last executing test programs: 20m24.173983423s ago: executing program 32 (id=247): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 19m16.474585213s ago: executing program 5 (id=449): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES64=r0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xf, {0x1003, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x7, 0x6, 0x4, 0x8, 0x0, 0x1002, 0x0, 0x6000, 0x2000, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000d80)={{0x0, r2, r3, r2, r3, 0x40, 0x9f00}, 0x0, 0x0, 0xffffffffb14a1d05, 0x3f34f199, 0x414ea6e7, 0x9, 0x100, 0x2, 0x957, 0x0, r4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffaaaaaaaaaaaa86dd6087fb8900180000fe880000000000000000000000000001fc0200000000000000e3ffffff0000000002000000040100010100c20476cc5ae90100ae4a1b49000000725d170257bc60386666274fd5959471e56a54466731b7dbe22476421e996d3815ccae657c6326ad98ddc985ed4f78cc35c6ad709c153d00d6a9054dd90d8fa1e2acbda60d09cd77850000000000000000"], 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace$setopts(0x4200, r4, 0x2, 0x0) writev(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000010000)=ANY=[@ANYBLOB="44010000020101080000000000000000020000081c00198008000200040000000800010002000000080002000002000008000840000007e80800154000000000240002800c000280050001000100000014000180080001000000000008000200ac1e000114001880080003400000000408000140000000094c00068014000400ff02000000000000000000000000000108000200e0000002080001000000000014000500fc01000000000000000000000000000108000100ffffffff08000100ac1414bb480001800c000280050001002f0000000c00028005000100060000000c00028005000100840000001400018008000100ac1414bb08000000000000000400028005"], 0x144}}, 0x20000004) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) readv(r7, &(0x7f0000000800)=[{0x0, 0xc8}, {&(0x7f00000004c0)=""/198, 0xc6}], 0x2) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0xfd, 0xfe, "8000"}, 0xdf6, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x6, 0x5, 0x4, 0x0, 0x7f}) write$P9_RSTATu(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/575, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x23b) 19m15.399501727s ago: executing program 5 (id=450): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c81968a19c5f20e62120d022001000000000700", @ANYRES32=0x0, @ANYBLOB="312400000000000014002b8030001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_eee={0x0, 0x1, 0xb, 0x4, 0x8, 0x2, 0x65, 0x2, [0x3, 0xc]}}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) 19m11.704287075s ago: executing program 5 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff52e84407000009300000d60600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac19"], &(0x7f0000000280)='GPL\x00', 0x3}, 0x94) 19m11.424513803s ago: executing program 5 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)=0xf0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 19m9.704614732s ago: executing program 5 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/profiling\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) write(r0, &(0x7f00000000c0)='kvm', 0x3) 19m6.887411949s ago: executing program 5 (id=481): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x18, 0x1f, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 18m51.732156922s ago: executing program 33 (id=481): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x18, 0x1f, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 12m19.326611142s ago: executing program 6 (id=2006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 12m19.169175586s ago: executing program 6 (id=2009): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002a000000850000002a0000009500000000000000c6716cbde55f79594dec8881a4fc64ae128eb989df3a10205371784013f446bd23187959a0c6840480c4b76b55b17764bba4"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 12m18.110975146s ago: executing program 6 (id=2023): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x14}, 0x1c, 0x0}, 0x48043) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_NMI(r2, 0xae9a) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, &(0x7f0000000240)="1fbf9725174750", 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2842, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0xc, 0xfffffdd9) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x4000000000000, 0x7f, 0x100000, 0x0, 0x2004c8, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m17.510219023s ago: executing program 2 (id=2031): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 12m17.03275097s ago: executing program 2 (id=2038): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 12m16.673616289s ago: executing program 6 (id=2043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 12m16.61593027s ago: executing program 2 (id=2044): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 12m15.654716249s ago: executing program 6 (id=2058): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 12m15.453631476s ago: executing program 6 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000100c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12m14.295725362s ago: executing program 2 (id=2073): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 12m14.121006351s ago: executing program 2 (id=2076): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 12m13.918351154s ago: executing program 2 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 12m12.677021794s ago: executing program 0 (id=2099): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x500}, 0xc) 12m12.635030545s ago: executing program 0 (id=2101): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x4, "906a6007"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200de5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000500)={0x40}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x89, 0x2, 0x1}}) 12m10.093549909s ago: executing program 0 (id=2137): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000200)=""/203, 0xcb}], 0x2) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 12m9.924818327s ago: executing program 0 (id=2140): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 12m9.68197742s ago: executing program 0 (id=2144): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000300)={0x0, 0xe, 0xe, "7ae9f9c85495dd645dbd7050c84f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m7.943463202s ago: executing program 0 (id=2168): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x3fd, 0x1, 0x110}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'lo\x00', @random='\x00\x00\x00\x00\x00 '}) 12m0.337570291s ago: executing program 34 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000100c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 11m58.858311737s ago: executing program 35 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 11m52.798058097s ago: executing program 36 (id=2168): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x3fd, 0x1, 0x110}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'lo\x00', @random='\x00\x00\x00\x00\x00 '}) 2m42.420654776s ago: executing program 9 (id=7342): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000805000001"], 0xa) 2m41.118957644s ago: executing program 9 (id=7355): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m40.447686343s ago: executing program 9 (id=7357): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2m40.140217747s ago: executing program 9 (id=7359): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x2401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.522396435s ago: executing program 9 (id=7366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2m35.545008871s ago: executing program 9 (id=7371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, 0x0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7ff, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x6, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x20004, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x2, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x3, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0x7, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) 2m20.446849786s ago: executing program 37 (id=7371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, 0x0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7ff, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x6, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x20004, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x2, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x3, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0x7, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) 19.25666477s ago: executing program 3 (id=7812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0x10002, [0x200000000000de99, 0x8c9, 0xfffffffffffffffc, 0x20000000000000c4, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1000000028, 0x8, 0x6, 0x9, 0x9, 0x0, 0x3, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r0, 0x0, 0x10448) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x2}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r11 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000740)={0x40000004}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r13) 16.911932664s ago: executing program 3 (id=7818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x4, 0x3, 0x14, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffc2, @private0, 0x7}}, @sadb_address={0x5, 0x17, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @private2, 0x1000}}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'security.capability\x00'}, &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(r8, &(0x7f0000000000), 0x0) 14.604287769s ago: executing program 3 (id=7826): setsockopt(0xffffffffffffffff, 0x6, 0x87d2, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1041, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 12.799346301s ago: executing program 3 (id=7834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x4004010) 12.477363543s ago: executing program 4 (id=7837): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000440)=[{0x400000000, 0x1, 0x5, 0x6, 0x3}, {0x6, 0x7, 0x3, 0x8, 0x93d}, {0x8, 0x8, 0x9, 0x2, 0x2}, {0xb, 0x4, 0x70, 0x2, 0x40}, {0x4e, 0x8, 0x8, 0x8da, 0x20}], 0x5, 0x28, 0x1, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.378178573s ago: executing program 3 (id=7838): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 10.218178617s ago: executing program 3 (id=7842): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 8.162350748s ago: executing program 4 (id=7846): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13, 0xd}], 0x1) 6.818307137s ago: executing program 8 (id=7848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x4004010) 6.241330303s ago: executing program 1 (id=7852): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 6.237153113s ago: executing program 8 (id=7853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 6.090735677s ago: executing program 4 (id=7855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendto$inet6(r2, &(0x7f00000005c0)="05", 0x1, 0x40000, &(0x7f00000015c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,f', @ANYRESOCT=r0, @ANYBLOB='\x00']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) 4.234061666s ago: executing program 1 (id=7856): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000440)=[{0x400000000, 0x1, 0x5, 0x6, 0x3}, {0x6, 0x7, 0x3, 0x8, 0x93d}, {0x8, 0x8, 0x9, 0x2, 0x2}, {0xb, 0x4, 0x70, 0x2, 0x40}, {0x4e, 0x8, 0x8, 0x8da, 0x20}], 0x5, 0x28, 0x1, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.78517096s ago: executing program 8 (id=7857): syz_usb_connect(0x1, 0x3d, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 3.585739686s ago: executing program 7 (id=7858): setsockopt(0xffffffffffffffff, 0x6, 0x87d2, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 3.053092404s ago: executing program 7 (id=7859): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) 3.010445525s ago: executing program 7 (id=7860): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.995664833s ago: executing program 8 (id=7861): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.87320226s ago: executing program 8 (id=7862): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000002a40)=[{0x0}, {&(0x7f0000002680)="d8", 0x1}], 0x2) 2.816594222s ago: executing program 1 (id=7863): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 2.754503358s ago: executing program 7 (id=7864): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13, 0xd}], 0x1) 2.719607144s ago: executing program 8 (id=7865): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b24, 0x0) 2.680619426s ago: executing program 4 (id=7866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1.40104499s ago: executing program 1 (id=7867): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x64) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000800048000000090a020400000000000000000100000008000a40000000f20800020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xec}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000000)={0xeeee0000, 0x12000}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_hv_synic_set_msr/enable\x00', 0x2, 0x0) read$FUSE(r9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x12, 0x100, 0x0, 0x0, 0x0, 0x2004c5, 0x2, 0x6, 0x0, 0xf, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x9], 0x5000, 0x140040}) r11 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x143484) ioctl$LOOP_GET_STATUS64(r11, 0x4c05, 0xffffffffffffffff) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.355311195s ago: executing program 7 (id=7868): setsockopt(0xffffffffffffffff, 0x6, 0x87d2, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 1.212667177s ago: executing program 4 (id=7869): mkdirat(0xffffffffffffff9c, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 379.953627ms ago: executing program 1 (id=7871): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 173.410662ms ago: executing program 4 (id=7872): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x8, &(0x7f0000000000)={0x15, "0700b0090000000000000064ebcddff888cf0437600c9212860500"}}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000400)="5af17e1763c3", 0x0, 0x5, 0x10023, 0xfffffffd, 0x0}) socket(0x10, 0x80d, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x0, 0x181}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0xa4d1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x73b2abab56ff3d7e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x10}, {0x8}, {0x8, 0x0, 0xfffffff9}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0x74}}, 0x48008) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usbip_server_init(0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000300), 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=7873): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000440)=[{0x400000000, 0x1, 0x5, 0x6, 0x3}, {0x6, 0x7, 0x3, 0x8, 0x93d}, {0x5, 0x2, 0x5, 0x8, 0xa8a}, {0xb, 0x4, 0x70, 0x2, 0x40}, {0x4e, 0x8, 0x8, 0x8da, 0x20}], 0x5, 0x28, 0x1, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): = 0x79bf [ 914.068999][T19410] kvm: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3732 [ 914.073947][T19410] kvm_intel: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xac61 [ 914.088900][T19410] kvm: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xac23 [ 914.121687][T19410] kvm: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2517 [ 914.121792][T19410] kvm: kvm [19409]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 914.150978][T19410] kvm: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfdc1 [ 914.165463][T19410] kvm_intel: kvm [19409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc6d3 [ 914.300401][T19419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5219'. [ 914.486176][T19419] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.548410][T19419] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.660111][ T37] audit: type=1326 audit(6080314538.895:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19411 comm="syz.7.5217" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f352223de99 code=0x7fc00000 [ 914.721161][T19192] team0: Port device team_slave_0 added [ 914.787268][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5221'. [ 914.964319][T19192] team0: Port device team_slave_1 added [ 915.439047][ T56] hsr_slave_0: left promiscuous mode [ 915.481402][ T56] hsr_slave_1: left promiscuous mode [ 915.484205][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.484228][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.538991][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.539021][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.798687][ T56] veth1_macvtap: left promiscuous mode [ 915.798800][ T56] veth0_macvtap: left promiscuous mode [ 915.799071][ T56] veth1_vlan: left promiscuous mode [ 915.799266][ T56] veth0_vlan: left promiscuous mode [ 916.303053][T19462] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5230'. [ 916.862064][ T37] audit: type=1326 audit(6080314541.095:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19472 comm="syz.9.5235" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x0 [ 917.310553][ T56] team0 (unregistering): Port device team_slave_1 removed [ 917.370028][ T56] team0 (unregistering): Port device team_slave_0 removed [ 917.658614][ T5256] 8021q: adding VLAN 0 to HW filter on device eth22 [ 917.661649][T19192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.661667][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.661699][T19192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.755939][T19192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.755959][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.755991][T19192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.431389][T19192] hsr_slave_0: entered promiscuous mode [ 918.453739][T19192] hsr_slave_1: entered promiscuous mode [ 919.129429][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000ee71 [ 919.135810][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x79bf [ 919.156172][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3732 [ 919.169001][T19505] kvm_intel: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xac61 [ 919.169587][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xac23 [ 919.174266][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2517 [ 919.174345][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 919.220866][T19505] kvm: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfdc1 [ 919.226235][T19505] kvm_intel: kvm [19503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc6d3 [ 920.862013][ T5256] 8021q: adding VLAN 0 to HW filter on device eth23 [ 924.422494][T19192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 924.547913][T19192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 924.566076][T19192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 924.788713][T19192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 924.795138][T19192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 924.960760][T19192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.995049][T19192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 925.106081][T19192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 925.538828][T19679] netlink: 'syz.7.5279': attribute type 12 has an invalid length. [ 925.666665][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.827987][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.867950][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.868083][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.143980][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.146575][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.290784][T19192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.746146][T19192] veth0_vlan: entered promiscuous mode [ 928.803212][T19192] veth1_vlan: entered promiscuous mode [ 928.901981][T19192] veth0_macvtap: entered promiscuous mode [ 928.923680][T19192] veth1_macvtap: entered promiscuous mode [ 928.975991][T19192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.006352][T19192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.039918][ T66] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.040912][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.043578][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.044753][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.249297][ T37] audit: type=1326 audit(6080314553.485:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.251322][ T37] audit: type=1326 audit(6080314553.485:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.253193][ T37] audit: type=1326 audit(6080314553.485:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.253862][ T37] audit: type=1326 audit(6080314553.485:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.253923][ T37] audit: type=1326 audit(6080314553.485:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.253973][ T37] audit: type=1326 audit(6080314553.485:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.254231][ T37] audit: type=1326 audit(6080314553.485:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.254877][ T37] audit: type=1326 audit(6080314553.485:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.255338][ T37] audit: type=1326 audit(6080314553.485:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 929.255390][ T37] audit: type=1326 audit(6080314553.485:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.5292" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdb6e8fde99 code=0x7ffc0000 [ 930.429969][T19763] netlink: 'syz.9.5289': attribute type 12 has an invalid length. [ 930.757607][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.757630][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.213509][T19785] sctp: [Deprecated]: syz.7.5299 (pid 19785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.213509][T19785] Use struct sctp_sack_info instead [ 931.317656][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.317680][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.625565][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.625639][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.955612][T19797] netlink: 'syz.1.5304': attribute type 12 has an invalid length. [ 932.971724][T19813] syz.7.5308 (19813) used greatest stack depth: 19360 bytes left [ 936.288950][ T37] kauditd_printk_skb: 110 callbacks suppressed [ 936.288969][ T37] audit: type=1326 audit(6080314560.525:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19868 comm="syz.7.5328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x7fc00000 [ 936.656644][T19864] kexec: Could not allocate control_code_buffer [ 936.983188][ T37] audit: type=1326 audit(6080314561.215:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19868 comm="syz.7.5328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f352223de99 code=0x7fc00000 [ 937.537009][T19909] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5343'. [ 938.543821][ T37] audit: type=1326 audit(6080314562.775:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19924 comm="syz.9.5349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x7fc00000 [ 939.253922][ T37] audit: type=1326 audit(6080314563.485:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19924 comm="syz.9.5349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a950bde99 code=0x7fc00000 [ 940.440790][ T37] audit: type=1326 audit(6080314564.665:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19986 comm="syz.8.5372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e8fde99 code=0x7fc00000 [ 941.153868][ T37] audit: type=1326 audit(6080314565.385:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19986 comm="syz.8.5372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdb6e8fde99 code=0x7fc00000 [ 942.444272][T20003] kexec: Could not allocate control_code_buffer [ 944.913442][T20085] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5409'. [ 945.251362][T20087] kvm: kvm [20086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1662f5cc0 [ 945.267397][T20087] kvm: kvm [20086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x662f2d00 [ 945.286723][T20087] kvm_intel: kvm [20086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x662f5c22 [ 945.317631][T20087] kvm: kvm [20086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x662f5c61 [ 945.317726][T20087] kvm: kvm [20086]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 946.380037][ T37] audit: type=1326 audit(6080314570.615:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x7ffc0000 [ 946.380218][ T37] audit: type=1326 audit(6080314570.615:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x7ffc0000 [ 946.380758][ T37] audit: type=1326 audit(6080314570.615:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x7ffc0000 [ 946.381203][ T37] audit: type=1326 audit(6080314570.615:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x7ffc0000 [ 946.381257][ T37] audit: type=1326 audit(6080314570.615:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f352223de99 code=0x7ffc0000 [ 946.444497][ T37] audit: type=1326 audit(6080314570.675:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35221fe6ce code=0x7ffc0000 [ 946.456084][ T37] audit: type=1326 audit(6080314570.685:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35221fe6ce code=0x7ffc0000 [ 946.466310][ T37] audit: type=1326 audit(6080314570.695:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35221fe6ce code=0x7ffc0000 [ 946.478095][ T37] audit: type=1326 audit(6080314570.715:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35221fe6ce code=0x7ffc0000 [ 946.483558][ T37] audit: type=1326 audit(6080314570.715:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20101 comm="syz.7.5417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35221fe6ce code=0x7ffc0000 [ 948.622377][T20146] fuse: Unknown parameter '0x0000000000000003' [ 949.057653][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 949.972201][T20177] fuse: Unknown parameter 'fd0x0000000000000003' [ 951.037299][T20208] fuse: Unknown parameter 'fd0x0000000000000003' [ 952.332721][T20238] fuse: Unknown parameter 'fd0x0000000000000003' [ 953.431576][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 953.431596][ T37] audit: type=1326 audit(6080314577.655:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20259 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x0 [ 954.489050][T20286] syzkaller0: entered promiscuous mode [ 954.489077][T20286] syzkaller0: entered allmulticast mode [ 955.814565][ T37] audit: type=1326 audit(6080314580.045:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20311 comm="syz.7.5501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f352223de99 code=0x0 [ 957.895692][T14475] cgroup: fork rejected by pids controller in /syz7 [ 958.185823][T20369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 959.539271][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5529'. [ 959.994332][T20404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 960.274246][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.324740][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.327690][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.360986][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.369398][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 961.306717][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5541'. [ 961.523361][T20450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 962.747704][ T5611] Bluetooth: hci0: command tx timeout [ 962.972867][T20411] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.973070][T20411] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.973618][T20411] bridge_slave_0: entered allmulticast mode [ 962.975908][T20411] bridge_slave_0: entered promiscuous mode [ 963.063725][T20411] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.063952][T20411] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.064414][T20411] bridge_slave_1: entered allmulticast mode [ 963.092274][T20411] bridge_slave_1: entered promiscuous mode [ 963.384559][T20411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.405384][T20411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.664016][T20411] team0: Port device team_slave_0 added [ 963.689676][T20411] team0: Port device team_slave_1 added [ 963.742610][T20411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.742630][T20411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.742663][T20411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.746637][T20411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.746656][T20411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.746687][T20411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.028710][T20411] hsr_slave_0: entered promiscuous mode [ 964.030436][T20411] hsr_slave_1: entered promiscuous mode [ 964.038053][T20411] debugfs: 'hsr0' already exists in 'hsr' [ 964.038084][T20411] Cannot create hsr debugfs directory [ 964.063017][T20510] tmpfs: Cannot disable swap on remount [ 964.343873][T20516] binfmt_misc: register: failed to install interpreter file ./file0 [ 964.831812][ T5611] Bluetooth: hci0: command tx timeout [ 964.967006][T16862] cgroup: fork rejected by pids controller in /syz8 [ 965.421554][T20539] binfmt_misc: register: failed to install interpreter file ./file0 [ 966.545877][T20411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.743227][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 966.748572][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 966.777581][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 966.815120][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 966.815966][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 966.911559][ T59] Bluetooth: hci0: command tx timeout [ 967.241254][T20568] bond1: (slave vlan2): making interface the new active one [ 967.274257][T20568] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 967.819158][T20592] fuse: Bad value for 'fd' [ 968.064235][T20411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.286580][ T37] audit: type=1326 audit(6080314592.515:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20605 comm="syz.3.5601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff9f4de99 code=0x0 [ 968.766175][T20411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.978071][ T5611] Bluetooth: hci0: command tx timeout [ 969.138108][ T5611] Bluetooth: hci1: command tx timeout [ 969.474726][T20411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.561160][T20570] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.561382][T20570] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.561644][T20570] bridge_slave_0: entered allmulticast mode [ 970.588765][T20570] bridge_slave_0: entered promiscuous mode [ 970.615955][T20570] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.616119][T20570] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.616320][T20570] bridge_slave_1: entered allmulticast mode [ 970.642584][T20570] bridge_slave_1: entered promiscuous mode [ 970.856888][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5618'. [ 970.881528][T20570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.042739][T20570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.217657][ T5611] Bluetooth: hci1: command tx timeout [ 971.275447][ T37] audit: type=1326 audit(6080314595.505:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20665 comm="syz.3.5620" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff9f4de99 code=0x0 [ 971.314138][T20570] team0: Port device team_slave_0 added [ 971.388920][T20570] team0: Port device team_slave_1 added [ 971.389025][T20411] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 971.431334][T20411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.685356][T20411] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.729170][T20411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.844570][T20411] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 971.893328][T20411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.923342][T20570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.923361][T20570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.923395][T20570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.924817][T20411] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 972.001385][T20411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.282067][T20570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.282087][T20570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.282120][T20570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.285607][T20677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 972.592119][T20570] hsr_slave_0: entered promiscuous mode [ 972.594516][T20570] hsr_slave_1: entered promiscuous mode [ 972.595604][T20570] debugfs: 'hsr0' already exists in 'hsr' [ 972.595631][T20570] Cannot create hsr debugfs directory [ 973.297831][ T5611] Bluetooth: hci1: command tx timeout [ 973.870008][T20411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.403242][T20570] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.386631][ T5611] Bluetooth: hci1: command tx timeout [ 975.683012][T20570] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.917095][T20411] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.016981][T20762] tmpfs: Cannot disable swap on remount [ 976.272664][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.272892][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.592201][T20570] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.676601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.676694][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.246259][T20570] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.425150][T20794] 9p: Bad value for 'rfdno' [ 978.105714][T20411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.208282][T20570] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 978.252989][T20570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.255335][T20570] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 978.312779][T20570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.314457][T20570] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 978.656802][T20570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.732953][T20570] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 978.806868][T20570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.371530][T20570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.516379][T20570] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.552170][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.552323][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.657013][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.657176][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.752536][T20411] veth0_vlan: entered promiscuous mode [ 979.845919][T20411] veth1_vlan: entered promiscuous mode [ 980.054943][T20411] veth0_macvtap: entered promiscuous mode [ 980.112629][T20411] veth1_macvtap: entered promiscuous mode [ 980.200722][T20411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.237322][T20411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.281027][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.281306][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.329251][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.332923][ T7224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.251272][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.251296][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.815940][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.815964][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.012067][T20570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.962791][T20570] veth0_vlan: entered promiscuous mode [ 983.107763][T20570] veth1_vlan: entered promiscuous mode [ 983.372449][T20570] veth0_macvtap: entered promiscuous mode [ 983.410053][T20570] veth1_macvtap: entered promiscuous mode [ 983.515812][T20570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.589477][T20570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.741846][ T1326] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.747240][ T1326] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.748534][ T1326] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.751268][ T1326] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.573346][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.573369][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.041478][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.041500][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.017655][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 992.099417][T21124] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 993.065851][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.065914][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.077054][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5788'. [ 994.845174][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5802'. [ 995.707535][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5814'. [ 998.979109][T21239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.290781][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5841'. [ 1001.153756][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1001.303825][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5856'. [ 1001.851616][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000000080 [ 1001.891518][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1001.915937][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1001.916043][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1001.952675][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1001.952766][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1001.959414][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1001.959498][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1002.011557][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1002.011649][T21346] kvm: kvm [21344]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1002.419271][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5868'. [ 1012.807924][T21635] netlink: 'syz.3.5976': attribute type 12 has an invalid length. [ 1012.807953][T21635] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1015.786004][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1017.470509][T21747] netlink: 'syz.9.6021': attribute type 49 has an invalid length. [ 1017.678144][T21747] bond_slave_0: entered promiscuous mode [ 1017.678166][T21747] bond_slave_0: entered allmulticast mode [ 1025.244008][T21945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1026.257759][T21914] Bluetooth: hci3: command 0x0406 tx timeout [ 1026.954477][T21989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1028.839553][T22031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1033.031448][T22147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1035.690273][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6171'. [ 1036.372236][T22262] fuse: Bad value for 'fd' [ 1036.889357][T22273] veth1_to_bond: entered allmulticast mode [ 1036.892485][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6185'. [ 1037.240886][T22272] veth1_to_bond: left allmulticast mode [ 1037.488953][T22285] overlayfs: failed to resolve './file2': -2 [ 1037.679749][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6188'. [ 1038.087813][T22305] fuse: Bad value for 'fd' [ 1039.454001][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1039.589697][T22351] fuse: Bad value for 'fd' [ 1041.545680][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6219'. [ 1042.508883][T22386] kexec: Could not allocate control_code_buffer [ 1046.329398][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1046.683397][T22529] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1047.052102][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1047.123921][T22545] evm: overlay not supported [ 1047.336884][T22542] bond1: entered promiscuous mode [ 1047.366573][T22542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1047.408845][T22546] bridge1: entered promiscuous mode [ 1047.414025][T22546] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1047.552923][ T7224] bridge_slave_1: left allmulticast mode [ 1047.552961][ T7224] bridge_slave_1: left promiscuous mode [ 1047.553271][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.623231][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1047.684487][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 1047.709419][ T7224] bridge_slave_0: left allmulticast mode [ 1047.709457][ T7224] bridge_slave_0: left promiscuous mode [ 1047.709760][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.961512][ T7224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.098944][ T7224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.191180][ T7224] bond0 (unregistering): Released all slaves [ 1051.960078][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6311'. [ 1052.225777][T22656] veth1_to_bond: entered allmulticast mode [ 1052.233770][T22651] veth1_to_bond: left allmulticast mode [ 1053.034998][T22680] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6323'. [ 1053.079833][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6325'. [ 1053.370889][ T7224] hsr_slave_0: left promiscuous mode [ 1053.432202][ T7224] hsr_slave_1: left promiscuous mode [ 1053.433595][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.433623][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.492990][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.493020][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.760866][ T7224] veth1_macvtap: left promiscuous mode [ 1053.760983][ T7224] veth0_macvtap: left promiscuous mode [ 1053.821818][ T7224] veth1_vlan: left promiscuous mode [ 1053.914311][ T7224] veth0_vlan: left promiscuous mode [ 1054.248789][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6337'. [ 1054.513680][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.513744][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.028578][ T7224] team0 (unregistering): Port device team_slave_1 removed [ 1056.091369][ T7224] team0 (unregistering): Port device team_slave_0 removed [ 1058.270666][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6376'. [ 1059.417197][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1060.163769][T22879] veth1_to_bond: entered allmulticast mode [ 1060.166544][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6399'. [ 1060.187578][T22878] veth1_to_bond: left allmulticast mode [ 1060.413492][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6402'. [ 1061.212679][T22914] veth1_to_bond: entered allmulticast mode [ 1061.213583][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6413'. [ 1061.214176][T22913] veth1_to_bond: left allmulticast mode [ 1061.436421][T22922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6415'. [ 1065.139777][T23007] 9pnet_virtio: no channels available for device syz [ 1065.774482][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6447'. [ 1067.831747][T23043] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6461'. [ 1074.040609][T23135] veth1_to_bond: entered allmulticast mode [ 1074.103390][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6487'. [ 1074.318798][T23134] veth1_to_bond: left allmulticast mode [ 1076.087215][T23186] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6501'. [ 1076.663668][T23193] veth1_to_bond: entered allmulticast mode [ 1076.718748][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6503'. [ 1076.840954][T23189] veth1_to_bond: left allmulticast mode [ 1080.161675][T23245] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6514'. [ 1080.199954][ T59] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 1080.671431][T23261] syz.3.6527 (23261) used greatest stack depth: 18608 bytes left [ 1080.993475][T23271] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6533'. [ 1081.440436][T23282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6536'. [ 1081.860714][T23282] bond1: entered promiscuous mode [ 1081.865348][T23282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.663047][T23312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1082.915602][T23316] Invalid ELF header magic: != ELF [ 1084.743889][T23359] fuse: Bad value for 'fd' [ 1084.970501][T23356] kvm_pr_unimpl_wrmsr: 116 callbacks suppressed [ 1084.970526][T23356] kvm: kvm [23354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80ca [ 1087.308047][T21914] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.870605][T23341] kexec: Could not allocate control_code_buffer [ 1089.051876][T23394] fuse: Bad value for 'fd' [ 1093.293809][T23447] kexec: Could not allocate control_code_buffer [ 1094.433791][T23533] nfs: Deprecated parameter 'nointr' [ 1094.654602][T23537] netlink: 173 bytes leftover after parsing attributes in process `syz.9.6613'. [ 1094.687019][T23537] geneve2: entered allmulticast mode [ 1094.701965][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6613'. [ 1094.701983][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6613'. [ 1094.702001][T23537] netlink: 'syz.9.6613': attribute type 20 has an invalid length. [ 1096.509548][T23528] kexec: Could not allocate control_code_buffer [ 1096.725865][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6628'. [ 1096.814108][T23578] bond2: entered promiscuous mode [ 1096.827314][T23578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1097.732893][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6637'. [ 1098.183126][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6642'. [ 1098.279206][T23626] bond0: entered promiscuous mode [ 1098.282646][T23626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.630344][T23681] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6655'. [ 1100.650778][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6654'. [ 1101.209958][T23691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1101.385113][T23691] bond3: entered promiscuous mode [ 1101.387290][T23691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1102.480829][T23701] netlink: 220 bytes leftover after parsing attributes in process `syz.9.6662'. [ 1102.480872][T23701] tc_dump_action: action bad kind [ 1102.725445][T23728] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6667'. [ 1104.133775][T23756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6674'. [ 1104.182094][T23756] bond1: entered promiscuous mode [ 1104.182759][T23756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1104.223373][T23754] netlink: 173 bytes leftover after parsing attributes in process `syz.9.6671'. [ 1105.173076][T23782] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1105.173101][T23782] tc_dump_action: action bad kind [ 1106.024593][T23796] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6684'. [ 1106.179635][T23802] netlink: 220 bytes leftover after parsing attributes in process `syz.8.6685'. [ 1106.179661][T23802] tc_dump_action: action bad kind [ 1107.615268][T23805] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1107.615298][T23805] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1107.615344][T23805] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1107.974373][T23812] geneve2: entered allmulticast mode [ 1109.454311][T23846] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6695'. [ 1109.454342][T23846] tc_dump_action: action bad kind [ 1109.798393][T23852] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1111.061813][T23882] veth1_to_bond: entered allmulticast mode [ 1111.063666][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6706'. [ 1111.065866][T23880] veth1_to_bond: left allmulticast mode [ 1111.274541][T23847] kexec: Could not allocate control_code_buffer [ 1111.459088][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1111.622956][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1111.623592][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1111.629337][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1111.629413][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1111.629468][ T10] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.629525][ T10] usb 8-1: config 14 has no interface number 0 [ 1111.629570][ T10] usb 8-1: config 14 has no interface number 1 [ 1111.629784][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1111.629854][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1111.629932][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1111.630016][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1111.630086][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1111.630147][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1111.678807][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1111.678879][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.678945][ T10] usb 8-1: Product: syz [ 1111.678987][ T10] usb 8-1: Manufacturer: syz [ 1111.679029][ T10] usb 8-1: SerialNumber: syz [ 1111.851393][T23896] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6710'. [ 