last executing test programs: 23m29.590037901s ago: executing program 3 (id=246): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={[&(0x7f0000000440)='basic\x00', &(0x7f0000000480)='syzkaller0\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\\-!@e\x00', &(0x7f0000000580)='basic\x00', &(0x7f00000005c0)='htb\x00', &(0x7f0000000600)='*+]-+\x00', &(0x7f0000000640)='\x00']}, &(0x7f0000000740)={[&(0x7f0000000700)='syzkaller0\x00']}, 0x1000) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r1, 0x3c}, 0x80, &(0x7f0000000680)}, 0x4011) 23m29.230037749s ago: executing program 3 (id=248): socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 23m29.180842292s ago: executing program 3 (id=249): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0xb9005000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlockall(0x3) 23m28.18097389s ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=0xffffffffffffffff]) chdir(&(0x7f0000000000)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000200000000003000000850000002f000000180100fb1f20732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa002000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7c, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x200080, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x16) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = timerfd_create(0x8, 0x80000) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) clock_adjtime(0x0, &(0x7f0000000000)={0xfffb, 0x2, 0x80000000, 0x44, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x284, 0x0, 0x0, 0x5a6c107, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0xe, 0x30000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040)=ANY=[], 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000140)={0x4, 0x7, 0xe353, 0x7f, 0x8}, 0x14) 23m27.940767835s ago: executing program 3 (id=254): ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x101, 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f40600fa", @ANYRES16=r4, @ANYBLOB="010000000000e7004f003b00789cfa470300", @ANYRES32=r5, @ANYRESOCT], 0x6f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x70, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x85ca47e8a820fb45}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_CARRIER={0x5, 0x21, 0xa8}, @IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080c25}, 0x20000000) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r12, @ANYBLOB="8000100014000100ff0100b5519dfc00000000930000000108000f0001000000"], 0x38}}, 0x0) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x8, 0x7, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x7800, 0x4, 0x6}}) read$FUSE(r2, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000740)=@sg0, r16, &(0x7f0000003400)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff9d, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff6f, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048850) 23m27.198055196s ago: executing program 3 (id=258): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (fail_nth: 4) 23m27.114538736s ago: executing program 32 (id=258): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (fail_nth: 4) 14m4.93284016s ago: executing program 1 (id=2673): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r1, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) (fail_nth: 1) 14m4.56990464s ago: executing program 1 (id=2674): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r1, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 14m2.387081818s ago: executing program 1 (id=2679): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) 14m1.24287633s ago: executing program 1 (id=2687): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000014c0)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000074000000154ac787efbc77ad0237bf8cf5241b430000001e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @union]}}, 0x0, 0x3e}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c854}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8404) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 14m1.191773035s ago: executing program 1 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="04020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25170000002c00038008000300a6ae0000080002000800000008000200ff070000080001000200000008000100010000805c000280080001008e920000080001000600000008000100d605000024000380080002000600000008000100000020200800000000000000080001000f0000000400040008000200feffffff080001000100010008000100620900000c0006800400020004000500a00005803400028008000400d2000000080002000600000008000100190000000800030078ffffff08000200070000000800010010000000080001006574680024000280"], 0x204}, 0x1, 0x0, 0x0, 0x4081}, 0x20000840) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff14, 0x3, 0x10, 0xc, 0x4]}}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000002c0)={0x10000, 0x0, 0x400, 0x4, 0x9}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x4, {{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}, 0x88) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m46.09423189s ago: executing program 33 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="04020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25170000002c00038008000300a6ae0000080002000800000008000200ff070000080001000200000008000100010000805c000280080001008e920000080001000600000008000100d605000024000380080002000600000008000100000020200800000000000000080001000f0000000400040008000200feffffff080001000100010008000100620900000c0006800400020004000500a00005803400028008000400d2000000080002000600000008000100190000000800030078ffffff08000200070000000800010010000000080001006574680024000280"], 0x204}, 0x1, 0x0, 0x0, 0x4081}, 0x20000840) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff14, 0x3, 0x10, 0xc, 0x4]}}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000002c0)={0x10000, 0x0, 0x400, 0x4, 0x9}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x4, {{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}, 0x88) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.050038297s ago: executing program 5 (id=5707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}, 0x1, 0x0, 0x0, 0x4440f}, 0x100000024040084) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 10.771978521s ago: executing program 0 (id=5708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000680)="b571e4924900", 0x6}], 0x1, 0x2ffffc, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0xffffffffffffff6e, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 9.700500798s ago: executing program 0 (id=5712): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000100)={0x0, 0x16, 0xb6}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setscheduler(r0, 0x5, &(0x7f0000000280)=0x400005) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000300), 0x80100, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x8c4) 8.955081159s ago: executing program 2 (id=5714): syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x404303) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x21, 0x2, 0x9, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = userfaultfd(0x80001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x3, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x2}, 0xfe, 0x2}, {0x2, 0x1, {0x1, 0x16f52359394fa1ec, 0x3}, {0x2, 0xf0, 0x3}, 0xff, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0xfe}, {0x2, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x1, 0x4}, 0xfd, 0xff}, {0x2, 0x2, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0xfd, 0x1}], 0xa8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 8.530939647s ago: executing program 4 (id=5715): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 8.009589968s ago: executing program 2 (id=5716): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x40082104, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000080)={"c7d220366a92c5079ba5ae10c94c0ff4bb41effc244a51ef19bdcf5b2da1"}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x200) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000040)=0x2) setsockopt$llc_int(r5, 0x10c, 0xf, &(0x7f0000001580)=0x9ad, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r2, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10"], 0x5c, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_NAPI(r7, 0x1c, &(0x7f0000000380), 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18f05ca3bd34a84076d20000006520f9dc000000000f000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x403, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x24004050) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) 7.931720511s ago: executing program 0 (id=5717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x14, 0x0, &(0x7f0000000500)="d0c0a833fcfb0085a881548182bb1ca4b0ffa260", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000100)='iy', 0x0}, 0xffffff38) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "20d18300", "fcffffff", ["000000008000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf250200000008000100030000002437e29f3ba708d3bc"], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fba6f}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000d53f38fb17a832715b9dfa12a301", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25010000000800010002000000080002000200000008000200020000000800020002000000080002000200000008000100030000000800010002000000080001000300000008000100030000000800010001000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) dup2(r4, r4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 5.819385019s ago: executing program 0 (id=5718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xb9a, 0x20041) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000009c0)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090020001600"/18, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 5.515512533s ago: executing program 4 (id=5719): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x100) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00'/127, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r0, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2800}}, 0xf, 0x1, 0x20000, 0x3, 0x16, 0x0, 0x9}, 0x9c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_create1(0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x5}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) 5.440109748s ago: executing program 4 (id=5720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000680)="b571e4924900", 0x6}], 0x1, 0x2ffffc, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0xffffffffffffff6e, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 5.251812046s ago: executing program 5 (id=5721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}, 0x1, 0x0, 0x0, 0x4440f}, 0x100000024040084) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.492732647s ago: executing program 2 (id=5722): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x404303) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000003c0), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x21, 0x2, 0x9, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x3, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x2}, 0xfe, 0x2}, {0x2, 0x1, {0x1, 0x16f52359394fa1ec, 0x3}, {0x2, 0xf0, 0x3}, 0xff, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0xfe}, {0x2, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x1, 0x4}, 0xfd, 0xff}, {0x2, 0x2, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0xfd, 0x1}], 0xa8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000010c0)=[0x57a9, 0x4, 0x6a, 0x81, 0x4, 0x7f, 0x101, 0x8]) 4.491813761s ago: executing program 4 (id=5723): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000059c0)=[{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000002c0)="b806feceab79f63fae7c3884495ce7941f8b9b44612c6d0827711bd8770467e947a75f86cf9dd2e113dd6f9694f83f76212f51d3f22c030256cafaccb985af38fad2c8a0b5ece860f582823527740dcba32b8b2a56e640fdc07060a5fa36027289a75bb15860c5425d82c7805e63600a39c2efe54754b5467424eb0798871355aced05c40514974a8762af0ec83440692e150772116fccf60e47105722fd", 0x9e}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="8130ba8701c9231dbfadeb8053c292fee3", 0x11}, {&(0x7f00000028c0)="7232fa06da6df7fe9f99ffc81cac71e8341c4e4ec58a8bcd2e93cccf39704b13ad85c8dc45592650a6e1f2b01cd8196fb8bc15e7253e594f9aac3a2bea858f3619a039a18f1d3c985c87e9dfa207abb378f0c7e4a54a63d0630a6527638a18ed822f6e55686713d4fe618543174a035cac6be7a2306bef26db1f9e14face59968403dd43c0826727fff0d8ef17deca793b2a56a0b904651b0ac30c62049430fc92d16187154f4da621c493a868485c480316c2facc35c25440254eb9be2f", 0xbe}, {&(0x7f0000002980)="cb8bfce171be42fa20f2504fdf343f3aea0d6062428e4d15098bd235dee066eed5a3d1e1f289fefc47e53c7c4ae4e1776059b087859eac0fdff1336a7a47b8498e4b665c5f3a8befa5e9761aabb5787d432af9e15dab2cc41006b092a2c0d643abdeeb231b92627aee218381a6b3251ac53e7b9902e03a6e98721b21029020972c62c0fc4667fae8dc056de274bae663a63acab28af2f16915ad86b7420cd961542a2a400495d113", 0xa8}], 0x5, &(0x7f0000002a80)=[@op={0x10, 0x117, 0x3, 0x69029dffe425321e}, @assoc={0x10, 0x117, 0x4, 0x7}, @iv={0x24, 0x117, 0x2, 0x13, "4a96d04aed606b6f57baf42c617e6552ff2f1a"}, @assoc={0x10, 0x117, 0x4, 0x4}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6d, "eda3f13dc004d3b2849919564656629283d94ecf39ec9f797c3aeb59a972c053c56212e37bfa147865af9b4137851a6afa2dd3864c5d8239dc9ee9031608736900977420c2bf714e4239ab2dd795e1e6353882648c333c7d16dd28f321d5e68b9b3952193c370673c1f8257e4e"}, @iv={0x14, 0x117, 0x2, 0x3, "e89d18"}, @iv={0xb4, 0x117, 0x2, 0xa3, "d2c96265f6273b14043c61c45af9ebb94962f5fd14032b3bdf27136c5c5fbc8a5ce146bf58429e91c62d47f0a4819db7d6372522cbf76627d289191eaaf34cdc8a92e9bb49216ee7c7bbbd7adbe98fc9332d195dac1438aa88928b68dec933292b41f5b0a3efb4ccd2c464e007dffaf960ad9ccd12ec80656620f43d47ec2307cf232b6da1196abaceffff395a0421f0de3f1e9b6aaf7bd67936f4d68294456bb74ba3"}], 0x1ac}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002c40)="9ce901b15952da22a8ea9053c1bd47bfb54aa62a2d7e57c0e34c51cbad27abf6899842ce54a6f3063db9e1a9857e30735ad9868bfe8c39ac7899d965313cb1ebaa419b86f9bc2fce4f77653d426e7c084f2ee1bb619880098984f3f2b311fdc1283657d763abad7b95ed62d798f957fe5c5315a9d920f9834d025d7746ba88f4309f3f923e9cf04ab7e9913a342890c3742d2c20cc81984e987ed3537d04d4e1690a51156e9395d4203522a681a873b760a6f1f5944442b07043578e72e4d74ca39119716cf3", 0xc6}, {&(0x7f0000002d40)="d39bc60a472e4db285638885ad1f7a73db48acee609fd4b8675968efb42767508d2e9e60d1b5b6db04a73d79dcd641e559661d3a6ec7e34ca15d3ad6514519a0cd76bec3357b3afd4272b0fe5969de574f11d0693bd191568595938a98edaf7ad878b34a1279ab25a434a2767a2356cf5d177b8b5fec1d174b164790d23fbd4591ef20bb94ce35c5f810d4739836ac093ad10eb003c2426a62125db57511e5b924c62b77cd7bf7eefcbda334e5e4891a7ef079e00c635796d073d7694a6e3bbdf92f340d27a0bd2cb303ccc67a1a0728dfddb2101bb32bfcc7466858d2f45a46bdfc21fbfe08bd7f823e89b8", 0xec}, {&(0x7f0000002e40)="39165c5dba86e5d47bba9fdcafdea737ad854683c9510bebb900f1d5fbc8d5452d45153a57d174763d5607003f5ce4449d3ed2aed3c1eab9f2635ba5457946112399af9c85288c7230b7ee3707ad09f09f926e9fc8c200534b2b6b906302923bc943bd2b8a95f9df1b04216ca95e0606ac6a3b9135cf5bc6cf9d72b89b5abc191c1cf2e26d181178e57fa8569255ba42f23a0d93510596e1f499df5cb3471ee209c35090cae25a6b1ec7a96a264ebadf969a8d93cbf7c3778c108d3fdc0c36f4320bf0735223c3059031ca124928ec2142fb2876f81080bd311d5c7264a2f7e7d5975e6171be134bffc739fd89f549697f8d1d1f218d23", 0xf7}, {&(0x7f0000003040)="82a701d9dc7ede3ab0b032f8bf30f3d659a23466bcf2e49ceef55711854228916479fca861f43a0bfd8d3d52453c8af9923072ec128c2fbe7f4a63e794e9a36a77d382d8aa7cc370914fb3a7a253c44478c939da4d6746453f3145f9dfed1922ac837b495e7a33f621e0849f0fa3e5659cd78463707f0e6509c873b9e2ac657e8da71ac8d979e1f4162af2d5a4142d2805616cc3c20ca74bba53b423cfed7d8cbd22326996a09b5958470119e8e38352d4b6adf961beb0808214c6451d58ad9077a8c3902d122fa86af6ce9c8919fd21a417d8cabcb1ccaabe3a85cbcee9", 0xde}], 0x4, &(0x7f0000003180)=[@op={0x10}, @iv={0x88, 0x117, 0x2, 0x76, "b4d5e42e97094865ec44a3603d78c4b719f540f3d9440f9cad96bfa153a4509cce23e3cf8d666c3b381d12be96a3a465277eaef0ae2cb17a8e8718efd670d515ce01bb691c139b69cec46be41fed6a3f0ab5de1072ef8ec558aa8df33b6c0c718f65161290b1e9d2d0a67732f13ac0928d4dbb6422d5"}], 0x98, 0x20008854}, {0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003300)="f0a19317b7", 0x5}, {&(0x7f0000003340)="dff7c3c3b6733932d2994c0ddf81789b3a6f0dcd71bb52b9b64ccbb0c8c8290f3a298b4e4ef4f772c88a2c921c881a6c6f3391d4a982f5102bea70c5850dec58f92fa40197c688b6236c98fb0c3e6df6ed0c32fb04c317bb17fd07b73d78cc15c23607ad84b2e6d75d436e03492ed1d38a7a4101a5ad7bd1e7490355918e3052dbef510725281a1b2be6892d3a5b2eaf2251ef3f0e2db68d2d54ea7cc019a55299abc6679b29bf43900b351fc68c6c8ab6ea7617eadf4378cd93952c756a3e9081bcd1460235a18a238811414f2185c14026744ecf2ce74bc94ed3eee1a24f4975059f5212952135e983de1bc719a858a218963d532863cde15728b3044f00597d420b85e10104d39b60ce9d83192b5c45b2385131342fb88c484d21f10d1982e3a05c5270d1f9cb7e6d66c1f0bca26d1fd6d6210ef0479bc364584f76eb1680d9aa6baee7681899b49012ee7376bb190a73bd2c1a869df98c393b99b6755a819156dbf667e8e205255707bc954eebbca4888fb23b77ed53e3ced3d41a5bbf82bc5c4ae779d79fb6917ad65111f6b10655a8205b9df6b098becee0415908b7d66921ad51628f3ab607a73f1c0c4be34929d44466c143c78468306dcf07f6ac6ff736b77916f756fc2c707d81090301b6184f07acf9d71a47e20bc98d82e5212a2d04ea448a29631a55c26fddef4dd75e37573e589247c023a3959088dced510627a03a9c07ea02e0381bf7eedd67a7b6c856817e1ac5d9d191288c2034c8cd94ae6019ce98e1a526447911078eb7314a6b87b991b5f63afa95d3f062119cce435b9999d273ac2934cda7cc1e36d247b47485c2b101ed59ba2dcb485d3126f79a10ce3773a054b96f92d8461a1b2f1095f19f244cb2baa19951f007cf85bf5d25e52fd7dea632eab6dd1061f05c34c82eb64e31f3696ee7caa1023f5c5efe4faa35faaab82226add40556caed80c7ffa4e39b1db114794a51b30e5e7d95d961a5803082c818a81b25c7d633b6fed8c936e938385c2792c93e4630c60f0f3a56dca569572cd414f3462e6b3903e8b195447b1d44f97240b6906e403f2ff7959f710afdbed981528a502fd9b45714487708f19eb8247c4b63cf74ce486c591cf729739a9d84b3bb4ffd5aa36adc42b98a0dba22afe9fa7f2d6e751767f2aadd00a6500ad9cc26d72c247e73efb77bbaf5705cf2d6ecfbd67a0a8cf65ad16d362bc4f67f0aa3b205c1f41afb69cc765c833c4d491f68a8d00c45b8e0fa382834b1f4354ef2941dab852007b7b2f88c282d7dfbbc51e5cfeeceae1b365fd7dc73b5a1d922fc185b82089c5bb4f0b3d31917591df326c53fbf1f390d41f08062db4891fbbe928499f77f70a8bacbf4cb8095052e0fe2bd4006fbfff49bab4d12bd5b86933320b134c6495ab81d81d706c140ab85c6c5f42385adb1140ead930c9f87fe65286ea688acf7bd37ad5d4b7bdadec9464e63801d49d6f3819ca9bb4dc1b86f3ea817ce1cd347903ff14f52705ad210797a46965ccd0332092430edc264e4b812a56739125d998331e4f55740813c38fd8e626c14e7facfb90ffbcba5cdc01d11968eded7fdb7b32683e5383815edf41b78fd24688cd7531da71c9d9443f1319d6617b74a4df651bec9e888f0597e1c7befdfa78b58a61af3f71ac3955a6b8916958ec492f8239b55e75596a9232829279bd3fe06b53c3568a41121dacab328285466c619f82eb211535b0baf73703a311f0b443e3b90d061b08a51b429a57a3505ee88f02abcd90f558b0782daeb11d4c42789201c90ea5cf87adfd5556b75a6307ee71bd159b208defc2d5a0c446b9a82da8320d3fdaacc962af224dc805ff9c8177c28386e9ec9b453a79417f8a1a877053e61e5118ec006015f8cc6377879d0a71baa4f13319d4227189e57a95fd5569ed97ac9ee08c37014ecece0f34736bc67e4be9e372aa96e6710141cd5b2bbc9ba0a293acd2b816ff03e54303e608eb8fdb0e0b88932f688845f571f51ac544c50113777bc6c6825bb9266f1ffcf2755bb057eb77c248ee3af967e8acbc87bed828a9b0c03af91b0b9c2cdd5e81fa9313f8504c7a95730d170887e5d06017147bd0f97263de6920b8b84406168a58823b428f0c45b978813a91679e1a6a13787eabd77bed8d8106f2c677b377cc533d1dd830c28b8ec9e4dac4df8edaf8969ccf5bda63a0a66f3f95f5e08a39d402a2c07737b9f43a665988bf672b9e1ae6edb8657822337623975026564f09d8cd5c8283a04aa40caab41dd0720cd72bd3f3fc5cba0570128404bd534b826550e8844fd2785718726b520bc8fc7cba939969a3c842d9492b8c7522ab5d2cc8c145bd298d6dd71ca0d1dd1c260992740b7dbd44f597ee3ea9256267546c33bd76352bb86636fd1faed515e7cfb14a229fd5d8ac1cfec798735348aaf54633fa7dc5e0acb598753c0293376e9f2d7bbc90397a756a811db1ac7ff4c6e05cc6f8fa46888fe075c8d77fbb07b937bdebe7ee39467ca3f8096df4f8ea3d63e71e56bbd37c64c7cb59a5a2ebf6506d68ba361a36