last executing test programs: 4m20.072402427s ago: executing program 1 (id=2802): syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c00), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, &(0x7f0000000000)='\x00\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m19.808965789s ago: executing program 1 (id=2805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) 4m19.757355688s ago: executing program 1 (id=2807): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x700, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4m19.710711392s ago: executing program 1 (id=2809): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x36}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a"], 0x4a) 4m19.440645731s ago: executing program 1 (id=2813): syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c00), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, &(0x7f0000000000)='\x00\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m18.940765406s ago: executing program 1 (id=2815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) 4m18.940415423s ago: executing program 32 (id=2815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) 2m3.249595439s ago: executing program 0 (id=3489): prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m0.016274978s ago: executing program 0 (id=3497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m59.748279658s ago: executing program 0 (id=3498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1m59.420063592s ago: executing program 0 (id=3499): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 1m59.2300042s ago: executing program 0 (id=3500): syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a"], 0x0) 1m55.848805539s ago: executing program 0 (id=3511): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0xca10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008858) read(r0, &(0x7f0000000180)=""/167, 0xa7) 1m55.745980566s ago: executing program 33 (id=3511): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0xca10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008858) read(r0, &(0x7f0000000180)=""/167, 0xa7) 52.209285215s ago: executing program 3 (id=3805): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = dup(r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1f6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x40002000, 0x0) 51.989613942s ago: executing program 3 (id=3807): socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=""/50, &(0x7f00000000c0)=0x32) socket$igmp(0x2, 0x3, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x53, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x31, 0x0, @opaque="34f7bef2b091dee6848523f7b716ed570f9071d59bea8f24f734b12dc6daa4d8d54a07e239a5a75f86"}}}}}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x5857, &(0x7f00000002c0)={0x0, 0xed5e, 0x1000, 0x0, 0x1a8, 0x0, r2}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 51.860124368s ago: executing program 3 (id=3809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1270, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x1200, 0x3c8, 0x3c8, 0x1200, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xfe, 'macvtap0\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x1, 0x6f}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0xff, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x8513, 0x2, [0x9, 0x7, 0x1f, 0x24, 0x2d, 0x1b, 0x3, 0xb, 0x2b, 0x10, 0x38, 0x3, 0x19, 0x3f, 0x23, 0x3], 0x0, 0x3, 0x7}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xfc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12d0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000083000021000b034d2500b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000000c0)={0x3, 0x200, 0x2, 0x80000000, 0xffffffff, 0x2000082, 0x7454, 0x7, 0x3fd, 0x6, 0x7fffff, 0x6bf2, 0xfffffffb, 0x2}) 50.027989208s ago: executing program 3 (id=3821): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 49.98972129s ago: executing program 3 (id=3822): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x9, 0x7ffc0001}]}) io_submit(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 49.467387963s ago: executing program 3 (id=3828): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 49.246366555s ago: executing program 34 (id=3828): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 32.35469431s ago: executing program 6 (id=3929): r0 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x1, 0x1}}], 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000006000008000f0001000000", 0x24) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 32.183759757s ago: executing program 6 (id=3930): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 32.130506859s ago: executing program 6 (id=3931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000c00000140003006e657464657673696d30000000001e0034001680300001802c000c80140f"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 31.92725525s ago: executing program 6 (id=3932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xd, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) 31.756663302s ago: executing program 6 (id=3933): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0) read$FUSE(r0, 0x0, 0x0) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20222000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.522998404s ago: executing program 6 (id=3937): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$CDROMRESET(r0, 0x5312) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000010000b70200010000000000000000000000008500000083000000050d0000001000000109561427380000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x1, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7fff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000040)=0x10000000) r5 = socket(0x2, 0x2, 0x0) bind$unix(r5, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0x6, 0x1, 0x3, 0x0, 0xd0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6], 0x1}, 0x58) chdir(&(0x7f0000000080)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x59032, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r7, 0x0, 0x0}, 0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = dup3(r0, r2, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x9}}, [0x5, 0x80, 0x5, 0x2, 0x6, 0x6, 0x24f, 0x100000000, 0x4, 0x8000000000000001, 0x7, 0xe, 0x7, 0x200, 0x7]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x3, 0x1}, &(0x7f00000009c0)=0x88) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000a00)={r9, 0x39a5, 0x4, 0x1, 0xa12, 0x1, 0x8, 0x5, {r10, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x80000001, 0x4800000, 0x3, 0x0, 0xffff}}, &(0x7f0000000ac0)=0xb0) mount$9p_unix(0x0, 0x0, 0x0, 0x2000420, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000002300)={@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, 0x1, "59b41b36dc03d9277b93777c89940306472ecfca73574c467436217995b55556", 0x16, 0xab, 0xe, 0x8}, 0x3c) 15.481797357s ago: executing program 35 (id=3937): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$CDROMRESET(r0, 0x5312) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000010000b70200010000000000000000000000008500000083000000050d0000001000000109561427380000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x1, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7fff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000040)=0x10000000) r5 = socket(0x2, 0x2, 0x0) bind$unix(r5, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0x6, 0x1, 0x3, 0x0, 0xd0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6], 0x1}, 0x58) chdir(&(0x7f0000000080)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x59032, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r7, 0x0, 0x0}, 0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = dup3(r0, r2, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x9}}, [0x5, 0x80, 0x5, 0x2, 0x6, 0x6, 0x24f, 0x100000000, 0x4, 0x8000000000000001, 0x7, 0xe, 0x7, 0x200, 0x7]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x3, 0x1}, &(0x7f00000009c0)=0x88) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000a00)={r9, 0x39a5, 0x4, 0x1, 0xa12, 0x1, 0x8, 0x5, {r10, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x80000001, 0x4800000, 0x3, 0x0, 0xffff}}, &(0x7f0000000ac0)=0xb0) mount$9p_unix(0x0, 0x0, 0x0, 0x2000420, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000002300)={@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, 0x1, "59b41b36dc03d9277b93777c89940306472ecfca73574c467436217995b55556", 0x16, 0xab, 0xe, 0x8}, 0x3c) 5.801340707s ago: executing program 4 (id=4089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x98, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "d3c99be6a4ce53cb", "7787f4b54571aebbc835108e7313b11069e7e00e63a1a7e118795f1949ca452b", "f62e4d5a", "63234287ae4dabca"}, 0x38) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.73401563s ago: executing program 4 (id=4092): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4c850) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r2, @ANYBLOB="d470"], 0x0) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$P9_RVERSION(r3, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x2b1b1983) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0x300, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0xffe0}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010055", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf25060000003c00078008000200000200000c0004000100000000000000080002000100008008000200040000000c0003000100000000000000080002000a000000500006804200040067636d28616573290000000000000000000000000000000000000000000000001a0000009a46dfdcb184462ff24fdffde30c879a9706f40589ac96eea9fa000008000100ff0700000c00038008000100030000001c00098008000100fcffffff080002001303000008000200800000006c00018044000400200001000a004e220000087afe88000000000000000000000000000101000000200002000a004e2400000003fe8800000000000000000000000001010000000014000280080004000000000008000300e60a00000e0001006574683a776c616e31000000"], 0x134}, 0x1, 0x0, 0x0, 0x20044800}, 0x88f) r4 = dup(r0) ioctl$TCXONC(r4, 0x540a, 0x2) 3.529839012s ago: executing program 7 (id=4100): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_SET_IRQCHIP(r7, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x5a, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0xac}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0x9}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0xf7, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x95, 0x44, 0x9, '\x00', 0x10}, {0xf4, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000000)="03455200", 0x4) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00dfb0000e60080b87e5d960001000000000200f97ae40d35a72d670000000000000000005cb4c6f1221f452400", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b3d55080021000c547d03daa0f4bd00", [0x0, 0x9]}}) syz_usb_disconnect(0xffffffffffffffff) 2.563463544s ago: executing program 2 (id=4106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400208010000b8008000100ac1414bb04013d8008000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.503489372s ago: executing program 2 (id=4107): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r0, 0x1}, &(0x7f0000000100)=0x8) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x100, 0x9, 0x100}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_DIRTY_TLB(r2, 0x400caeaa, &(0x7f0000000180)={0xfff, 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @multicast2}], 0x20) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x5, 0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/153) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0x2e, 0x0, [0x9373, 0xfffffffffffffff9, 0x7, 0xf0, 0xffffffffffffff37], [0x1, 0x5, 0x3, 0x8, 0x4, 0x7, 0x9, 0xffff, 0x5, 0x3, 0x5, 0x0, 0x7, 0x56f, 0x9, 0x0, 0xf, 0x70f, 0x8, 0x2, 0xe, 0x1, 0xffffffffffffff7f, 0x8, 0x9, 0xffffffffffffffff, 0x3, 0x1000, 0x2, 0x2, 0x0, 0x16a4, 0x7, 0x4, 0x7, 0x5, 0x5, 0x6, 0x61c7, 0x100000001, 0x8, 0x6, 0x66c, 0x2ea, 0x22a2, 0x2, 0x1, 0x3, 0x8, 0xe9, 0x55c, 0x4, 0x1204, 0x6, 0x3ff, 0x3, 0x5, 0x6, 0x3, 0x4, 0x7, 0x1ff, 0x2, 0xbbfb, 0x0, 0xffffffffffffffff, 0xe, 0x7fff, 0x9dd, 0x0, 0x39, 0x6, 0x4, 0x3, 0x6, 0x6, 0x6, 0x4c6, 0x7, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x4, 0x1ff, 0x7, 0x8, 0x6, 0xd875, 0x1ff, 0x80000001, 0x0, 0xe6f, 0x61c724bf, 0x2, 0x77b126e0, 0x100, 0x0, 0x9, 0x80000001, 0x1, 0xb, 0x4, 0x1b, 0xbdfa, 0x1, 0x4, 0x17e6, 0x5, 0x2, 0x10, 0x9, 0xc7e3, 0x9, 0x0, 0x400, 0x800, 0x6, 0x2, 0x8000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000740)={0x0, 0x9, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000b40)={0x4, 0x7, {0x4, @struct={0x3, 0x63}, 0x0, 0x9, 0x7, 0x10, 0x2, 0x2, 0x8, @usage=0xffffffffffffd875, 0x10001, 0x2, [0xebb, 0x7, 0x9, 0x81, 0x3, 0x3]}, {0xffffffffffffffff, @struct={0x9, 0x7}, 0x0, 0x5, 0x10b1, 0xdc, 0x3ff, 0xf, 0x4, @struct={0x4, 0x3}, 0x8, 0x7fffffff, [0xff, 0x8, 0x8, 0x401, 0x7b0f3707, 0x3]}, {0xffffffffffffffff, @struct={0xda56, 0xffff22fe}, 0x0, 0xb, 0x3, 0xfffffffffffffff9, 0x8, 0x5, 0x1d, @struct={0x4, 0x620}, 0x80000001, 0x0, [0x1f, 0x100, 0x768f, 0x5, 0x5, 0xc9]}, {0x3, 0x0, 0xaf83}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f40)={0x2, 0x2, {0x1f, @usage=0x1, r3, 0x401, 0xe, 0x6, 0x8, 0x2, 0x24, @usage=0x8000000000000001, 0x7, 0x9, [0x34ef, 0x401, 0xffffffff, 0x9, 0x7, 