1112.606233][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 1112.650248][ T10] legousbtower 8-1:14.228: get version request failed: -71 [ 1112.650456][ T10] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1112.925835][ T10] usb 8-1: USB disconnect, device number 3 [ 1114.100617][T23943] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6724'. [ 1115.964348][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.964432][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.329715][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6729'. [ 1117.577529][ T9860] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1117.737463][ T9860] usb 10-1: Using ep0 maxpacket: 16 [ 1117.744408][ T9860] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.744468][ T9860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.744498][ T9860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1117.744521][ T9860] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1117.744546][ T9860] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.746062][ T9860] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1117.746094][ T9860] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1117.746117][ T9860] usb 10-1: Manufacturer: syz [ 1117.833424][ T9860] usb 10-1: config 0 descriptor?? [ 1117.922607][T24037] kvm: kvm [24035]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1662f9c02 [ 1119.326366][T24088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6746'. [ 1120.421316][T24113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6753'. [ 1120.536234][ T9860] rc_core: IR keymap rc-hauppauge not found [ 1120.536259][ T9860] Registered IR keymap rc-empty [ 1120.536419][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.547597][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.645568][ T9860] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1120.715831][ T9860] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input61 [ 1120.741161][T24124] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6759'. [ 1120.763535][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.780873][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.801353][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.817559][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.837625][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.857589][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.877547][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.899549][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.922447][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.937670][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1120.972595][ T9860] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1120.972621][ T9860] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1121.038179][ T9860] usb 10-1: USB disconnect, device number 3 [ 1122.117539][ T9860] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1122.267446][ T9860] usb 10-1: Using ep0 maxpacket: 16 [ 1122.270755][ T9860] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.270803][ T9860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.270827][ T9860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.270846][ T9860] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.270867][ T9860] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.280969][ T9860] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1122.281050][ T9860] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1122.281112][ T9860] usb 10-1: Manufacturer: syz [ 1122.395012][ T9860] usb 10-1: config 0 descriptor?? [ 1122.674941][T24175] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6772'. [ 1125.272107][T24205] overlayfs: failed to resolve './file1': -2 [ 1125.408998][ T9860] rc_core: IR keymap rc-hauppauge not found [ 1125.409031][ T9860] Registered IR keymap rc-empty [ 1125.409227][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.428190][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.461594][ T9860] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1125.505841][ T9860] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input62 [ 1125.627107][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.657258][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.682297][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.697531][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.718644][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.737571][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.760995][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.777636][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.798388][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.818494][ T9860] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1125.914021][ T9860] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1125.914041][ T9860] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1126.034821][ T9860] usb 10-1: USB disconnect, device number 4 [ 1126.539881][T24230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6784'. [ 1127.261611][T10625] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1127.435246][T10625] usb 9-1: Using ep0 maxpacket: 16 [ 1127.450152][T10625] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.450192][T10625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1127.450213][T10625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1127.450229][T10625] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1127.450247][T10625] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1127.453335][T10625] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1127.453365][T10625] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1127.453385][T10625] usb 9-1: Manufacturer: syz [ 1127.552501][T10625] usb 9-1: config 0 descriptor?? [ 1129.471067][T24264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1130.183057][T24278] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6804'. [ 1130.437464][T10625] rc_core: IR keymap rc-hauppauge not found [ 1130.437486][T10625] Registered IR keymap rc-empty [ 1130.437661][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.469177][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.512769][T10625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1130.542342][T10625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input63 [ 1130.589466][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.625640][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.637872][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.665724][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.687196][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.702687][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.717541][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.747597][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.767778][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1130.787608][T10625] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1131.033691][T10625] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1131.033721][T10625] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1131.071796][T10625] usb 9-1: USB disconnect, device number 3 [ 1131.142889][T24296] Invalid ELF header magic: != ELF [ 1133.140290][T24329] Invalid ELF header magic: != ELF [ 1135.545006][T24375] input: syz1 as /devices/virtual/input/input64 [ 1137.911603][T24440] futex_wake_op: syz.9.6863 tries to shift op by 144; fix this program [ 1138.283910][T24451] veth1_to_bond: entered allmulticast mode [ 1138.285053][T24451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6867'. [ 1138.544548][T24450] veth1_to_bond: left allmulticast mode [ 1140.145781][T24492] veth1_to_bond: entered allmulticast mode [ 1140.205010][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6882'. [ 1140.333517][T24489] futex_wake_op: syz.7.6879 tries to shift op by 144; fix this program [ 1140.358052][T24489] futex_wake_op: syz.7.6879 tries to shift op by 144; fix this program [ 1140.528121][T24491] veth1_to_bond: left allmulticast mode [ 1141.912440][T24522] netdevsim netdevsim1: Direct firmware load for . [ 1141.912440][T24522] failed with error -2 [ 1141.912472][T24522] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1141.912472][T24522] [ 1142.825503][T24550] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6902'. [ 1142.825537][T24550] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6902'. [ 1148.776313][T24578] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1148.779292][T24578] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1149.163003][T24597] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1149.163021][T24597] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1149.325817][T24578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1149.326081][T24578] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1149.496309][T24578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1149.498617][T24578] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1149.569286][T24578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1149.569403][T24578] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1149.660484][T24578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1149.660565][T24578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1149.767523][T24578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1150.249235][ T37] audit: type=1326 audit(6080314774.395:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24600 comm="syz.9.6915" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x7ffc0000 [ 1150.250152][ T37] audit: type=1326 audit(6080314774.395:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24600 comm="syz.9.6915" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x7ffc0000 [ 1150.250741][ T37] audit: type=1326 audit(6080314774.395:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24600 comm="syz.9.6915" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9a950bde99 code=0x7ffc0000 [ 1150.251633][ T37] audit: type=1326 audit(6080314774.425:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24600 comm="syz.9.6915" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x7ffc0000 [ 1150.252162][ T37] audit: type=1326 audit(6080314774.425:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24600 comm="syz.9.6915" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a950bde99 code=0x7ffc0000 [ 1150.877721][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 1151.342981][ T59] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1151.387876][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1151.657714][T24622] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6924'. [ 1151.657741][T24622] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6924'. [ 1151.697626][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 1151.764059][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1151.764075][T21914] Bluetooth: hci0: command 0x0406 tx timeout [ 1151.907290][T24630] tipc: Started in network mode [ 1151.907571][T24630] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1151.918830][T24630] Invalid ELF header magic: != ELF [ 1151.990190][T24630] overlayfs: overlapping lowerdir path [ 1152.752413][T24634] input: syz1 as /devices/virtual/input/input65 [ 1152.852667][T24640] tipc: Cannot configure node identity twice [ 1152.897624][T21914] Bluetooth: hci5: command 0x0406 tx timeout [ 1153.457544][T21914] Bluetooth: hci4: command 0x0406 tx timeout [ 1153.777471][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.777511][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 1153.777618][T21914] Bluetooth: hci3: command 0x0406 tx timeout [ 1154.093060][T24666] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6935'. [ 1154.093087][T24666] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6935'. [ 1154.279214][ T6626] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1154.394457][T24681] 9p: Bad value for 'wfdno' [ 1154.440530][ T6626] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1154.440561][ T6626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1154.440589][ T6626] usb 4-1: Product: syz [ 1154.440601][ T6626] usb 4-1: Manufacturer: syz [ 1154.440613][ T6626] usb 4-1: SerialNumber: syz [ 1154.482622][ T6626] usb 4-1: config 0 descriptor?? [ 1154.515939][ T6626] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1154.516575][ T6626] dvb-usb: bulk message failed: -22 (2/0) [ 1154.620657][ T6626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.627236][ T6626] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1154.627280][ T6626] usb 4-1: media controller created [ 1154.689249][T24664] 9pnet_virtio: no channels available for device syz [ 1154.738481][T24688] input: syz1 as /devices/virtual/input/input66 [ 1154.741284][ T6626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.892603][ T6626] cxusb: set interface failed [ 1154.892619][ T6626] dvb-usb: bulk message failed: -22 (1/0) [ 1155.007890][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6946'. [ 1155.016376][ T6626] DVB: Unable to find symbol mt352_attach() [ 1155.070308][ T6626] dvb-usb: bulk message failed: -22 (5/0) [ 1155.070334][ T6626] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1155.070970][ T6626] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1155.197808][ T6626] rc_core: IR keymap rc-dvico-mce not found [ 1155.197834][ T6626] Registered IR keymap rc-empty [ 1155.206178][ T6626] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1155.243063][ T6626] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input67 [ 1155.279972][ T6626] dvb-usb: schedule remote query interval to 100 msecs. [ 1155.279997][ T6626] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1155.318920][ T6626] usb 4-1: USB disconnect, device number 77 [ 1155.331133][T24700] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1155.333059][T24700] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1155.826799][T24713] fuse: Bad value for 'group_id' [ 1155.826821][T24713] fuse: Bad value for 'group_id' [ 1155.859051][T21914] Bluetooth: hci1: command 0x0c1a tx timeout [ 1156.065043][ T6626] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1156.529295][T24731] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6960'. [ 1156.529324][T24731] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6960'. [ 1156.637252][T24735] input: syz1 as /devices/virtual/input/input68 [ 1156.847720][T24742] fuse: Bad value for 'group_id' [ 1156.847742][T24742] fuse: Bad value for 'group_id' [ 1157.902300][T24754] fuse: Bad value for 'fd' [ 1158.396435][T24767] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6972'. [ 1158.396461][T24767] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6972'. [ 1158.487832][T24769] fuse: Bad value for 'group_id' [ 1158.487856][T24769] fuse: Bad value for 'group_id' [ 1158.924815][T24793] fuse: Bad value for 'fd' [ 1159.820162][ T56] bridge_slave_1: left allmulticast mode [ 1159.820202][ T56] bridge_slave_1: left promiscuous mode [ 1159.820495][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.996067][ T56] bridge_slave_0: left allmulticast mode [ 1159.996104][ T56] bridge_slave_0: left promiscuous mode [ 1159.996387][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.450073][T24827] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6986'. [ 1160.450097][T24827] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6986'. [ 1160.788907][T24834] fuse: Bad value for 'fd' [ 1160.859885][T24835] Invalid ELF header magic: != ELF [ 1160.942959][T24835] overlayfs: overlapping lowerdir path [ 1161.823510][T24841] 9pnet_virtio: no channels available for device syz [ 1165.199453][T24861] comedi: valid board names for 8255 driver are: [ 1165.199471][T24861] 8255 [ 1165.199480][T24861] comedi: valid board names for vmk80xx driver are: [ 1165.199491][T24861] vmk80xx [ 1165.199500][T24861] comedi: valid board names for usbduxsigma driver are: [ 1165.199512][T24861] usbduxsigma [ 1165.199520][T24861] comedi: valid board names for usbduxfast driver are: [ 1165.199532][T24861] usbduxfast [ 1165.199540][T24861] comedi: valid board names for usbdux driver are: [ 1165.199551][T24861] usbdux [ 1165.199559][T24861] comedi: valid board names for ni6501 driver are: [ 1165.199569][T24861] ni6501 [ 1165.199577][T24861] comedi: valid board names for dt9812 driver are: [ 1165.199587][T24861] dt9812 [ 1165.199596][T24861] comedi: valid board names for ni_labpc_cs driver are: [ 1165.199607][T24861] ni_labpc_cs [ 1165.199615][T24861] comedi: valid board names for ni_daq_700 driver are: [ 1165.199625][T24861] ni_daq_700 [ 1165.199633][T24861] comedi: valid board names for labpc_pci driver are: [ 1165.199644][T24861] labpc_pci [ 1165.199652][T24861] comedi: valid board names for adl_pci9118 driver are: [ 1165.199663][T24861] pci9118dg [ 1165.199671][T24861] pci9118hg [ 1165.199680][T24861] pci9118hr [ 1165.199688][T24861] comedi: valid board names for 8255_pci driver are: [ 1165.199699][T24861] 8255_pci [ 1165.199707][T24861] comedi: valid board names for s526 driver are: [ 1165.199718][T24861] s526 [ 1165.199725][T24861] comedi: valid board names for multiq3 driver are: [ 1165.199736][T24861] multiq3 [ 1165.199744][T24861] comedi: valid board names for pcmuio driver are: [ 1165.199755][T24861] pcmuio48 [ 1165.199763][T24861] pcmuio96 [ 1165.199771][T24861] comedi: valid board names for pcmmio driver are: [ 1165.199782][T24861] pcmmio [ 1165.199789][T24861] comedi: valid board names for pcmda12 driver are: [ 1165.199799][T24861] pcmda12 [ 1165.199806][T24861] comedi: valid board names for pcmad driver are: [ 1165.199817][T24861] pcmad12 [ 1165.199825][T24861] pcmad16 [ 1165.199832][T24861] comedi: valid board names for ni_labpc driver are: [ 1165.199844][T24861] lab-pc-1200 [ 1165.199852][T24861] lab-pc-1200ai [ 1165.199860][T24861] lab-pc+ [ 1165.199868][T24861] comedi: valid board names for atmio16 driver are: [ 1165.199886][T24861] atmio16 [ 1165.199893][T24861] atmio16d [ 1165.199901][T24861] comedi: valid board names for ni_at_ao driver are: [ 1165.199912][T24861] at-ao-6 [ 1165.199920][T24861] at-ao-10 [ 1165.199928][T24861] comedi: valid board names for ni_at_a2150 driver are: [ 1165.199938][T24861] ni_at_a2150 [ 1165.199947][T24861] comedi: valid board names for adq12b driver are: [ 1165.199957][T24861] adq12b [ 1165.199965][T24861] comedi: valid board names for mpc624 driver are: [ 1165.199976][T24861] mpc624 [ 1165.199984][T24861] comedi: valid board names for c6xdigio driver are: [ 1165.199995][T24861] c6xdigio [ 1165.200003][T24861] comedi: valid board names for aio_iiro_16 driver are: [ 1165.200014][T24861] aio_iiro_16 [ 1165.200021][T24861] comedi: valid board names for aio_aio12_8 driver are: [ 1165.200032][T24861] aio_aio12_8 [ 1165.200041][T24861] aio_ai12_8 [ 1165.200049][T24861] aio_ao12_4 [ 1165.200057][T24861] comedi: valid board names for fl512 driver are: [ 1165.200068][T24861] fl512 [ 1165.200075][T24861] comedi: valid board names for dmm32at driver are: [ 1165.200086][T24861] dmm32at [ 1165.200094][T24861] comedi: valid board names for dt282x driver are: [ 1165.200105][T24861] dt2821 [ 1165.200113][T24861] dt2821-f [ 1165.200121][T24861] dt2821-g [ 1165.200129][T24861] dt2823 [ 1165.200137][T24861] dt2824-pgh [ 1165.200145][T24861] dt2824-pgl [ 1165.200153][T24861] dt2825 [ 1165.200161][T24861] dt2827 [ 1165.200169][T24861] dt2828 [ 1165.200177][T24861] dt2829 [ 1165.200185][T24861] dt21-ez [ 1165.200193][T24861] dt23-ez [ 1165.200201][T24861] dt24-ez [ 1165.200209][T24861] dt24-ez-pgl [ 1165.200217][T24861] comedi: valid board names for dt2817 driver are: [ 1165.200228][T24861] dt2817 [ 1165.200235][T24861] comedi: valid board names for dt2815 driver are: [ 1165.200246][T24861] dt2815 [ 1165.200254][T24861] comedi: valid board names for dt2814 driver are: [ 1165.200264][T24861] dt2814 [ 1165.200272][T24861] comedi: valid board names for dt2811 driver are: [ 1165.200282][T24861] dt2811-pgh [ 1165.200290][T24861] dt2811-pgl [ 1165.200298][T24861] comedi: valid board names for dt2801 driver are: [ 1165.200308][T24861] dt2801 [ 1165.200316][T24861] comedi: valid board names for das6402 driver are: [ 1165.200327][T24861] das6402-12 [ 1165.200335][T24861] das6402-16 [ 1165.200342][T24861] comedi: valid board names for das1800 driver are: [ 1165.200353][T24861] das-1701st [ 1165.200362][T24861] das-1701st-da [ 1165.200370][T24861] das-1702st [ 1165.200377][T24861] das-1702st-da [ 1165.200386][T24861] das-1702hr [ 1165.200395][T24861] das-1702hr-da [ 1165.200403][T24861] das-1701ao [ 1165.200411][T24861] das-1702ao [ 1165.200419][T24861] das-1801st [ 1165.200427][T24861] das-1801st-da [ 1165.200435][T24861] das-1802st [ 1165.200444][T24861] das-1802st-da [ 1165.200451][T24861] das-1802hr [ 1165.200460][T24861] das-1802hr-da [ 1165.200468][T24861] das-1801hc [ 1165.200476][T24861] das-1802hc [ 1165.200484][T24861] das-1801ao [ 1165.200492][T24861] das-1802ao [ 1165.200500][T24861] comedi: valid board names for das800 driver are: [ 1165.200511][T24861] das-800 [ 1165.200518][T24861] cio-das800 [ 1165.200526][T24861] das-801 [ 1165.200534][T24861] cio-das801 [ 1165.200542][T24861] das-802 [ 1165.200550][T24861] cio-das802 [ 1165.200558][T24861] cio-das802/16 [ 1165.200566][T24861] comedi: valid board names for isa-das08 driver are: [ 1165.200576][T24861] isa-das08 [ 1165.200584][T24861] das08-pgm [ 1165.200592][T24861] das08-pgh [ 1165.200600][T24861] das08-pgl [ 1165.200613][T24861] das08-aoh [ 1165.200620][T24861] das08-aol [ 1165.200629][T24861] das08-aom [ 1165.200636][T24861] das08/jr-ao [ 1165.200644][T24861] das08jr-16-ao [ 1165.200652][T24861] pc104-das08 [ 1165.200660][T24861] das08jr/16 [ 1165.206583][T24861] comedi: valid board names for das16m1 driver are: [ 1165.206602][T24861] das16m1 [ 1165.206611][T24861] comedi: valid board names for dac02 driver are: [ 1165.206622][T24861] dac02 [ 1165.206629][T24861] comedi: valid board names for rti802 driver are: [ 1165.206640][T24861] rti802 [ 1165.206648][T24861] comedi: valid board names for rti800 driver are: [ 1165.206658][T24861] rti800 [ 1165.206666][T24861] rti815 [ 1165.206675][T24861] comedi: valid board names for pcm3724 driver are: [ 1165.206686][T24861] pcm3724 [ 1165.206695][T24861] comedi: valid board names for pcl818 driver are: [ 1165.206706][T24861] pcl818l [ 1165.206714][T24861] pcl818h [ 1165.206722][T24861] pcl818hd [ 1165.206729][T24861] pcl818hg [ 1165.206737][T24861] pcl818 [ 1165.206745][T24861] pcl718 [ 1165.206752][T24861] pcm3718 [ 1165.206760][T24861] comedi: valid board names for pcl816 driver are: [ 1165.206771][T24861] pcl816 [ 1165.206778][T24861] pcl814b [ 1165.206786][T24861] comedi: valid board names for pcl812 driver are: [ 1165.206796][T24861] pcl812 [ 1165.206804][T24861] pcl812pg [ 1165.206812][T24861] acl8112pg [ 1165.206820][T24861] acl8112dg [ 1165.206827][T24861] acl8112hg [ 1165.206835][T24861] a821pgl [ 1165.206843][T24861] a821pglnda [ 1165.206851][T24861] a821pgh [ 1165.206859][T24861] a822pgl [ 1165.206866][T24861] a822pgh [ 1165.206884][T24861] a823pgl [ 1165.206891][T24861] a823pgh [ 1165.206898][T24861] pcl813 [ 1165.206906][T24861] pcl813b [ 1165.206913][T24861] acl8113 [ 1165.206921][T24861] iso813 [ 1165.206929][T24861] acl8216 [ 1165.206936][T24861] a826pg [ 1165.206954][T24861] comedi: valid board names for pcl730 driver are: [ 1165.206965][T24861] pcl730 [ 1165.206980][T24861] iso730 [ 1165.206989][T24861] acl7130 [ 1165.206996][T24861] pcm3730 [ 1165.207004][T24861] pcl725 [ 1165.207012][T24861] p8r8dio [ 1165.207020][T24861] acl7225b [ 1165.207028][T24861] p16r16dio [ 1165.207035][T24861] pcl733 [ 1165.207044][T24861] pcl734 [ 1165.207051][T24861] opmm-1616-xt [ 1165.207068][T24861] pearl-mm-p [ 1165.207076][T24861] ir104-pbf [ 1165.207091][T24861] comedi: valid board names for pcl726 driver are: [ 1165.207101][T24861] pcl726 [ 1165.207110][T24861] pcl727 [ 1165.207118][T24861] pcl728 [ 1165.207126][T24861] acl6126 [ 1165.207133][T24861] acl6128 [ 1165.207141][T24861] comedi: valid board names for pcl724 driver are: [ 1165.207152][T24861] pcl724 [ 1165.207160][T24861] pcl722 [ 1165.207169][T24861] pcl731 [ 1165.207176][T24861] acl7122 [ 1165.207184][T24861] acl7124 [ 1165.207192][T24861] pet48dio [ 1165.207200][T24861] pcmio48 [ 1165.207208][T24861] onyx-mm-dio [ 1165.207217][T24861] comedi: valid board names for pcl711 driver are: [ 1165.207226][T24861] pcl711 [ 1165.207234][T24861] pcl711b [ 1165.207241][T24861] acl8112hg [ 1165.207249][T24861] acl8112dg [ 1165.207256][T24861] comedi: valid board names for amplc_pc263 driver are: [ 1165.207267][T24861] pc263 [ 1165.207275][T24861] comedi: valid board names for amplc_pc236 driver are: [ 1165.207286][T24861] pc36at [ 1165.207294][T24861] comedi: valid board names for amplc_dio200 driver are: [ 1165.207305][T24861] pc212e [ 1165.361634][T24861] pc214e [ 1165.361647][T24861] pc215e [ 1165.361656][T24861] pc218e [ 1165.361664][T24861] pc272e [ 1165.361673][T24861] comedi: valid board names for comedi_parport driver are: [ 1165.361686][T24861] comedi_parport [ 1165.361695][T24861] comedi: valid board names for comedi_test driver are: [ 1165.361706][T24861] comedi_test [ 1165.361714][T24861] comedi: valid board names for comedi_bond driver are: [ 1165.361726][T24861] comedi_bond [ 1166.270147][T24873] netlink: 252 bytes leftover after parsing attributes in process `syz.9.7001'. [ 1166.270172][T24873] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7001'. [ 1166.460089][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.774587][T24882] Invalid ELF header magic: != ELF [ 1166.860265][T24882] overlayfs: overlapping lowerdir path [ 1169.474406][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.795430][ T56] bond0 (unregistering): Released all slaves [ 1170.734965][T24911] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7012'. [ 1170.734984][T24911] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7012'. [ 1170.734995][T24911] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7012'. [ 1171.396245][T24921] Invalid ELF header magic: != ELF [ 1172.758292][T24936] tipc: Started in network mode [ 1172.758317][T24936] tipc: Node identity 2007ff, cluster identity 4711 [ 1172.758332][T24936] tipc: Node number set to 2099199 [ 1173.171120][T24947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1173.171139][T24947] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1173.171157][T24947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1173.818454][T24967] Invalid ELF header magic: != ELF [ 1175.166566][T24962] syzkaller1: entered promiscuous mode [ 1175.166595][T24962] syzkaller1: entered allmulticast mode [ 1175.935709][ T56] hsr_slave_0: left promiscuous mode [ 1176.016124][ T56] hsr_slave_1: left promiscuous mode [ 1176.017264][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.017293][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.072779][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.072810][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.534800][T25011] Invalid ELF header magic: != ELF [ 1177.384666][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.384742][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.633012][ T56] veth1_macvtap: left promiscuous mode [ 1177.633123][ T56] veth0_macvtap: left promiscuous mode [ 1177.720972][ T56] veth1_vlan: left promiscuous mode [ 1177.721189][ T56] veth0_vlan: left promiscuous mode [ 1178.555066][T25036] input: syz1 as /devices/virtual/input/input69 [ 1180.577017][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1180.784435][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1181.122686][T25065] 9pnet_virtio: no channels available for device syz [ 1181.879018][ T6626] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1182.027813][ T6626] usb 4-1: Using ep0 maxpacket: 32 [ 1182.034202][ T6626] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.034248][ T6626] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 1182.034291][ T6626] usb 4-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 1182.034322][ T6626] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1182.034359][ T6626] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 1182.034385][ T6626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.116944][ T6626] usb 4-1: config 0 descriptor?? [ 1182.163935][ T6626] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1182.362366][T21914] Bluetooth: hci3: unknown advertising packet type: 0xff [ 1182.362412][T21914] Bluetooth: hci3: unknown advertising packet type: 0xc5 [ 1182.362429][T21914] Bluetooth: hci3: Dropping invalid advertising data [ 1182.362450][T21914] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1182.414814][ T6240] usb 4-1: USB disconnect, device number 78 [ 1183.122875][T25081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.271729][T25081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.292376][T25068] kexec: Could not allocate control_code_buffer [ 1184.110393][T25081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.139263][T25081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.109099][T25081] geneve2: left allmulticast mode [ 1185.167956][T25081] bond0: left promiscuous mode [ 1185.250357][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.292214][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.296456][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.296715][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.965085][T25175] geneve2: entered allmulticast mode [ 1191.890141][ T37] audit: type=1326 audit(6080314816.045:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.890582][ T37] audit: type=1326 audit(6080314816.045:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.891016][ T37] audit: type=1326 audit(6080314816.055:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.891358][ T37] audit: type=1326 audit(6080314816.065:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.891705][ T37] audit: type=1326 audit(6080314816.065:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.892166][ T37] audit: type=1326 audit(6080314816.075:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.892511][ T37] audit: type=1326 audit(6080314816.075:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1191.892886][ T37] audit: type=1326 audit(6080314816.075:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25213 comm="syz.7.7100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a1ade99 code=0x7ffc0000 [ 1193.254494][T25239] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1193.267609][T25239] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 1193.269303][T25239] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1193.270304][T25239] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1193.270468][T25239] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 1193.270677][T25239] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 1193.270824][T25239] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1193.270975][T25239] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 1193.271122][T25239] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1193.271266][T25239] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1193.376023][T25252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7108'. [ 1194.012684][ T5600] hid-generic 0000:0001:0005.0015: unknown main item tag 0x0 [ 1194.012726][ T5600] hid-generic 0000:0001:0005.0015: unknown main item tag 0x0 [ 1194.753553][T25275] fuse: Unknown parameter 'group_i00000000000000000000' [ 1195.234509][ T5600] hid-generic 0000:0001:0005.0015: hidraw0: HID v8.06 Device [syz1] on syz0 [ 1195.641269][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7120'. [ 1196.215462][T24858] IPVS: starting estimator thread 0... [ 1196.349338][T25315] IPVS: using max 11 ests per chain, 26400 per kthread [ 1197.364997][T25326] fuse: Unknown parameter 'group_i00000000000000000000' [ 1197.904110][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1201.008010][T25369] fuse: Unknown parameter 'group_id00000000000000000000' [ 1201.186681][T25378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1202.272980][T25395] trusted_key: encrypted_key: insufficient parameters specified [ 1207.507632][ T822] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1207.672684][ T822] usb 9-1: Using ep0 maxpacket: 8 [ 1207.675366][ T822] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.675439][ T822] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1207.675466][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.119310][T25481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.153959][T25481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.586269][T25485] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7171'. [ 