007cfe338495d2190b06f8617ac16d7decf930fb5d4ec1cba4f040fd278ddce60357145af0b70a456f0ea3f1f183417b45c6476823ffd47b8c57c844050027251fc52485695959dc32520b35d8c4218edbe26e09cfa0a0a073c783041fd91ef9062c71dfa821c54bce012e06c472aa202ad1764bd9c325c6d1af9bfccca6e348b6011f9bbefff8b131e304e27d1a0ba8883eff9a9921488d57e3f149d6d9badbaf194002c5ed9bd5d654a69db07ea60bac56e7f6e24a430a49b9bc37039f162a61814f593557f429924b53e22161c57bc955836619b0e114f83abc6241d1be3f0b89a357f18f9e0206b0dfa6cde8da538506d49f7fdbb6d323d3955c93cade6aab950e789b84aebdf7927d3ab73c20bd5a08cd3abe1a08ef20138eee41eae881f9bdf2a35f3bb7f2746d445703a1e65f2145e61090ba3f9b700076321c6ba6c9e9e19db345a170db6e52df8bcbc1536432e7f5e710f8134ea6f7319a10c15abe5e37ccc1aa661fe03679b81d3de3ebc1b98d643bd3d2982ec48d7859a4df6997d88059988f4fe6cd16f7f5daf6a5743fcb49b16a4fbb9abccf125511b998ee0f94d4e9051abbb55d3abb3f83af37b23f1b7181972b3848fde19f51134854080faf6499b1400dd6b83ce506d90fc4e4c353eeff2675e629c135b854e6563cdf72c0befd7194c2e6437c5ca6f01fc816d9f761b0a077a064a3e9d67229d96dbeb2ffa1f59c37e33eff8e1919c9470190bf07612d83b49e27e62c86bff8e75765ab22b489eafc5a9a0db6106045e73c216111da33bb8adee6bfbbbc1b203ee1eb3cdbd54dff8e95a329c8e3f78498d83f132ea1bcf768e89d772bcbbb89b1d60763d1311b7a7cf3012e45af68ac6b7e4f37b78f232a107c31b4d08766efab1ad9ef18ddd864f2de27f72d688f69ecf65aaf6e2ff87d9853cb7324df4c0aeb1dca83f4efdf1ac3a997cd0eda482dd5eb27c9e202dea8a5cb5c3924cdbf4f6cce20c86b9d5139c8f084170f0fa61595f27422d125b0637475c4a867c8d1c38ff31daad4738abe266e975bb44aaac20061d567a1c05996a2ed403e377d968dc9da93c5e33774868e03864b08906432987f696b09d7a8e7e67afd78a93a502d685d3bf24056ca62dba8c7ca218068e15aacc32f00a61aa39bdd7f92487272b227957b3cfab532254b28d0fd709b52e91919457033a064bdcb3568d70d5e308b5f6732eaa83d2a488c07a68509990672b5e283516c9e6bc99485d22131c49daa97440048f5ba328255d87ea61224de6a91816a0b34feee791f22699807a3aa9bc583b034910be34e2f192f29c5f46b07cc3e720d6bfad6f012e6e83ec4307468ff20a975f1aed4891eb5ab92a2dcdaed23488fea45dfc9250c511f489477695af50f8a5cb32abe4fb36b42dba06da3c878f422d8e485edda79c11b666e096c646aee717a3c9ac56442584a8ae966f145b58c19af3774de9fcec70167ea59a3bc86a07f18df9398f8f5bd232a5db0036ff24d109fe14f8d3059057a0d727676cf1e3a2f83edfe17bf667220ebeeef72928a3e7f62aebb65b9d5bfdcbac3e2b52c56d7cc3522394c9ca0fa24e6f02727779ce0264a4bc5c0dee6b3edd31bc991fdca2b9db615f68968242e839841921a74d6c8b512233975cd513c982a623d551d5c7cce45d072fe7d0eb25c328bff38336404a6eee65df34c26bc805af5818e2cedd392433e876553e314053dee2cecdfe74e68610514d8f505507a8c2a09cc76080d27a8b82e34bc0334584cb113e146514fbee87caba856a38ede67baec688ee6337827c8c3a0a174019e2a40b637324f82a8537d1b437b2fae816f48a8a66e13d644753c98aea79042ee0077807f49af0ad3503e90071d6eba559af33f7383630fe7f5136bfdb3aee0512e482d387730f391d1543784baacb6b05869856d3c6d1df462aa1331e3bd5bfad54b28255dabb032c61ccb212317ae62de1150548fd4d8e266a116389c87be7e1f6374aaecaa9d5a9e5c309a154593b0dc0ab454321a41f5afc7556eb0e6222a08b5c5166e3691fd01e64520b9a277995980cc7a87aaa6ef4f2c00968f53dd4199e3fbf4341f61250ee1aa5109d9c54536f27bd78423e7876e1b37972ecd83f68ca108745e0762085ca7a69753ee7ccc6fe06bbfb6da01744fe45fe9c76fd2a8a45c25e434cd6830e4129fb3b3885c40526ab51f3662f8f8aa0241946220db41343c1395d9a693c09a5505bdbb08af9b7277d0eb64493957868afcdfca78b19605f8a6f7ec8785e8dc7af1367774ca56cf37a481a355a26dde6c19abc712e731a9bf6adb12c876bd3be778b300babeb3d53efee4abfe1ad90269b5b416e03ad8c08e24b046dcf568c3b63e4681a1f1bbf085da33b926ca21389c73fff097668fafbb7d56de6099b4a46b2d1f3470b2ecedfb7af16d35f2d71f3b22e1d1b3c76e8980b8341767c0f13b14ecef8d3331b05d5385f9ce6fad174af57b0285286d5d86d91cf0be4cd8f9aa9780f4e85b55be68b9f615c0dac5b7e8df9613a6163aaf585f18af23bb70f05a9de7ac1083f02dae25da42c2086fab7f6b87e396d79d8a3e8f4794f684db6a0dbedb46a9b29b576b4df8999dd6de4c88b899c1b0ef60fc4c9659273ca3f821d43223438349571950e26125ee200fbda1902ba2aa7902e4a7857ee6d1260e05eae9bf84db75a4467a4265c8eef91cfbf9c48620434398cf2b65ae4883b6d17b179270c322c145d5cbfff1b82356c4ea8c2fa3f1e571f320041dce4174acc8ab7560113e9ca757cef92528b9c3ec650c5ec7ad10cc806b98281610c89d2d78c8e3da5c55f97026958fd9d54818e04a27a2414d79773ba15113d1fe62945bca4b737b9f905828e939584b2d4f0b004288c10ff641eb1a756e742dd0544c62c7d79e2e005fc62daf943014d9a049da9ac01c6b3466fffdd58a11aa2a1e52333d6e9d19cc81cd5c1cc48caa56cbb8de1c39754555fa042db927f873b256a10fef3ae43f5feda02dbbc0ecb8561ff14e284816341bfab355f20b7576d695e34660e3d04153df2b06b9654f5c94a549ca2ea8083c8e11b5a6b6d8829dd83f7f82c9a7510f824128f2df1b370c410291cd0e57f614723b4bd4674bde62f7ee3fa94f91657d661b66afc8c257b89f61a7171a97178f0be84173e8f18e53f04b724aa9a0e3c77aadcb8b3440c726faccb6a8067b32a99e63363458f713a49a1c150e490dd", 0x1000}, {&(0x7f0000004340)="f2b78f7a1d6ee05a7995e7cf2d7f76b9027cea898f4d5920bbf94b4e6e3fe1f2ac29df76369ef1f4d9a4f39d702c10fd2038d8c2914e858e1180adbd5d4f95ac19a31ae22dd9793e88e0f5a7864082c41ba2ab9a39d99ab151881d7b6c1064a4e5569ec11d1ee89832176b7c80a7a530603eadd0420055789cb723e8", 0x7c}, {&(0x7f00000044c0)="8746aa36401eecae8a6155b0a98c6c7582568dac8504fb242d5e5e94e55f60aca1923a37f0d18f9a5915466325aee2a64c02a542d954a4b7e0", 0x39}], 0x4, &(0x7f0000004540)=[@op={0x10}, @op={0x10}, @iv={0x3c, 0x117, 0x2, 0x2a, "a79465eb961cced87557d78f695d8d1d8760578a371cfe86160dc4adbd407b024cbded1f516b6241b5b7"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xd4, 0x117, 0x2, 0xc1, "f23472295504b175dcee3ccec7be93ab65d2541fed8d98e14de4cf12c238c61fe4697b2e7bb10c0c07f816bf778014b81e029228feea8959bb7d887ef03ac66b28b5e42a3ad392d09e0e0b45f06d6917ef911717ed1777c20711bf5be5901a091c584db293eda76ef7efd5674476e54718e4ac75fd25d3dab2136b08d0645701a60107eaee19e3af4ed59b00a83a386b14b12b56f83c033133c58d780c6a83ada41fe96e5f21ac3503e223f6effed251fc0511705ecdda6bfcc93e561eabd9c303"}, @op={0x10}], 0x150, 0x4880}, {0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000046c0)="06ae13b817b970a61c7f2e6e2a2bedf16cfb2d89d63df1e4f72af57800703b845b37abe77a60e7ed2b418c5269d2a7c46e4c8389249da3140b682742adb9abffc31219f853e9b2a648a428a85735b8343d61820c521dbcda3ccdf62b441a2c17a38b743bf9e7bbe8469d895563f6d3683c500129d9d90e7453afec2e7204ec15f2562c5f2caf6779f9bfe241116c937c0185c2d4a892f68efad92412c32bcd3f0acfeef84e7f590a3be1beb67cb4fc0b4fa7666e6beccdbede08fa5d1ad48f98fb7ace71b6af03d3d81b03dff4f07c9cbcf7e15d3ac1fcebe5329c71af", 0xdd}, {&(0x7f00000047c0)="a7bd73716684455f438193f8ad857711255d5afe375c646e9c3e717d1741db991df1d280531ec9d73c38df7edf98fcb4af96486cce5e1d9555fe257b71cf6ec74611b20e4693f80ad399", 0x4a}, {&(0x7f0000004840)="6da90d5e7fedd68e0fc5d284470f64c8c1aa362dccdaa11084f42d4b2766ae59bb7e59bd038d1c4411d7d2f8b3076a5d0f9f9e672daedacf1910f14c6523fbddb9f71a54715333cfa44c8d3c668a16ed4543b8384e133af0f8bd78ef822a9e3b7f0ce52cb2ceac74e5ce6a0b22becdca6b2811057f76fc9a13bbab732414f8a594cadc4a4fbf5b62656eea2252ced52e3ebc0ecaab8cf6887408250b909be70589cc7f6d63bf4456fec7e8804d1928b3cea29007c5c846b43c68fdf2d021b6555ee37ee5a766ada9d199f78b9a7ad0fcdeb93c9f9e6ac482e40083570b9e93294d45bebd13e0d152a51bcee9ac97ac584a95c5f306b4f4469162de0b998de46c8e57df7a14f4f1cff9f73a644400c4d56e741ab9d255f489531f97ce7f08c393dcda9fe47fc19ad60361cd602874c5731d998507d0bca5d6b5b7f351272131954b010c9994b68517c1fe071b42dd246c183e52510058ce93b69278cec8b9f4e89409b205bbd737d7930cc8e116c4d857e77ecff846aa2195278c160e34cb1602829f6672878cc81a57edf7796a505813d1ab6d67bf8bb8421d4db587aba732cc02a6f85ecbd565d096e95cd5f8bf0decf19ebed59ac3ecf4be77c1a8628e2b95464ba315c99970d9aacb63d717e2e5e2229eed4ed4a0b42d02dcd4d84951f785f8e908e3050cd5b150a3df8b5169b867b9e541398b8497805679f4eaec8c8b9cd4e651bdd463efb6437d4711a80a3c7914d9fe9dee855a7615583bbcf83cad4a4c7f9a7814d18d51edc1bcd63ffd20046f75f790b7ff15b99fdb9d063fa7535d6fd1491b503d8a04f34a0cf276a392010412471e4ba3fd1810ccd2a105d67b9115269dd23ed6e7dd588817c0de2d81b593cb367edf5ce7bbccc158f048c51e94d6413cd28662ef326df985c9169e2925a220079321615ce22a483a5c9c652d120aeb00debbf25a5d8faa8a1c12c2947710bade467205c55e8e0fd8de0096fb8cf8d7cb71a44637d2c22883e467305996bd5850238cc5348394563e88ec108779acfee83c0d2f02199cedfe26a71f7f354207b4b370fc944aba75ae7026396e42333853a4f9d0db95483ff94104153f5a3f65ee17851b182b1e417017335e5f9b5c93bea6039c2f2c0f0ce4d536c9398c03891e38e3d95471517019c774d2276d492e320b718852bad56dc4499debff9ef235c44fcf45831c66d156a57f5b0f2158e38d5c123d73f6104a3116a1caabe90630e07027335f3afcef5796c9a1c15d8f32b0b6407a32eb1c992181640d383b2e5b490c8f2b38a4e9604bacea48347426aeb99b4aa6781de032647d3ac0d146515d3d0037898511ef077953d506ab2981c2bf9a1ea9dd596b57f0efa3d9eee20bc7cf111bc5dc5f5fd837b7af7d33db3623cad7b054e08b718bcfa8d8452359251a66a7c7c67220675274a9ced9eb81dc3b667f89d6cc2b33164aa72f342660e1f20eed68e6c49a0c09e75cd02faa86a5e27ab8b1f5f4c3f6821987fa1841823949e19247b7ca3208e3e52d272d4e32760c6d2444b88aa41430fc6b312c3ae0528b67be900809a833c958b1d52988d48444f299b3bffbc79aade3feb0bbd424fa57817be26db3884f4c0629534f14f768a1a9f541b5844cfbb9c69694e9a630d387c367b65534d2c6ba9f6129b86aa80c7776994a1a2f2ceff652c14f7d4939866ecd053f47bf88eab2d36953b652e76dee307cd61e67de9a06c8578057bb3ef5b7419ff60665a91ac44738b4c16dc423479a56730af84959e4a14d56d8a3d5fb3db7ec380c360ad3ace86b0e06582e4425f82199222301cbf16e876b6251fc3cbb81d8854e355b3a0cf54b3e2bc01e38ac63b234a0b886c38fed4f8c2ac568def506077ee5798819350a05978191ee802186efc24ad1661f07098c4da66390392abfdd20d9024419c3a122a59f6f6d19a62f618e6c9e51e72d0b5cc71583c739725b78b4cbea1a080bc5165d105630b7b9fe84181299c39533223df38cdb188087d98cce9527d6bd15813a69bb56f05e069335f00810093f8b043d4c28565dddd1c746dece3796fe459bd21d5f9fa21d13cbdf42b23dcfd31bc97534fe9f59174d5e58af355864cef19d91f941b54b70a56e821a29f182423c46ac45edfd9b206c542a82acafe2aaa4908c968b4dc984b5d90192b12a173c3729232ce04ca98b822630ab1f3413094445448d168cd2befb55a08162a7a0b22afc98242c0dcbe608bd7e7810ff185ffa479dcdc005fb8ca9cdb65b5e70eb14e9dee24bbbdbb608e6c94db5346a38b994b0d866392840cb9faa48b4ed05365b646bd056cbff5060279397475206ab5acf89dc8b719b28a9b42a0d6da98fe19c2192bf2e9e92907a984c463be244a2a67a60496b41bf5124eeab1e4559393b06b980b267a39ba97bc6c4233df9b143d2973cd966d5fddaa1d06b7a05da95d144e1434c8df1839afa9e8fad4cf63b8c1cda451cc449f608fac143a00d3482541d9488317aa07288d2340d24d74efbb73ce29d6f65af95091397069e44b2d89ed8fd66e00adfc4d33851bb1849523a14c910a17dd97fc7ba98bbfefc4e12fdce1ad29cc69b4955828a009b4ca6e70cc265fa63b15a91f13113815e3189705a58fc00489d7670950138439505c392684497fc55ece9a3e920db01076370d936352a271b1c3bb73564fb4d773097e948404350afa9fc17e937fcc3d9c83800d9ca3a481f160650da791eb0bba8f2e731a916a6272a41bf8c12b200870e900d4964a9b007aeefced2f87ce4cbccf8479e53ffa7db2551d611b450ab285290dc4b9970def403eee99c374dfd481f46f0f49edc09f7a15ce4223a53f922a7bfe6b9d0bf3e1738a9a061778fd44d1135340a3f699ecef2ecd191d18e6569fd2de7573b42401fea98bb0d72dbdadde56c7b48d7e374cf833faa82e1e70331feca87220d309385d57b79d8df08f613ae32a776cbc0b86396075094c527f882b57697694efeaba7a89e572d119e67abe0de385305fd8d8dde29c33a1ab7114528b7eea9a47cc11f82cc364d75a20131b283a4ec407a6f6ba933c789f45f51eef9923f8afb6b3fe9d4d509e3d040ba4252d9371838c582e6ecd60c4c6622eb66170663d24692f48973e61c7595f87b4e3d43fb4502f95a886de7170f9e97262d80b9fd7ef9b86a7832f0512672dce44370a59687a668faba7f758a1246eb780ab6c9d5d191bf6fc92540ee759dd3a03f5e890489604b2087837a68f286653bf2926b6f7011f8e9503696887a0c975389a7f7df2b2ad37f1a85bf9596af434654e3bf014d8cb827c05c75c3447c8076b17df405143ee875af4a1e7281d2a04b9621e2b5fb945f49e9dd377ad866fa341d5a04724fa6319c1a0c58336140a8a405ef92b7d72b02636d98beed96726c722a8e7af10273b51e3ef80194f0e531a1fe80c580730712173506f2884913f4fb9e94e09e02eff6cef14465c73bf6519eebccc3339015390d205c5d6c0d85a9b7f129a96fa86a42e8e17216d03c519600dfbe167930702a1477c3251c7c0aec0f56c569023ec14a68147549da892235b6ac7b707f61c2ef8811c1d04f0331f6a720fd9dfa7ee838e79a0be5cd01279d5bafcf6bd269331052ce77524d616e6a3107eada09c36fb9d40ea20ca73dcbb8bfa5198342789c09c783096f5bcde3ac8c669ad4b49f2a95b0c81c4198fe9875a21e7064aed6d47c00ae59eb80e911a6ee5dcc55ecf464332e3bd6afc84b67cc64324b425cae92e65086b3c765a63c1a868a716bda8ebaa0d1e7ad4240cf7e769d70f4159cff33063af3ba71d974f8dc454f31273c4c34bf75ae3d57864e710c77b1142c4aed009b9d768f9c93d8d95dfc7ec90416388da2c7ec491f9787c597eedfa8185213242c626aada86445df53c8b3626303baabe095bdab8bae10db5cda09e904f4fea901343cea7f2cabc9dd780885b289b82644d574e8cd1db6251d5cbe2760704011ddc15a81285a62f9a2ec98f2cab1d5628d98c0b68e61ecf89597b1c1e859037bda3206fff3331a19affb304bb00be8e197c347f89381a1b95bb7422f70a5455f995fd5080ab635d138b401a775ed0e21f4038328c2dd064e4d9981c83bc5feed4d8464d15f2ad5e3ba550b292a6d87811101d645485e14e9826f6a4a73b86646e2602d5c7086bd4ff5271a65fa29dae7a8b685122cf3ac1543736632e622d0ac7da953e5b830ed49a52ad1b5877bf01f9cb6a9cfc3fdd3817e63ec1080dc423af0105fab37b60af337c17d5a9a1ac5c8426b5b6b4299497780524878e2d60bccc2169cb033d5c205d7fa6fe98806e4f477f378a2b1ba23fc67c844cbb9439ff2346531d155dba25fdd0e86689608da83f9be34715165acf8fa82aaaf6bfb22ff77055ce5d20a6bd808eb5c1ac4261b4de4efa750da7d564fcf5b76a0cb11cdd869a884184897b298607cb4e02aee8e7e47346abad50bddd32de7846d7ade201e74c37ad575234b717f54835cd2ff34b7c25c2671799cf58da3606e8f6ca2099049940a45a01642c176e80a3efe13e2fcf6ab7c6ff56e1f33f213987f13d0fd57e7560f709315055304a03fbb1fdb8604dbb87f02ae0397b9add8751411350dd76f236971346a3aee0808d457eb0f96e20cd7bda1ec06348190a8b592f6994dcb033625cd44b79126bdd0836fb42f0aca427054f4368246cf7c880f9b3476077f91ee8214358a9480f9e69249e2f1d041b920ae5169dca0394ebdb79ebaaa2d06e6636cddd69744ffc0ade40eb326a7039535b0e794e2e6c7b311d5610fc2cf1c8120d9267d854633c7d7e0292a833712adde905235febccff41fa415506bff6b40a2b59215380580c0c6da4f1f4f41aeb735790936621ce00930166cb5d57a0fe9c95c1aa593b6a489d3ac1e9b5584a053918d9ec742cf9d79b8177ae444737c5bccb487262b4057e8f3bb0e6c22f2f25b6b7fd14e9a6452ec85697b801dc8d488408adf2d83e6520eb801a08198b61fd84668b2cf4954bc5e7252480f525579433a342d28a95529a8ab0db0bcd181f681894952c0f1ccd4992303699185db877396560c2423cbecf94e3d96172495a4363bbd4612090b12e4e5f71325242cc15119cce50773d0d7facb1752b97f736f7141ceae76200ec5510926c7e4bef2691932e5e4bc57e8bec223fb5e68f3b7470ffac38ae0a082aefc0ca3996cc9756b77deafe52dd75e9ade7b873a1d2beef829741307f7c13100026b76454a414fb9b4141a4c14a23a24cc664bda92d0235ffe90193797fbe385ff0073772f682ded49d8a9d53579da2f1a2d99416972c2bab1c6878a9303fe6d3f6c6035ec8d4166b6d640f5f49a0be4a770e13b7ab5d58a30aeb1037c221189b37d486e438b2800b3e38b09c8110acaa569b0515bf24e4c24bfa9299b47dc473d412b2180ba29694d91fadc68c644d075d8df22441889b640f3980410bcdc78c46f624fcb25fb05c7a0adf2b04cf8131bb93de223bc0738980fbab8ec3cf46180b05e0eeb074b77a6970e13660846cb96d578dbf6ef8935da6d261b6703276446d1bf2fd46f724936920ef81475217c948f55858b3d0b2f8c263018c2cd11ad57961a42e44b31d45c9552ea9e3cc1f1aee679296cf144e4ee64fbaf2ffb6aee36a2c75a9d62eda580d8b696bcde2eab5ddf2a9efb677bdacbd92aded4f249cf4fbe43e9ac69dd025c67589dc29984be3319bc80852e3cf89b30e07757117b1414bddc9611f5c5be548dc8569732c69b5d5f9ce3c3c72c7c914182534b98af83", 0x1000}, {&(0x7f0000005840)="9596ce6eaa19d847cf54dc9fc53bf84f984372ac84d4cd634876cd183156de5460400dec11f6cad2c688f60eeb31c610e4e88245d44b2f537d3b040957866e014c3478354a73cd3ce36141669d0d8e601ae06dfecd00efeacf0432dddfef993e0961d277fccb317a4a3f32ef21b38467d6536913a984f3d82002208805618ca37aaab8fe5d48580b378c93a50b796fe8d4c158baa3162a44c90aac0113fad4ae5ee85e5b5e16d349b80717b92c1231002f4d54a9fd9f436297373f8c2bb70079966871d2f3b97bbf57b6338d284bd7f961149b620777706e505ef39a862aa95f06c2d4e7", 0xe4}], 0x4, &(0x7f0000005980)=[@assoc={0x10, 0x117, 0x4, 0x80000000}, @op={0x10}], 0x20, 0x40000}], 0x4, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5452, &(0x7f0000000180)) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 4.129018772s ago: executing program 2 (id=5724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030601020000000000000000000000040900020073797a30000000000900020073797a3200000000050001000700000005000100070000001d00020073797a3000000000"], 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00.'], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008000) 3.688213804s ago: executing program 4 (id=5725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030601020000000000000000000000040900020073797a30000000000900020073797a3200000000050001000700000005000100070000001d00020073797a3000000000"], 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00.'], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008000) 3.333069914s ago: executing program 0 (id=5726): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x14, 0x0, &(0x7f0000000500)="d0c0a833fcfb0085a881548182bb1ca4b0ffa260", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000100)='iy', 0x0}, 0xffffff38) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "20d18300", "fcffffff", ["000000008000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf250200000008000100030000002437e29f3ba708d3bc"], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fba6f}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000d53f38fb17a832715b9dfa12a301", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25010000000800010002000000080002000200000008000200020000000800020002000000080002000200000008000100030000000800010002000000080001000300000008000100030000000800010001000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) dup2(r4, r4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 3.043595502s ago: executing program 5 (id=5727): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x404303) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000003c0), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair(0x21, 0x2, 0x9, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x3, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x2}, 0xfe, 0x2}, {0x2, 0x1, {0x1, 0x16f52359394fa1ec, 0x3}, {0x2, 0xf0, 0x3}, 0xff, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0xfe}, {0x2, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x1, 0x4}, 0xfd, 0xff}, {0x2, 0x2, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x2}, 0x1, 0xff}, {0x1, 0x2, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0xfd, 0x1}], 0xa8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000010c0)=[0x57a9, 0x4, 0x6a, 0x81, 0x4, 0x7f, 0x101, 0x8]) 2.835535905s ago: executing program 5 (id=5728): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xb9a, 0x20041) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000009c0)={0x1}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090020001600"/18, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.330297109s ago: executing program 0 (id=5729): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001400350076657468305f746f5f6272696467650010913fa1e69a653c49c8ca86713fd3768d2b94e2a4ce5ff7e0d4cddb1b723d741ec5ab4383d3f3c53dc74a7171b242d8a2a51ea6d65b4a0b9c1d05c3677e1d5c769608c1b93ed3cc262b91fcf9a40b9bc31e85f6f91aa93dddbe7672d69ab7b81872ebddaabfecb1b88728e0ce08526f59badd3a193c4b4d64ca963fe9a1508b1462be5b9666d1d3521e2f2cdcb1ae7fb80bb43d6e0c7a5958f58378dcfa8d66f456a5286a38e4a007b0c39186c393fa665b4a9eb4539d1282cc1a3c7b6fb0aec30118126acdfb99d77b51ba91b27fe3bd301b376ab0aaf5b84859ad0b0b2305d5bf"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.574478285s ago: executing program 2 (id=5730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030601020000000000000000000000040900020073797a30000000000900020073797a3200000000050001000700000005000100070000001d00020073797a3000000000"], 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00.'], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008000) 1.440935244s ago: executing program 5 (id=5731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000680)="b571e4924900", 0x6}], 0x1, 0x2ffffc, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0xffffffffffffff6e, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 1.013467448s ago: executing program 4 (id=5732): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 551.813µs ago: executing program 2 (id=5733): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=5734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030601020000000000000000000000040900020073797a30000000000900020073797a3200000000050001000700000005000100070000001d00020073797a3000000000"], 