0x1200000000000]}, {0x80, @struct={0x7, 0x3}, r4, 0x3, 0x5, 0x6973, 0xa90, 0x4, 0x60, @struct={0xc, 0x5}, 0x401, 0x0, [0x8, 0x9, 0x767, 0x4756, 0xebb, 0xf]}, {0x3, @struct={0xfffffff5, 0x5}, r5, 0x9, 0x2, 0x1, 0xffff, 0x3ff, 0x40, @usage=0xe, 0x1, 0x6, [0x2, 0x9, 0x5, 0x4, 0x9, 0x3]}, {0x5, 0x1, 0x9}}) r6 = openat$cuse(0xffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003500)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f00000037c0)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003800)={0x0, 0x0, 0x0}, &(0x7f0000003840)=0xc) lstat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000039c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000005b80)='./file0\x00', 0x2000, 0xc04, &(0x7f0000005bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000005cc0)='./file0\x00', 0x1000, 0x10, &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005e00)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000005f00)=0xe4) fstat(r1, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005fc0)={0x0, 0x0, 0x0}, &(0x7f0000006000)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006040)=0x0) r18 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006080)={0x0, 0x0}, &(0x7f00000060c0)=0xc) r20 = getegid() syz_fuse_handle_req(r6, &(0x7f0000001380)="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", 0x2000, &(0x7f0000006a80)={&(0x7f0000003380)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x8, 0x20012080, 0x8, 0xffff, 0x6, 0x260f, 0x0, 0x0, 0x20, 0x6}}, &(0x7f0000003400)={0x18, 0x0, 0x70, {0x9}}, &(0x7f0000003440)={0x18, 0xfffffffffffffffe, 0xfffffffffffffff7, {0x1}}, &(0x7f0000003480)={0x18, 0xfffffffffffffffe, 0xf451, {0xc}}, &(0x7f00000034c0)={0x18, 0xffffffffffffffda, 0xec87, {0x3ff}}, &(0x7f0000003540)={0x28, 0x0, 0xf, {{0x3, 0x4b1911220000000, 0x0, r7}}}, &(0x7f0000003580)={0x60, 0xfffffffffffffffe, 0xa9b, {{0x200000000000000, 0x8, 0xff40, 0x8, 0x9, 0x7, 0x8001, 0xfe000000}}}, &(0x7f0000003600)={0x18, 0x0, 0x400, {0x6}}, &(0x7f0000003640)={0x14, 0x0, 0x7, {'\\},\x00'}}, &(0x7f0000003680)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x17}}, &(0x7f0000003880)={0x78, 0x0, 0x670d, {0x0, 0x7, 0x0, {0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x80000001, 0x8000000000000000, 0x6, 0x2, 0x3, 0x10001, 0xc000, 0x8e8, r8, r9, 0x9, 0x5}}}, &(0x7f0000005a00)={0x90, 0x0, 0x2fd, {0x4, 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x2, {0x6, 0x8, 0x7, 0x7, 0x0, 0x400, 0x8, 0x9, 0x6, 0x4000, 0x6, r10, r11, 0x80000001, 0x7}}}, &(0x7f0000005ac0)={0x90, 0x0, 0x1f68, [{0x0, 0x7, 0x1, 0x3, '\x00'}, {0x1, 0x0, 0x1, 0x3, '\x00'}, {0x0, 0x6c6, 0x7, 0xff, '^+\'^@+\\'}, {0x0, 0x0, 0x1, 0x993a, '\x00'}]}, &(0x7f0000006180)={0x3d0, 0xffffffffffffffda, 0x9, [{{0x1, 0x3, 0x4, 0xca, 0x4, 0xff, {0x4, 0x800, 0x3, 0x75, 0xffffffff00000000, 0x36a, 0x10001, 0x9, 0xc9bb, 0x6000, 0x5a4bbdda, r12, r13, 0x7, 0x8}}, {0x3, 0x8, 0x6, 0x8000, ']@]%$,'}}, {{0x3, 0x1, 0x3, 0x2, 0xffff7fff, 0x80, {0x4, 0x4, 0x5, 0x2, 0x525e, 0x4, 0x8, 0x80000000, 0x81, 0xa000, 0xfff, r14, 0xffffffffffffffff, 0xfb7, 0x70}}, {0x3, 0x0, 0x6, 0x16, 'A[/[,,'}}, {{0x1, 0x1, 0x5, 0x8, 0x5, 0x81, {0x1, 0x86, 0x6, 0x6, 0x100000001, 0x4, 0x80000000, 0x1, 0x4, 0x8000, 0xfff, r15, r16, 0x1bd5, 0x6}}, {0x3, 0x3, 0x1, 0x3, '\x00'}}, {{0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x8, {0x1, 0x9, 0xffffffff00000000, 0x101, 0x2, 0xa, 0xa, 0x9, 0x1, 0x6000, 0x888c, r17, r18, 0x9, 0xb5f3}}, {0x3, 0x8ab6, 0x1, 0xfd54, '\x00'}}, {{0x6, 0x0, 0x4, 0x9, 0x10, 0xbaa3, {0x6, 0x5, 0x4, 0x7ff, 0x0, 0x2, 0x6, 0x3, 0x5, 0xa000, 0x4, r19, r20, 0x6, 0x8000}}, {0x6, 0x4, 0x1, 0x9, '\x00'}}, {{0x3, 0x3, 0x5, 0x351, 0x0, 0xffffe576, {0x2, 0xdccb, 0x3, 0x8, 0x1, 0x4, 0x3617, 0x0, 0x6, 0x4000, 0xfff, 0x0, 0x0, 0xfffffff9, 0x6}}, {0x1, 0x101, 0x2, 0x1, '/-'}}]}, &(0x7f0000006640)={0xa0, 0x0, 0xfff, {{0x1, 0x3, 0xffffffffffffffff, 0x6, 0x80, 0xc, {0x2, 0xc6a, 0x4fc, 0xb, 0xf4c8, 0x3, 0x6, 0x3926, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x5, 0xa69}}, {0x0, 0x12}}}, &(0x7f0000006700)={0x20, 0x0, 0xfffffffffffff7ce, {0x8, 0x0, 0x9e3, 0xfffffffc}}, &(0x7f0000006940)={0x130, 0x0, 0x3, {0x10001, 0x7, 0x0, '\x00', {0x80, 0x80, 0x3c, 0x10000, 0x0, 0x0, 0x2000, '\x00', 0xe, 0xb3, 0x8, 0x1, {0x7, 0x4}, {0x8001, 0xff}, {0xff, 0x8cf}, {0x40, 0x39ec}, 0x5, 0x7, 0x62, 0x7ff}}}}) 2.380077592s ago: executing program 2 (id=4109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000905000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.199990398s ago: executing program 2 (id=4110): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c0", 0x13}, {&(0x7f0000000000)="82d903bfcb8484b98931c6c599ed9c", 0xf}, {&(0x7f0000000040)="d131", 0x2}], 0x3}}], 0x1, 0x2404c0e4) timer_gettime(0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000080)="d301006d023e4684", 0x8) 2.199523583s ago: executing program 2 (id=4111): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x0, 0x9}, {0xfffe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200400d5) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x640040c4}, 0x1000c0c1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)="0015", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x10000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x500, 0x600}]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020073797a3200000000080041007278650014003300c57a7468315f746f5f687372000000000900020073797a30000000000800410072786500140033006873723000b7b183e000020000ad814b00"/96], 0x60}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff038}, {0x20, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.694607505s ago: executing program 7 (id=4112): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/132, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c96"]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718561a00d8, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x7, 0xf8}}, 0x28) 1.680403104s ago: executing program 4 (id=4113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 1.615373794s ago: executing program 7 (id=4114): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0xc3, 0x0, 0x7}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900674c0000f00000000000fc010000000000000000000000000001fc010000000000000000000000000000000000004e2200020a00808000000000", @ANYBLOB], 0xb8}}, 0x48000) 1.613675007s ago: executing program 4 (id=4115): setrlimit(0x0, &(0x7f0000000140)={0x4, 0xfc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r3) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x2000000, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) keyctl$reject(0x13, r4, 0x2, 0x39, r3) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000038002508dc9500000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000068874466dab5104b8b3728e3b393ce624c20cdad94cce7fc6d186c6bfd334bca3444129efa4bc74583757f292073447df32c1593d68643f40dbe5d199c69696969bd7cf9a9cd67e5aaa237f876fab647fb3773b026e4dcaadb3b1a7f68eb9276aa7324ecd5010de71da822b84c0f3af8a88db26343a1c02d510bcfd60e7f4b14af5f9d0bfaa143f215c4e4915b71c0cdb64c27f06d0ccecdad7b8a51f4b17429ddc0710a96a688bd8ea19c48b3d34b0eb1e7ffc67f8941ec7108816bdbd55ad4f5e53bbb921e13f8dfa5be118bed2c99d6874e1b9c0f5d1cb8bcc963c1ae26fef42fa123e35d48dc5c06ab0a7550158091f9e2"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000003000000850000002700000018010000786c6c2500000000002020765c0000ff00000000bfa109004000000007010000f8ffffffb702000008000000b70300000000000085000000060000507abe4df831161900"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.502873969s ago: executing program 7 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x560b}, 0x48) 1.248441195s ago: executing program 7 (id=4117): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x70}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 1.248067685s ago: executing program 7 (id=4118): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xffffffffffffff2c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0xe803}, 0x4000) 1.196446881s ago: executing program 5 (id=4119): truncate(&(0x7f0000000000)='./file0\x00', 0x1) r0 = inotify_init1(0x80000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) r1 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f00000000c0)={0x4, 0x0, [{0x1, 0xd, 0x6, 0x5, 0x1, 0x3, 0xdb9}, {0x80000002, 0x3fcb4cba, 0x0, 0x0, 0x5, 0x7, 0x5}, {0xc0000001, 0x4, 0x2, 0x7, 0x930f, 0x98b}, {0x0, 0x9, 0x1, 0x400, 0x5, 0x1000, 0x5}]}) r2 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffff9c, r2, 0x41, 0x1ff) recvfrom$x25(r1, &(0x7f00000001c0)=""/67, 0x43, 0x2000, &(0x7f0000000240), 0x12) r3 = syz_open_dev$media(&(0x7f0000000280), 0xfffffffd, 0x101002) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000002c0)=0x4) syz_emit_ethernet(0x1e, &(0x7f0000000300)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "65c4d564cd8ec551"}}}}, &(0x7f0000000340)={0x1, 0x2, [0x2b3, 0xdbe, 0x8b, 0xb42]}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000380)={0x59, 0x2}, 0x2) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000003c0)={'wg0\x00', 0x100}) lseek(r3, 0x2, 0x3) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10901000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c4, 0x2b, 0x100, 0x70bd2b, 0x25dfdbfd, {0x5}, [@generic="b2f6faf4207e098cc6a306896415473c9159909e51533337d802d1ac7a87cd205b43a7c2fc63cbcc5a60903d8d06ecb23b2e340766ef22e78dc475ef8c4a62a7b618b8abfbf18f74a3baaf4c06cb91194e9b3cc93e5dc153162b7c6b6289a133e00246cc3912b69b2f2b18c0c6d28666022c881237a31782cef1e89dd942e89e42558844225ab0c7f2d4ecde278db671d982e1f5d915d55f9a9587c099685360e2afce2a4f0b7fc70d7ee94cde5100bf95ed16ca7351c272ce44d602da411f710d6bec93de06871b2c48d5f2d3310344e1ee2c19eb7e6121d9", @nested={0x18, 0x144, 0x0, 0x1, [@typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @generic="ffb30686ac9bcdde2794666136abaea222ca9e93394952b8b274fde31c5b8e6b8b178da30eee79304e2a43f2c75d322f50e46f057d035c13e963c4ad6755eafbc85d29c0640fd8c4aa83ff6ce5e3371298d3a1e52a4b80f4fc60df3810caf7a719f47bf9c0b624670d3af7e53471e83e02aefd1bb64e70e46eedf5e882beba1b2b7b648cd481ed2bd288594b2829ccfef78bb6d9a600202406be98ca292f53c8a65d76c9e271d9590ba4cc374d473646b9", @nested={0xc, 0x69, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r5}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44841}, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000780), 0x105000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f00000007c0)={0x4, 0x4, 0x2, 0xa1, 0x5, 0x0, [{0x3, 0x1, 0x6, '\x00', 0x300}, {0x101, 0xffffffffffffffc0, 0x0, '\x00', 0x1000}, {0x9, 0x4, 0x6, '\x00', 0x1}, {0x8, 0xa5f, 0x92a, '\x00', 0x8}, {0x9, 0x81, 0xb5, '\x00', 0x1801}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a00)=@o_path={&(0x7f0000000900)='./file0\x00', r8, 0x4000, r3}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001880)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000000ac0)=@newtfilter={0xd50, 0x2c, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x9, 0xd}, {0x2, 0xffe0}, {0x5, 0x10}}, [@f_rsvp6={{0xa}, {0xd20, 0x2, [@TCA_RSVP_ACT={0x498, 0x6, [@m_xt={0x3b8, 0x19, 0x0, 0x0, {{0x7}, {0x2ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb9, 0x6, {0x6, 'raw\x00', 0x7, 0xa, "b3c0473ee571f4601e023b63d9799be34d30e875a616254914a7b7accec52968fe312a2078b16fc9068fff9d901e0fed0c4ea17619da88f444352f92d0a8f9cc191c82f28cbbc81322a296b9de3e4f3937679d7233890cb84d160b1581a7e727de66904aa7e05660ceafae7d0b76a68034d581c4bce505e2ee8d2f1b1288bfa8be4e7954796c6a9a7c4848bd6c568e"}}, @TCA_IPT_TARG={0xc4, 0x6, {0x8, 'mangle\x00', 0x5, 0xa, "3ba0a293cd116838f5451b54a7e292fc28e129bfc513fe21fc6ca738936e4d8de034862a2f9b0589c404358474c12ebdb6c4b2e0a1b1581685a8daae30ac1f2a848a2483e49133504536c9b5afe4cdcad516f7f0d3fbbdfdd11579088039a119f76ba5519783c074b55f60b15b6735734c17820b1635f8649f7619fd8c01a8c628ac30281867b7b4584f6bfc764531cdc3bcff9d05d01d6f31e6"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x6b, 0x6, {0x7fff, 'security\x00', 0x5, 0xf, "f44c98fb2215ea992464a59635bf18c1a7b3acd168e4457c6a4cde8ae00f157ed8162837a00093c26949f20d8503c7117269cbd094e99b3260645aa6de3474799d"}}]}, {0xe5, 0x6, "381ecd8e3e48626075799a3a7eafae6aca912d59aedb56379e42d0a025b48c448d73ace957e41fc65053f06aec100c97c0920277dcf49b0e818ca96e50a1f7503d51f983e701912f03039e0fb1f5a56b1a600431afc1214ca34f69b45c693e8c3c88598053887b19b6a538cdfb04f704dd808ce5ee399ee924e3a1c17fdccf31670ee446a0a8c86ec4f45502b8ba869ecd8ef8222261e054a7e350a0e43668cf8a33acfc135d846b522eddbc76ec5dbc5de0c1fe54326841a3bda3a82049103a73ba17a21ad47adf846aa8e92f638c103e3e2d8a79f44753775ba69d8200c86ff6"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xdc, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '#&)\'$)\xcf/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '$@\x00'}]}, {0x8d, 0x6, "13b8a84039b7daf0bd512c146ee9e0deffbafa3f1d33332a2c72cc2ae0a7aa35a3240705170a711e2f1d7428d78b358bb4fe32e4fb3e907cc42cc1c56b7bc13abf40e68563c873f863141c99af009592cf05fd7fc37f1f73b963b6ce53d574785e6424096d2f7d4bcff95716f3141cc0566c417dd3a1b7d94afdf49b8f3177435c921730dba33e6b13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_RSVP_POLICE={0x868, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x72b, 0x2, 0x5, 0x10001, 0x2, 0x2, 0xcda0, 0x3, 0xdc43, 0x7f, 0x0, 0xd5a5, 0x1, 0xfffffff9, 0x1, 0x2, 0x9, 0x0, 0x1bab0cb9, 0xffffffff, 0x2b, 0xab, 0x2, 0xff, 0xcd, 0x8, 0x8, 0x6, 0x0, 0x1ff, 0x2, 0x4, 0x4, 0x3, 