1208.637024][T25483] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1208.674882][T25491] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1208.914846][T21914] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1209.783805][ T822] usb 9-1: USB disconnect, device number 4 [ 1209.941038][T25511] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7186'. [ 1210.155118][T25513] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7187'. [ 1210.173944][T25513] netlink: 260 bytes leftover after parsing attributes in process `syz.8.7187'. [ 1212.604572][T21914] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1217.540916][T25534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.570901][T25534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.783787][T25543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7197'. [ 1218.035179][T21914] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1218.081852][T25559] nfs: Deprecated parameter 'nointr' [ 1219.405997][T25577] fuse: Bad value for 'fd' [ 1220.161447][T21914] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1220.652195][T25606] nfs: Deprecated parameter 'nointr' [ 1231.528880][T25617] kexec: Could not allocate control_code_buffer [ 1234.567803][T25660] nfs: Deprecated parameter 'nointr' [ 1235.558484][T25682] Invalid ELF header magic: != ELF [ 1235.628902][T25682] overlayfs: overlapping lowerdir path [ 1236.690291][T25676] bridge0: port 3(syz_tun) entered blocking state [ 1236.694004][T25676] bridge0: port 3(syz_tun) entered disabled state [ 1236.694222][T25676] syz_tun: entered allmulticast mode [ 1236.723787][T25676] syz_tun: entered promiscuous mode [ 1237.870123][T25726] nfs: Deprecated parameter 'nointr' [ 1238.142776][T25698] kexec: Could not allocate control_code_buffer [ 1238.261991][T25733] netlink: 'syz.3.7254': attribute type 21 has an invalid length. [ 1238.262016][T25733] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1238.278870][T25733] netlink: 'syz.3.7254': attribute type 5 has an invalid length. [ 1238.278951][T25733] netlink: 'syz.3.7254': attribute type 6 has an invalid length. [ 1238.278993][T25733] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1238.823048][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.823118][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.301754][T25762] kexec: Could not allocate control_code_buffer [ 1243.412452][T25767] nfs: Deprecated parameter 'nointr' [ 1247.245470][T25755] tipc: Started in network mode [ 1247.245492][T25755] tipc: Node identity 2007ff, cluster identity 4711 [ 1247.245507][T25755] tipc: Node number set to 2099199 [ 1247.579410][T25774] kvm_intel: kvm [25773]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1662f5d81 [ 1247.852705][T25780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.890844][T25780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.341910][T25802] Bluetooth: MGMT ver 1.23 [ 1248.629576][T25780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.693227][T25780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.839640][T24858] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1248.990861][T24858] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1248.990901][T24858] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1248.990940][T24858] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1248.990960][T24858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.036910][T25805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1249.075577][T24858] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1249.645314][T24858] usb 2-1: USB disconnect, device number 64 [ 1250.229758][T25780] geneve2: left allmulticast mode [ 1250.233810][T23850] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.247754][T23850] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.248429][T23850] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.248538][T23850] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.389501][T25815] fuse: Unknown parameter 'grou00000000000000000000' [ 1250.503923][T25824] nfs: Deprecated parameter 'nointr' [ 1250.968906][T25836] kvm_intel: kvm [25834]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1662f5d81 [ 1251.660275][T25854] fuse: Unknown parameter 'grou00000000000000000000' [ 1251.936635][T25866] tipc: Started in network mode [ 1251.936660][T25866] tipc: Node identity 2007ff, cluster identity 4711 [ 1251.936675][T25866] tipc: Node number set to 2099199 [ 1252.265050][T25879] nfs: Deprecated parameter 'nointr' [ 1252.649631][T25892] fuse: Unknown parameter 'grou00000000000000000000' [ 1253.962756][T25940] fuse: Unknown parameter 'group_i00000000000000000000' [ 1254.376824][T25917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.399953][T25917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.642514][T25960] nfs: Deprecated parameter 'nointr' [ 1255.477656][T25917] bond1: left promiscuous mode [ 1255.479136][T25917] geneve2: left allmulticast mode [ 1255.483381][ T100] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.483875][ T100] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.484043][ T100] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.484086][ T100] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.637656][T25973] input: syz1 as /devices/virtual/input/input70 [ 1257.196074][T25999] fuse: Unknown parameter 'group_i00000000000000000000' [ 1258.123416][T26018] Invalid ELF header magic: != ELF [ 1258.180929][T26018] overlayfs: overlapping lowerdir path [ 1258.919507][T26023] tipc: Cannot configure node identity twice [ 1259.066781][T26028] input: syz1 as /devices/virtual/input/input71 [ 1260.360112][T26039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7343'. [ 1260.489641][T26048] fuse: Unknown parameter 'group_i00000000000000000000' [ 1260.973475][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7350'. [ 1261.326687][T26068] input: syz1 as /devices/virtual/input/input72 [ 1262.122498][T26082] fuse: Unknown parameter 'group_id00000000000000000000' [ 1262.478849][T26092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7361'. [ 1262.640358][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7363'. [ 1263.045980][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7366'. [ 1266.615458][T26152] fuse: Unknown parameter 'group_id00000000000000000000' [ 1267.033816][T26158] input: syz1 as /devices/virtual/input/input73 [ 1267.141864][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1267.183102][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7371'. [ 1271.339522][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1272.873577][T26229] input: syz1 as /devices/virtual/input/input74 [ 1273.481442][T26240] Invalid ELF header magic: != ELF [ 1273.485174][T26240] overlayfs: overlapping lowerdir path [ 1274.175167][T26239] tipc: Started in network mode [ 1274.175200][T26239] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1274.495998][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7393'. [ 1276.997899][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7398'. [ 1277.578575][T26281] input: syz1 as /devices/virtual/input/input75 [ 1277.669176][T26286] Invalid ELF header magic: != ELF [ 1281.171027][T26321] random: crng reseeded on system resumption [ 1281.583380][T26337] random: crng reseeded on system resumption [ 1282.402786][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1282.465235][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1282.476955][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1282.499626][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1282.520074][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1282.693904][T26334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.715415][T26334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.678366][T26334] bond1: left promiscuous mode [ 1283.678386][T26334] bridge1: left promiscuous mode [ 1283.757588][T26334] bond2: left promiscuous mode [ 1283.817708][T26334] bond3: left promiscuous mode [ 1283.887140][T26343] tipc: Cannot configure node identity twice [ 1283.903399][T24584] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.905203][T24584] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.912279][T24584] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.912438][T24584] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.737617][ T5611] Bluetooth: hci2: command tx timeout [ 1285.106923][T26383] random: crng reseeded on system resumption [ 1286.817845][ T5611] Bluetooth: hci2: command tx timeout [ 1288.897523][ T5611] Bluetooth: hci2: command tx timeout [ 1289.461395][T26348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.461713][T26348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.461908][T26348] bridge_slave_0: entered allmulticast mode [ 1289.464775][T26348] bridge_slave_0: entered promiscuous mode [ 1289.497403][T26348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.497528][T26348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.526018][T26348] bridge_slave_1: entered allmulticast mode [ 1289.535104][T26348] bridge_slave_1: entered promiscuous mode [ 1290.972528][T26348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.977975][ T5611] Bluetooth: hci2: command tx timeout [ 1291.002492][T26348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.108166][T26348] team0: Port device team_slave_0 added [ 1291.130325][T26348] team0: Port device team_slave_1 added [ 1291.285368][T26481] input: syz1 as /devices/virtual/input/input76 [ 1291.335695][T26348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.335714][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.335745][T26348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.403476][T26348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.403495][T26348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.403530][T26348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.549068][T26482] kvm: kvm [26480]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1292.241756][T26348] hsr_slave_0: entered promiscuous mode [ 1292.267616][T26348] hsr_slave_1: entered promiscuous mode [ 1292.268684][T26348] debugfs: 'hsr0' already exists in 'hsr' [ 1292.268711][T26348] Cannot create hsr debugfs directory [ 1292.367621][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000ee71 [ 1292.392981][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x79bf [ 1292.393361][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3732 [ 1292.396670][T26498] kvm_intel: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xac61 [ 1292.400033][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xac23 [ 1292.422372][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2517 [ 1292.426580][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1292.443793][T26498] kvm: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfdc1 [ 1292.470970][T26498] kvm_intel: kvm [26497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc6d3 [ 1294.392627][T24584] bridge_slave_1: left allmulticast mode [ 1294.392674][T24584] bridge_slave_1: left promiscuous mode [ 1294.393114][T24584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.568400][T24584] bridge_slave_0: left allmulticast mode [ 1294.568438][T24584] bridge_slave_0: left promiscuous mode [ 1294.568721][T24584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.204118][T26544] input: syz1 as /devices/virtual/input/input77 [ 1296.134769][T24584] bond0 (unregistering): Released all slaves [ 1296.452959][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1296.516838][T24584] tipc: Left network mode [ 1298.129841][T26592] input: syz1 as /devices/virtual/input/input78 [ 1298.188022][T24584] hsr_slave_0: left promiscuous mode [ 1298.194289][T26563] ./bus: Can't lookup blockdev [ 1298.237454][T24584] hsr_slave_1: left promiscuous mode [ 1298.282368][T24584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.298386][T24584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.284531][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.284606][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.589394][T24584] team0 (unregistering): Port device team_slave_1 removed [ 1300.649464][T24584] team0 (unregistering): Port device team_slave_0 removed [ 1300.850976][T26610] dummy_hcd dummy_hcd.0: remove, state 4 [ 1300.851541][T26610] usb usb1: USB disconnect, device number 1 [ 1301.529615][T26610] dummy_hcd dummy_hcd.0: stopped [ 1301.529654][T26610] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1301.651316][T26611] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 1301.651462][T26611] dummy_hcd dummy_hcd.0: Dummy host controller [ 1301.925852][T26611] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 1301.961575][T26611] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 1301.961608][T26611] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1301.961631][T26611] usb usb1: Product: Dummy host controller [ 1301.961648][T26611] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 1301.961666][T26611] usb usb1: SerialNumber: dummy_hcd.0 [ 1302.442515][T26611] hub 1-0:1.0: USB hub found [ 1302.534064][T26611] hub 1-0:1.0: 1 port detected [ 1303.029816][T26619] overlayfs: missing 'lowerdir' [ 1303.380838][ T5611] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1303.661160][T26620] ceph: No mds server is up or the cluster is laggy [ 1303.892999][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 1303.909964][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 1304.120491][T26621] bridge0: port 3(syz_tun) entered blocking state [ 1304.120671][T26621] bridge0: port 3(syz_tun) entered listening state [ 1304.122344][T26621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.122513][T26621] bridge0: port 2(bridge_slave_1) entered listening state [ 1304.122893][T26621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.123081][T26621] bridge0: port 1(bridge_slave_0) entered listening state [ 1304.187597][T26621] bond1: left promiscuous mode [ 1304.778863][T26643] input: syz1 as /devices/virtual/input/input79 [ 1306.595798][T26675] overlayfs: missing 'lowerdir' [ 1306.651308][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1307.020799][T26683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7505'. [ 1308.735077][T26719] Invalid ELF header magic: != ELF [ 1308.786156][T26719] overlayfs: overlapping lowerdir path [ 1309.692418][T26723] overlayfs: missing 'lowerdir' [ 1310.005669][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1310.021992][T24584] IPVS: stop unused estimator thread 0... [ 1310.853873][T26747] nfs: Deprecated parameter 'nointr' [ 1312.883770][T26348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1313.013431][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1313.025732][T26348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1313.142850][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1313.144395][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1313.172095][T26348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1313.192818][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1313.322523][T26797] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7531'. [ 1313.499481][T26348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1313.562361][T26348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.373906][T26348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.421432][T26348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.465885][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.466032][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.805712][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.805861][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.403149][T26885] 9p: Bad value for 'wfdno' [ 1318.708883][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7557'. [ 1319.744428][T26348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.960016][T26933] 9p: Bad value for 'wfdno' [ 1320.659867][T26950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1322.081520][T26348] veth0_vlan: entered promiscuous mode [ 1322.199407][T26348] veth1_vlan: entered promiscuous mode [ 1322.261774][T26979] 9p: Bad value for 'wfdno' [ 1322.858693][T26348] veth0_macvtap: entered promiscuous mode [ 1322.931457][T26348] veth1_macvtap: entered promiscuous mode [ 1323.089858][T26996] nfs: Deprecated parameter 'nointr' [ 