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00.'], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008000) kernel console output (not intermixed with test programs): y0): making interface the new active one [ 1343.183406][T29908] dummy0: entered promiscuous mode [ 1343.186188][T29908] dummy0: entered allmulticast mode [ 1343.188632][T29908] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 1343.265823][T29915] overlay: ./cgroup.cpu/cgroup.procs is not a directory [ 1343.520454][T17249] usb 9-1: USB disconnect, device number 10 [ 1343.593421][T29902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1343.798091][T29917] netlink: 'syz.0.5279': attribute type 10 has an invalid length. [ 1346.953347][T29953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.525120][T29962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.369521][ T857] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1348.549143][ T857] usb 9-1: Using ep0 maxpacket: 32 [ 1348.575243][ T857] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.615602][ T857] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.683773][ T857] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1348.707597][ T857] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1348.781066][ T857] usb 9-1: Product: syz [ 1348.807064][ T857] usb 9-1: Manufacturer: syz [ 1348.833414][ T857] usb 9-1: SerialNumber: syz [ 1349.071413][ T857] usb 9-1: config 0 descriptor?? [ 1349.077908][T29976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.648677][T29979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5295'. [ 1350.945973][ T857] usb 9-1: USB disconnect, device number 11 [ 1351.059504][T29982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5295'. [ 1351.079308][T29982] nbd: device at index 64 is going down [ 1351.682866][T30010] input: syz1 as /devices/virtual/input/input54 [ 1351.897321][T30013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5300'. [ 1351.904315][T30013] netlink: 'syz.4.5300': attribute type 7 has an invalid length. [ 1351.907570][T30013] netlink: 'syz.4.5300': attribute type 8 has an invalid length. [ 1351.910746][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5300'. [ 1351.917375][T30013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5300'. [ 1355.187940][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5312'. [ 1355.197006][T30058] openvswitch: netlink: Flow actions attr not present in new flow. [ 1355.245732][T30060] netlink: 'syz.5.5313': attribute type 1 has an invalid length. [ 1355.315250][T30060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1355.407356][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5313'. [ 1355.425328][T30060] bond2: entered promiscuous mode [ 1355.428613][T30060] bond2: entered allmulticast mode [ 1355.454241][T30060] bond2: (slave dummy0): making interface the new active one [ 1355.460633][T30060] dummy0: entered promiscuous mode [ 1355.462413][T30060] dummy0: entered allmulticast mode [ 1355.465690][T30060] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1358.064165][ T40] audit: type=1804 audit(2000000399.999:4698): pid=30096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5320" name="/newroot/34/file0" dev="tmpfs" ino=204 res=1 errno=0 [ 1359.047135][T30100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1359.059103][T29910] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1359.218883][T29910] usb 5-1: Using ep0 maxpacket: 32 [ 1359.229885][T29910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1359.243693][T29910] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1359.247963][T29910] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1359.251835][T29910] usb 5-1: Product: syz [ 1359.253730][T29910] usb 5-1: Manufacturer: syz [ 1359.255786][T29910] usb 5-1: SerialNumber: syz [ 1359.282082][T29910] usb 5-1: config 0 descriptor?? [ 1359.291207][T30098] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1359.311372][T29910] hub 5-1:0.0: bad descriptor, ignoring hub [ 1359.315541][T29910] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1359.680768][ T1348] usb 5-1: USB disconnect, device number 122 [ 1360.179232][ T1348] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1360.338836][ T1348] usb 5-1: Using ep0 maxpacket: 32 [ 1360.343796][ T1348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1360.349653][ T1348] usb 5-1: string descriptor 0 read error: -22 [ 1360.353015][ T1348] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1360.355928][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1360.362847][ T1348] usb 5-1: config 0 descriptor?? [ 1360.376283][T30098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1360.399103][ T1348] hub 5-1:0.0: bad descriptor, ignoring hub [ 1360.417306][ T1348] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1361.279228][ T857] usb 5-1: USB disconnect, device number 123 [ 1364.364570][ T857] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1364.788822][ T857] usb 5-1: Using ep0 maxpacket: 32 [ 1365.279473][ T857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1366.015129][ T857] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1366.193750][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.470781][ T857] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1366.474228][ T857] usb 5-1: config 14 has no interface number 0 [ 1366.476872][ T857] usb 5-1: config 14 has no interface number 1 [ 1366.480419][ T857] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1366.484831][ T857] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1366.488541][ T857] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1366.492216][ T857] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1366.496070][ T857] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1366.500244][ T857] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1366.505485][ T857] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1366.508439][ T857] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1366.516921][ T857] usb 5-1: string descriptor 0 read error: -71 [ 1366.523772][ T857] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1366.531812][ T857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.544199][ T857] usb 5-1: can't set config #14, error -71 [ 1366.552176][ T857] usb 5-1: USB disconnect, device number 124 [ 1367.293912][T30191] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 1367.469047][T10325] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1367.515666][T30201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1367.658888][T10325] usb 10-1: Using ep0 maxpacket: 32 [ 1368.071043][T30200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1368.450188][T10325] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.450390][T10325] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1368.453688][T10325] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1368.453784][T10325] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1368.453844][T10325] usb 10-1: Product: syz [ 1368.453906][T10325] usb 10-1: Manufacturer: syz [ 1368.453916][T10325] usb 10-1: SerialNumber: syz [ 1368.724643][T10325] usb 10-1: config 0 descriptor?? [ 1368.944636][T30191] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1368.947828][T30201] bond17: entered promiscuous mode [ 1368.947843][T30201] bond17: entered allmulticast mode [ 1369.901501][T30203] bond16: (slave dummy0): Releasing active interface [ 1369.915179][T30203] dummy0: left promiscuous mode [ 1369.918473][T30203] dummy0: left allmulticast mode [ 1369.921823][T24603] usb 10-1: USB disconnect, device number 41 [ 1369.963173][T30203] bond17: (slave dummy0): making interface the new active one [ 1369.965893][T30203] dummy0: entered promiscuous mode [ 1369.967619][T30203] dummy0: entered allmulticast mode [ 1369.973924][T30203] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 1370.109703][T30206] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1370.168929][T30208] Process accounting resumed [ 1371.109854][T30214] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1371.146636][T30216] Process accounting resumed [ 1371.303976][ T40] audit: type=1326 audit(2000000413.269:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.330532][ T40] audit: type=1326 audit(2000000413.269:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.357478][ T40] audit: type=1326 audit(2000000413.289:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.378819][ T40] audit: type=1326 audit(2000000413.329:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.398951][ T40] audit: type=1326 audit(2000000413.329:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.419879][ T40] audit: type=1326 audit(2000000413.389:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.432846][ T40] audit: type=1326 audit(2000000413.389:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.448806][ T40] audit: type=1326 audit(2000000413.389:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.468821][ T40] audit: type=1326 audit(2000000413.399:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.481976][ T40] audit: type=1326 audit(2000000413.399:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.0.5348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1371.580906][T30235] netlink: 'syz.0.5348': attribute type 1 has an invalid length. [ 1371.600539][T30235] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1371.704897][T30238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1371.708671][T30238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1371.716505][T30238] bridge0: entered promiscuous mode [ 1371.725478][T30238] ip6gretap0: entered promiscuous mode [ 1371.729187][T30238] debugfs: 'hsr1' already exists in 'hsr' [ 1371.731285][T30238] Cannot create hsr debugfs directory [ 1371.752851][T30238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1373.159997][T29910] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1373.329207][T29910] usb 9-1: Using ep0 maxpacket: 32 [ 1373.342923][T29910] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1373.352787][T29910] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1373.364541][T29910] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1373.378047][T29910] usb 9-1: config 14 has no interface number 0 [ 1373.387826][T29910] usb 9-1: config 14 has no interface number 1 [ 1373.395917][T29910] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1373.412822][T29910] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1373.430369][T29910] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1373.446656][T29910] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1373.464604][T29910] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1373.479440][T29910] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1373.501106][T29910] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1373.512784][T29910] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1373.544850][T29910] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1373.554747][T29910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.564393][T29910] usb 9-1: Product: syz [ 1373.565836][T29910] usb 9-1: Manufacturer: syz [ 1373.567417][T29910] usb 9-1: SerialNumber: syz [ 1374.290032][T29910] legousbtower 9-1:14.57: interrupt endpoints not found [ 1374.985766][T29910] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1374.993437][T29910] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1375.270827][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5365'. [ 1375.277695][T30308] syz.5.5365(30308): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1375.854062][T30322] loop2: detected capacity change from 0 to 7 [ 1375.948982][T10325] usb 9-1: USB disconnect, device number 12 [ 1376.166537][T10325] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 1376.500913][T30322] Dev loop2: unable to read RDB block 7 [ 1376.502731][T30322] loop2: AHDI p1 p2 p3 [ 1376.504538][T30322] loop2: partition table partially beyond EOD, truncated [ 1376.507333][T30322] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1376.510640][T30322] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1377.089137][T24603] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1377.268807][T24603] usb 9-1: Using ep0 maxpacket: 32 [ 1377.380955][T24603] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.990330][T30343] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1378.006924][T30346] Process accounting resumed [ 1379.033397][T24603] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.241054][T30367] netlink: 'syz.5.5377': attribute type 1 has an invalid length. [ 1379.339964][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5377'. [ 1379.401568][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5377'. [ 1379.473153][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 1379.473167][ T40] audit: type=1326 audit(2000000421.439:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.0.5378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1379.494660][ T40] audit: type=1326 audit(2000000421.439:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.0.5378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1379.515607][ T40] audit: type=1326 audit(2000000421.439:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.0.5378" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1379.532934][ T40] audit: type=1326 audit(2000000421.439:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.0.5378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1379.540002][ T40] audit: type=1326 audit(2000000421.439:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.0.5378" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1379.803747][T24603] usb 9-1: string descriptor 0 read error: -71 [ 1379.806388][T24603] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1379.810941][T24603] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1379.816203][T24603] usb 9-1: config 0 descriptor?? [ 1379.818775][T24603] usb 9-1: can't set config #0, error -71 [ 1379.822401][T24603] usb 9-1: USB disconnect, device number 13 [ 1380.273375][T24603] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1380.428819][T24603] usb 9-1: Using ep0 maxpacket: 32 [ 1380.433160][T24603] usb 9-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1380.437365][T24603] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1380.452933][T24603] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1380.460113][T24603] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1380.468565][T24603] usb 9-1: Product: syz [ 1380.470460][T24603] usb 9-1: Manufacturer: syz [ 1380.476886][T24603] usb 9-1: SerialNumber: syz [ 1380.488285][T24603] usb 9-1: config 0 descriptor?? [ 1380.492471][T24603] hub 9-1:0.0: bad descriptor, ignoring hub [ 1380.496877][T24603] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1380.576403][T28935] block nbd0: Receive control failed (result -32) [ 1380.799097][T24603] usb 9-1: USB disconnect, device number 14 [ 1380.828649][T30390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1381.148959][T24603] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1381.311017][T24603] usb 9-1: Using ep0 maxpacket: 32 [ 1381.340729][T24603] usb 9-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1381.361388][T24603] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.428052][T24603] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1381.448458][T24603] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1381.465864][T24603] usb 9-1: Product: syz [ 1381.477718][T24603] usb 9-1: Manufacturer: syz [ 1381.487016][T24603] usb 9-1: SerialNumber: syz [ 1381.550147][T24603] usb 9-1: config 0 descriptor?? [ 1381.641165][T24603] hub 9-1:0.0: bad descriptor, ignoring hub [ 1381.655313][T24603] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1381.870094][T30396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1381.873524][T30396] netlink: 'syz.0.5384': attribute type 7 has an invalid length. [ 1381.878817][T30396] netlink: 'syz.0.5384': attribute type 8 has an invalid length. [ 1381.883166][T30396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1381.889062][T30396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1382.562434][T30410] netlink: 'syz.5.5387': attribute type 1 has an invalid length. [ 1382.604883][T30410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1382.643645][T30410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5387'. [ 1382.655933][T30410] bond3: entered promiscuous mode [ 1382.657504][T30410] bond3: entered allmulticast mode [ 1382.678571][T30410] bond2: (slave dummy0): Releasing active interface [ 1382.683962][T30410] dummy0: left promiscuous mode [ 1382.685674][T30410] dummy0: left allmulticast mode [ 1382.694796][T30410] bond3: (slave dummy0): making interface the new active one [ 1382.697068][T30410] dummy0: entered promiscuous mode [ 1382.699384][T30410] dummy0: entered allmulticast mode [ 1382.702204][T30410] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1383.229433][ T1474] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1383.277325][ T40] audit: type=1326 audit(2000000425.229:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30420 comm="syz.0.5389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1383.399832][ T1474] usb 10-1: Using ep0 maxpacket: 32 [ 1383.426041][ T1474] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.432104][ T1474] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1383.447426][ T1474] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1383.452361][ T1474] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1383.455866][ T1474] usb 10-1: Product: syz [ 1383.457713][ T1474] usb 10-1: Manufacturer: syz [ 1383.460044][ T1474] usb 10-1: SerialNumber: syz [ 1383.469841][T24603] usb 9-1: USB disconnect, device number 15 [ 1383.527507][ T1474] usb 10-1: config 0 descriptor?? [ 1383.661997][ T40] audit: type=1326 audit(2000000425.629:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30420 comm="syz.0.5389" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1383.682436][ T40] audit: type=1326 audit(2000000425.649:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30420 comm="syz.0.5389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1383.706359][ T40] audit: type=1326 audit(2000000425.659:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30420 comm="syz.0.5389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1384.109756][ T40] audit: type=1326 audit(2000000426.029:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30420 comm="syz.0.5389" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1385.132905][T25666] usb 10-1: USB disconnect, device number 42 [ 1385.422508][T30397] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1385.893912][T30437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.882594][T30445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1386.886413][T30445] netlink: 'syz.5.5394': attribute type 7 has an invalid length. [ 1386.892129][T30445] netlink: 'syz.5.5394': attribute type 8 has an invalid length. [ 1386.895445][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1386.903126][T30445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1386.916413][T30449] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 1386.953571][T30451] netlink: 'syz.5.5396': attribute type 1 has an invalid length. [ 1386.975130][T30451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1387.013530][T30451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5396'. [ 1387.028421][T30451] bond4: entered promiscuous mode [ 1387.030880][T30451] bond4: entered allmulticast mode [ 1387.037986][T30451] bond3: (slave dummy0): Releasing active interface [ 1387.041775][T30451] dummy0: left promiscuous mode [ 1387.044442][T30451] dummy0: left allmulticast mode [ 1387.052882][T30451] bond4: (slave dummy0): making interface the new active