676][T17779] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1054.666704][T17779] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1054.666736][T17779] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1054.666764][T17779] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1054.666793][T17779] acpi_ps_parse_aml+0x81e/0x1120 [ 1054.666821][T17779] acpi_ps_execute_method+0x5c4/0xe90 [ 1054.666842][T17779] acpi_ns_evaluate+0x640/0x1670 [ 1054.666883][T17779] acpi_ut_evaluate_object+0xf7/0x610 [ 1054.666906][T17779] acpi_rs_get_prt_method_data+0xa0/0x150 [ 1054.666928][T17779] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 1054.666949][T17779] ? acpi_ut_status_exit+0x111/0x1c0 [ 1054.666980][T17779] ? acpi_rs_validate_parameters+0x104/0x210 [ 1054.667002][T17779] acpi_get_irq_routing_table+0xb8/0x140 [ 1054.667024][T17779] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 1054.667049][T17779] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1054.667070][T17779] ? preempt_schedule_thunk+0x16/0x40 [ 1054.667095][T17779] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 1054.667119][T17779] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1054.667140][T17779] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 1054.667164][T17779] acpi_pci_irq_disable+0x1a8/0x360 [ 1054.667183][T17779] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 1054.667202][T17779] pcibios_disable_device+0x89/0xb0 [ 1054.667222][T17779] do_pci_disable_device+0x9f/0x100 [ 1054.667241][T17779] ? __pfx_do_pci_disable_device+0x10/0x10 [ 1054.667265][T17779] pci_disable_device+0x130/0x270 [ 1054.667283][T17779] pci_device_remove+0xb2/0x1d0 [ 1054.667305][T17779] ? __pfx_pci_device_remove+0x10/0x10 [ 1054.667328][T17779] device_remove+0xcb/0x180 [ 1054.667353][T17779] device_release_driver_internal+0x441/0x610 [ 1054.667384][T17779] pci_stop_bus_device+0x120/0x160 [ 1054.667404][T17779] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1054.667423][T17779] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1054.667438][T17779] remove_store+0x123/0x140 [ 1054.667452][T17779] ? __pfx_remove_store+0x10/0x10 [ 1054.667466][T17779] ? find_held_lock+0x2b/0x80 [ 1054.667483][T17779] ? sysfs_file_kobj+0xe4/0x290 [ 1054.667498][T17779] ? sysfs_file_kobj+0xe4/0x290 [ 1054.667512][T17779] ? __pfx_remove_store+0x10/0x10 [ 1054.667525][T17779] dev_attr_store+0x58/0x80 [ 1054.667536][T17779] ? __pfx_dev_attr_store+0x10/0x10 [ 1054.667547][T17779] sysfs_kf_write+0xf2/0x150 [ 1054.667563][T17779] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1054.667580][T17779] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1054.667610][T17779] vfs_write+0x6af/0x1050 [ 1054.667630][T17779] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1054.667647][T17779] ? __pfx_vfs_write+0x10/0x10 [ 1054.667659][T17779] ? find_held_lock+0x2b/0x80 [ 1054.667681][T17779] ksys_write+0x12a/0x250 [ 1054.667692][T17779] ? __pfx_ksys_write+0x10/0x10 [ 1054.667707][T17779] __do_fast_syscall_32+0x14b/0x8c0 [ 1054.667724][T17779] do_fast_syscall_32+0x32/0x70 [ 1054.667739][T17779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.667755][T17779] RIP: 0023:0xf744efbc [ 1054.667765][T17779] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1054.667777][T17779] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1054.667789][T17779] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 1054.667798][T17779] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1054.667805][T17779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.667812][T17779] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1054.667820][T17779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.667831][T17779] [ 1054.667836][T17779] [ 1054.667839][T17779] Allocated by task 1: [ 1054.667845][T17779] kasan_save_stack+0x30/0x50 [ 1054.667857][T17779] kasan_save_track+0x14/0x30 [ 1054.667867][T17779] __kasan_slab_alloc+0x89/0x90 [ 1054.667879][T17779] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1054.667896][T17779] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1054.667912][T17779] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 1054.667927][T17779] acpi_ds_build_internal_object+0x173/0x790 [ 1054.667943][T17779] acpi_ds_create_node+0xe3/0x280 [ 1054.667957][T17779] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 1054.667973][T17779] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1054.667990][T17779] acpi_ps_parse_aml+0x81e/0x1120 [ 1054.668008][T17779] acpi_ps_execute_table+0x393/0x500 [ 1054.668019][T17779] acpi_ns_execute_table+0x596/0x970 [ 1054.668032][T17779] acpi_ns_parse_table+0xcb/0x160 [ 1054.668043][T17779] acpi_ns_load_table+0xc9/0x490 [ 1054.668054][T17779] acpi_tb_load_namespace+0x2b0/0x8f0 [ 1054.668070][T17779] acpi_load_tables+0x89/0x160 [ 