0x403d, 0x21, 0x10, 0x74, 0x0, 0x73, 0xff, 0x7, 0x2, 0x81, 0x21d5, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x2, 0x7, 0x3, 0x6, 0x10000, 0x9, 0x8, 0x9, 0xffffffff, 0x6, 0x2, 0x7, 0x0, 0x401, 0xf, 0x5, 0x2, 0xffffffff, 0x52, 0xfffffffc, 0x3, 0x10001, 0x7, 0x0, 0xdfd, 0xf34, 0x6, 0x80000001, 0x1, 0x1, 0x9, 0x2, 0xcc5e, 0x6d4, 0x3c52, 0x4, 0x2, 0x6, 0x8, 0xae3, 0x79, 0x6, 0x1, 0xffff, 0x7fff, 0x7, 0x4, 0x3ff, 0x0, 0x400, 0x800, 0x3ff, 0x9, 0x0, 0x7f0eacab, 0x7fffffff, 0x4, 0x4, 0x400, 0x9, 0x9, 0xc, 0x8, 0x40, 0xa, 0x4, 0x400, 0xabe, 0x3, 0x401, 0x3a, 0xad0, 0x5, 0x7, 0xfc4, 0x6, 0x8, 0xc, 0x1, 0x7f31, 0x0, 0xcae2, 0x5, 0x200, 0x2, 0x1, 0x7, 0x1, 0x3, 0x8, 0x7, 0x5, 0x10000, 0xfffffff7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xa, 0x14c8, 0x4, 0x8, 0x8d1, 0x5cbf, 0xfffff0fe, 0x4, 0x9, 0x9, 0x1, 0x8, 0x6108, 0x179f3b35, 0x4, 0x1, 0x7, 0x0, 0xfff, 0x2, 0x4, 0xff1, 0x1000, 0xffffff7f, 0x5, 0x8, 0x6, 0xc, 0x4, 0x1, 0x6, 0x3, 0x5, 0x3, 0x1, 0x400, 0x2, 0x5, 0x6, 0x7ff, 0xfa7, 0xdc4e, 0x8, 0x3, 0x1, 0xf, 0x7, 0x2, 0x9, 0x6, 0xfff, 0x8, 0x4, 0xc, 0x3, 0x8, 0x2, 0x1ff, 0x6, 0x40, 0x9, 0x1, 0x81, 0x4, 0x20000000, 0x5, 0x2, 0x401, 0x9, 0x10, 0x3, 0x4, 0x101, 0x6, 0x7fffffff, 0xb39b, 0x7, 0x0, 0x1, 0x55, 0x9, 0x10, 0x4, 0x8, 0x8, 0xd05, 0x5, 0xb3f, 0x100, 0x8, 0xc4, 0x82dd, 0x8, 0x8, 0x401, 0x1, 0x4a68, 0x6, 0xa06b, 0x2, 0x4, 0x6, 0x5, 0x9, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x70a4d432}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe56}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x800, 0xfffffffb, 0x9, 0x26, 0x3, 0x8000, 0x2, 0xe, 0xc8b, 0x2, 0x2, 0xc97, 0x1430, 0x7, 0x4, 0xc9, 0x3, 0x1, 0x45e, 0x80, 0x8, 0x3b, 0x2, 0x9, 0x8, 0x3, 0xfffffffb, 0x7, 0x4, 0x10000, 0x10001, 0x81, 0x4, 0x7, 0x629, 0x9, 0x4, 0xb, 0xadb0, 0x2, 0x596215e, 0xf, 0x11875532, 0x9, 0x7fff, 0xc, 0x3, 0x2, 0x2, 0x2, 0x5, 0x3ff, 0x26, 0x1000, 0x192, 0x8, 0x74, 0xfffffff8, 0x8, 0xffff7367, 0x4, 0xae, 0x5, 0x5, 0x1, 0x3, 0x0, 0x401, 0x2f3, 0xfffffffc, 0x0, 0x4, 0xfa89, 0x29, 0x1, 0x80, 0x313, 0x4, 0x266, 0x3042d403, 0xfffffffb, 0xc, 0x1, 0x10000, 0x3, 0x0, 0x17f, 0x3, 0x346, 0xa, 0x3, 0x7, 0x8, 0x9, 0xfff, 0xfffffffd, 0x5, 0x400, 0xa0, 0xc68d, 0x4, 0x7fff, 0x7, 0x7, 0x5, 0x0, 0x2, 0x4, 0x3, 0xfff, 0x38, 0x7fff, 0x7, 0x80000000, 0x9, 0x7, 0x2, 0xaec, 0x5, 0x800, 0x3, 0xfffffffe, 0xe, 0x8, 0xf, 0x0, 0x8, 0x8, 0xa, 0x1, 0xbdec, 0xa, 0xfffffff8, 0x7, 0x401, 0x1, 0x4, 0x401, 0x787, 0x80000000, 0xfe5, 0x0, 0x7, 0x4, 0x8b6, 0x1, 0xa5e, 0x100, 0x1, 0x8, 0x80000000, 0x3f651a52, 0x4, 0xae, 0x3, 0xa, 0x5, 0x8001, 0x7, 0x3, 0x400, 0x4, 0x2, 0x6, 0x2, 0xfffffffc, 0x5, 0x3, 0x2, 0xc8, 0x0, 0xff, 0x6, 0x3, 0xffff, 0x8000, 0x1, 0x2800, 0x8000, 0x1000, 0x101, 0x3ff, 0xade, 0x5, 0x2, 0x5, 0x3, 0x1, 0x8001, 0x5, 0xff, 0x9, 0x74, 0x2, 0x7d, 0x24000, 0x9, 0x8001, 0x8, 0x7fff, 0x9, 0x9, 0x4, 0x4, 0x5, 0x9, 0xe, 0xfffffff2, 0x2, 0xfffffff2, 0xfffffffc, 0x2, 0x4, 0x1000, 0x7, 0x10000, 0x6, 0x2, 0x5, 0x8, 0x4, 0x4, 0x9, 0x1, 0x5, 0x2, 0x2, 0x7, 0xff, 0x3, 0x7ff, 0x7f, 0x7, 0x5, 0x6, 0xea, 0x2746, 0x6, 0x6, 0x2, 0x1, 0x2, 0x6, 0x9, 0x6, 0xff, 0x4, 0x8, 0x0, 0x7ff, 0x8, 0x1, 0x3, 0xfffffff7, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x8, 0x3, 0xb05, {0x81, 0x9ba5bc6b175ab158, 0x73e0, 0xfc01, 0x101}, {0x6, 0x0, 0x4, 0x2, 0x5, 0xe}, 0x2, 0x1, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x66aeb4ba}]}, @TCA_RSVP_DST={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0xd50}, 0x1, 0x0, 0x0, 0x8008801}, 0x4000) ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f00000018c0)={0x0, 0x10000}) syz_open_dev$dvb_demux(&(0x7f0000001900), 0xd75, 0x400) close_range(r4, r8, 0x2) syncfs(r6) socket$inet6_udp(0xa, 0x2, 0x0) 1.120817226s ago: executing program 5 (id=4120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12", 0x12}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) 1.112467193s ago: executing program 5 (id=4121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070098000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.066522607s ago: executing program 5 (id=4122): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00', 0x40, 0x1) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6b\x00', 0x6) (async) close(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) (async) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/exec\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)='4', 0x1}], 0x1) (async) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', r3, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) (async) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)="3faf4321a29134b205dd44a07e75736269702d8c7564632e3000", 0x1a) 1.002265447s ago: executing program 5 (id=4123): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000020000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 832.206162ms ago: executing program 5 (id=4124): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) socket$kcm(0x29, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014b18000000000000000c0000000c0000000400000003000000000000130800000000303000"], 0x0, 0x28, 0x0, 0x1, 0x7ff}, 0x28) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) r7 = openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 333.461107ms ago: executing program 2 (id=4125): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000080000000000000009fd739090527e59200810000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x7, 0x10}, {0x3, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x884) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01692af59e00fedbdf250f00000008000300c2bb297f58a1af2c0264fe524baeec938bda74490ad5aac3a598bfc581a9581760f3374031307cbc93c37856faa13b03043e1163bfee88eaf1d8ab898659cbd35e4f3cff9cbbc05b5475a43a132cbcbc", @ANYRES32=r3, @ANYBLOB="08003c0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000340)='iso9660\x00', 0x200041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000001100)=[{{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/138, 0x8a}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/98, 0x62}], 0x5, &(0x7f0000000900)=""/137, 0x89}, 0xfffffffb}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001200)=""/65, 0x41}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000a40)=""/100, 0x64}], 0x4, &(0x7f0000000d80)=""/41, 0x29}, 0x81}, {{&(0x7f0000000dc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f0000000ec0)=""/12, 0xc}, {&(0x7f0000000f00)=""/189, 0xbd}], 0x3, &(0x7f0000001000)=""/229, 0xe5}, 0x2}], 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x1, 0xa) 62.797155ms ago: executing program 4 (id=4126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x157381c487324681) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000500)="c00b08af76a9f2c525d97d11b3f4142f5863366a77c9a9d33565039cb7f854d09f0d6d1ece63ff61578e53091d38ef0108f4f29a9597250392a14fec44aa880f55ec4b332dea1b8bdf4e34f618936c4d8cbd78a2a3fc868d011eeeaf7769a7e43cad002caeb8df588869cd850a434d8b6f62a1bcd6d2870bb855f8a5359c198d2f69896d8c91a9db", 0x88}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000500)="c00b08af76a9f2c525d97d11b3f4142f5863366a77c9a9d33565039cb7f854d09f0d6d1ece63ff61578e53091d38ef0108f4f29a9597250392a14fec44aa880f55ec4b332dea1b8bdf4e34f618936c4d8cbd78a2a3fc868d011eeeaf7769a7e43cad002caeb8df588869cd850a434d8b6f62a1bcd6d2870bb855f8a5359c198d2f69896d8c91a9db", 0x88}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) 0s ago: executing program 4 (id=4127): syz_pidfd_open(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) fdatasync(r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "000000000000040400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r3 = socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x70) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000500)={'syz0\x00', {0xd, 0x8, 0x5, 0x2}, 0x3b, [0x4, 0x6, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10000, 0x726, 0x4, 0x8, 0x5, 0x8d, 0x6, 0x8000, 0x200, 0x7ff, 0x9, 0x5, 0x7, 0xab47, 0x81, 0x2e, 0x3, 0x7, 0x6, 0x4, 0x1000, 0x9, 0x5, 0x83, 0xde, 0x5, 0x74, 0x3ff, 0x1, 0xd, 0x0, 0x1741, 0x800, 0x0, 0x80000000, 0x3ff, 0x5, 0x3932, 0x63, 0x2, 0x5, 0x1, 0x24, 0xfff, 0x8, 0xffff, 0x2, 0xc80, 0x5, 0x0, 0x5, 0x4, 0x4, 0xffffffff, 0x2, 0x2, 0x10], [0xcd, 0xffffffff, 0x0, 0x8ed, 0xffffff70, 0x401, 0x3, 0x0, 0xa, 0x9, 0xe08d, 0x743, 0x5, 0x5, 0x3, 0x2, 0xf5, 0x3, 0x7, 0x2, 0x0, 0x4, 0x1, 0x4, 0x6, 0x2, 0x16, 0x546b433e, 0x9, 0x6, 0xe, 0x8, 0xe, 0x6, 0x2, 0x9, 0x1, 0x5, 0x5, 0xf, 0x6, 0x2, 0x40, 0x0, 0x9, 0xc89b, 0xd, 0xfffffff7, 0x8, 0x1, 0x5, 0x2, 0x7, 0x89, 0x2, 0xfffffffd, 0x0, 0xfbf, 0x5, 0xfffffffd, 0x2, 0x7fffffff, 0x8add, 0x8], [0xd8a, 0x8, 0x1000, 0x2, 0xf06, 0x5, 0x1, 0xfffffffd, 0xe, 0xdbc5, 0x4, 0x3, 0xb, 0xffff, 0x6, 0x3, 0xffffbeef, 0x2, 0x5, 0x7, 0x7f, 0x6, 0x3, 0x3, 0x8, 0xc2c, 0xffffffff, 0xb, 0x0, 0x6, 0x80, 0x800, 0x3c80, 0x68, 0x8, 0x6, 0x1, 0x9, 0x10, 0xc, 0x3, 0x1, 0x3, 0x400, 0x7, 0x20, 0x1, 0x8, 0x3, 0x8000, 0x9, 0x7, 0x2, 0x3, 0x80000000, 0x2, 0x40000, 0x4, 0xfff, 0x5, 0x10, 0x0, 0x7, 0x9], [0x6, 0x7, 0x1, 0x5, 0x0, 0x0, 0x29b, 0x4, 0x7f, 0x6, 0x704e, 0x3, 0x9, 0x5, 0xffffffff, 0x9, 0x77, 0x8001, 0x5, 0xcb0, 0x9, 0x0, 0x6, 0x5, 0x81, 0x8, 0x2, 0x5, 0xbcb, 0xfffeffff, 0xffff0001, 0xffff, 0x5, 0x9, 0x741, 0x6, 0xe4c5, 0xfffffff7, 0x9, 0x4, 0x0, 0x1000, 0x1ba3, 0x4, 0x0, 0x0, 0x7, 0x7fff, 0x7f, 0x4, 0x80, 0x8, 0xffff, 0x7, 0x8, 0x0, 0x4e, 0x7fffffff, 0xffff3c69, 0x7fffffff, 0x19, 0x6, 0x5, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0xcd70, 0x80000000}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x34808520, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d) kernel console output (not intermixed with test programs): [ 557.490152][ T846] usb 7-1: USB disconnect, device number 31 [ 557.652875][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 557.828763][T17002] ref_ctr_offset mismatch. inode: 0x194 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 558.090546][T17010] : renamed from bond_slave_0 (while UP) [ 560.869122][ T6650] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 561.029060][ T6650] usb 9-1: Using ep0 maxpacket: 8 [ 561.039196][ T6650] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 561.045703][ T6650] usb 9-1: config 179 has no interface number 0 [ 561.058805][ T6650] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 561.081166][ T6650] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 561.096198][ T6650] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.114282][ T6650] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 561.129188][ T6650] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.143299][ T6650] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 561.152804][ T6650] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.167257][T17029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.410487][T14591] usb 9-1: USB disconnect, device number 6 [ 561.410573][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 561.415988][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 561.464893][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 561.988263][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 562.138798][T12743] kernel read not supported for file /kmsg (pid: 12743 comm: kworker/3:4) [ 562.425108][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.427287][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.429192][T14591] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 563.588725][T17075] 9p: Bad value for 'rfdno' [ 563.599439][T14591] usb 9-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 563.602925][T14591] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.609088][T14591] usb 9-1: config 0 descriptor?? [ 563.816433][T12743] usb 9-1: USB disconnect, device number 7 [ 567.544025][T17097] input: syz1 as /devices/virtual/input/input33 [ 568.762795][T17106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3155'. [ 569.869102][ T5850] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 570.462966][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.468082][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.474102][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 570.488967][ T5850] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.491858][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.497223][ T5850] usb 7-1: config 0 descriptor?? [ 570.969325][ T5850] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 570.973881][ T5850] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 570.984001][ T5850] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 570.989788][ T5850] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 571.002297][ T5850] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 571.589388][T17141] syzkaller1: entered promiscuous mode [ 571.592417][T17141] syzkaller1: entered allmulticast mode [ 573.030350][T14591] usb 7-1: USB disconnect, device number 32 [ 573.094188][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 573.567101][T17157] fuse: Unknown parameter 'groE]$yp~8`ZX # $]^Ï[7EσeM' [ 574.117541][T17164] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 575.328614][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3182'. [ 575.543931][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 575.548293][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 575.684064][T17190] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3187'. [ 