one [ 1387.056130][T30451] dummy0: entered promiscuous mode [ 1387.058551][T30451] dummy0: entered allmulticast mode [ 1387.062508][T30451] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1388.009472][T25666] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1388.168983][T25666] usb 9-1: Using ep0 maxpacket: 32 [ 1388.174108][T25666] usb 9-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1388.178617][T25666] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.187676][T25666] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1388.191834][T25666] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1388.195363][T25666] usb 9-1: Product: syz [ 1388.197228][T25666] usb 9-1: Manufacturer: syz [ 1388.199544][T25666] usb 9-1: SerialNumber: syz [ 1388.206622][T25666] usb 9-1: config 0 descriptor?? [ 1388.214386][T25666] hub 9-1:0.0: bad descriptor, ignoring hub [ 1388.216703][T25666] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1388.518998][T13223] usb 9-1: USB disconnect, device number 16 [ 1388.609741][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 1388.609752][ T40] audit: type=1326 audit(2000000430.579:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.621654][ T40] audit: type=1326 audit(2000000430.579:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.629006][ T40] audit: type=1326 audit(2000000430.589:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.635706][ T40] audit: type=1326 audit(2000000430.589:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.642405][ T40] audit: type=1326 audit(2000000430.589:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.650902][ T40] audit: type=1326 audit(2000000430.599:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1388.775659][T30488] FAULT_INJECTION: forcing a failure. [ 1388.775659][T30488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1388.780745][T30488] CPU: 2 UID: 0 PID: 30488 Comm: syz.2.5400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.780763][T30488] Tainted: [L]=SOFTLOCKUP [ 1388.780767][T30488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1388.780773][T30488] Call Trace: [ 1388.780787][T30488] [ 1388.780793][T30488] dump_stack_lvl+0x100/0x190 [ 1388.780815][T30488] should_fail_ex.cold+0x5/0xa [ 1388.780827][T30488] ? prepare_alloc_pages+0x16d/0x5f0 [ 1388.780842][T30488] should_fail_alloc_page+0xeb/0x140 [ 1388.780856][T30488] prepare_alloc_pages+0x1f0/0x5f0 [ 1388.780871][T30488] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1388.780888][T30488] ? find_held_lock+0x2b/0x80 [ 1388.780901][T30488] ? is_bpf_text_address+0x8a/0x1a0 [ 1388.780915][T30488] ? is_bpf_text_address+0x8a/0x1a0 [ 1388.780929][T30488] ? bpf_ksym_find+0x124/0x1c0 [ 1388.780940][T30488] ? look_up_lock_class+0x64/0x120 [ 1388.780956][T30488] ? register_lock_class+0x40/0x560 [ 1388.780972][T30488] ? register_lock_class+0x40/0x560 [ 1388.780988][T30488] ? __kernel_text_address+0xd/0x30 [ 1388.780999][T30488] ? unwind_get_return_address+0x59/0xa0 [ 1388.781014][T30488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1388.781031][T30488] ? look_up_lock_class+0x64/0x120 [ 1388.781046][T30488] ? register_lock_class+0x40/0x560 [ 1388.781066][T30488] ? __lock_acquire+0x4a5/0x2630 [ 1388.781084][T30488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1388.781100][T30488] ? policy_nodemask+0xed/0x4f0 [ 1388.781113][T30488] alloc_pages_mpol+0x1fb/0x540 [ 1388.781126][T30488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1388.781139][T30488] ? find_held_lock+0x2b/0x80 [ 1388.781151][T30488] ? __pollwait+0x271/0x470 [ 1388.781164][T30488] alloc_pages_noprof+0x1a/0x160 [ 1388.781178][T30488] get_free_pages_noprof+0x10/0xb0 [ 1388.781190][T30488] __pollwait+0x29a/0x470 [ 1388.781203][T30488] snd_rawmidi_poll+0x4b8/0x690 [ 1388.781219][T30488] ? __pfx___pollwait+0x10/0x10 [ 1388.781230][T30488] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 1388.781246][T30488] do_select+0xd54/0x1850 [ 1388.781268][T30488] ? __pfx_do_select+0x10/0x10 [ 1388.781280][T30488] ? __lock_acquire+0x4a5/0x2630 [ 1388.781295][T30488] ? __pfx___pollwait+0x10/0x10 [ 1388.781308][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781320][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781332][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781344][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781357][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781369][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781381][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781393][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781405][T30488] ? __pfx_pollwake+0x10/0x10 [ 1388.781416][T30488] ? _kstrtoull+0x13c/0x1f0 [ 1388.781430][T30488] ? find_held_lock+0x2b/0x80 [ 1388.781442][T30488] ? compat_core_sys_select+0x1e6/0x8b0 [ 1388.781454][T30488] ? compat_core_sys_select+0x1e6/0x8b0 [ 1388.781467][T30488] ? compat_core_sys_select+0x68a/0x8b0 [ 1388.781479][T30488] compat_core_sys_select+0x68a/0x8b0 [ 1388.781494][T30488] ? __pfx_compat_core_sys_select+0x10/0x10 [ 1388.781509][T30488] ? get_pid_task+0xfc/0x250 [ 1388.781538][T30488] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1388.781551][T30488] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1388.781566][T30488] ? __pfx_vfs_write+0x3/0x10 [ 1388.781579][T30488] do_compat_pselect+0x27a/0x2b0 [ 1388.781593][T30488] ? __pfx_do_compat_pselect+0x10/0x10 [ 1388.781607][T30488] ? fput+0x79/0x100 [ 1388.781622][T30488] __ia32_compat_sys_pselect6_time32+0x152/0x1c0 [ 1388.781639][T30488] __do_fast_syscall_32+0xe7/0x970 [ 1388.781654][T30488] ? lockdep_hardirqs_on+0x78/0x100 [ 1388.781670][T30488] do_fast_syscall_32+0x32/0x70 [ 1388.781685][T30488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1388.781699][T30488] RIP: 0023:0xf7fe3f7c [ 1388.781708][T30488] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1388.781719][T30488] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000134 [ 1388.781730][T30488] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000080000240 [ 1388.781736][T30488] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 1388.781743][T30488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1388.781749][T30488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1388.781754][T30488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.781768][T30488] [ 1388.969181][T13223] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1389.128828][T13223] usb 9-1: Using ep0 maxpacket: 32 [ 1389.132093][T13223] usb 9-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1389.136246][T13223] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1389.143041][T13223] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1389.146367][T13223] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1389.151329][T13223] usb 9-1: Product: syz [ 1389.153021][T13223] usb 9-1: Manufacturer: syz [ 1389.155933][T13223] usb 9-1: SerialNumber: syz [ 1389.163200][T13223] usb 9-1: config 0 descriptor?? [ 1389.172428][T13223] hub 9-1:0.0: bad descriptor, ignoring hub [ 1389.178911][T13223] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1389.270564][ T40] audit: type=1326 audit(2000000431.239:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1389.278225][ T40] audit: type=1326 audit(2000000431.239:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.0.5399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1389.755534][T30498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.705821][T30513] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 1390.719530][ T6810] usb 9-1: USB disconnect, device number 17 [ 1390.733632][T30513] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1390.737281][T30511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1390.744744][T30511] netlink: 'syz.2.5404': attribute type 7 has an invalid length. [ 1390.750247][T30511] netlink: 'syz.2.5404': attribute type 8 has an invalid length. [ 1390.754795][T30511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1390.765943][T30513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5405'. [ 1390.893180][T30513] bond11: entered promiscuous mode [ 1390.894901][T30513] bond11: entered allmulticast mode [ 1390.897227][T30515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1390.903581][T30516] bond9: (slave dummy0): Releasing active interface [ 1390.905725][T30516] dummy0: left promiscuous mode [ 1390.907414][T30516] dummy0: left allmulticast mode [ 1390.920132][T30516] bond11: (slave dummy0): making interface the new active one [ 1390.924115][T30516] dummy0: entered promiscuous mode [ 1390.926771][T30513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1390.931481][T30516] dummy0: entered allmulticast mode [ 1390.934516][T30516] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 1391.429327][ T6810] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1392.472582][ T6810] usb 9-1: Using ep0 maxpacket: 32 [ 1392.481450][ T6810] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1392.491188][ T6810] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1392.498780][ T6810] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1392.502268][ T6810] usb 9-1: Product: syz [ 1392.504283][ T6810] usb 9-1: Manufacturer: syz [ 1392.506321][ T6810] usb 9-1: SerialNumber: syz [ 1392.509867][ T6810] usb 9-1: config 0 descriptor?? [ 1392.513195][T30526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1392.518075][ T6810] hub 9-1:0.0: bad descriptor, ignoring hub [ 1392.520873][ T6810] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1392.899031][ T6810] usb 9-1: USB disconnect, device number 18 [ 1393.239619][ T6810] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1393.332573][T30549] netlink: 'syz.2.5414': attribute type 1 has an invalid length. [ 1393.350580][T30549] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1393.365225][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5414'. [ 1393.382785][T30549] bond18: entered promiscuous mode [ 1393.385020][T30549] bond18: entered allmulticast mode [ 1393.393184][T30549] bond17: (slave dummy0): Releasing active interface [ 1393.396297][T30549] dummy0: left promiscuous mode [ 1393.399834][T30549] dummy0: left allmulticast mode [ 1393.408823][ T6810] usb 9-1: Using ep0 maxpacket: 32 [ 1393.411091][T30549] bond18: (slave dummy0): making interface the new active one [ 1393.412896][ T6810] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1393.414472][T30549] dummy0: entered promiscuous mode [ 1393.421421][ T6810] usb 9-1: string descriptor 0 read error: -22 [ 1393.421509][ T6810] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1393.421529][ T6810] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1393.426324][ T6810] usb 9-1: config 0 descriptor?? [ 1393.430833][T30549] dummy0: entered allmulticast mode [ 1393.435595][T30526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1393.437337][ T6810] hub 9-1:0.0: bad descriptor, ignoring hub [ 1393.443401][T30549] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 1393.443771][ T6810] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1393.509227][T30549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.069046][T27921] usb 9-1: USB disconnect, device number 19 [ 1394.139007][ T6810] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1394.298819][ T6810] usb 10-1: Using ep0 maxpacket: 32 [ 1394.303272][ T6810] usb 10-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1394.307693][ T6810] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1394.316130][ T6810] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1394.320202][ T6810] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1394.323509][ T6810] usb 10-1: Product: syz [ 1394.325546][ T6810] usb 10-1: Manufacturer: syz [ 1394.327556][ T6810] usb 10-1: SerialNumber: syz [ 1394.333499][ T6810] usb 10-1: config 0 descriptor?? [ 1394.341509][ T6810] hub 10-1:0.0: bad descriptor, ignoring hub [ 1394.344190][ T6810] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1394.480281][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1394.484049][T30559] netlink: 'syz.2.5417': attribute type 7 has an invalid length. [ 1394.487406][T30559] netlink: 'syz.2.5417': attribute type 8 has an invalid length. [ 1394.491629][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1394.498949][T30559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1394.669797][T13223] usb 10-1: USB disconnect, device number 43 [ 1395.050012][T13223] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1395.228868][T13223] usb 10-1: Using ep0 maxpacket: 32 [ 1395.485462][T13223] usb 10-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 1395.491898][T13223] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1395.529120][T13223] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1395.533889][T13223] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1395.549401][T13223] usb 10-1: Product: syz [ 1395.553030][T13223] usb 10-1: Manufacturer: syz [ 1395.567854][T13223] usb 10-1: SerialNumber: syz [ 1395.626356][T13223] usb 10-1: config 0 descriptor?? [ 1395.678409][T13223] hub 10-1:0.0: bad descriptor, ignoring hub [ 1395.682450][T13223] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1396.881570][T30569] netlink: 'syz.2.5420': attribute type 1 has an invalid length. [ 1396.905931][T30569] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1396.932545][T30569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5420'. [ 1397.098223][T30574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.223702][T30569] bond19: entered promiscuous mode [ 1397.228154][T30569] bond19: entered allmulticast mode [ 1397.254367][T30572] bond18: (slave dummy0): Releasing active interface [ 1397.261790][T30572] dummy0: left promiscuous mode [ 1397.267860][T30572] dummy0: left allmulticast mode [ 1397.283145][T30572] bond19: (slave dummy0): making interface the new active one [ 1397.294188][T30572] dummy0: entered promiscuous mode [ 1397.299011][T30572] dummy0: entered allmulticast mode [ 1397.305544][T30572] bond19: (slave dummy0): Enslaving as an active interface with an up link [ 1397.419508][T17249] usb 10-1: USB disconnect, device number 44 [ 1398.868876][T25666] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1399.020082][T25666] usb 9-1: Using ep0 maxpacket: 32 [ 1399.025031][T25666] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1399.035044][T25666] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1399.037952][T25666] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1399.044224][T25666] usb 9-1: Product: syz [ 1399.046743][T25666] usb 9-1: Manufacturer: syz [ 1399.049920][T25666] usb 9-1: SerialNumber: syz [ 1399.055496][T25666] usb 9-1: config 0 descriptor?? [ 1399.064600][T30594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1399.067938][T25666] hub 9-1:0.0: bad descriptor, ignoring hub [ 1399.074930][T25666] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1399.378957][T25666] usb 9-1: USB disconnect, device number 20 [ 1399.709132][T25666] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1399.858939][T25666] usb 9-1: Using ep0 maxpacket: 32 [ 1399.863367][T25666] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1399.870858][T25666] usb 9-1: string descriptor 0 read error: -22 [ 1399.873663][T25666] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1399.877469][T25666] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1399.885018][T25666] usb 9-1: config 0 descriptor?? [ 1399.891584][T30594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1399.901090][T25666] hub 9-1:0.0: bad descriptor, ignoring hub [ 1399.905503][T25666] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1399.959575][T30598] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1399.989131][T30598] Process accounting resumed [ 1401.769386][T10325] usb 9-1: USB disconnect, device number 21 [ 1403.351786][T30616] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1403.363710][T30616] Process accounting resumed [ 1404.138846][T27921] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1404.154971][ T40] audit: type=1326 audit(2000000446.119:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.180317][ T40] audit: type=1326 audit(2000000446.119:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.201721][ T40] audit: type=1326 audit(2000000446.129:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.218572][ T40] audit: type=1326 audit(2000000446.129:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.248566][ T40] audit: type=1326 audit(2000000446.129:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.274460][ T40] audit: type=1326 audit(2000000446.139:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.290856][T27921] usb 9-1: Using ep0 maxpacket: 32 [ 1404.296793][T27921] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1404.310586][T27921] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1404.314411][T27921] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1404.317897][T27921] usb 9-1: Product: syz [ 1404.320383][T27921] usb 9-1: Manufacturer: syz [ 1404.322450][T27921] usb 9-1: SerialNumber: syz [ 1404.336480][T27921] usb 9-1: config 0 descriptor?? [ 1404.340222][T30645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1404.342894][T30656] netlink: 'syz.0.5441': attribute type 1 has an invalid length. [ 1404.346186][T27921] hub 9-1:0.0: bad descriptor, ignoring hub [ 1404.353033][T27921] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1404.369682][T30656] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1404.452285][ T40] audit: type=1326 audit(2000000446.419:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.459040][ T40] audit: type=1326 audit(2000000446.429:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30646 comm="syz.0.5441" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1404.659026][T27921] usb 9-1: USB disconnect, device number 22 [ 1405.018805][ T39] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1405.065656][T30660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1405.069936][T30660] netlink: 'syz.0.5443': attribute type 7 has an invalid length. [ 1405.073225][T30660] netlink: 'syz.0.5443': attribute type 8 has an invalid length. [ 1405.076126][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1405.084201][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1405.122477][T30662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.168757][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 1405.173198][ T39] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1405.187152][ T39] usb 9-1: string descriptor 0 read error: -22 [ 1405.189319][ T39] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1405.192218][ T39] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1405.196511][ T39] usb 9-1: config 0 descriptor?? [ 1405.201265][T30645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1405.206372][ T39] hub 9-1:0.0: bad descriptor, ignoring hub [ 1405.211412][ T39] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1405.658969][ T39] usb 9-1: USB disconnect, device number 23 [ 1406.176308][T30669] FAULT_INJECTION: forcing a failure. [ 1406.176308][T30669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.181691][T30669] CPU: 0 UID: 0 PID: 30669 Comm: syz.4.5446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.181735][T30669] Tainted: [L]=SOFTLOCKUP [ 1406.181743][T30669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1406.181754][T30669] Call Trace: [ 1406.181781][T30669] [ 1406.181791][T30669] dump_stack_lvl+0x100/0x190 [ 1406.181835][T30669] should_fail_ex.cold+0x5/0xa [ 1406.181860][T30669] __fpu_restore_sig+0xaa7/0x13c0 [ 1406.181892][T30669] ? __lock_acquire+0x4a5/0x2630 [ 1406.181934][T30669] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1406.181961][T30669] ? clockevents_program_event+0x1bf/0x820 [ 