1054.668085][T17779] acpi_init+0x146/0x840 [ 1054.668095][T17779] do_one_initcall+0x11c/0x6f0 [ 1054.668109][T17779] kernel_init_freeable+0x6ea/0x7b0 [ 1054.668125][T17779] kernel_init+0x21/0x1e0 [ 1054.668141][T17779] ret_from_fork+0x730/0xd60 [ 1054.668153][T17779] ret_from_fork_asm+0x1a/0x30 [ 1054.668164][T17779] [ 1054.668168][T17779] Freed by task 6057: [ 1054.668173][T17779] kasan_save_stack+0x30/0x50 [ 1054.668186][T17779] kasan_save_track+0x14/0x30 [ 1054.668200][T17779] kasan_save_free_info+0x3b/0x70 [ 1054.668222][T17779] __kasan_slab_free+0x5f/0x80 [ 1054.668236][T17779] kmem_cache_free+0x127/0x6c0 [ 1054.668257][T17779] acpi_os_release_object+0x1c/0x30 [ 1054.668273][T17779] acpi_ut_delete_object_desc+0xea/0x130 [ 1054.668294][T17779] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 1054.668306][T17779] acpi_ut_update_object_reference+0x5f9/0x800 [ 1054.668318][T17779] acpi_ut_remove_reference+0x192/0x1d0 [ 1054.668330][T17779] acpi_rs_get_prt_method_data+0xcd/0x150 [ 1054.668342][T17779] acpi_get_irq_routing_table+0xb8/0x140 [ 1054.668354][T17779] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1054.668367][T17779] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1054.668378][T17779] acpi_pci_irq_disable+0x1a8/0x360 [ 1054.668390][T17779] pcibios_disable_device+0x89/0xb0 [ 1054.668401][T17779] do_pci_disable_device+0x9f/0x100 [ 1054.668412][T17779] pci_disable_device+0x130/0x270 [ 1054.668423][T17779] virtio_pci_remove+0xcf/0x110 [ 1054.668434][T17779] pci_device_remove+0xb2/0x1d0 [ 1054.668450][T17779] device_remove+0xcb/0x180 [ 1054.668465][T17779] device_release_driver_internal+0x441/0x610 [ 1054.668483][T17779] pci_stop_bus_device+0x120/0x160 [ 1054.668493][T17779] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1054.668504][T17779] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1054.668516][T17779] remove_store+0x123/0x140 [ 1054.668528][T17779] dev_attr_store+0x58/0x80 [ 1054.668537][T17779] sysfs_kf_write+0xf2/0x150 [ 1054.668549][T17779] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1054.668560][T17779] vfs_write+0x6af/0x1050 [ 1054.668569][T17779] ksys_write+0x12a/0x250 [ 1054.668579][T17779] __do_fast_syscall_32+0x14b/0x8c0 [ 1054.668593][T17779] do_fast_syscall_32+0x32/0x70 [ 1054.668613][T17779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.668629][T17779] [ 1054.668632][T17779] The buggy address belongs to the object at ffff8880229e9478 [ 1054.668632][T17779] which belongs to the cache Acpi-Operand of size 72 [ 1054.668643][T17779] The buggy address is located 8 bytes inside of [ 1054.668643][T17779] freed 72-byte region [ffff8880229e9478, ffff8880229e94c0) [ 1054.668655][T17779] [ 1054.668658][T17779] The buggy address belongs to the physical page: [ 1054.668664][T17779] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880229e9f08 pfn:0x229e9 [ 1054.668678][T17779] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1054.668694][T17779] page_type: f5(slab) [ 1054.668711][T17779] raw: 00fff00000000200 ffff88801d44da40 ffffea00008b8e10 ffffea00008b8710 [ 1054.668728][T17779] raw: ffff8880229e9f08 0000000200270006 00000000f5000000 0000000000000000 [ 1054.668743][T17779] page dumped because: kasan: bad access detected [ 1054.668752][T17779] page_owner tracks the page as allocated [ 1054.668757][T17779] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2638742208 [ 1054.668787][T17779] post_alloc_hook+0xfd/0x120 [ 1054.668809][T17779] get_page_from_freelist+0x1113/0x35e0 [ 1054.668828][T17779] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 1054.668844][T17779] new_slab+0xb1/0x6d0 [ 1054.668857][T17779] refill_objects+0xe3/0x410 [ 1054.668872][T17779] __pcs_replace_empty_main+0x35e/0x650 [ 1054.668886][T17779] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 1054.668903][T17779] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1054.668918][T17779] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 1054.668934][T17779] acpi_ds_create_operand+0x6be/0xc20 [ 1054.668949][T17779] acpi_ds_eval_data_object_operands+0x125/0x640 [ 1054.668965][T17779] acpi_ds_exec_end_op+0xe41/0x1e60 [ 1054.668980][T17779] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1054.668996][T17779] acpi_ps_parse_aml+0x81e/0x1120 [ 1054.669012][T17779] acpi_ps_execute_table+0x393/0x500 [ 1054.669023][T17779] acpi_ns_execute_table+0x596/0x970 [ 1054.669035][T17779] page_owner free stack trace missing [ 1054.669039][T17779] [ 1054.669041][T17779] Memory state around the buggy address: [ 1054.669048][T17779] ffff8880229e9380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 1054.669056][T17779] ffff8880229e9400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 1054.669064][T17779] >ffff8880229e9480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 1054.669070][T17779] ^ [ 1054.669075][T17779] ffff8880229e9500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 1054.669083][T17779] ffff8880229e9580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 1054.669090][T17779] ================================================================== [ 1054.669149][T17779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1055.074289][T17779] CPU: 0 UID: 0 PID: 17779 Comm: syz.2.2530 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1055.078299][T17779] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1055.080456][T17779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1055.084130][T17779] Call Trace: [ 1055.085412][T17779] [ 1055.086598][T17779] dump_stack_lvl+0x100/0x190 [ 1055.088382][T17779] vpanic+0x2dc/0x6f8 [ 1055.089908][T17779] panic+0xd1/0xe0 [ 1055.091325][T17779] ? __pfx_panic+0x10/0x10 [ 1055.093004][T17779] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1055.095231][T17779] ? preempt_schedule+0x57/0xd0 [ 1055.097086][T17779] check_panic_on_warn.cold+0x19/0x34 [ 1055.099097][T17779] end_report.part.0+0x3a/0x90 [ 1055.100886][T17779] kasan_report.cold+0xe/0x18 [ 1055.102658][T17779] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1055.104856][T17779] acpi_ns_get_attached_object+0x148/0x1b0 [ 1055.107060][T17779] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 1055.109241][T17779] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1055.111176][T17779] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 1055.113588][T17779] ? acpi_ds_create_operand+0x267/0xc20 [ 1055.115639][T17779] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 1055.117712][T17779] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 1055.119973][T17779] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 1055.121928][T17779] ? __asan_memset+0x23/0x50 [ 1055.123649][T17779] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1055.125881][T17779] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 1055.127956][T17779] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1055.130268][T17779] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 1055.132424][T17779] ? acpi_ut_trace_ptr+0x181/0x2a0 [ 1055.134341][T17779] acpi_ds_exec_end_op+0xb78/0x1e60 [ 1055.136128][T17779] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1055.138191][T17779] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1055.140081][T17779] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1055.142152][T17779] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1055.144223][T17779] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1055.146453][T17779] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1055.148659][T17779] acpi_ps_parse_aml+0x81e/0x1120 [ 1055.150553][T17779] acpi_ps_execute_method+0x5c4/0xe90 [ 1055.152550][T17779] acpi_ns_evaluate+0x640/0x1670 [ 1055.154415][T17779] acpi_ut_evaluate_object+0xf7/0x610 [ 1055.156393][T17779] acpi_rs_get_prt_method_data+0xa0/0x150 [ 1055.158558][T17779] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 1055.160896][T17779] ? acpi_ut_status_exit+0x111/0x1c0 [ 1055.162897][T17779] ? acpi_rs_validate_parameters+0x104/0x210 [ 1055.165124][T17779] acpi_get_irq_routing_table+0xb8/0x140 [ 1055.167231][T17779] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 1055.169575][T17779] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1055.171746][T17779] ? preempt_schedule_thunk+0x16/0x40 [ 1055.173782][T17779] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 1055.176103][T17779] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1055.177997][T17779] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 1055.180092][T17779] acpi_pci_irq_disable+0x1a8/0x360 [ 1055.182034][T17779] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 1055.184139][T17779] pcibios_disable_device+0x89/0xb0 [ 1055.186093][T17779] do_pci_disable_device+0x9f/0x100 [ 1055.188025][T17779] ? __pfx_do_pci_disable_device+0x10/0x10 [ 1055.190265][T17779] pci_disable_device+0x130/0x270 [ 1055.192122][T17779] pci_device_remove+0xb2/0x1d0 [ 1055.193968][T17779] ? __pfx_pci_device_remove+0x10/0x10 [ 1055.195978][T17779] device_remove+0xcb/0x180 [ 1055.197746][T17779] device_release_driver_internal+0x441/0x610 [ 1055.200012][T17779] pci_stop_bus_device+0x120/0x160 [ 1055.201926][T17779] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1055.204097][T17779] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1055.206501][T17779] remove_store+0x123/0x140 [ 1055.208173][T17779] ? __pfx_remove_store+0x10/0x10 [ 1055.210060][T17779] ? find_held_lock+0x2b/0x80 [ 1055.211832][T17779] ? sysfs_file_kobj+0xe4/0x290 [ 1055.213682][T17779] ? sysfs_file_kobj+0xe4/0x290 [ 1055.215502][T17779] ? __pfx_remove_store+0x10/0x10 [ 1055.217340][T17779] dev_attr_store+0x58/0x80 [ 1055.219055][T17779] ? __pfx_dev_attr_store+0x10/0x10 [ 1055.221011][T17779] sysfs_kf_write+0xf2/0x150 [ 1055.222783][T17779] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1055.224755][T17779] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1055.226704][T17779] vfs_write+0x6af/0x1050 [ 1055.228318][T17779] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1055.230512][T17779] ? __pfx_vfs_write+0x10/0x10 [ 1055.232273][T17779] ? find_held_lock+0x2b/0x80 [ 1055.234097][T17779] ksys_write+0x12a/0x250 [ 1055.235716][T17779] ? __pfx_ksys_write+0x10/0x10 [ 1055.237541][T17779] __do_fast_syscall_32+0x14b/0x8c0 [ 1055.239501][T17779] do_fast_syscall_32+0x32/0x70 [ 1055.241358][T17779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1055.243709][T17779] RIP: 0023:0xf744efbc [ 1055.245225][T17779] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1055.252258][T17779] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1055.255326][T17779] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 1055.258275][T17779] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.261198][T17779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1055.264115][T17779] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1055.267023][T17779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1055.269963][T17779] [ 1055.272075][T17779] Kernel Offset: disabled [ 1055.273455][T17779] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:50:56 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85bf0db0 RDI=ffffffff9cf27f60 RBP=ffffffff9cf27f20 RSP=ffffc900031e69c8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39e5041 R15=dffffc0000000000 RIP=ffffffff85bf0dd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095292000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f742a040 CR3=0000000050790000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001f000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802af34128 RCX=0000000001000002 RDX=0000000000000000 RSI=ffffffff8c833b00 RDI=ffffffff8e8ea928 RBP=0000000000000001 RSP=ffffc90000590f88 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff926a315f R11=0000000000000000 R12=000000f600142bfa R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81f16082 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095392000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7191a10 CR3=0000000054db2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000013000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000027fce92cf82 RBX=ffff88802b024040 RCX=00000000000006e0 RDX=000000000000027f RSI=ffffffff81fd4445 RDI=0000000000000001 RBP=000000f60020d723 RSP=ffffc9000050fbb0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff920000a1f80 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b024080 RIP=ffffffff81fd4458 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095492000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476288 CR3=000000004f4ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000013000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88800036a580 RCX=0000000000000004 RDX=0000000000000002 RSI=ffffffff8e5f81ef RDI=ffffffff8c833b80 RBP=0000000000000282 RSP=ffffc900005e8058 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff88805fce8d00 RIP=ffffffff8bea0aa0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2d26c10880 ffffffff 00c00000 GS =0000 ffff888095592000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030cffff8 CR3=000000004a72b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000080000000 Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584df9fe650 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d265f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d265f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff00ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ab0ad34d9a07462 737326f2f49e0ec8 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373f2 7373737373734273 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313030656963703a 302e34303a30303a 303030302f302e34 303a30303a303030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000050 0000000000000031 3030656963703a30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 29c3de47aad30711 0000558187d22e43 00000000000001a1 0000000000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 612c38722c433431 2c4234312c413431 2c3734312c363431 2c3434312c333431 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3234312c313431 2c3034312c343131 2c3331312c323131 2c3131312c303131 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b2c342c332c322c 312c30652d303030 3065333430307041 3635307633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055006565642f 0000000000000021 5f00304253552f00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000264d1b01 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000