575.688631][T17190] gretap0: entered promiscuous mode [ 575.778180][T17192] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3187'. [ 575.782374][T17192] 0{X: renamed from gretap0 [ 575.792990][T17192] 0{X: left promiscuous mode [ 575.795445][T17192] 0{X: entered allmulticast mode [ 575.800401][T17192] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 576.079561][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 576.079574][ T42] audit: type=1326 audit(1785688757.686:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.3.3191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 576.088430][ T42] audit: type=1326 audit(1785688757.686:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.3.3191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 576.095818][ T42] audit: type=1326 audit(1785688757.696:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.3.3191" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 576.110700][ T42] audit: type=1326 audit(1785688757.696:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.3.3191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 576.117532][ T42] audit: type=1326 audit(1785688757.696:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.3.3191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 576.189020][ T6650] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 576.339175][ T6650] usb 9-1: Using ep0 maxpacket: 8 [ 576.347637][ T6650] usb 9-1: unable to get BOS descriptor or descriptor too short [ 576.355245][ T6650] usb 9-1: config 252 has an invalid interface number: 57 but max is 0 [ 576.359123][ T6650] usb 9-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 576.363012][ T6650] usb 9-1: config 252 has no interface number 0 [ 576.366184][ T6650] usb 9-1: config 252 interface 57 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.372182][ T6650] usb 9-1: config 252 interface 57 has no altsetting 0 [ 576.376284][ T6650] usb 9-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=e9.22 [ 576.379904][ T6650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.382611][ T6650] usb 9-1: Product: syz [ 576.383942][ T6650] usb 9-1: Manufacturer: syz [ 576.385662][ T6650] usb 9-1: SerialNumber: syz [ 576.441637][T17210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.444116][T17210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.446256][T17210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.598060][ T6650] rndis_host 9-1:252.57: skipping garbage [ 576.600218][ T6650] rndis_host 9-1:252.57: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 576.604042][ T6650] cdc_acm 9-1:252.57: skipping garbage [ 576.607755][ T6650] usb 9-1: USB disconnect, device number 8 [ 577.392231][T17234] dlm: Using TCP for communications [ 578.509151][ T5752] Bluetooth: hci1: command 0x041b tx timeout [ 578.509217][T14834] Bluetooth: hci3: command 0x0419 tx timeout [ 578.509241][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.910507][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'. [ 580.292528][T17262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.299064][T17262] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 580.391980][T17262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.404930][T17262] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 580.457149][T17262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.482779][T17262] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 581.049164][ T50] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 581.200425][ T50] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.204109][ T50] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.208087][ T50] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 581.211341][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.213809][ T50] usb 9-1: SerialNumber: syz [ 581.221862][ T50] usb 9-1: 0:2 : does not exist [ 581.378014][T17285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.449651][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3226'. [ 581.653970][ T50] usb 9-1: USB disconnect, device number 9 [ 585.369041][T13361] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 585.538987][T13361] usb 9-1: Using ep0 maxpacket: 16 [ 585.550952][T13361] usb 9-1: unable to get BOS descriptor or descriptor too short [ 585.562067][T13361] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.574538][T13361] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.589654][T13361] usb 9-1: Product: syz [ 585.591600][T13361] usb 9-1: Manufacturer: syz [ 585.593167][T13361] usb 9-1: SerialNumber: syz [ 585.959351][T13361] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 586.519465][T13361] usb 9-1: USB disconnect, device number 10 [ 586.882286][T12619] udevd[12619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.241726][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 591.163527][T17390] sctp_transport_update_pmtu: 44 callbacks suppressed [ 591.163542][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.170090][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.185845][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.194486][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.353679][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.365036][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.370012][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.375086][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.379858][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 591.387172][T17390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 592.608351][T17410] dlm: Using TCP for communications [ 596.180568][T12743] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 596.364738][T12743] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 596.374727][T12743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.383899][T12743] usb 8-1: Product: syz [ 596.385622][T12743] usb 8-1: Manufacturer: syz [ 596.391919][T12743] usb 8-1: SerialNumber: syz [ 596.413136][T12743] usb 8-1: config 0 descriptor?? [ 596.432547][T12743] ch341 8-1:0.0: ch341-uart converter detected [ 597.440826][T12743] ch341-uart ttyUSB0: break control not supported, using simulated break [ 597.457783][T12743] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 597.483677][T12743] usb 8-1: USB disconnect, device number 30 [ 597.507430][T17505] ptrace attach of "/syz-executor exec"[15896] was attempted by "/syz-executor exec"[17505] [ 597.516527][T12743] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 597.529708][T12743] ch341 8-1:0.0: device disconnected [ 598.764631][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3307'. [ 599.126806][T17515] syz.4.3307 (17515) used greatest stack depth: 17504 bytes left [ 599.549113][T13361] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 599.771237][T13361] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 599.788097][T13361] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.806771][T13361] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 599.820207][T13361] usb 9-1: SerialNumber: syz [ 600.595371][T13361] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 600.921166][T13361] usb 9-1: USB disconnect, device number 11 [ 600.929755][T13361] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 601.970414][T13805] kernel read not supported for file /per_cpu/cpu0/trace_pipe (pid: 13805 comm: kworker/0:2) [ 606.383935][T17589] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 606.907908][ T42] audit: type=1326 audit(1785688788.506:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 606.934719][ T42] audit: type=1326 audit(1785688788.506:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 606.961318][ T42] audit: type=1326 audit(1785688788.526:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 606.985302][ T42] audit: type=1326 audit(1785688788.526:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.001674][ T42] audit: type=1326 audit(1785688788.526:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.025905][ T42] audit: type=1326 audit(1785688788.526:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.045582][ T42] audit: type=1326 audit(1785688788.526:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.062501][ T42] audit: type=1326 audit(1785688788.526:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.083668][ T42] audit: type=1326 audit(1785688788.526:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 607.107800][ T42] audit: type=1326 audit(1785688788.526:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.3.3341" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 612.227351][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3364'. [ 612.537784][T17691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3368'. [ 613.129009][ T50] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 613.283409][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.300743][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.323361][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.338423][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.351577][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.415115][ T50] usb 7-1: config 0 descriptor?? [ 614.003540][ T50] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 614.141666][T14591] usb 7-1: USB disconnect, device number 34 [ 614.454740][T17710] fido_id[17710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 614.869056][T14591] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 615.019059][T14591] usb 9-1: Using ep0 maxpacket: 32 [ 615.023914][T14591] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 615.027849][T14591] usb 9-1: config 0 has no interface number 0 [ 615.030650][T14591] usb 9-1: config 0 interface 184 has no altsetting 0 [ 615.035943][T14591] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 615.040136][T14591] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.043597][T14591] usb 9-1: Product: syz [ 615.044989][T14591] usb 9-1: Manufacturer: syz [ 615.046751][T14591] usb 9-1: SerialNumber: syz [ 615.051486][T14591] usb 9-1: config 0 descriptor?? [ 616.481308][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 616.493999][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 616.503367][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 616.512733][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 616.521251][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 616.532548][T14591] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 616.545293][T14591] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 616.558733][T14591] usb 9-1: USB disconnect, device number 12 [ 617.193098][T17742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.195821][T17742] IPv6: NLM_F_CREATE should be set when creating new route [ 617.432452][T17757] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3394'. [ 622.579563][T13361] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 622.750826][T13361] usb 7-1: not running at top speed; connect to a high speed hub [ 622.757857][T13361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.763498][T13361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 622.778989][T13361] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 622.799878][T13361] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 622.809497][T13361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.833007][T13361] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 622.860768][T13361] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 622.877762][T13361] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 622.902669][T13361] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 622.932184][T13361] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 622.951768][T13361] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 622.986944][T13361] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 623.587504][ T34] usb 7-1: USB disconnect, device number 35 [ 623.630324][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 623.644435][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 623.665780][ T34] keyspan 7-1:1.0: device disconnected [ 623.870999][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.873185][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.592706][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 624.592719][ T42] audit: type=1800 audit(1785688806.196:4442): pid=17820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3414" name="c_ssize" dev="configfs" ino=65673 res=0 errno=0 [ 625.327542][T17834] Mass Storage Function, version: 2009/09/11 [ 625.332446][T17834] LUN: removable file: (no medium) [ 625.369423][T17834] LUN: removable file: (no medium) [ 626.685771][T17857] input: syz1 as /devices/virtual/input/input36 [ 629.484739][T17882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'. [ 629.718837][T17895] lo speed is unknown, defaulting to 1000 [ 631.034963][T17940] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3452'. [ 631.239005][T12743] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 631.389000][T12743] usb 9-1: Using ep0 maxpacket: 16 [ 631.392151][T12743] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 631.394863][T12743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.398846][T12743] usb 9-1: config 0 has no