1406.181997][T30669] ? __might_fault+0xc5/0x140 [ 1406.182030][T30669] fpu__restore_sig+0x151/0x190 [ 1406.182058][T30669] ia32_restore_sigcontext+0x456/0x620 [ 1406.182077][T30669] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1406.182103][T30669] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.182129][T30669] ? lockdep_hardirqs_on+0x78/0x100 [ 1406.182157][T30669] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 1406.182180][T30669] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 1406.182208][T30669] do_int80_emulation+0x14b/0x720 [ 1406.182238][T30669] asm_int80_emulation+0x1a/0x20 [ 1406.182258][T30669] RIP: 0023:0xf704ef7a [ 1406.182274][T30669] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1406.182292][T30669] RSP: 002b:00000000f543d50c EFLAGS: 00000292 [ 1406.182308][T30669] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000080000240 [ 1406.182319][T30669] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1406.182330][T30669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1406.182341][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.182353][T30669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1406.182377][T30669] [ 1406.870841][T30388] block nbd1: Receive control failed (result -32) [ 1407.050844][T30682] netlink: 'syz.4.5450': attribute type 1 has an invalid length. [ 1407.131432][T30682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1407.223211][T30682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5450'. [ 1407.364456][T30682] bond1: entered promiscuous mode [ 1407.366595][T30682] bond1: entered allmulticast mode [ 1407.384885][T30693] bond1: (slave dummy0): making interface the new active one [ 1407.388520][T30682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1407.393392][T30693] dummy0: entered promiscuous mode [ 1407.396017][T30693] dummy0: entered allmulticast mode [ 1407.404620][T30693] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1407.410626][T30672] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1407.437351][T30672] Process accounting resumed [ 1408.012656][T30710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.511821][T30717] netlink: 'syz.5.5452': attribute type 1 has an invalid length. [ 1408.639125][T30717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1409.553937][T30728] netlink: 'syz.4.5457': attribute type 1 has an invalid length. [ 1409.688538][T30728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1409.794829][T30730] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1409.992680][T30735] netlink: 'syz.0.5458': attribute type 1 has an invalid length. [ 1410.014034][T30735] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1410.133314][T30735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1410.146733][T30735] bond13: entered promiscuous mode [ 1410.156804][T30735] bond13: entered allmulticast mode [ 1410.215999][T30735] bond11: (slave dummy0): Releasing active interface [ 1410.223630][T30735] dummy0: left promiscuous mode [ 1410.229990][T30735] dummy0: left allmulticast mode [ 1410.276977][T30735] bond13: (slave dummy0): making interface the new active one [ 1410.280807][T30735] dummy0: entered promiscuous mode [ 1410.280841][T30730] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5457'. [ 1410.286880][T30735] dummy0: entered allmulticast mode [ 1410.302856][T30735] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1410.314652][T30741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1410.355165][T30728] bond1: (slave dummy0): Releasing active interface [ 1410.365422][T30728] dummy0: left promiscuous mode [ 1410.383618][T30728] dummy0: left allmulticast mode [ 1410.506033][T30728] bond2: (slave dummy0): making interface the new active one [ 1410.535264][T30728] dummy0: entered promiscuous mode [ 1410.550323][T30728] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1410.594318][T30730] bond2: (slave dummy0): Releasing active interface [ 1410.598783][T30730] dummy0 (unregistering): left promiscuous mode [ 1410.621164][T30743] block nbd2: Receive control failed (result -32) [ 1410.711252][T30743] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1411.208899][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1411.367919][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1411.373568][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.377758][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1411.389630][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1411.392460][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1411.395468][ T24] usb 9-1: Product: syz [ 1411.396820][ T24] usb 9-1: Manufacturer: syz [ 1411.398262][ T24] usb 9-1: SerialNumber: syz [ 1411.417805][ T24] usb 9-1: config 0 descriptor?? [ 1411.519722][T30747] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1411.918965][T27921] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1412.795099][T30751] Process accounting resumed [ 1412.968831][T27921] usb 10-1: Using ep0 maxpacket: 32 [ 1413.458885][T27921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.512273][T27921] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1413.520508][T27921] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1413.524185][T27921] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1413.526921][T27921] usb 10-1: Product: syz [ 1413.528313][T27921] usb 10-1: Manufacturer: syz [ 1413.530321][T27921] usb 10-1: SerialNumber: syz [ 1413.533260][ T6810] usb 9-1: USB disconnect, device number 24 [ 1413.537258][T27921] usb 10-1: config 0 descriptor?? [ 1414.275286][T30782] netlink: 'syz.0.5470': attribute type 1 has an invalid length. [ 1414.303963][T30782] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1414.315724][T27921] usb 10-1: USB disconnect, device number 45 [ 1414.437997][T30787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5470'. [ 1414.458883][T30787] bond14: entered promiscuous mode [ 1414.461174][T30787] bond14: entered allmulticast mode [ 1414.500061][T30787] bond13: (slave dummy0): Releasing active interface [ 1414.503958][T30787] dummy0: left promiscuous mode [ 1414.508278][T30787] dummy0: left allmulticast mode [ 1414.559363][T30787] bond14: (slave dummy0): making interface the new active one [ 1414.563993][T30787] dummy0: entered promiscuous mode [ 1414.565725][T30787] dummy0: entered allmulticast mode [ 1414.609909][T30782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.784397][T30787] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 1415.348474][T30801] FAULT_INJECTION: forcing a failure. [ 1415.348474][T30801] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.356264][T30801] CPU: 0 UID: 0 PID: 30801 Comm: syz.5.5473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.356282][T30801] Tainted: [L]=SOFTLOCKUP [ 1415.356287][T30801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1415.356293][T30801] Call Trace: [ 1415.356297][T30801] [ 1415.356302][T30801] dump_stack_lvl+0x100/0x190 [ 1415.356323][T30801] should_fail_ex.cold+0x5/0xa [ 1415.356337][T30801] should_failslab+0xc2/0x120 [ 1415.356350][T30801] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1415.356367][T30801] ? __anon_vma_prepare+0xae/0x5e0 [ 1415.356385][T30801] __anon_vma_prepare+0xae/0x5e0 [ 1415.356399][T30801] ? rcu_read_unlock+0x2d/0xb0 [ 1415.356416][T30801] __vmf_anon_prepare+0x11f/0x250 [ 1415.356430][T30801] do_wp_page+0xc78/0x4350 [ 1415.356448][T30801] ? __pfx_do_wp_page+0x10/0x10 [ 1415.356462][T30801] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1415.356478][T30801] __handle_mm_fault+0x1ab6/0x2a00 [ 1415.356495][T30801] ? mt_find+0x45e/0x8e0 [ 1415.356512][T30801] ? __pfx___handle_mm_fault+0x10/0x10 [ 1415.356532][T30801] ? __pfx_mt_find+0x10/0x10 [ 1415.356589][T30801] ? find_vma+0xbf/0x140 [ 1415.356607][T30801] ? __pfx_find_vma+0x10/0x10 [ 1415.356627][T30801] handle_mm_fault+0x37b/0xa30 [ 1415.356645][T30801] do_user_addr_fault+0x74c/0x12f0 [ 1415.356666][T30801] ? trace_page_fault_kernel+0x7a/0x200 [ 1415.356687][T30801] exc_page_fault+0x6f/0xd0 [ 1415.356710][T30801] asm_exc_page_fault+0x26/0x30 [ 1415.356728][T30801] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1415.356752][T30801] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 47 d9 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1415.356768][T30801] RSP: 0018:ffffc90007f8f988 EFLAGS: 00050293 [ 1415.356784][T30801] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000800004d8 [ 1415.356795][T30801] RDX: ffff888058a52540 RSI: ffffffff8951cf7e RDI: ffff888058a52540 [ 1415.356806][T30801] RBP: ffffc90007f8fd30 R08: 0000000000000005 R09: 0000000000000000 [ 1415.356817][T30801] R10: 00000000800000f0 R11: 0000000000000000 R12: 0000000000000000 [ 1415.356827][T30801] R13: 00000000800004c0 R14: ffffc90007f8fd74 R15: 00000000800000f0 [ 1415.356846][T30801] ? ____sys_recvmsg+0x3ae/0x640 [ 1415.356873][T30801] ____sys_recvmsg+0x3b9/0x640 [ 1415.356900][T30801] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1415.356946][T30801] ? __lock_acquire+0x4a5/0x2630 [ 1415.356980][T30801] ___sys_recvmsg+0x16a/0x1a0 [ 1415.357006][T30801] ? __pfx____sys_recvmsg+0x10/0x10 [ 1415.357053][T30801] do_recvmmsg+0x563/0x760 [ 1415.357083][T30801] ? __pfx_do_recvmmsg+0x10/0x10 [ 1415.357112][T30801] ? ksys_write+0x190/0x250 [ 1415.357131][T30801] ? ksys_write+0x190/0x250 [ 1415.357154][T30801] ? __fget_files+0x215/0x3d0 [ 1415.357167][T30801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1415.357187][T30801] __sys_recvmmsg+0x21f/0x270 [ 1415.357200][T30801] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1415.357213][T30801] ? ksys_write+0x1ac/0x250 [ 1415.357227][T30801] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1415.357242][T30801] ? __do_fast_syscall_32+0x98/0x970 [ 1415.357258][T30801] ? lockdep_hardirqs_on+0x78/0x100 [ 1415.357273][T30801] __do_fast_syscall_32+0xe7/0x970 [ 1415.357289][T30801] ? lockdep_hardirqs_on+0x78/0x100 [ 1415.357305][T30801] do_fast_syscall_32+0x32/0x70 [ 1415.357322][T30801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.357336][T30801] RIP: 0023:0xf7f52f7c [ 1415.357346][T30801] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1415.357356][T30801] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1415.357367][T30801] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 1415.357374][T30801] RDX: 0000000000000f02 RSI: 00000000000000f0 RDI: 0000000000000000 [ 1415.357380][T30801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.357386][T30801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1415.357392][T30801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.357407][T30801] [ 1415.727902][ T40] audit: type=1326 audit(2000000457.689:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1415.743505][ T40] audit: type=1326 audit(2000000457.689:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1415.752209][ T40] audit: type=1326 audit(2000000457.699:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1415.761373][ T40] audit: type=1326 audit(2000000457.699:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1415.769975][ T40] audit: type=1326 audit(2000000457.699:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1415.778583][ T40] audit: type=1326 audit(2000000457.699:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1416.244003][ T40] audit: type=1326 audit(2000000458.209:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1416.255211][ T40] audit: type=1326 audit(2000000458.209:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30802 comm="syz.0.5474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1416.471680][T30745] block nbd3: Receive control failed (result -32) [ 1417.318923][ T39] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1417.468835][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 1417.476607][ T39] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1417.489731][ T39] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1417.494757][ T39] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1417.500984][ T39] usb 10-1: Product: syz [ 1417.505173][ T39] usb 10-1: Manufacturer: syz [ 1417.506817][ T39] usb 10-1: SerialNumber: syz [ 1417.513770][ T39] usb 10-1: config 0 descriptor?? [ 1417.515976][T30823] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1417.524673][ T39] hub 10-1:0.0: bad descriptor, ignoring hub [ 1417.527951][ T39] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1417.529750][T30833] netlink: 'syz.4.5480': attribute type 1 has an invalid length. [ 1417.580194][T30833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1417.849832][ T39] usb 10-1: USB disconnect, device number 46 [ 1418.190105][ T39] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1418.338760][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 1418.341784][ T39] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1418.348483][ T39] usb 10-1: string descriptor 0 read error: -22 [ 1418.351731][ T39] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1418.355635][ T39] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1418.364737][ T39] usb 10-1: config 0 descriptor?? [ 1418.368801][T30823] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1418.373637][ T39] hub 10-1:0.0: bad descriptor, ignoring hub [ 1418.375946][ T39] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1418.908923][ T39] usb 10-1: USB disconnect, device number 47 [ 1419.442793][T30828] Bluetooth: hci2: command 0x0406 tx timeout [ 1419.909440][ T843] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1420.079409][ T843] usb 10-1: Using ep0 maxpacket: 32 [ 1420.105100][ T843] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1420.134358][ T843] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1420.155178][ T843] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1420.176451][ T843] usb 10-1: config 14 has no interface number 0 [ 1420.190010][ T843] usb 10-1: config 14 has no interface number 1 [ 1420.201007][ T843] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1420.211923][ T843] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1420.217768][ T843] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1420.227598][ T843] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1420.244099][ T843] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1420.252312][ T843] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.258320][ T843] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1420.265893][ T843] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1420.293183][ T843] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1420.299821][ T843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.303198][ T843] usb 10-1: Product: syz [ 1420.305295][ T843] usb 10-1: Manufacturer: syz [ 1420.307276][ T843] usb 10-1: SerialNumber: syz [ 1420.811847][T30869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.941612][T30827] block nbd4: Receive control failed (result -32) [ 1422.087380][ T843] legousbtower 10-1:14.57: interrupt endpoints not found [ 1422.706619][ T843] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1422.722658][ T843] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1422.733679][ T843] usb 10-1: USB disconnect, device number 48 [ 1422.743342][ T843] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 1422.870286][T30890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.193924][T30914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5496'. [ 1424.329625][T30911] netlink: 'syz.4.5493': attribute type 1 has an invalid length. [ 1424.367549][T30918] netlink: 'syz.0.5495': attribute type 1 has an invalid length. [ 1424.394576][T30911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1424.475911][T30918] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1425.940664][T30927] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1426.218935][ T5853] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1426.368882][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 1426.375638][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1426.379322][ T5853] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1426.382002][ T5853] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1426.384560][ T5853] usb 5-1: config 14 has no interface number 0 [ 1426.386555][ T5853] usb 5-1: config 14 has no interface number 1 [ 1426.388663][ T5853] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1426.392314][ T5853] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1426.396675][ T5853] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1426.401506][ T5853] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1426.405524][ T5853] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1426.409130][ T5853] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1426.414149][ T5853] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1426.416434][ T5853] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1426.440669][ T5853] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1426.443496][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.445895][ T5853] usb 5-1: Product: syz [ 1426.447406][ T5853] usb 5-1: Manufacturer: syz [ 1426.448902][ T5853] usb 5-1: SerialNumber: syz [ 1426.620343][T30925] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1426.900904][T30929] Process accounting resumed [ 1427.038927][ T5853] legousbtower 5-1:14.57: interrupt endpoints not found [ 1427.612531][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.679765][ T5853] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1427.717489][ T5853] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1427.875684][T30954] block nbd5: Receive control failed (result -32) [ 1427.939899][ T5853] usb 5-1: USB disconnect, device number 125 [ 1428.092568][ T5853] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1428.395025][T30960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5505'. [ 1428.552095][T30954] Bluetooth: hci2: unexpected cc 0x080d length: 7 > 3 [ 1428.554246][T30954] Bluetooth: hci2: unexpected event for opcode 0x080d [ 1428.597615][T30967] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1429.472952][T30964] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1429.726028][T30975] Process accounting resumed [ 1429.731640][ T40] audit: type=1800 audit(2000000471.689:4755): pid=30978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.5510" name="/" dev="sockfs" ino=139877 res=0 errno=0 [ 1430.671531][T30982] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1430.725597][T30982] Process accounting resumed [ 1430.734617][T31001] block nbd6: Receive control failed (result -32) [ 1431.085896][T25666] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1431.248798][T25666] usb 9-1: Using ep0 maxpacket: 32 [ 1431.260495][T25666] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1431.270508][T25666] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1431.279007][T25666] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1431.282213][T25666] usb 9-1: config 14 has no interface number 0 [ 1431.284650][T25666] usb 9-1: config 14 has no interface number 1 [ 1431.286826][T25666] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1431.298823][T25666] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1431.302643][T25666] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1431.309781][T25666] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1431.319092][T25666] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1431.328241][T25666] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1431.338958][T25666] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1431.347401][T25666] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1431.353065][T25666] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1431.358970][T25666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.362156][T25666] usb 9-1: Product: syz [ 1431.363834][T25666] usb 