1323.289686][T26348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.331730][T26348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.385433][ T8979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.386794][ T8979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.390781][ T8979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.395903][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.673689][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.673714][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.309184][T24584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.309207][T24584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.363744][T27053] nfs: Deprecated parameter 'nointr' [ 1334.183218][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1334.184708][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1334.184895][ C1] bridge0: port 3(syz_tun) entered learning state [ 1334.612829][T27151] nfs: Deprecated parameter 'nointr' [ 1339.630222][T27223] nfs: Deprecated parameter 'nointr' [ 1342.111845][T27278] random: crng reseeded on system resumption [ 1342.976029][T27294] nfs: Deprecated parameter 'nointr' [ 1343.925868][T27325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.969214][T27325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.164068][T27332] tipc: Enabled bearer , priority 0 [ 1344.166481][T27334] syzkaller0: entered promiscuous mode [ 1344.166512][T27334] syzkaller0: entered allmulticast mode [ 1344.257310][T27338] random: crng reseeded on system resumption [ 1344.590150][T27334] tipc: Resetting bearer [ 1344.765332][T27323] tipc: Resetting bearer [ 1345.578467][T27363] nfs: Deprecated parameter 'nointr' [ 1345.988299][T27323] tipc: Disabling bearer [ 1346.155330][ T5790] tipc: Node number set to 3145728 [ 1347.925036][T27402] random: crng reseeded on system resumption [ 1348.534359][T27410] Invalid ELF header magic: != ELF [ 1348.561028][T27410] overlayfs: overlapping lowerdir path [ 1349.148557][ T37] audit: type=1800 audit(6080314972.495:315): pid=27360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.7656" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1349.185040][T27360] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1349.185073][T27360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1349.185089][T27360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1350.338277][T27433] binder_alloc: 27422: binder_alloc_buf, no vma [ 1352.074671][T27438] nfs: Deprecated parameter 'nointr' [ 1354.796840][T27485] tipc: Cannot configure node identity twice [ 1354.798296][T27485] Invalid ELF header magic: != ELF [ 1354.804004][T27485] overlayfs: overlapping lowerdir path [ 1356.084695][T27500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.087677][T27500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.096299][T27500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.167881][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1356.447064][T27498] ceph: No mds server is up or the cluster is laggy [ 1357.478090][ T822] libceph: connect (1)[c::]:6789 error -101 [ 1357.574398][T27500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.576384][T27500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.581684][T27500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1357.581705][T27500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1357.586555][T27500] veth1_vlan: left promiscuous mode [ 1357.587814][T27500] veth0_vlan: left promiscuous mode [ 1357.589403][T27500] veth0_vlan: entered promiscuous mode [ 1357.591864][T27500] veth1_vlan: entered promiscuous mode [ 1357.595461][T27500] veth1_macvtap: left promiscuous mode [ 1357.596504][T27500] veth0_macvtap: left promiscuous mode [ 1357.597795][T27500] veth0_macvtap: entered promiscuous mode [ 1357.599384][T27500] veth1_macvtap: entered promiscuous mode [ 1357.609157][T27500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1357.610608][T27500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1357.612077][T27500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1357.613819][T27500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1357.625338][T27500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1357.817600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.817747][ T12] bridge0: port 1(bridge_slave_0) entered listening state [ 1357.862309][ T822] libceph: mon0 (1)[c::]:6789 connect error [ 1357.911555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.911733][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 1358.367087][T27510] nfs: Deprecated parameter 'nointr' [ 1358.824510][ T8979] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.942315][ T8979] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.055256][ T8979] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.068934][ T8979] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.926637][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.926711][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.061353][T27536] bridge0: port 3(syz_tun) entered disabled state [ 1363.824027][T27536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.942583][T27536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.360485][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7702'. [ 1364.360527][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7702'. [ 1365.128225][T27582] Invalid ELF header magic: != ELF [ 1365.167976][T27582] overlayfs: overlapping lowerdir path [ 1366.576158][T27536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.615206][T27536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.902805][T27595] nfs: Deprecated parameter 'nointr' [ 1367.432828][T23885] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.447174][T23885] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.459011][T23885] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.462428][T23885] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.822041][T27619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7710'. [ 1370.056344][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7719'. [ 1370.056386][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7719'. [ 1370.356264][T27670] nfs: Deprecated parameter 'nointr' [ 1370.815034][T27682] netlink: 'syz.4.7727': attribute type 21 has an invalid length. [ 1370.815063][T27682] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1371.408949][T27680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.409330][T27680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.908373][T27680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.926717][T27680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.635475][T27703] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1372.654828][T27703] CIFS: Attempting to mount //127.0.0.1/share [ 1372.674449][T11073] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1372.827427][T11073] usb 4-1: Using ep0 maxpacket: 8 [ 1372.845725][T11073] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1372.845756][T11073] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1372.845776][T11073] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.845795][T11073] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.845829][T11073] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1372.845848][T11073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.102983][T27682] netlink: 'syz.4.7727': attribute type 5 has an invalid length. [ 1373.103098][T27682] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1373.175589][T11073] usb 4-1: GET_CAPABILITIES returned 0 [ 1373.175649][T11073] usbtmc 4-1:16.0: can't read capabilities [ 1373.407413][ T822] usb 4-1: USB disconnect, device number 79 [ 1373.478044][ T7224] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.480341][ T7224] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.480395][ T7224] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.480437][ T7224] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.753594][T27720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7740'. [ 1373.788008][T27722] nfs: Deprecated parameter 'nointr' [ 1373.824082][T27703] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1373.824628][T27703] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1375.524464][T27748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7746'. [ 1376.318843][T27769] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7751'. [ 1376.791215][T27777] Invalid ELF header magic: != ELF [ 1376.813516][T27777] overlayfs: overlapping lowerdir path [ 1377.849895][T27794] binder: 27790:27794 ioctl 4018620d 0 returned -22 [ 1378.028436][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7755'. [ 1378.034800][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7755'. [ 1378.035317][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7755'. [ 1378.292549][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7755'. [ 1378.311614][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7755'. [ 1378.435472][T27802] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7760'. [ 1382.162133][T27832] tipc: Started in network mode [ 1382.162339][T27832] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1382.231213][T27832] overlayfs: overlapping lowerdir path [ 1382.858760][T27835] random: crng reseeded on system resumption [ 1383.352388][ T5611] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1384.608081][T27861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1385.697288][T27873] random: crng reseeded on system resumption [ 1386.305859][T27878] overlayfs: overlapping lowerdir path [ 1388.748969][T10625] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1389.261952][T10625] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1389.311099][T10625] usb 8-1: not running at top speed; connect to a high speed hub [ 1389.340117][T10625] usb 8-1: config 10 has an invalid interface number: 3 but max is 0 [ 1389.340239][T10625] usb 8-1: config 10 has no interface number 0 [ 1389.340381][T10625] usb 8-1: config 10 interface 3 has no altsetting 0 [ 1389.463406][T10625] usb 8-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 1389.463451][T10625] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.463514][T10625] usb 8-1: Product: syz [ 1389.463532][T10625] usb 8-1: Manufacturer: syz [ 1389.463594][T10625] usb 8-1: SerialNumber: syz [ 1391.063218][T27909] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7792'. [ 1391.388969][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 1392.180957][T10625] usb 8-1: can't set config #10, error -71 [ 1392.223601][T10625] usb 8-1: USB disconnect, device number 4 [ 1394.457869][T27503] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1394.796577][T27503] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1394.822546][T27503] usb 8-1: not running at top speed; connect to a high speed hub [ 1394.852436][T27503] usb 8-1: config 10 has an invalid interface number: 3 but max is 0 [ 1394.852523][T27503] usb 8-1: config 10 has no interface number 0 [ 1394.852662][T27503] usb 8-1: config 10 interface 3 has no altsetting 0 [ 1394.925616][T27503] usb 8-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 1394.925659][T27503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.925772][T27503] usb 8-1: Product: syz [ 1394.925790][T27503] usb 8-1: Manufacturer: syz [ 1394.925807][T27503] usb 8-1: SerialNumber: syz [ 1397.737088][T27961] overlayfs: overlapping lowerdir path [ 1399.933034][T27922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.940730][T27922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.148147][T24857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.199079][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1401.325472][T24857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.387461][ T1326] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.399761][T24857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.510247][T27503] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 1401.528469][T27503] usb 8-1: selecting invalid altsetting 0 [ 1401.694289][ T2393] pvrusb2: Invalid write control endpoint [ 1401.699606][T27978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7806'. [ 1401.771131][T27503] usb 8-1: USB disconnect, device number 5 [ 1404.040718][T28004] netlink: 'syz.4.7810': attribute type 21 has an invalid length. [ 1404.040747][T28004] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1404.040813][T28004] netlink: 'syz.4.7810': attribute type 5 has an invalid length. [ 1404.040829][T28004] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1404.154018][ T2393] pvrusb2: Invalid write control endpoint [ 1404.154089][ T2393] pvrusb2: Invalid write control endpoint [ 1404.154107][ T2393] pvrusb2: Invalid write control endpoint [ 1404.154124][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402484][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402518][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402536][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402553][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402568][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402584][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402601][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402617][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402632][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402647][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402663][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402679][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402694][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402710][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402726][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402741][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402757][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402773][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402788][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402804][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402820][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402835][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402850][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402865][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402881][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402897][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402912][ T2393] pvrusb2: Invalid write control endpoint [ 1404.402927][ T2393] pvrusb2: Invalid write control endpoint [ 1404.654982][T28011] fuse: Bad value for 'fd' [ 1404.735530][ T2393] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1404.895354][ T2393] cs53l32a 4-0011: chip found @ 0x22 (pvrusb2_a) [ 1404.895430][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895457][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895473][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895489][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895505][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895521][ T2393] pvrusb2: Invalid write control endpoint [ 1404.895537][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896108][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896127][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896142][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896158][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896174][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896189][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896205][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896221][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896237][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896253][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896269][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896285][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896309][ T2393] pvrusb2: Invalid write control endpoint [ 1404.896325][ T2393] pvrusb2: Invalid write control endpoint [ 1405.089833][ T2393] pvrusb2: Attached sub-driver cs53l32a [ 1405.171461][ T2393] pvrusb2: Invalid write control endpoint [ 1405.171515][ T2393] pvrusb2: Invalid write control endpoint [ 1405.171541][ T2393] pvrusb2: Invalid write control endpoint [ 1405.171566][ T2393] pvrusb2: Invalid write control endpoint [ 1405.171578][ T2393] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1405.171682][ T2393] pvrusb2: Device being rendered inoperable [ 1405.171730][ T2393] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1405.171746][ T2393] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1405.768459][T28030] file system registered [ 1406.026557][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7818'. [ 1406.026590][T28036] netlink: 'syz.3.7818': attribute type 5 has an invalid length. [ 1406.026607][T28036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7818'. [ 1406.275976][T28044] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7821'. [ 1406.688616][T28036] geneve3: entered promiscuous mode [ 1406.688646][T28036] geneve3: entered allmulticast mode [ 1406.779091][T19382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1406.862764][T24584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1406.865265][T24584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1406.865423][T24584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1407.075063][T28061] fuse: Bad value for 'fd' [ 1407.153819][T28063] netlink: 'syz.8.7825': attribute type 21 has an invalid length. [ 1407.153852][T28063] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7825'. [ 1408.289525][T28063] netlink: 'syz.8.7825': attribute type 5 has an invalid length. [ 1408.289550][T28063] netlink: 3 bytes leftover after parsing attributes in process `syz.8.7825'. [ 1408.459515][T19192] ffs_data_put(): freeing [ 1408.682218][T28076] tipc: Enabled bearer , priority 0 [ 1408.683303][T28076] syzkaller0: entered promiscuous mode [ 1408.683330][T28076] syzkaller0: entered allmulticast mode [ 1409.417032][T28084] tipc: Resetting bearer [ 1409.488132][T28075] tipc: Resetting bearer [ 1409.705830][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1409.781643][T28075] tipc: Disabling bearer [ 1409.839157][T28102] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7836'. [ 1409.839201][T28102] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7836'. [ 1409.882639][T28106] fuse: Bad value for 'fd' [ 1410.015196][T28102] geneve2: entered promiscuous mode [ 1412.260874][T28133] Invalid ELF header magic: != ELF [ 1412.333888][T28133] overlayfs: overlapping lowerdir path [ 1413.988293][ T37] audit: type=1326 audit(6080315037.425:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.988880][ T37] audit: type=1326 audit(6080315037.425:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.988951][ T37] audit: type=1326 audit(6080315037.425:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.989000][ T37] audit: type=1326 audit(6080315037.425:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.989049][ T37] audit: type=1326 audit(6080315037.425:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.989470][ T37] audit: type=1326 audit(6080315037.425:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.989521][ T37] audit: type=1326 audit(6080315037.425:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1413.989570][ T37] audit: type=1326 audit(6080315037.425:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28143 comm="syz.1.7843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c395de99 code=0x7ffc0000 [ 1414.271057][T28154] random: crng reseeded on system resumption [ 1415.614480][T28164] fuse: Bad value for 'fd' [ 1415.764537][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7848'. [ 1415.977618][ T5611] Bluetooth: hci2: link tx timeout [ 1415.977900][ T5611] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1416.004233][ T5611] Bluetooth: hci2: link tx timeout [ 1416.004257][ T5611] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1416.086701][T28175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7850'. [ 1416.086741][T28175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7850'. [ 1416.748967][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1416.817609][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1416.840063][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1416.859583][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1417.179443][T28196] Invalid ELF header magic: != ELF [ 1417.259440][T28196] overlayfs: overlapping lowerdir path [ 1417.851384][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1418.017540][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 1418.447558][T28195] tipc: Cannot configure node identity twice [ 1418.977855][T28212] random: crng reseeded on system resumption [ 1419.068612][ T37] audit: type=1326 audit(6080315043.295:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.068674][ T37] audit: type=1326 audit(6080315043.295:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.068721][ T37] audit: type=1326 audit(6080315043.295:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.068768][ T37] audit: type=1326 audit(6080315043.295:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.068814][ T37] audit: type=1326 audit(6080315043.295:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.068862][ T37] audit: type=1326 audit(6080315043.295:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28185 comm="syz.4.7855" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2cb8de99 code=0x7ffc0000 [ 1419.503640][T28222] fuse: Invalid rootmode [ 1419.808744][T28228] input: syz1 as /devices/virtual/input/input81 [ 1420.017578][ T59] Bluetooth: hci5: command tx timeout [ 1420.061908][T24858] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1420.217419][T24858] usb 9-1: Using ep0 maxpacket: 8 [ 1420.219929][T24858] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1420.219969][T24858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1420.219988][T24858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1420.220026][T24858] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.220072][T24858] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1420.220100][T24858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.301022][T28238] Invalid ELF header magic: != ELF [ 1420.356703][T28238] overlayfs: overlapping lowerdir path [ 1420.898130][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 1421.098358][T28243] random: crng reseeded on system resumption [ 1421.990659][T24858] usb 9-1: GET_CAPABILITIES returned 0 [ 1421.990710][T24858] usbtmc 9-1:16.0: can't read capabilities [ 1422.107427][T21914] Bluetooth: hci5: command tx timeout [ 1422.264709][T24858] usb 9-1: USB disconnect, device number 5 [ 1422.426488][T28255] ================================================================== [ 1422.426505][T28255] BUG: KASAN: slab-use-after-free in i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.426684][T28255] Read of size 8 at addr ffff8880270b4108 by task syz.4.7872/28255 [ 1422.426704][T28255] [ 1422.426759][T28255] CPU: 0 UID: 0 PID: 28255 Comm: syz.4.7872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1422.426792][T28255] Tainted: [L]=SOFTLOCKUP [ 1422.426802][T28255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1422.426826][T28255] Call Trace: [ 1422.426836][T28255] [ 1422.426912][T28255] dump_stack_lvl+0xe8/0x150 [ 1422.427073][T28255] print_address_description+0x55/0x1e0 [ 1422.427073][T28255] print_address_description+0x55/0x1e0 [ 1422.427113][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.427163][T28255] print_report+0x58/0x70 [ 1422.427192][T28255] kasan_report+0x117/0x150 [ 1422.427269][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.427296][T28255] i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.427320][T28255] i2c_smbus_xfer+0xd5/0x310 [ 1422.427350][T28255] i2cdev_ioctl_smbus+0x407/0x700 [ 1422.427406][T28255] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1422.427435][T28255] i2cdev_ioctl+0x618/0x890 [ 1422.427457][T28255] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1422.427478][T28255] ? __fget_files+0x2a/0x420 [ 1422.427544][T28255] ? __fget_files+0x3a8/0x420 [ 1422.427567][T28255] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1422.427624][T28255] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1422.427644][T28255] __se_sys_ioctl+0xff/0x170 [ 1422.427722][T28255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.427766][T28255] do_syscall_64+0x174/0x580 [ 1422.427854][T28255] ? trace_irq_disable+0x3b/0x140 [ 1422.428001][T28255] ? clear_bhb_loop+0x40/0x90 [ 1422.428027][T28255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.428056][T28255] RIP: 0033:0x7f0b2cb8de99 [ 1422.428108][T28255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.428129][T28255] RSP: 002b:00007f0b2ade6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.428179][T28255] RAX: ffffffffffffffda RBX: 00007f0b2ce15fa0 RCX: 00007f0b2cb8de99 [ 1422.428198][T28255] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000003 [ 1422.428215][T28255] RBP: 00007f0b2cc23eaf R08: 0000000000000000 R09: 0000000000000000 [ 1422.428230][T28255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.428245][T28255] R13: 00007f0b2ce16038 R14: 00007f0b2ce15fa0 R15: 00007ffe659b19a8 [ 1422.428272][T28255] [ 1422.428280][T28255] [ 1422.428285][T28255] Allocated by task 1326: [ 1422.428303][T28255] kasan_save_track+0x3e/0x80 [ 1422.428324][T28255] __kasan_kmalloc+0x93/0xb0 [ 1422.428344][T28255] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 1422.428429][T28255] __alloc_skb+0x2bd/0x7a0 [ 1422.428536][T28255] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1422.428614][T28255] process_scheduled_works+0xa8e/0x14e0 [ 1422.428670][T28255] worker_thread+0xa47/0xfb0 [ 1422.428695][T28255] kthread+0x388/0x470 [ 1422.428745][T28255] ret_from_fork+0x514/0xb70 [ 1422.428827][T28255] ret_from_fork_asm+0x1a/0x30 [ 1422.428848][T28255] [ 1422.428854][T28255] Freed by task 1326: [ 1422.428865][T28255] kasan_save_track+0x3e/0x80 [ 1422.428887][T28255] kasan_save_free_info+0x40/0x50 [ 1422.428949][T28255] __kasan_slab_free+0x5c/0x80 [ 1422.428968][T28255] kfree+0x1c5/0x6c0 [ 1422.428983][T28255] skb_release_data+0x85e/0xab0 [ 1422.429007][T28255] __kfree_skb+0x5d/0x210 [ 1422.429028][T28255] nsim_dev_trap_report_work+0x879/0xcb0 [ 1422.429056][T28255] process_scheduled_works+0xa8e/0x14e0 [ 1422.429079][T28255] worker_thread+0xa47/0xfb0 [ 1422.429105][T28255] kthread+0x388/0x470 [ 1422.429136][T28255] ret_from_fork+0x514/0xb70 [ 1422.429162][T28255] ret_from_fork_asm+0x1a/0x30 [ 1422.429180][T28255] [ 1422.429186][T28255] The buggy address belongs to the object at ffff8880270b4000 [ 1422.429186][T28255] which belongs to the cache kmalloc-4k of size 4096 [ 1422.429206][T28255] The buggy address is located 264 bytes inside of [ 1422.429206][T28255] freed 4096-byte region [ffff8880270b4000, ffff8880270b5000) [ 1422.429229][T28255] [ 1422.429235][T28255] The buggy address belongs to the physical page: [ 1422.429255][T28255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x270b0 [ 1422.429276][T28255] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1422.429295][T28255] flags: 0x80000000000040(head|node=0|zone=1) [ 1422.429317][T28255] page_type: f5(slab) [ 1422.429339][T28255] raw: 0080000000000040 ffff88813ffb2140 dead000000000100 dead000000000122 [ 1422.429358][T28255] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1422.429380][T28255] head: 0080000000000040 ffff88813ffb2140 dead000000000100 dead000000000122 [ 1422.429400][T28255] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1422.429420][T28255] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1422.429439][T28255] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1422.429450][T28255] page dumped because: kasan: bad access detected [ 1422.429466][T28255] page_owner tracks the page as allocated [ 1422.429476][T28255] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13082770889, free_ts 13069657874 [ 1422.429515][T28255] post_alloc_hook+0x1f9/0x250 [ 1422.429572][T28255] get_page_from_freelist+0x262a/0x26a0 [ 1422.429599][T28255] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1422.429624][T28255] allocate_slab+0x79/0x5e0 [ 1422.429651][T28255] refill_objects+0x2d8/0x350 [ 1422.429677][T28255] __pcs_replace_empty_main+0x330/0x690 [ 1422.429705][T28255] __kmalloc_cache_noprof+0x468/0x6b0 [ 1422.429726][T28255] kobject_uevent_env+0x28c/0x9e0 [ 1422.429812][T28255] device_add+0x544/0xb80 [ 1422.429888][T28255] device_create+0x269/0x300 [ 1422.429922][T28255] mon_bin_add+0xb6/0x130 [ 1422.429994][T28255] mon_bus_init+0x173/0x2b0 [ 1422.430016][T28255] mon_notify+0x10c/0x3f0 [ 1422.430039][T28255] notifier_call_chain+0x1a5/0x3d0 [ 1422.430092][T28255] blocking_notifier_call_chain+0x6a/0x90 [ 1422.430122][T28255] usb_register_bus+0xcf/0x150 [ 1422.430146][T28255] page last free pid 10 tgid 10 stack trace: [ 1422.430160][T28255] free_pages_prepare+0x946/0xa40 [ 1422.430178][T28255] __free_contig_range_common+0x174/0x340 [ 1422.430206][T28255] free_pages_bulk+0x48/0x120 [ 1422.430226][T28255] vfree+0x26f/0x510 [ 1422.430272][T28255] delayed_vfree_work+0x55/0x80 [ 1422.430292][T28255] process_scheduled_works+0xa8e/0x14e0 [ 1422.430318][T28255] worker_thread+0xa47/0xfb0 [ 1422.430342][T28255] kthread+0x388/0x470 [ 1422.430373][T28255] ret_from_fork+0x514/0xb70 [ 1422.430406][T28255] ret_from_fork_asm+0x1a/0x30 [ 1422.430422][T28255] [ 1422.430426][T28255] Memory state around the buggy address: [ 1422.430438][T28255] ffff8880270b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.430450][T28255] ffff8880270b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.430463][T28255] >ffff8880270b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.430472][T28255] ^ [ 1422.430482][T28255] ffff8880270b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.430494][T28255] ffff8880270b4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.430503][T28255] ================================================================== [ 1422.509983][T28255] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1422.510075][T28255] CPU: 1 UID: 0 PID: 28255 Comm: syz.4.7872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1422.510173][T28255] Tainted: [L]=SOFTLOCKUP [ 1422.510209][T28255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1422.510261][T28255] Call Trace: [ 1422.510289][T28255] [ 1422.510301][T28255] vpanic+0x56c/0xa60 [ 1422.510377][T28255] ? __pfx_vpanic+0x10/0x10 [ 1422.510470][T28255] ? __pfx___schedule+0x10/0x10 [ 1422.510656][T28255] panic+0xc5/0xd0 [ 1422.510726][T28255] ? __pfx_panic+0x10/0x10 [ 1422.510794][T28255] ? preempt_schedule_thunk+0x16/0x40 [ 1422.510895][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.510988][T28255] check_panic_on_warn+0x89/0xb0 [ 1422.511118][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.511193][T28255] end_report+0x73/0x170 [ 1422.511276][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.511317][T28255] kasan_report+0x128/0x150 [ 1422.511349][T28255] ? i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.511383][T28255] i2c_adapter_lock_bus+0x5e/0xf0 [ 1422.511412][T28255] i2c_smbus_xfer+0xd5/0x310 [ 1422.511457][T28255] i2cdev_ioctl_smbus+0x407/0x700 [ 1422.511544][T28255] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1422.511648][T28255] i2cdev_ioctl+0x618/0x890 [ 1422.511710][T28255] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1422.511763][T28255] ? __fget_files+0x2a/0x420 [ 1422.511844][T28255] ? __fget_files+0x3a8/0x420 [ 1422.511899][T28255] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1422.511979][T28255] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1422.512049][T28255] __se_sys_ioctl+0xff/0x170 [ 1422.512144][T28255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.512218][T28255] do_syscall_64+0x174/0x580 [ 1422.512300][T28255] ? trace_irq_disable+0x3b/0x140 [ 1422.512369][T28255] ? clear_bhb_loop+0x40/0x90 [ 1422.512451][T28255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.512514][T28255] RIP: 0033:0x7f0b2cb8de99 [ 1422.512575][T28255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.512634][T28255] RSP: 002b:00007f0b2ade6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.512706][T28255] RAX: ffffffffffffffda RBX: 00007f0b2ce15fa0 RCX: 00007f0b2cb8de99 [ 1422.512765][T28255] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000003 [ 1422.512813][T28255] RBP: 00007f0b2cc23eaf R08: 0000000000000000 R09: 0000000000000000 [ 1422.512859][T28255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.512905][T28255] R13: 00007f0b2ce16038 R14: 00007f0b2ce15fa0 R15: 00007ffe659b19a8 [ 1422.512992][T28255] [ 1422.513641][T28255] Kernel Offset: disabled