interface number 0 [ 631.403723][T12743] usb 9-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 631.408010][T12743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.411390][T12743] usb 9-1: Product: syz [ 631.413012][T12743] usb 9-1: Manufacturer: syz [ 631.414554][T12743] usb 9-1: SerialNumber: syz [ 631.421463][T12743] usb 9-1: config 0 descriptor?? [ 631.432032][T12743] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 631.435060][T12743] uvcvideo 9-1:0.105: No valid video chain found. [ 631.630600][ T846] usb 9-1: USB disconnect, device number 13 [ 631.632187][T17954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.635133][T17954] IPv6: NLM_F_CREATE should be set when creating new route [ 632.254133][T17962] WARNING! power/level is deprecated; use power/control instead [ 633.833241][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 634.526655][T17982] veth1_to_bond: entered allmulticast mode [ 634.551888][T17982] syz_tun: entered promiscuous mode [ 634.567182][T17981] syz_tun: left promiscuous mode [ 634.582005][T17981] veth1_to_bond: left allmulticast mode [ 634.767921][T17984] input: syz1 as /devices/virtual/input/input38 [ 635.843120][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'. [ 636.838099][T18019] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 637.031672][T18029] netlink: 'syz.4.3490': attribute type 16 has an invalid length. [ 637.035138][T18029] netlink: 'syz.4.3490': attribute type 17 has an invalid length. [ 637.091738][T18029] 0{X: left allmulticast mode [ 637.159887][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.162484][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.228773][T18029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.237727][T18029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.709053][ T5797] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.715536][ T5797] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.727648][ T5797] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.736333][ T5797] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.480791][T18039] program syz.4.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.186830][ T5797] bond2 (unregistering): (slave geneve2): Releasing active interface [ 640.358301][ T5797] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 642.554424][ T42] audit: type=1800 audit(1785688824.156:4443): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3504" name="bulk_qlen" dev="configfs" ino=67654 res=0 errno=0 [ 644.006192][ T5797] bond0 (unregistering): Released all slaves [ 644.023309][ T5797] bond1 (unregistering): Released all slaves [ 644.033719][ T5797] bond2 (unregistering): Released all slaves [ 644.064945][T18067] IPv6: sit1: Disabled Multicast RS [ 644.067664][T18067] sit1: entered allmulticast mode [ 644.153094][ T5797] : left promiscuous mode [ 644.279348][ T5797] tipc: Left network mode [ 644.401794][ C2] hpet: Lost 1 RTC interrupts [ 644.534758][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 644.717579][T14834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.721183][T14834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.726177][T14834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.745025][T14834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.761804][T14834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.781700][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.789001][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.792843][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.797144][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.800633][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.899026][T14591] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 645.069000][T14591] usb 7-1: Using ep0 maxpacket: 32 [ 645.072183][T14591] usb 7-1: config 0 has no interfaces? [ 645.076472][T14591] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 645.089724][T14591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.094723][T14591] usb 7-1: Product: syz [ 645.098800][T14591] usb 7-1: Manufacturer: syz [ 645.106816][T14591] usb 7-1: SerialNumber: syz [ 645.115296][T14591] usb 7-1: config 0 descriptor?? [ 645.147998][ T5797] hsr_slave_0: left promiscuous mode [ 645.160779][ T5797] hsr_slave_1: left promiscuous mode [ 645.179516][ T5797] dummy0: left allmulticast mode [ 645.184821][ T5797] veth1_macvtap: left promiscuous mode [ 645.187277][ T5797] veth0_macvtap: left promiscuous mode [ 645.192846][ T5797] veth1_vlan: left promiscuous mode [ 645.195450][ T5797] veth0_vlan: left promiscuous mode [ 645.492952][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 645.799909][ T103] smc: removing ib device syz0 [ 646.481396][ T103] smbdirect: ib_dev[syz0] removed [ 646.783457][T18099] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.802238][T18099] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.814342][T18099] bridge_slave_0: entered allmulticast mode [ 646.821585][T14834] Bluetooth: hci2: command tx timeout [ 646.860044][T18099] bridge_slave_0: entered promiscuous mode [ 646.917722][T18099] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.930612][T18099] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.941818][T18099] bridge_slave_1: entered allmulticast mode [ 646.961138][T18099] bridge_slave_1: entered promiscuous mode [ 647.241017][T18099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.265272][T18099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.405895][T18099] team0: Port device team_slave_0 added [ 647.424746][T18099] team0: Port device team_slave_1 added [ 647.497608][T18099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.508351][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.543020][T18099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.566283][T18099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.587498][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.618990][T18099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.647511][ T60] usb 7-1: USB disconnect, device number 36 [ 647.769841][T18099] hsr_slave_0: entered promiscuous mode [ 647.785514][T18099] hsr_slave_1: entered promiscuous mode [ 648.299146][T18099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.305238][T18099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.308612][T18099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.316250][T18099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.319534][T18099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.327051][T18099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.332371][T18099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.338721][T18099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.391949][T18099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.402749][T18099] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.412867][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.415794][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.436242][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.439186][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.495886][ T5797] IPVS: stop unused estimator thread 0... [ 648.659505][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.831539][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.901309][T14834] Bluetooth: hci2: command tx timeout [ 649.030909][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.054792][T18099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.275588][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.927955][T18099] veth0_vlan: entered promiscuous mode [ 649.970493][T18099] veth1_vlan: entered promiscuous mode [ 650.025598][ T5797] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.229916][T18099] veth0_macvtap: entered promiscuous mode [ 650.245718][T18099] veth1_macvtap: entered promiscuous mode [ 650.329506][T18099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.364820][T18099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.695199][ T5797] bridge_slave_1: left allmulticast mode [ 650.697248][ T5797] bridge_slave_1: left promiscuous mode [ 650.708320][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.751828][ T5797] bridge_slave_0: left allmulticast mode [ 650.757032][ T5797] bridge_slave_0: left promiscuous mode [ 650.766875][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.001880][T14834] Bluetooth: hci2: command tx timeout [ 651.269101][ T5797] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 651.329265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 651.425797][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.452483][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.477731][ T5797] bond0 (unregistering): Released all slaves [ 651.515294][ T5797] bond1 (unregistering): (slave bond2): Releasing backup interface [ 651.545891][ T5797] bond1 (unregistering): Released all slaves [ 651.570426][ T5797] bond2 (unregistering): Released all slaves [ 651.597606][ T5457] 8021q: adding VLAN 0 to HW filter on device eth6 [ 651.621640][T13402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.625288][T13402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.628495][T13402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.681427][T13402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.301973][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.309549][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.611378][ T5797] hsr_slave_0: left promiscuous mode [ 652.613750][ T5797] hsr_slave_1: left promiscuous mode [ 652.615604][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.617602][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.627975][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.645879][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.668610][ T5797] veth1_macvtap: left promiscuous mode [ 652.671682][ T5797] veth0_macvtap: left promiscuous mode [ 652.673919][ T5797] veth1_vlan: left promiscuous mode [ 652.675850][ T5797] veth0_vlan: left promiscuous mode [ 652.693509][ T42] audit: type=1326 audit(1785688834.296:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.722577][ T42] audit: type=1326 audit(1785688834.296:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.759414][ T42] audit: type=1326 audit(1785688834.306:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e73eb code=0x7ffc0000 [ 652.789825][ T42] audit: type=1326 audit(1785688834.306:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.817076][ T42] audit: type=1326 audit(1785688834.306:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.847402][ T42] audit: type=1326 audit(1785688834.306:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.874069][ T42] audit: type=1326 audit(1785688834.306:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71e73eb code=0x7ffc0000 [ 652.914123][ T42] audit: type=1326 audit(1785688834.306:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.937708][ T42] audit: type=1326 audit(1785688834.306:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 652.969390][ T42] audit: type=1326 audit(1785688834.316:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 653.059073][T14834] Bluetooth: hci2: command tx timeout [ 653.518104][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 653.552070][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 653.910965][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.918661][ T5457] 8021q: adding VLAN 0 to HW filter on device eth7 [ 653.921915][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.306178][ T5457] 8021q: adding VLAN 0 to HW filter on device eth8 [ 654.502756][T18227] TCP: TCP_TX_DELAY enabled [ 655.180745][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 655.281334][ T5797] IPVS: stop unused estimator thread 0... [ 655.299446][ T5457] 8021q: adding VLAN 0 to HW filter on device eth9 [ 655.553990][ T5457] 8021q: adding VLAN 0 to HW filter on device eth10 [ 656.074432][T18280] program syz.5.3545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.376499][T18314] netlink: 'syz.3.3562': attribute type 16 has an invalid length. [ 657.400291][T18314] netlink: 'syz.3.3562': attribute type 17 has an invalid length. [ 657.462880][T18314] 0{X: left allmulticast mode [ 657.863009][T18314] macsec0: left promiscuous mode [ 657.865316][T18314] macsec0: left allmulticast mode [ 657.866975][T18314] dummy0: left allmulticast mode [ 660.320730][T18347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.758997][ T6650] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 661.911281][ T6650] usb 9-1: Using ep0 maxpacket: 32 [ 661.920208][ T6650] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 661.927623][ T6650] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.935592][ T6650] usb 9-1: config 0 descriptor?? [ 662.368305][ T6650] hid-led 0003:1D34:0004.000E: unknown main item tag 0x2 [ 662.600808][ T6650] hid-led 0003:1D34:0004.000E: hidraw1: USB HID vf0.00 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input0 [ 662.751013][ T6650] hid-led 0003:1D34:0004.000E: Dream Cheeky Webmail Notifier initialized [ 662.774577][ T6650] usb 9-1: USB disconnect, device number 14 [ 663.290177][T18365] fido_id[18365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 663.438022][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 663.438035][ T42] audit: type=1800 audit(1785688845.036:4465): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3579" name="UDC" dev="configfs" ino=66130 res=0 errno=0 [ 663.460748][T18372] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 663.516599][T18372] udc dummy_udc.0: failed to start g1: -19 [ 663.531605][T18372] UDC core: g1: couldn't find an available UDC or it's busy [ 663.734415][T18377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input39 [ 664.409045][ T5836] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 664.562197][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.576401][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 664.598987][ T5836] usb 7-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 664.614608][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 664.628685][ T5836] usb 7-1: Product: syz [ 664.633466][ T5836] usb 7-1: Manufacturer: syz [ 664.645445][ T5836] usb 7-1: SerialNumber: syz [ 664.668199][ T5836] usb 7-1: config 0 descriptor?? [ 664.890681][ T5836] usb 7-1: USB disconnect, device number 37 [ 665.138844][T18386] input: syz1 as /devices/virtual/input/input40 [ 666.554079][T18414] 9p: Bad value for 'rfdno' [ 667.147165][T18427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3598'. [ 673.538584][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3612'. [ 676.319591][T18535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3623'. [ 676.348678][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 680.098802][T18563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3632'. [ 680.301484][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 680.313509][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 680.325184][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 680.659029][ T5836] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 680.824615][ T5836] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 680.834332][ T5836] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.841326][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 680.848485][ T5836] usb 7-1: SerialNumber: syz [ 681.507402][ T5836] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 681.905641][ T5836] usb 7-1: USB disconnect, device number 38 [ 681.918536][ T5836] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 682.289093][ T42] audit: type=1800 audit(1785688863.896:4466): pid=18592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3642" name="c_ssize" dev="configfs" ino=70793 res=0 errno=0 [ 685.300784][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.303931][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.993476][ T42] audit: type=1800 audit(1785688868.596:4467): pid=18642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3655" name="c_ssize" dev="configfs" ino=68718 res=0 errno=0 [ 687.193883][T18651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3652'. [ 687.793582][ T42] audit: type=1326 audit(1785688869.396:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.801915][ T42] audit: type=1326 audit(1785688869.396:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.809283][ T42] audit: type=1326 audit(1785688869.396:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.819365][ T42] audit: type=1326 audit(1785688869.396:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.849886][ T42] audit: type=1326 audit(1785688869.396:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.872002][ T42] audit: type=1326 audit(1785688869.396:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.878761][ T42] audit: type=1326 audit(1785688869.396:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.887095][ T42] audit: type=1326 audit(1785688869.396:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.899848][ T42] audit: type=1326 audit(1785688869.396:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 687.910145][ T42] audit: type=1326 audit(1785688869.396:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.2.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf700efec code=0x7ffc0000 [ 688.343563][T18678] netlink: 'syz.3.3669': attribute type 3 has an invalid length. [ 688.351269][T18678] netlink: 'syz.3.3669': attribute type 3 has an invalid length. [ 688.423366][T18680] binder: 18679:18680 ioctl 4018620d 0 returned -22 [ 689.018948][T17814] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 689.183179][T17814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.188978][T17814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.196853][T17814] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.211417][T17814] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.216791][T17814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.229667][T17814] usb 9-1: config 0 descriptor?? [ 689.542366][T18705] unloading [ 689.595775][T18707] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3679'. [ 689.694412][T17814] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 689.738799][T18712] "syz.5.3683" (18712) uses obsolete ecb(arc4) skcipher [ 689.871198][T18710] binder: 18709:18710 ioctl c0306201 80000800 returned -14 [ 689.924771][T14591] usb 9-1: USB disconnect, device number 15 [ 690.098764][T18729] cgroup: Unknown subsys name 'cpuset' [ 691.049051][T17814] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 691.219535][T17814] usb 9-1: Using ep0 maxpacket: 32 [ 691.225194][T17814] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 691.237096][T17814] usb 9-1: config 0 has no interface number 0 [ 691.247444][T17814] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.266075][T17814] usb 9-1: config 0 interface 85 has no altsetting 0 [ 691.275683][T17814] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 691.288500][T17814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.296229][T17814] usb 9-1: Product: syz [ 691.300449][T17814] usb 9-1: Manufacturer: syz [ 691.308283][T17814] usb 9-1: SerialNumber: syz [ 691.320921][T17814] usb 9-1: config 0 descriptor?? [ 692.225945][T17814] appletouch 9-1:0.85: Geyser mode initialized. [ 692.230897][T17814] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.85/input/input41 [ 692.283907][ C2] appletouch 9-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 692.493794][T14591] usb 9-1: USB disconnect, device number 16 [ 692.559086][T14591] appletouch 9-1:0.85: input: appletouch disconnected [ 697.353105][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3729'. [ 697.578972][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 697.578991][ T42] audit: type=1800 audit(1785688879.176:4482): pid=18834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3731" name="cdrom" dev="configfs" ino=70255 res=0 errno=0 [ 697.591582][T18834] mass_storage.0/lun.0: unable to open backing file: fi [ 697.621585][ T42] audit: type=1800 audit(1785688879.176:4483): pid=18834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3731" name="file" dev="configfs" ino=70256 res=0 errno=0 [ 698.250349][T17814] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 698.424738][T17814] usb 9-1: config 253 has an invalid interface number: 151 but max is 0 [ 698.438627][T17814] usb 9-1: config 253 has no interface number 0 [ 698.440689][T17814] usb 9-1: config 253 interface 151 has no altsetting 0 [ 698.458968][T17814] usb 9-1: New USB device found, idVendor=2357, idProduct=0100, bcdDevice=48.1d [ 698.464117][T17814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.473156][T17814] usb 9-1: Product: syz [ 698.474502][T17814] usb 9-1: Manufacturer: syz [ 698.487126][T17814] usb 9-1: SerialNumber: syz [ 698.497382][T18850] clocksource: Switched to clocksource acpi_pm [ 698.519742][T18851] clocksource: Switched to clocksource tsc [ 698.657963][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.669766][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.679397][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.691727][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.710253][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.715352][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.722285][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.727007][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 698.749951][T17814] usb 9-1: USB disconnect, device number 17 [ 698.751296][ T10] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.10 Device [syz0] on syz1 [ 699.372635][T18866] fido_id[18866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 703.572584][ T42] audit: type=1326 audit(1785688885.176:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.613059][ T42] audit: type=1326 audit(1785688885.176:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.650146][ T42] audit: type=1326 audit(1785688885.176:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.684666][ T42] audit: type=1326 audit(1785688885.176:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.718313][ T42] audit: type=1326 audit(1785688885.186:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.747504][ T42] audit: type=1326 audit(1785688885.186:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.784352][ T42] audit: type=1326 audit(1785688885.186:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.791413][T18922] binder: 18921:18922 ioctl c018620c 0 returned -14 [ 703.806909][ T42] audit: type=1326 audit(1785688885.196:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700efec code=0x7ffc0000 [ 703.830190][ T42] audit: type=1326 audit(1785688885.196:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.5.3761" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x7ffc0000 [ 704.419198][T18943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3773'. [ 704.549444][T18946] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3774'. [ 704.889694][T18972] ptrace attach of "/syz-executor exec"[18973] was attempted by "/syz-executor exec"[18972] [ 704.906242][T18976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3787'. [ 708.046066][ T42] audit: type=1326 audit(1785688889.646:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.5.3804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 708.053545][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3804'. [ 708.498589][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3808'. [ 708.499189][T17814] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 708.506380][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3808'. [ 708.511441][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3808'. [ 708.515824][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3808'. [ 708.642257][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 708.649411][T13805] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 708.672354][T17814] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.691360][T17814] usb 10-1: config 0 has no interfaces? [ 708.696177][T17814] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 708.704238][T17814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.712782][T17814] usb 10-1: config 0 descriptor?? [ 708.812465][T13805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.821078][T13805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.831336][T13805] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.836469][T13805] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.840112][T13805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.852088][T13805] usb 8-1: config 0 descriptor?? [ 708.948789][T19029] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 708.966761][ T5830] usb 10-1: USB disconnect, device number 2 [ 709.362300][T13805] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 709.601591][ T5755] usb 8-1: USB disconnect, device number 31 [ 710.961304][T14492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.244367][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.288099][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.291783][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.295602][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.298487][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 711.672727][T14492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.095490][T14492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.355877][T14492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.861188][T14492] bridge_slave_1: left allmulticast mode [ 712.865697][T14492] bridge_slave_1: left promiscuous mode [ 712.867609][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.876570][T14492] bridge_slave_0: left allmulticast mode [ 712.881011][T14492] bridge_slave_0: left promiscuous mode [ 712.887163][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.286012][T19112] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 713.389894][ T5746] Bluetooth: hci0: command tx timeout [ 713.618297][T19116] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 713.620476][T19116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 713.625758][T19116] vhci_hcd vhci_hcd.0: Device attached [ 713.715166][T14492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.750908][T14492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.764875][T14492] bond0 (unregistering): Released all slaves [ 713.932525][ T29] usb 48-1: SetAddress Request (2) to port 0 [ 713.947792][ T29] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 