9-1: Manufacturer: syz [ 1431.365749][T25666] usb 9-1: SerialNumber: syz [ 1431.892795][ T40] audit: type=1326 audit(2000000473.859:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1431.912763][ T40] audit: type=1326 audit(2000000473.869:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1431.947125][ T40] audit: type=1326 audit(2000000473.869:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1431.961751][ T40] audit: type=1326 audit(2000000473.869:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1431.983805][T25666] legousbtower 9-1:14.57: interrupt endpoints not found [ 1432.370002][T25666] legousbtower 9-1:14.228: get version request failed: -121 [ 1432.405789][T25666] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 1432.561632][ T5853] usb 9-1: USB disconnect, device number 25 [ 1432.616268][ T40] audit: type=1326 audit(2000000474.579:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1432.625371][ T40] audit: type=1326 audit(2000000474.589:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.5.5518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1434.406425][T31038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1434.893630][T31043] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5526'. [ 1435.805005][T31040] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1435.971245][T31041] Process accounting resumed [ 1438.169033][ T1348] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1438.318809][ T1348] usb 10-1: Using ep0 maxpacket: 32 [ 1438.322714][ T1348] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.326755][ T1348] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1438.334300][ T1348] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1438.337364][ T1348] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1438.340298][ T1348] usb 10-1: Product: syz [ 1438.341678][ T1348] usb 10-1: Manufacturer: syz [ 1438.343643][ T1348] usb 10-1: SerialNumber: syz [ 1438.346544][ T1348] usb 10-1: config 0 descriptor?? [ 1438.891692][ T5853] usb 10-1: USB disconnect, device number 49 [ 1439.225972][T31083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5535'. [ 1439.229607][T31083] netlink: 'syz.4.5535': attribute type 7 has an invalid length. [ 1439.232689][T31083] netlink: 'syz.4.5535': attribute type 8 has an invalid length. [ 1439.235746][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5535'. [ 1439.244626][T31083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5535'. [ 1439.535275][ T40] audit: type=1326 audit(2000000481.499:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.542205][ T40] audit: type=1326 audit(2000000481.509:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.551191][ T40] audit: type=1326 audit(2000000481.519:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.558021][ T40] audit: type=1326 audit(2000000481.519:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.564706][ T40] audit: type=1326 audit(2000000481.529:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.571617][ T40] audit: type=1326 audit(2000000481.539:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.727709][ T40] audit: type=1326 audit(2000000481.689:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.735086][ T40] audit: type=1326 audit(2000000481.689:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.741898][ T40] audit: type=1326 audit(2000000481.709:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1439.795974][ T40] audit: type=1326 audit(2000000481.759:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.5.5537" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1440.119082][T31102] block nbd7: Receive control failed (result -32) [ 1441.074287][T31121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1441.078486][T31121] netlink: 'syz.4.5544': attribute type 7 has an invalid length. [ 1441.082092][T31121] netlink: 'syz.4.5544': attribute type 8 has an invalid length. [ 1441.085398][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1441.092754][T31121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1442.045043][T31140] netlink: 'syz.2.5543': attribute type 1 has an invalid length. [ 1442.080342][T31140] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1442.275925][ T6810] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1442.468958][ T6810] usb 5-1: Using ep0 maxpacket: 32 [ 1442.472165][ T6810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1442.482702][ T6810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1442.491305][ T6810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1442.500684][ T6810] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1442.503698][ T6810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1442.508083][ T6810] usb 5-1: Product: syz [ 1442.512397][ T6810] usb 5-1: Manufacturer: syz [ 1442.516000][ T6810] usb 5-1: SerialNumber: syz [ 1442.528381][ T6810] usb 5-1: config 0 descriptor?? [ 1442.531695][T31131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1442.537748][ T6810] hub 5-1:0.0: bad descriptor, ignoring hub [ 1442.545073][ T6810] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1442.850565][ T6810] usb 5-1: USB disconnect, device number 126 [ 1444.675590][T31181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1444.687686][T31174] block nbd8: Receive control failed (result -32) [ 1444.749120][T31172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1446.038819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1448.578888][T13223] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1448.728823][T13223] usb 10-1: Using ep0 maxpacket: 32 [ 1448.731185][T13223] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1448.735382][T13223] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1448.740498][T13223] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1448.747343][T13223] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1448.751718][T13223] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1448.755184][T13223] usb 10-1: Product: syz [ 1448.756926][T13223] usb 10-1: Manufacturer: syz [ 1448.763296][T13223] usb 10-1: SerialNumber: syz [ 1448.780438][T13223] usb 10-1: config 0 descriptor?? [ 1448.795507][T31208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1448.805104][T13223] hub 10-1:0.0: bad descriptor, ignoring hub [ 1448.814688][T13223] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1449.139930][ T843] usb 10-1: USB disconnect, device number 50 [ 1449.929693][T31225] block nbd9: Receive control failed (result -32) [ 1451.077496][T31238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1451.126835][T31238] xt_CT: No such helper "pptp" [ 1451.315500][T31250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5570'. [ 1451.363631][T31251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1451.367083][T31251] netlink: 'syz.0.5569': attribute type 7 has an invalid length. [ 1451.369931][T31251] netlink: 'syz.0.5569': attribute type 8 has an invalid length. [ 1451.372382][T31251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1451.438273][T31253] block nbd10: Receive control failed (result -32) [ 1451.483847][T31251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1456.135958][T31291] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 1456.165874][T31291] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1456.553863][T31295] block nbd11: Receive control failed (result -32) [ 1457.142721][ T6810] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1457.146695][T31307] netlink: 'syz.0.5582': attribute type 1 has an invalid length. [ 1457.176369][T31307] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1457.298771][ T6810] usb 10-1: Using ep0 maxpacket: 32 [ 1457.301714][ T6810] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1457.311511][ T6810] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1457.314327][ T6810] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1457.317461][ T6810] usb 10-1: Product: syz [ 1457.318895][ T6810] usb 10-1: Manufacturer: syz [ 1457.320392][ T6810] usb 10-1: SerialNumber: syz [ 1457.326789][ T6810] usb 10-1: config 0 descriptor?? [ 1457.331642][T31302] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1457.334820][ T6810] hub 10-1:0.0: bad descriptor, ignoring hub [ 1457.336695][ T6810] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1457.649167][T24603] usb 10-1: USB disconnect, device number 51 [ 1457.988828][T24603] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1458.173036][T24603] usb 10-1: Using ep0 maxpacket: 32 [ 1458.720205][T24603] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1458.812678][T24603] usb 10-1: string descriptor 0 read error: -22 [ 1458.815099][T24603] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1458.818149][T24603] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1458.825677][T24603] usb 10-1: config 0 descriptor?? [ 1458.828906][T31302] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1458.833215][T24603] hub 10-1:0.0: bad descriptor, ignoring hub [ 1458.835739][T24603] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1459.429218][T24603] usb 10-1: USB disconnect, device number 52 [ 1459.626713][T31327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1459.632206][T31327] netlink: 'syz.2.5589': attribute type 7 has an invalid length. [ 1459.637250][T31327] netlink: 'syz.2.5589': attribute type 8 has an invalid length. [ 1459.643024][T31327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1459.666899][T31327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1459.864250][T31330] netlink: 'syz.2.5590': attribute type 1 has an invalid length. [ 1459.933325][T31332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5590'. [ 1459.938114][T31330] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1460.024191][T31332] bond21: entered promiscuous mode [ 1460.025958][T31332] bond21: entered allmulticast mode [ 1460.045869][T31330] bond19: (slave dummy0): Releasing active interface [ 1460.048588][T31330] dummy0: left promiscuous mode [ 1460.052315][T31330] dummy0: left allmulticast mode [ 1460.067153][T31330] bond21: (slave dummy0): making interface the new active one [ 1460.080300][T31330] dummy0: entered promiscuous mode [ 1460.189621][T31332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1460.196525][T31330] dummy0: entered allmulticast mode [ 1460.202813][T31330] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 1460.846080][T31346] netlink: 'syz.4.5595': attribute type 1 has an invalid length. [ 1460.891835][T31346] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1461.071801][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 1461.071818][ T40] audit: type=1326 audit(2000000503.019:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.147219][T31346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5595'. [ 1461.152339][T31346] bond5: entered promiscuous mode [ 1461.153995][T31346] bond5: entered allmulticast mode [ 1461.158261][ T40] audit: type=1326 audit(2000000503.119:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.167221][ T40] audit: type=1326 audit(2000000503.129:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.176227][ T40] audit: type=1326 audit(2000000503.139:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.183503][ T40] audit: type=1326 audit(2000000503.149:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.191451][ T40] audit: type=1326 audit(2000000503.159:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.201151][ T40] audit: type=1326 audit(2000000503.159:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.209141][ T40] audit: type=1326 audit(2000000503.169:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.216685][ T40] audit: type=1326 audit(2000000503.179:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.223968][ T40] audit: type=1326 audit(2000000503.179:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.5.5596" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1461.231828][T31352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.408257][T31356] netlink: 'syz.5.5596': attribute type 1 has an invalid length. [ 1461.428667][T31356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1463.760085][T31358] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1463.818088][T31374] netlink: 'syz.2.5601': attribute type 1 has an invalid length. [ 1463.824545][T31371] Process accounting resumed [ 1463.833933][T31374] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1463.842717][T31374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5601'. [ 1464.102068][T31377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.189668][T31374] bond22: entered promiscuous mode [ 1464.191499][T31374] bond22: entered allmulticast mode [ 1464.211112][T31376] bond21: (slave dummy0): Releasing active interface [ 1464.213437][T31376] dummy0: left promiscuous mode [ 1464.215487][T31376] dummy0: left allmulticast mode [ 1464.259370][T31376] bond22: (slave dummy0): making interface the new active one [ 1464.266587][T31376] dummy0: entered promiscuous mode [ 1464.269274][T31376] dummy0: entered allmulticast mode [ 1464.275873][T31376] bond22: (slave dummy0): Enslaving as an active interface with an up link [ 1468.201144][T31415] netlink: 'syz.5.5611': attribute type 1 has an invalid length. [ 1468.218951][T31415] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1468.289603][T31415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5611'. [ 1468.880308][T31415] bond7: entered promiscuous mode [ 1468.882251][T31415] bond7: entered allmulticast mode [ 1468.901502][T31421] bond4: (slave dummy0): Releasing active interface [ 1468.904119][T31421] dummy0: left promiscuous mode [ 1468.906449][T31421] dummy0: left allmulticast mode [ 1468.949957][T31421] bond7: (slave dummy0): making interface the new active one [ 1468.957031][T31421] dummy0: entered promiscuous mode [ 1468.965616][T31421] dummy0: entered allmulticast mode [ 1468.972840][T31421] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1469.787891][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 1469.787951][ T40] audit: type=1326 audit(2000000511.749:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1469.802897][ T40] audit: type=1326 audit(2000000511.769:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1469.814796][ T40] audit: type=1326 audit(2000000511.779:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1469.826236][ T40] audit: type=1326 audit(2000000511.789:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1469.837928][ T40] audit: type=1326 audit(2000000511.799:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1470.149931][T31444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1470.153597][T31444] netlink: 'syz.2.5619': attribute type 7 has an invalid length. [ 1470.156742][T31444] netlink: 'syz.2.5619': attribute type 8 has an invalid length. [ 1470.161434][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1470.168108][T31444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1471.272202][ T40] audit: type=1326 audit(2000000513.209:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1471.305093][T31459] netlink: 'syz.2.5622': attribute type 1 has an invalid length. [ 1471.318479][ T40] audit: type=1326 audit(2000000513.209:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.5617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1471.325483][T31459] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1471.339259][T31459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1471.345029][T31459] bond23: entered promiscuous mode [ 1471.347219][T31459] bond23: entered allmulticast mode [ 1471.355733][T31459] bond22: (slave dummy0): Releasing active interface [ 1471.358600][T31459] dummy0: left promiscuous mode [ 1471.361413][T31459] dummy0: left allmulticast mode [ 1471.372038][T31459] bond23: (slave dummy0): making interface the new active one [ 1471.377992][T31459] dummy0: entered promiscuous mode [ 1471.380379][T31459] dummy0: entered allmulticast mode [ 1471.383636][T31459] bond23: (slave dummy0): Enslaving as an active interface with an up link [ 1471.444707][T31461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.568663][T31473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1472.156898][T31482] block nbd12: Receive control failed (result -32) [ 1474.171813][ T40] audit: type=1326 audit(2000000516.139:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31501 comm="syz.5.5632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1474.178750][ T40] audit: type=1326 audit(2000000516.139:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31501 comm="syz.5.5632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1474.185516][ T40] audit: type=1326 audit(2000000516.149:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31501 comm="syz.5.5632" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1474.883300][T31509] netlink: 'syz.2.5633': attribute type 1 has an invalid length. [ 1474.938371][T31511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1474.956982][T31509] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1475.139077][T31516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.908804][ T5934] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1476.019525][T31511] bond24: entered promiscuous mode [ 1476.028526][T31511] bond24: entered allmulticast mode [ 1476.052498][T31509] bond23: (slave dummy0): Releasing active interface [ 1476.055163][T31509] dummy0: left promiscuous mode [ 1476.057266][T31509] dummy0: left allmulticast mode [ 1476.058841][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 1476.062333][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1476.068497][T31509] bond24: (slave dummy0): making interface the new active one [ 1476.069967][ T5934] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1476.074483][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1476.075122][T31509] dummy0: entered promiscuous mode [ 1476.076999][ T5934] usb 5-1: Product: syz [ 1476.079490][T31509] dummy0: entered allmulticast mode [ 1476.081077][ T5934] usb 5-1: Manufacturer: syz [ 1476.084358][ T5934] usb 5-1: SerialNumber: syz [ 1476.084456][T31509] bond24: (slave dummy0): Enslaving as an active interface with an up link [ 1476.089117][ T5934] usb 5-1: config 0 descriptor?? [ 1476.092066][T31521] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1476.096752][ T5934] hub 5-1:0.0: bad descriptor, ignoring hub [ 1476.103018][ T5934] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1476.208502][T31523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1476.223456][T31523] netlink: 'syz.2.5637': attribute type 7 has an invalid length. [ 1476.234579][T31523] netlink: 'syz.2.5637': attribute type 8 has an invalid length. [ 1476.237208][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1476.261719][T31523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1476.520487][ T1474] usb 5-1: USB disconnect, device number 127 [ 1476.988860][ T1474] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1477.148958][ T1474] usb 5-1: Using ep0 maxpacket: 32 [ 1477.156856][ T1474] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1477.173169][ T1474] usb 5-1: string descriptor 0 read error: -22 [ 1477.175781][ T1474] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1477.179182][ T1474] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1477.195504][ T1474] usb 5-1: config 0 descriptor?? [ 1477.203865][T31521] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1477.215361][ T1474] hub 5-1:0.0: bad descriptor, ignoring hub [ 1477.221838][ T1474] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1477.380133][T31526] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1477.427179][T31529] Process accounting resumed [ 1477.710476][T31485] block nbd13: Receive control failed (result -32) [ 1477.749366][ T5934] usb 5-1: USB