714.033915][T19091] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.054714][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.060145][T19091] bridge_slave_0: entered allmulticast mode [ 714.068715][T19091] bridge_slave_0: entered promiscuous mode [ 714.086883][T19091] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.093915][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.116839][T19091] bridge_slave_1: entered allmulticast mode [ 714.121652][T19091] bridge_slave_1: entered promiscuous mode [ 714.149165][T19091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.156442][T19091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.224016][T19091] team0: Port device team_slave_0 added [ 714.239406][T19091] team0: Port device team_slave_1 added [ 714.261936][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 714.261972][ C2] hpet: Lost 1 RTC interrupts [ 714.312751][T19091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.319326][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.356260][T19091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.372377][T19091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.383486][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.406762][T19091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.586486][T19091] hsr_slave_0: entered promiscuous mode [ 714.601867][T19091] hsr_slave_1: entered promiscuous mode [ 714.621877][T19091] debugfs: 'hsr0' already exists in 'hsr' [ 714.634747][T19091] Cannot create hsr debugfs directory [ 714.703241][T19117] vhci_hcd: connection reset by peer [ 714.705245][T10796] vhci_hcd vhci_hcd.5: stop threads [ 714.706930][T10796] vhci_hcd vhci_hcd.5: release socket [ 714.720314][T10796] vhci_hcd vhci_hcd.5: disconnect device [ 714.950277][ T5457] 8021q: adding VLAN 0 to HW filter on device eth11 [ 715.230070][T14492] hsr_slave_0: left promiscuous mode [ 715.250837][T14492] hsr_slave_1: left promiscuous mode [ 715.259957][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.275427][T14492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.302889][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.320235][T14492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.381044][T14492] veth1_vlan: left promiscuous mode [ 715.389646][T14492] veth0_vlan: left promiscuous mode [ 715.469243][ T5746] Bluetooth: hci0: command tx timeout [ 716.136255][T14492] team0 (unregistering): Port device team_slave_1 removed [ 716.171551][T14492] team0 (unregistering): Port device team_slave_0 removed [ 716.328452][ T5457] 8021q: adding VLAN 0 to HW filter on device eth12 [ 716.407356][T19091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 716.416682][T19091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.421141][T19091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 716.438574][T19091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.443785][T19091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 716.544170][T19091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.562025][T19091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.569628][T19091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.808230][ T5457] 8021q: adding VLAN 0 to HW filter on device eth13 [ 717.022147][T19091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.138375][T19091] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.161341][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.163865][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.202397][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.205455][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.420052][ T5457] 8021q: adding VLAN 0 to HW filter on device eth14 [ 717.539261][ T5746] Bluetooth: hci0: command tx timeout [ 717.774796][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.945955][T19221] syzkaller0: entered promiscuous mode [ 717.949302][T19221] syzkaller0: entered allmulticast mode [ 718.065890][T19091] veth0_vlan: entered promiscuous mode [ 718.116361][T19091] veth1_vlan: entered promiscuous mode [ 718.152780][T19091] veth0_macvtap: entered promiscuous mode [ 718.163418][T19091] veth1_macvtap: entered promiscuous mode [ 718.216915][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.231672][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.280587][T14492] IPVS: stop unused estimator thread 0... [ 718.346506][T10796] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.387706][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.392415][ T50] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 718.394318][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.413575][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.418706][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.449693][T10796] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.452961][T10796] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.456671][T10796] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.526169][T19236] loop5: detected capacity change from 0 to 7 [ 718.529135][T12743] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 718.532453][ C2] blk_print_req_error: 30 callbacks suppressed [ 718.532465][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 718.538178][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.541243][ C2] buffer_io_error: 11 callbacks suppressed [ 718.541252][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.550763][ T50] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 718.554169][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.559831][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 718.560490][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.563019][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.570196][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.572621][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.576965][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.580930][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.581676][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.585343][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.591441][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.594411][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.597096][ T50] usb 9-1: config 0 descriptor?? [ 718.597488][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.602326][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.606941][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.610026][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.612829][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.615842][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.618561][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.622607][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.627663][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.631296][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 718.634000][T19236] ldm_validate_partition_table(): Disk read failed. [ 718.636494][T19236] Dev loop5: unable to read RDB block 0 [ 718.638761][T19236] loop5: unable to read partition table [ 718.640717][T19236] loop5: partition table beyond EOD, truncated [ 718.642721][T19236] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 718.655401][T19235] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 718.689218][T12743] usb 10-1: Using ep0 maxpacket: 8 [ 718.698889][T12743] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.712803][T12743] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 718.729108][T12743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.746434][T12743] usb 10-1: config 0 descriptor?? [ 718.973316][T12743] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 719.014648][T19243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42 [ 719.034699][ T50] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 719.037224][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 719.039818][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 719.051599][ T50] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 719.059166][ T29] usb 48-1: device descriptor read/8, error -110 [ 719.160700][T19245] can0: slcan on ttyS3. [ 719.168218][T19234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.180560][T19234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.195953][ C3] iowarrior 10-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 719.198968][ T50] usb 10-1: USB disconnect, device number 3 [ 719.230193][T12743] usb 9-1: USB disconnect, device number 18 [ 719.269541][T19245] can0 (unregistered): slcan off ttyS3. [ 719.450252][T19234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43 [ 719.458594][ T29] usb usb48-port1: attempt power cycle [ 719.619237][ T5746] Bluetooth: hci0: command tx timeout [ 720.084113][T19281] xt_cgroup: path and classid specified [ 720.511649][ T29] usb usb48-port1: unable to enumerate USB device [ 721.213630][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 721.364959][T19287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 721.879219][ T29] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 722.034992][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 722.036068][T19328] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3872'. [ 722.041693][T19328] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 722.041864][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 722.070199][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 722.091362][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.102533][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 722.106082][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 722.117423][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 722.129053][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 722.136213][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 722.139815][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 722.143345][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 722.148637][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.438801][T19331] bond1 (unregistering): Released all slaves [ 722.877215][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 723.003536][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 723.007268][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 723.011816][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 723.015368][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 723.019062][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 723.022654][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 723.026005][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.032116][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 723.036974][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 723.040721][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 723.045011][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 723.052341][ T29] usb 7-1: string descriptor 0 read error: -22 [ 723.055013][ T29] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 723.058089][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.067504][ T29] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 723.085489][T19350] netlink: 'syz.4.3879': attribute type 4 has an invalid length. [ 723.248333][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 723.256679][T19366] tipc: Started in network mode [ 723.259324][T19366] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 723.264340][T19366] tipc: Enabled bearer , priority 4 [ 723.311027][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 723.389376][T19308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3866'. [ 723.395226][ T50] usb 7-1: USB disconnect, device number 39 [ 724.067563][T19381] netlink: 'syz.6.3889': attribute type 1 has an invalid length. [ 724.089830][T19381] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 724.092570][T19384] netlink: 'syz.4.3890': attribute type 23 has an invalid length. [ 724.107257][T19381] bond1 (unregistering): Released all slaves [ 724.132114][T19385] bridge1: entered promiscuous mode [ 724.252294][ T42] audit: type=1326 audit(1785688905.856:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.2.3893" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 724.379061][T18318] tipc: Node number set to 4269801502 [ 724.432259][T19406] Dead loop on virtual device ip6_vti0 (net 377), fix it urgently! [ 724.497455][T19410] syzkaller0: entered promiscuous mode [ 724.501570][T19410] syzkaller0: entered allmulticast mode [ 724.759437][T19413] bridge0: port 3(syz_tun) entered blocking state [ 724.762488][T19413] bridge0: port 3(syz_tun) entered disabled state [ 724.765343][T19413] syz_tun: entered allmulticast mode [ 724.772075][T19413] syz_tun: entered promiscuous mode [ 724.774681][T19413] bridge0: port 3(syz_tun) entered blocking state [ 724.777310][T19413] bridge0: port 3(syz_tun) entered forwarding state [ 724.913514][T19417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3902'. [ 725.481688][ C2] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 725.484925][ C2] sr 2:0:0:0: [sr0] tag#22 CDB: Test Unit Ready [ 725.682645][ C2] hpet: Lost 1 RTC interrupts [ 726.295734][T19468] FAULT_INJECTION: forcing a failure. [ 726.295734][T19468] name failslab, interval 1, probability 0, space 0, times 0 [ 726.316251][T19468] CPU: 0 UID: 0 PID: 19468 Comm: syz.5.3910 