disconnect, device number 2 [ 1477.818816][T13223] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1477.968920][T13223] usb 10-1: Using ep0 maxpacket: 32 [ 1477.973420][T13223] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1477.977685][T13223] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1477.982076][T13223] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1477.984922][T13223] usb 10-1: config 14 has no interface number 0 [ 1477.987205][T13223] usb 10-1: config 14 has no interface number 1 [ 1477.989298][T13223] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1477.993562][T13223] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1477.998018][T13223] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1478.001838][T13223] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1478.006231][T13223] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1478.010907][T13223] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.016211][T13223] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1478.018534][T13223] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1478.022823][T13223] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1478.026388][T13223] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.029551][T13223] usb 10-1: Product: syz [ 1478.030988][T13223] usb 10-1: Manufacturer: syz [ 1478.032850][T13223] usb 10-1: SerialNumber: syz [ 1478.248619][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1478.248637][ T40] audit: type=1326 audit(2000000520.209:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.262075][ T40] audit: type=1326 audit(2000000520.229:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.271563][ T40] audit: type=1326 audit(2000000520.239:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.281523][ T40] audit: type=1326 audit(2000000520.249:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.293624][ T40] audit: type=1326 audit(2000000520.259:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.301416][ T40] audit: type=1326 audit(2000000520.259:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.310404][ T40] audit: type=1326 audit(2000000520.259:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.319941][ T40] audit: type=1326 audit(2000000520.259:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.328623][ T40] audit: type=1326 audit(2000000520.259:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.337695][ T40] audit: type=1326 audit(2000000520.259:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31544 comm="syz.2.5642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1478.454361][T13223] legousbtower 10-1:14.57: interrupt endpoints not found [ 1478.464527][T31555] netlink: 'syz.4.5645': attribute type 1 has an invalid length. [ 1478.486030][T31555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1478.491807][T31557] netlink: 'syz.2.5642': attribute type 1 has an invalid length. [ 1478.520049][T31557] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1478.557332][T31555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5645'. [ 1478.569914][T31555] bond6: entered promiscuous mode [ 1478.572107][T31555] bond6: entered allmulticast mode [ 1478.662167][T13223] legousbtower 10-1:14.228: get version request failed: -71 [ 1478.666889][T13223] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1478.669421][T31561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.674492][T13223] usb 10-1: USB disconnect, device number 53 [ 1478.736746][T31566] FAULT_INJECTION: forcing a failure. [ 1478.736746][T31566] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.753928][T31566] CPU: 1 UID: 0 PID: 31566 Comm: syz.4.5646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.753947][T31566] Tainted: [L]=SOFTLOCKUP [ 1478.753951][T31566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1478.753958][T31566] Call Trace: [ 1478.753962][T31566] [ 1478.753967][T31566] dump_stack_lvl+0x100/0x190 [ 1478.753990][T31566] should_fail_ex.cold+0x5/0xa [ 1478.754004][T31566] should_failslab+0xc2/0x120 [ 1478.754018][T31566] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1478.754032][T31566] ? vhost_task_create+0xee/0x370 [ 1478.754042][T31566] ? trace_contention_end+0x122/0x170 [ 1478.754054][T31566] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1478.754070][T31566] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1478.754087][T31566] vhost_task_create+0xee/0x370 [ 1478.754098][T31566] ? __pfx_vhost_task_create+0x10/0x10 [ 1478.754107][T31566] ? register_lock_class+0x40/0x560 [ 1478.754128][T31566] ? __pfx_vhost_task_fn+0x10/0x10 [ 1478.754139][T31566] ? __pfx___mutex_lock+0x10/0x10 [ 1478.754159][T31566] kvm_mmu_post_init_vm+0x1b3/0x370 [ 1478.754173][T31566] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 1478.754187][T31566] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 1478.754207][T31566] kvm_vcpu_ioctl+0x730/0x1720 [ 1478.754224][T31566] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1478.754241][T31566] ? tomoyo_path_number_perm+0x188/0x580 [ 1478.754255][T31566] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1478.754273][T31566] ? get_pid_task+0x106/0x250 [ 1478.754291][T31566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1478.754307][T31566] ? do_vfs_ioctl+0x226/0x13e0 [ 1478.754318][T31566] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1478.754335][T31566] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1478.754352][T31566] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1478.754368][T31566] ? __fget_files+0x21f/0x3d0 [ 1478.754384][T31566] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1478.754400][T31566] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1478.754413][T31566] __do_fast_syscall_32+0xe7/0x970 [ 1478.754428][T31566] ? lockdep_hardirqs_on+0x78/0x100 [ 1478.754444][T31566] do_fast_syscall_32+0x32/0x70 [ 1478.754460][T31566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1478.754474][T31566] RIP: 0023:0xf704ef7c [ 1478.754483][T31566] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1478.754493][T31566] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1478.754504][T31566] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 1478.754510][T31566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1478.754516][T31566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1478.754522][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.754528][T31566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1478.754542][T31566] [ 1478.873518][T31562] block nbd14: Receive control failed (result -32) [ 1478.956757][T31569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5647'. [ 1478.960441][T31569] netlink: 'syz.4.5647': attribute type 7 has an invalid length. [ 1478.962842][T31569] netlink: 'syz.4.5647': attribute type 8 has an invalid length. [ 1478.965274][T31569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5647'. [ 1478.970522][T31569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5647'. [ 1479.739122][ T6810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1479.898955][ T6810] usb 5-1: Using ep0 maxpacket: 32 [ 1479.902443][ T6810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1479.907763][ T6810] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1479.910791][ T6810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1479.913460][ T6810] usb 5-1: Product: syz [ 1479.914909][ T6810] usb 5-1: Manufacturer: syz [ 1479.916481][ T6810] usb 5-1: SerialNumber: syz [ 1479.925857][ T6810] usb 5-1: config 0 descriptor?? [ 1479.933689][T31582] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1479.944652][ T6810] hub 5-1:0.0: bad descriptor, ignoring hub [ 1479.959244][ T6810] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1480.237592][T31570] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1480.259316][ T24] usb 5-1: USB disconnect, device number 3 [ 1481.083935][T31572] Process accounting resumed [ 1481.977273][T31601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5656'. [ 1481.981974][T31601] netlink: 'syz.5.5656': attribute type 7 has an invalid length. [ 1481.984670][T31601] netlink: 'syz.5.5656': attribute type 8 has an invalid length. [ 1481.987294][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5656'. [ 1482.008807][T31601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5656'. [ 1482.389324][ T5853] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1482.569029][ T5853] usb 10-1: Using ep0 maxpacket: 32 [ 1482.580242][ T5853] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1482.583419][ T5853] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1482.585974][ T5853] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1482.588473][ T5853] usb 10-1: config 14 has no interface number 0 [ 1482.591605][ T5853] usb 10-1: config 14 has no interface number 1 [ 1482.593711][ T5853] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1482.596990][ T5853] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1482.601993][ T5853] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1482.605687][ T5853] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1482.609972][ T5853] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1482.613877][ T5853] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1482.624697][ T5853] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1482.628855][ T5853] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1482.636965][ T5853] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1482.642626][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.645219][ T5853] usb 10-1: Product: syz [ 1482.646786][ T5853] usb 10-1: Manufacturer: syz [ 1482.648607][ T5853] usb 10-1: SerialNumber: syz [ 1483.070112][ T5853] legousbtower 10-1:14.57: interrupt endpoints not found [ 1483.354898][ T5853] legousbtower 10-1:14.228: get version request failed: -71 [ 1483.361295][ T5853] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1483.385974][ T5853] usb 10-1: USB disconnect, device number 54 [ 1485.551186][T31624] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1485.655309][T31626] Process accounting resumed [ 1489.040500][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.188791][T31686] netlink: 'syz.0.5676': attribute type 1 has an invalid length. [ 1490.215383][T31686] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1490.347787][T31686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5676'. [ 1490.366361][T31686] bond18: entered promiscuous mode [ 1490.368952][T31686] bond18: entered allmulticast mode [ 1490.378609][T31686] bond14: (slave dummy0): Releasing active interface [ 1490.382743][T31686] dummy0: left promiscuous mode [ 1490.384451][T31686] dummy0: left allmulticast mode [ 1490.391504][T31686] bond18: (slave dummy0): making interface the new active one [ 1490.393956][T31686] dummy0: entered promiscuous mode [ 1490.395934][T31686] dummy0: entered allmulticast mode [ 1490.401916][T31686] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 1490.463837][T31691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.688408][ T40] kauditd_printk_skb: 245 callbacks suppressed [ 1490.688426][ T40] audit: type=1326 audit(2000000532.649:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1490.702644][ T40] audit: type=1326 audit(2000000532.649:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1490.711870][ T40] audit: type=1326 audit(2000000532.649:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1490.719190][ T40] audit: type=1326 audit(2000000532.659:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1490.727369][ T40] audit: type=1326 audit(2000000532.659:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1490.836726][T31697] netlink: 'syz.0.5677': attribute type 1 has an invalid length. [ 1490.874966][T31697] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1490.994556][T31680] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1491.076381][T31681] Process accounting resumed [ 1491.819889][ T40] audit: type=1326 audit(2000000533.789:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1491.826933][ T40] audit: type=1326 audit(2000000533.789:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.0.5677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1493.469986][T31730] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1493.475802][T31730] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1493.730427][ T40] audit: type=1326 audit(2000000535.699:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31734 comm="syz.2.5685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1493.739035][ T40] audit: type=1326 audit(2000000535.699:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31734 comm="syz.2.5685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1493.749934][ T40] audit: type=1326 audit(2000000535.709:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31734 comm="syz.2.5685" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe3f7c code=0x7ffc0000 [ 1493.940462][T31721] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1493.977312][T31726] Process accounting resumed [ 1494.297969][T31731] lo speed is unknown, defaulting to 1000 [ 1497.086384][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 1497.086399][ T40] audit: type=1326 audit(2000000539.049:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.095697][ T40] audit: type=1326 audit(2000000539.059:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.102793][ T40] audit: type=1326 audit(2000000539.059:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.109874][ T40] audit: type=1326 audit(2000000539.069:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.153799][T31763] netlink: 'syz.5.5690': attribute type 1 has an invalid length. [ 1497.182258][T31763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1497.208568][ T40] audit: type=1326 audit(2000000539.129:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.218425][ T40] audit: type=1326 audit(2000000539.179:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1497.241677][ T40] audit: type=1326 audit(2000000539.209:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31755 comm="syz.5.5690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1499.749789][T10325] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1500.628783][T10325] usb 9-1: Using ep0 maxpacket: 32 [ 1500.669084][T10325] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.672172][T10325] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.679234][T10325] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1500.682011][T10325] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1500.684458][T10325] usb 9-1: Product: syz [ 1500.685725][T10325] usb 9-1: Manufacturer: syz [ 1500.687148][T10325] usb 9-1: SerialNumber: syz [ 1500.690583][T10325] usb 9-1: config 0 descriptor?? [ 1501.494035][T10325] usb 9-1: USB disconnect, device number 26 [ 1501.627742][ T40] audit: type=1326 audit(2000000543.589:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.0.5699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1501.636509][ T40] audit: type=1326 audit(2000000543.599:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.0.5699" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1501.659392][ T40] audit: type=1326 audit(2000000543.619:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.0.5699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1502.279527][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1502.279538][ T40] audit: type=1326 audit(2000000544.249:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.0.5699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1502.290959][ T40] audit: type=1326 audit(2000000544.259:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.0.5699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f7c code=0x7ffc0000 [ 1502.537973][T31564] block nbd15: Receive control failed (result -32) [ 1502.978820][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1503.149521][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 1503.156590][ T5853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1503.163769][ T5853] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1503.168086][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1503.174724][ T5853] usb 5-1: Product: syz [ 1503.176560][ T5853] usb 5-1: Manufacturer: syz [ 1503.179373][ T5853] usb 5-1: SerialNumber: syz [ 1503.185551][ T5853] usb 5-1: config 0 descriptor?? [ 1503.188506][T31837] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1503.194449][ T5853] hub 5-1:0.0: bad descriptor, ignoring hub [ 1503.197071][ T5853] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1503.839065][ T5934] usb 5-1: USB disconnect, device number 4 [ 1504.212054][ T40] audit: type=1326 audit(2000000546.179:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1504.223977][ T40] audit: type=1326 audit(2000000546.189:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1504.238465][ T40] audit: type=1326 audit(2000000546.199:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1504.249116][ T40] audit: type=1326 audit(2000000546.219:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1504.515705][T31859] netlink: 'syz.5.5707': attribute type 1 has an invalid length. [ 1504.542239][T31859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1505.022768][T31873] FAULT_INJECTION: forcing a failure. [ 1505.022768][T31873] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.036880][T31873] CPU: 1 UID: 0 PID: 31873 Comm: syz.2.5710 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.036928][T31873] Tainted: [L]=SOFTLOCKUP [ 1505.036934][T31873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1505.036944][T31873] Call Trace: [ 1505.036951][T31873] [ 1505.036958][T31873] dump_stack_lvl+0x100/0x190 [ 1505.036992][T31873] should_fail_ex.cold+0x5/0xa [ 1505.037014][T31873] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1505.037041][T31873] should_failslab+0xc2/0x120 [ 1505.037062][T31873] __kmalloc_noprof+0xe0/0x850 [ 1505.037088][T31873] ? lockdep_hardirqs_on+0x78/0x100 [ 1505.037118][T31873] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1505.037150][T31873] genl_family_rcv_msg_doit+0xc7/0x300 [ 1505.037178][T31873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1505.037203][T31873] ? genl_get_cmd+0x3e7/0x760 [ 1505.037233][T31873] ? bpf_lsm_capable+0x9/0x10 [ 1505.037250][T31873] ? security_capable+0x80/0x260 [ 1505.037268][T31873] ? ns_capable+0xd2/0xf0 [ 1505.037289][T31873] genl_rcv_msg+0x560/0x800 [ 1505.037317][T31873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.037342][T31873] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1505.037368][T31873] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1505.037391][T31873] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1505.037426][T31873] netlink_rcv_skb+0x159/0x420 [ 1505.037449][T31873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.037476][T31873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.037510][T31873] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1505.037534][T31873] genl_rcv+0x28/0x40 [ 1505.037556][T31873] netlink_unicast+0x585/0x850 [ 1505.037582][T31873] ? __pfx_netlink_unicast+0x10/0x10 [ 1505.037611][T31873] netlink_sendmsg+0x8b0/0xda0 [ 1505.037637][T31873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.037663][T31873] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1505.037685][T31873] ____sys_sendmsg+0x9e1/0xb70 [ 1505.037706][T31873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.037731][T31873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.037765][T31873] ___sys_sendmsg+0x190/0x1e0 [ 1505.037790][T31873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.037832][T31873] ? find_held_lock+0x2b/0x80 [ 1505.037872][T31873] __sys_sendmsg+0x170/0x220 [ 1505.037891][T31873] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.037914][T31873] ? __fget_files+0x21f/0x3d0 [ 1505.037943][T31873] ? ksys_write+0x1ac/0x250 [ 1505.037965][T31873] ? rcu_is_watching+0x12/0xc0 [ 1505.037989][T31873] __do_fast_syscall_32+0xe7/0x970 [ 1505.038015][T31873] ? lockdep_hardirqs_on+0x78/0x100 [ 1505.038042][T31873] do_fast_syscall_32+0x32/0x70 [ 1505.038069][T31873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1505.038092][T31873] RIP: 0023:0xf7fe3f7c [ 1505.038108][T31873] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1505.038125][T31873] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1505.038143][T31873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1505.038155][T31873] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1505.038166][T31873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1505.038176][T31873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.038186][T31873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1505.038211][T31873] [ 1505.338367][ T40] audit: type=1326 audit(2000000547.299:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1505.370081][ T40] audit: type=1326 audit(2000000547.309:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.5.5707" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1507.109927][T31877] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1507.128115][T31877] Process accounting resumed [ 1507.218950][T31906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1509.985621][ T40] audit: type=1326 audit(2000000551.949:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1509.998287][ T40] audit: type=1326 audit(2000000551.959:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1510.007393][ T40] audit: type=1326 audit(2000000551.959:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1510.014825][ T40] audit: type=1326 audit(2000000551.959:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1510.022092][ T40] audit: type=1326 audit(2000000551.969:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1510.150500][T31925] netlink: 'syz.5.5721': attribute type 1 has an invalid length. [ 1510.192032][T31925] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1511.003629][T31932] netlink: 'syz.4.5723': attribute type 1 has an invalid length. [ 1511.047097][T31932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1511.101384][ T40] audit: type=1326 audit(2000000553.069:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1511.123741][ T40] audit: type=1326 audit(2000000553.069:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.5.5721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 1511.139880][T31932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1511.149102][T31932] bond7: entered promiscuous mode [ 1511.151309][T31932] bond7: entered allmulticast mode [ 1511.349740][T31936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.865798][T31944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1512.775860][T31832] block nbd16: Receive control failed (result -32) [ 1514.484009][T31982] block nbd17: Receive control failed (result -32) [ 1515.839807][T31991] ================================================================== [ 1515.842290][T31991] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0x6e2/0x760 [ 1515.844601][T31991] Read of size 8 at addr ffff88806e062fc8 by task syz.5.5734/31991 [ 1515.847743][T31991] [ 1515.848749][T31991] CPU: 1 UID: 0 PID: 31991 Comm: syz.5.5734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.848766][T31991] Tainted: [L]=SOFTLOCKUP [ 1515.848770][T31991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1515.848777][T31991] Call Trace: [ 1515.848781][T31991] [ 1515.848785][T31991] dump_stack_lvl+0x100/0x190 [ 1515.848805][T31991] print_report+0x13d/0x4b0 [ 1515.848821][T31991] ? __virt_addr_valid+0x239/0x430 [ 1515.848837][T31991] ? blk_mq_free_rqs+0x6e2/0x760 [ 1515.848847][T31991] kasan_report+0xdf/0x1d0 [ 1515.848859][T31991] ? blk_mq_free_rqs+0x6e2/0x760 [ 1515.848870][T31991] blk_mq_free_rqs+0x6e2/0x760 [ 1515.848881][T31991] blk_mq_free_map_and_rqs+0x30/0x120 [ 1515.848892][T31991] blk_mq_alloc_sched_tags+0x259/0x350 [ 1515.848909][T31991] blk_mq_alloc_sched_res+0x8e/0x250 [ 1515.848925][T31991] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 1515.848942][T31991] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 1515.848953][T31991] ? nbd_start_device+0x19b/0xbd0 [ 1515.848965][T31991] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1515.848982][T31991] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1515.848995][T31991] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1515.849008][T31991] nbd_start_device+0x1a6/0xbd0 [ 1515.849020][T31991] nbd_genl_connect+0xff2/0x1a40 [ 1515.849031][T31991] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1515.849042][T31991] ? __nla_parse+0x40/0x60 [ 1515.849055][T31991] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1515.849071][T31991] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1515.849089][T31991] genl_family_rcv_msg_doit+0x214/0x300 [ 1515.849105][T31991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1515.849120][T31991] ? genl_get_cmd+0x3e7/0x760 [ 1515.849136][T31991] ? __alloc_skb+0x185/0x710 [ 1515.849145][T31991] ? netlink_alloc_large_skb+0x69/0x150 [ 1515.849159][T31991] ? __radix_tree_lookup+0x217/0x2b0 [ 1515.849173][T31991] genl_rcv_msg+0x560/0x800 [ 1515.849188][T31991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1515.849204][T31991] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1515.849216][T31991] ? __lock_acquire+0x4a5/0x2630 [ 1515.849232][T31991] netlink_rcv_skb+0x159/0x420 [ 1515.849246][T31991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1515.849261][T31991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1515.849277][T31991] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1515.849291][T31991] genl_rcv+0x28/0x40 [ 1515.849304][T31991] netlink_unicast+0x585/0x850 [ 1515.849318][T31991] ? __pfx_netlink_unicast+0x10/0x10 [ 1515.849334][T31991] netlink_sendmsg+0x8b0/0xda0 [ 1515.849348][T31991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.849373][T31991] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1515.849385][T31991] ____sys_sendmsg+0x9e1/0xb70 [ 1515.849399][T31991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.849413][T31991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1515.849425][T31991] ? __pfx___futex_wait+0x10/0x10 [ 1515.849439][T31991] ? __pfx_futex_wake_mark+0x10/0x10 [ 1515.849453][T31991] ___sys_sendmsg+0x190/0x1e0 [ 1515.849467][T31991] ? __pfx____sys_sendmsg+0x10/0x10 [ 1515.849484][T31991] ? find_held_lock+0x2b/0x80 [ 1515.849500][T31991] __sys_sendmsg+0x170/0x220 [ 1515.849511][T31991] ? __pfx___sys_sendmsg+0x10/0x10 [ 1515.849525][T31991] ? rcu_is_watching+0x12/0xc0 [ 1515.849537][T31991] __do_fast_syscall_32+0xe7/0x970 [ 1515.849553][T31991] ? lockdep_hardirqs_on+0x78/0x100 [ 1515.849568][T31991] do_fast_syscall_32+0x32/0x70 [ 1515.849583][T31991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1515.849597][T31991] RIP: 0023:0xf7f52f7c [ 1515.849605][T31991] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1515.849616][T31991] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1515.849628][T31991] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0 [ 1515.849639][T31991] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.849645][T31991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1515.849652][T31991] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1515.849659][T31991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.849669][T31991] [ 1515.849673][T31991] [ 1515.996684][T31991] Allocated by task 31991: [ 1515.998335][T31991] kasan_save_stack+0x30/0x50 [ 1516.000056][T31991] kasan_save_track+0x14/0x30 [ 1516.001654][T31991] __kasan_kmalloc+0xaa/0xb0 [ 1516.003067][T31991] __kmalloc_node_noprof+0x307/0x850 [ 1516.004897][T31991] blk_mq_alloc_tag_set+0x477/0x1330 [ 1516.006830][T31991] nbd_dev_add+0x342/0xb10 [ 1516.008407][T31991] nbd_genl_connect+0xb8d/0x1a40 [ 1516.009942][T31991] genl_family_rcv_msg_doit+0x214/0x300 [ 1516.011633][T31991] genl_rcv_msg+0x560/0x800 [ 1516.013047][T31991] netlink_rcv_skb+0x159/0x420 [ 1516.014512][T31991] genl_rcv+0x28/0x40 [ 1516.015763][T31991] netlink_unicast+0x585/0x850 [ 1516.017490][T31991] netlink_sendmsg+0x8b0/0xda0 [ 1516.019501][T31991] ____sys_sendmsg+0x9e1/0xb70 [ 1516.021485][T31991] ___sys_sendmsg+0x190/0x1e0 [ 1516.023448][T31991] __sys_sendmsg+0x170/0x220 [ 1516.025378][T31991] __do_fast_syscall_32+0xe7/0x970 [ 1516.027388][T31991] do_fast_syscall_32+0x32/0x70 [ 1516.029362][T31991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1516.031864][T31991] [ 1516.032856][T31991] The buggy address belongs to the object at ffff88806e062fc0 [ 1516.032856][T31991] which belongs to the cache kmalloc-8 of size 8 [ 1516.038097][T31991] The buggy address is located 0 bytes to the right of [ 1516.038097][T31991] allocated 8-byte region [ffff88806e062fc0, ffff88806e062fc8) [ 1516.043688][T31991] [ 1516.044698][T31991] The buggy address belongs to the physical page: [ 1516.047247][T31991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806e0627e0 pfn:0x6e062 [ 1516.051216][T31991] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 1516.054462][T31991] page_type: f5(slab) [ 1516.056117][T31991] raw: 04fff00000000200 ffff88801b842500 ffffea0001a9a190 ffffea0001451cd0 [ 1516.059563][T31991] raw: ffff88806e0627e0 0000000800800051 00000000f5000000 0000000000000000 [ 1516.062932][T31991] page dumped because: kasan: bad access detected [ 1516.065392][T31991] page_owner tracks the page as allocated [ 1516.067649][T31991] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16609, tgid 16609 (syz-executor), ts 773954207185, free_ts 773953989770 [ 1516.075935][T31991] post_alloc_hook+0xfd/0x120 [ 1516.077836][T31991] get_page_from_freelist+0x11a6/0x3410 [ 1516.080096][T31991] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1516.082540][T31991] new_slab+0xa6/0x6c0 [ 1516.084246][T31991] refill_objects+0x277/0x420 [ 1516.086187][T31991] __pcs_replace_empty_main+0x375/0x650 [ 1516.088425][T31991] __kmalloc_node_noprof+0x69a/0x850 [ 1516.090585][T31991] __vmalloc_node_range_noprof+0x409/0x1630 [ 1516.092978][T31991] __vmalloc_node_noprof+0xad/0xf0 [ 1516.095048][T31991] xt_compat_init_offsets+0xe2/0x1f0 [ 1516.097224][T31991] translate_compat_table+0x20b/0x17e0 [ 1516.099449][T31991] compat_do_replace+0x279/0x500 [ 1516.101500][T31991] do_ip6t_set_ctl+0x562/0xb00 [ 1516.103463][T31991] nf_setsockopt+0x8d/0xf0 [ 1516.105329][T31991] ipv6_setsockopt+0x135/0x170 [ 1516.107300][T31991] tcp_setsockopt+0xa7/0x100 [ 1516.109242][T31991] page last free pid 16609 tgid 16609 stack trace: [ 1516.111892][T31991] __free_frozen_pages+0x794/0x10a0 [ 1516.114055][T31991] __kasan_populate_vmalloc+0x1ea/0x210 [ 1516.116328][T31991] alloc_vmap_area+0x95d/0x2b70 [ 1516.118352][T31991] __get_vm_area_node+0x1ca/0x330 [ 1516.120435][T31991] __vmalloc_node_range_noprof+0x228/0x1630 [ 1516.122860][T31991] __vmalloc_node_noprof+0xad/0xf0 [ 1516.124609][T31991] xt_compat_init_offsets+0xe2/0x1f0 [ 1516.126550][T31991] translate_compat_table+0x20b/0x17e0 [ 1516.128830][T31991] compat_do_replace+0x279/0x500 [ 1516.130895][T31991] do_ip6t_set_ctl+0x562/0xb00 [ 1516.132867][T31991] nf_setsockopt+0x8d/0xf0 [ 1516.134689][T31991] ipv6_setsockopt+0x135/0x170 [ 1516.136684][T31991] tcp_setsockopt+0xa7/0x100 [ 1516.138606][T31991] do_sock_setsockopt+0xf3/0x1d0 [ 1516.140671][T31991] __sys_setsockopt+0x119/0x190 [ 1516.142663][T31991] __ia32_compat_sys_socketcall+0x556/0x770 [ 1516.145094][T31991] [ 1516.146101][T31991] Memory state around the buggy address: [ 1516.148403][T31991] ffff88806e062e80: 05 fc fc fc 05 fc fc fc 06 fc fc fc fa fc fc fc [ 1516.151608][T31991] ffff88806e062f00: 06 fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc [ 1516.154680][T31991] >ffff88806e062f80: fa fc fc fc 05 fc fc fc 00 fc fc fc 07 fc fc fc [ 1516.157753][T31991] ^ [ 1516.160399][T31991] ffff88806e063000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1516.163627][T31991] ffff88806e063080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1516.166862][T31991] ================================================================== [ 1516.453485][T31991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1516.456507][T31991] CPU: 1 UID: 0 PID: 31991 Comm: syz.5.5734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.460907][T31991] Tainted: [L]=SOFTLOCKUP [ 1516.462697][T31991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1516.466737][T31991] Call Trace: [ 1516.468146][T31991] [ 1516.469385][T31991] dump_stack_lvl+0x100/0x190 [ 1516.471307][T31991] vpanic+0x552/0x970 [ 1516.472994][T31991] ? __pfx_vpanic+0x10/0x10 [ 1516.474891][T31991] ? mark_held_locks+0x40/0x70 [ 1516.476883][T31991] ? blk_mq_free_rqs+0x6e2/0x760 [ 1516.478896][T31991] panic+0xd1/0xe0 [ 1516.480434][T31991] ? __pfx_panic+0x10/0x10 [ 1516.482290][T31991] ? blk_mq_free_rqs+0x6e2/0x760 [ 1516.484319][T31991] ? preempt_schedule_common+0x42/0xc0 [ 1516.486546][T31991] check_panic_on_warn.cold+0x19/0x34 [ 1516.488809][T31991] end_report.part.0+0x3a/0x90 [ 1516.490839][T31991] kasan_report.cold+0xe/0x18 [ 1516.492809][T31991] ? blk_mq_free_rqs+0x6e2/0x760 [ 1516.494796][T31991] blk_mq_free_rqs+0x6e2/0x760 [ 1516.496799][T31991] blk_mq_free_map_and_rqs+0x30/0x120 [ 1516.498990][T31991] blk_mq_alloc_sched_tags+0x259/0x350 [ 1516.501163][T31991] blk_mq_alloc_sched_res+0x8e/0x250 [ 1516.503318][T31991] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 1516.505733][T31991] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 1516.508143][T31991] ? nbd_start_device+0x19b/0xbd0 [ 1516.510247][T31991] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1516.512554][T31991] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1516.515099][T31991] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1516.517437][T31991] nbd_start_device+0x1a6/0xbd0 [ 1516.519451][T31991] nbd_genl_connect+0xff2/0x1a40 [ 1516.521387][T31991] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1516.523532][T31991] ? __nla_parse+0x40/0x60 [ 1516.525411][T31991] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1516.527935][T31991] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1516.530430][T31991] genl_family_rcv_msg_doit+0x214/0x300 [ 1516.532124][T31991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1516.533946][T31991] ? genl_get_cmd+0x3e7/0x760 [ 1516.535391][T31991] ? __alloc_skb+0x185/0x710 [ 1516.536837][T31991] ? netlink_alloc_large_skb+0x69/0x150 [ 1516.538644][T31991] ? __radix_tree_lookup+0x217/0x2b0 [ 1516.540333][T31991] genl_rcv_msg+0x560/0x800 [ 1516.541734][T31991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.543298][T31991] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1516.544947][T31991] ? __lock_acquire+0x4a5/0x2630 [ 1516.546474][T31991] netlink_rcv_skb+0x159/0x420 [ 1516.548024][T31991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.549842][T31991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.551487][T31991] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1516.553190][T31991] genl_rcv+0x28/0x40 [ 1516.554432][T31991] netlink_unicast+0x585/0x850 [ 1516.555918][T31991] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.558092][T31991] netlink_sendmsg+0x8b0/0xda0 [ 1516.559755][T31991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.561571][T31991] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1516.563864][T31991] ____sys_sendmsg+0x9e1/0xb70 [ 1516.565893][T31991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.568113][T31991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.570333][T31991] ? __pfx___futex_wait+0x10/0x10 [ 1516.572438][T31991] ? __pfx_futex_wake_mark+0x10/0x10 [ 1516.574231][T31991] ___sys_sendmsg+0x190/0x1e0 [ 1516.575670][T31991] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.577278][T31991] ? find_held_lock+0x2b/0x80 [ 1516.579002][T31991] __sys_sendmsg+0x170/0x220 [ 1516.580931][T31991] ? __pfx___sys_sendmsg+0x10/0x10 [ 1516.583066][T31991] ? rcu_is_watching+0x12/0xc0 [ 1516.585070][T31991] __do_fast_syscall_32+0xe7/0x970 [ 1516.587203][T31991] ? lockdep_hardirqs_on+0x78/0x100 [ 1516.589389][T31991] do_fast_syscall_32+0x32/0x70 [ 1516.590938][T31991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1516.592986][T31991] RIP: 0023:0xf7f52f7c [ 1516.594599][T31991] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1516.602353][T31991] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1516.605769][T31991] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0 [ 1516.608989][T31991] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.612212][T31991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1516.615444][T31991] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1516.618720][T31991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.622015][T31991] [ 1516.624022][T31991] Kernel Offset: disabled [ 1516.625419][T31991] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:49:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=dffffc0000000000 RCX=ffffffff89241298 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88806f65a540 RBP=ffff88806f65a540 RSP=ffffc9000d70fb00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=000000000000bdc0 R15=0000000080003500 RIP=ffffffff8207fd60 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809718e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=0000000076670000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bc459e261c4a354 198aaf1bb37d4227 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 abef02a5cf64ff57 f8de5c8cdf03ff7c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a6c52ad608657f1 144478d221392baa ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7b22efa347ba170 8569aa39f8f1bbd8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 12de6f6af583497c 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ebb7c4200000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7b1154603587fd8 f7d98b4075745348 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a8224dab ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92fa944d30fb4bfe 772d554814abafa0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0b9aa4be8a3718d 83a382dc5cd267c8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff857c4615 RDI=ffffffff9b449300 RBP=ffffffff9b4492c0 RSP=ffffc9000d6feb10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000005 R14=0000000000000010 R15=0000000000000000 RIP=ffffffff857c463f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809728e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4b8eda4 CR3=000000005f53f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8500d067 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880652a4a80 RBP=e1ee3e37d21ed985 RSP=ffffc9000d6ee888 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff88806a9c0042 R12=44fe79a5a1715fc0 R13=0000000000000007 R14=dffffc0000000000 R15=ffff88806a9c0000 RIP=ffffffff8207fd60 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809738e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001c84 CR3=000000005f53f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000400 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000026beaa3 RBX=ffff88801c3ca540 RCX=ffffffff8b871225 RDX=0000000000000000 RSI=ffffffff8df1ac79 RDI=ffffffff8c1c4680 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a67b5 R10=ffff88802b533dab R11=0000000000000000 R12=0000000000000003 R13=ffffed10038794a8 R14=0000000000000003 R15=ffffffff90d74750 RIP=ffffffff8b86f87f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809748e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b14a8 CR3=0000000070fff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000010000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000