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.316273][T19468] Tainted: [L]=SOFTLOCKUP [ 726.316277][T19468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 726.316284][T19468] Call Trace: [ 726.316321][T19468] [ 726.316326][T19468] dump_stack_lvl+0x100/0x190 [ 726.316413][T19468] should_fail_ex.cold+0x5/0xa [ 726.316427][T19468] should_failslab+0xc2/0x120 [ 726.316451][T19468] kmem_cache_alloc_noprof+0x91/0x6a0 [ 726.316466][T19468] ? trace_kmem_cache_alloc+0xdd/0x100 [ 726.316482][T19468] ? security_file_alloc+0x34/0x2c0 [ 726.316535][T19468] security_file_alloc+0x34/0x2c0 [ 726.316551][T19468] init_file+0x95/0x480 [ 726.316566][T19468] alloc_empty_file+0x79/0x1c0 [ 726.316580][T19468] alloc_file_pseudo+0x183/0x290 [ 726.316596][T19468] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 726.316611][T19468] ? _raw_spin_unlock+0x28/0x50 [ 726.316658][T19468] ? alloc_fd+0x471/0x7a0 [ 726.316671][T19468] __anon_inode_getfile+0xe8/0x280 [ 726.316698][T19468] __anon_inode_getfd+0x5c/0xe0 [ 726.316714][T19468] __ia32_sys_fsopen+0x192/0x230 [ 726.316732][T19468] __do_fast_syscall_32+0xe7/0x970 [ 726.316748][T19468] ? lockdep_hardirqs_on+0x78/0x100 [ 726.316764][T19468] do_fast_syscall_32+0x32/0x70 [ 726.316780][T19468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 726.316795][T19468] RIP: 0023:0xf700efec [ 726.316808][T19468] Code: Unable to access opcode bytes at 0xf700efc2. [ 726.316832][T19468] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 726.316845][T19468] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000001 [ 726.316852][T19468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.316858][T19468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 726.316865][T19468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.316871][T19468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.316885][T19468] [ 727.587981][T19496] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 727.603318][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3919'. [ 727.712117][T18318] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 727.726107][T19514] Invalid logical block size (-1048577) [ 727.860505][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3929'. [ 727.872340][T18318] usb 9-1: Using ep0 maxpacket: 16 [ 728.220206][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3931'. [ 728.344278][T18318] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 728.623752][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3934'. [ 728.629037][T19547] IPv6: Can't replace route, no match found [ 728.675291][T18318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.678574][T18318] usb 9-1: Product: syz [ 728.680376][T18318] usb 9-1: Manufacturer: syz [ 728.682032][T18318] usb 9-1: SerialNumber: syz [ 728.893038][T19560] netlink: 'syz.2.3938': attribute type 1 has an invalid length. [ 728.914856][T19560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.919184][T18318] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 728.935880][T18318] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 728.940144][T18318] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 728.950813][T18318] usb 9-1: media controller created [ 729.018363][T19563] program syz.5.3936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 729.059128][T19560] bond1: (slave geneve2): making interface the new active one [ 729.064669][T19560] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 729.128519][T18318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 729.140266][T19491] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 729.152126][T19491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.170772][T19491] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 729.176927][T19491] bond1: (slave batadv1): making interface the new active one [ 729.182412][T19491] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 729.185809][T19568] ntfs3(nullb0): Primary boot signature is not NTFS. [ 729.195451][T19568] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 729.232224][T19491] bond1 (unregistering): (slave batadv1): Releasing active interface [ 729.237344][T19491] bond1 (unregistering): Released all slaves [ 729.325261][T18318] zl10353_read_register: readreg error (reg=127, ret==-71) [ 729.345459][T19571] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 729.350664][T19571] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3940'. [ 729.369305][T18318] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 729.388190][T18318] usb 9-1: USB disconnect, device number 19 [ 729.949068][T19585] FAULT_INJECTION: forcing a failure. [ 729.949068][T19585] name failslab, interval 1, probability 0, space 0, times 0 [ 729.953192][T19585] CPU: 0 UID: 0 PID: 19585 Comm: syz.4.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.953211][T19585] Tainted: [L]=SOFTLOCKUP [ 729.953215][T19585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 729.953222][T19585] Call Trace: [ 729.953227][T19585] [ 729.953232][T19585] dump_stack_lvl+0x100/0x190 [ 729.953252][T19585] should_fail_ex.cold+0x5/0xa [ 729.953266][T19585] should_failslab+0xc2/0x120 [ 729.953283][T19585] __kmalloc_noprof+0xfc/0x820 [ 729.953297][T19585] ? trace_kmem_cache_alloc+0xdd/0x100 [ 729.953313][T19585] ? lsm_blob_alloc+0x68/0x90 [ 729.953336][T19585] lsm_blob_alloc+0x68/0x90 [ 729.953354][T19585] security_prepare_creds+0x2d/0x290 [ 729.953372][T19585] prepare_creds+0x5d6/0x950 [ 729.953405][T19585] copy_creds+0xa7/0xa50 [ 729.953424][T19585] copy_process+0x1420/0x8030 [ 729.953440][T19585] ? __lock_acquire+0x49f/0x1a40 [ 729.953462][T19585] ? __pfx_copy_process+0x10/0x10 [ 729.953478][T19585] ? get_pid_task+0xfc/0x250 [ 729.953491][T19585] ? get_pid_task+0xfc/0x250 [ 729.953508][T19585] kernel_clone+0x176/0x9d0 [ 729.953521][T19585] ? proc_fail_nth_write+0x9f/0x220 [ 729.953550][T19585] ? __pfx_kernel_clone+0x10/0x10 [ 729.953566][T19585] ? find_held_lock+0x2b/0x80 [ 729.953580][T19585] ? ksys_write+0x190/0x250 [ 729.953591][T19585] ? ksys_write+0x190/0x250 [ 729.953603][T19585] __do_compat_sys_ia32_clone+0xd4/0x120 [ 729.953618][T19585] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 729.953636][T19585] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 729.953651][T19585] ? ksys_write+0x1ac/0x250 [ 729.953661][T19585] ? __pfx_ksys_write+0x10/0x10 [ 729.953674][T19585] __do_fast_syscall_32+0xe7/0x970 [ 729.953690][T19585] ? lockdep_hardirqs_on+0x78/0x100 [ 729.953706][T19585] do_fast_syscall_32+0x32/0x70 [ 729.953722][T19585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.953755][T19585] RIP: 0023:0xf703efec [ 729.953772][T19585] Code: Unable to access opcode bytes at 0xf703efc2. [ 729.953777][T19585] RSP: 002b:00000000f542d4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 729.953789][T19585] RAX: ffffffffffffffda RBX: 0000000020222000 RCX: 0000000000000000 [ 729.953796][T19585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 729.953803][T19585] RBP: 00000000f7434f80 R08: 0000000000000000 R09: 0000000000000000 [ 729.953810][T19585] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 729.953828][T19585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.953843][T19585] [ 730.640057][T13361] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 730.833755][T13361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.838718][T13361] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 730.845334][T13361] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 730.850714][T13361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.869329][T13361] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 731.134836][T19615] block2mtd: illegal erase size [ 731.482560][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 733.002882][T19640] block2mtd: illegal erase size [ 733.067138][T19644] kvm: user requested TSC rate below hardware speed [ 733.164912][T19650] syzkaller0: entered promiscuous mode [ 733.166721][T19650] syzkaller0: entered allmulticast mode [ 733.174212][T19650] tipc: Started in network mode [ 733.176388][T19650] tipc: Node identity 9eebd6300238, cluster identity 4711 [ 733.179569][T19650] tipc: Enabled bearer , priority 0 [ 733.188400][T19649] tipc: Resetting bearer [ 733.210494][T19649] tipc: Disabling bearer [ 733.390749][T17814] usb 7-1: USB disconnect, device number 40 [ 733.432999][T13806] IPVS: starting estimator thread 0... [ 733.443563][T19660] binder_alloc: 19658: binder_alloc_buf, no vma [ 733.546809][T19661] IPVS: using max 45 ests per chain, 108000 per kthread [ 733.551003][T19667] FAULT_INJECTION: forcing a failure. [ 733.551003][T19667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.559222][T19667] CPU: 0 UID: 0 PID: 19667 Comm: syz.5.3970 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.559250][T19667] Tainted: [L]=SOFTLOCKUP [ 733.559257][T19667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 733.559264][T19667] Call Trace: [ 733.559271][T19667] [ 733.559278][T19667] dump_stack_lvl+0x100/0x190 [ 733.559303][T19667] should_fail_ex.cold+0x5/0xa [ 733.559323][T19667] _copy_from_user+0x2e/0xd0 [ 733.559372][T19667] get_compat_msghdr+0xb3/0x480 [ 733.559399][T19667] ? __pfx_get_compat_msghdr+0x10/0x10 [ 733.559434][T19667] ___sys_sendmsg+0x1b6/0x1e0 [ 733.559453][T19667] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.559479][T19667] ? find_held_lock+0x2b/0x80 [ 733.559516][T19667] __sys_sendmsg+0x160/0x210 [ 733.559540][T19667] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.559572][T19667] ? __pfx_ksys_write+0x10/0x10 [ 733.559594][T19667] __do_fast_syscall_32+0xe7/0x970 [ 733.559618][T19667] ? lockdep_hardirqs_on+0x78/0x100 [ 733.559641][T19667] do_fast_syscall_32+0x32/0x70 [ 733.559659][T19667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.559680][T19667] RIP: 0023:0xf700efec [ 733.559700][T19667] Code: Unable to access opcode bytes at 0xf700efc2. [ 733.559708][T19667] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 733.559728][T19667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 733.559738][T19667] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.559748][T19667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.559755][T19667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.559764][T19667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.559786][T19667] [ 734.471047][T19681] netlink: 'syz.4.3974': attribute type 2 has an invalid length. [ 734.516542][T19681] : entered promiscuous mode [ 734.631581][T19688] FAULT_INJECTION: forcing a failure. [ 734.631581][T19688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.651190][T19688] CPU: 2 UID: 0 PID: 19688 Comm: syz.2.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.651221][T19688] Tainted: [L]=SOFTLOCKUP [ 734.651229][T19688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 734.651239][T19688] Call Trace: [ 734.651245][T19688] [ 734.651251][T19688] dump_stack_lvl+0x100/0x190 [ 734.651279][T19688] should_fail_ex.cold+0x5/0xa [ 734.651302][T19688] _copy_to_user+0x32/0xd0 [ 734.651332][T19688] simple_read_from_buffer+0xcb/0x170 [ 734.651364][T19688] proc_fail_nth_read+0x1af/0x230 [ 734.651390][T19688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.651415][T19688] ? rw_verify_area+0xce/0x6d0 [ 734.651440][T19688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.651464][T19688] vfs_read+0x1e4/0xb40 [ 734.651485][T19688] ? __pfx_vfs_read+0x10/0x10 [ 734.651499][T19688] ? find_held_lock+0x2b/0x80 [ 734.651522][T19688] ? __fget_files+0x215/0x3d0 [ 734.651543][T19688] ? __fget_files+0x21f/0x3d0 [ 734.651580][T19688] ksys_read+0x12a/0x250 [ 734.651597][T19688] ? __pfx_ksys_read+0x10/0x10 [ 734.651621][T19688] do_int80_emulation+0x14b/0x720 [ 734.651650][T19688] asm_int80_emulation+0x1a/0x20 [ 734.651667][T19688] RIP: 0023:0xf71473eb [ 734.651683][T19688] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 734.651698][T19688] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 734.651718][T19688] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd5d0 [ 734.651728][T19688] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 734.651740][T19688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.651749][T19688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 734.651759][T19688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.651782][T19688] [ 734.692629][T19690] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 734.693735][ C2] hpet: Lost 1 RTC interrupts [ 734.695847][T19690] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 734.724675][T19692] binder_alloc: 19691: binder_alloc_buf, no vma [ 734.819529][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3980'. [ 734.834480][T19690] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 734.852867][T19697] vlan2: entered allmulticast mode [ 734.854700][T19697] bridge1: entered allmulticast mode [ 735.927115][T19719] tmpfs: Unknown parameter 'nr_inod' [ 735.934912][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 735.954219][T19721] binder_alloc: 19720: binder_alloc_buf, no vma [ 736.466085][ T29] libceph: connect (1)[c::]:6789 error -101 [ 736.475655][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 736.613657][T19725] Cannot find add_set index 0 as target [ 736.726642][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3990'. [ 736.752748][ T29] libceph: connect (1)[c::]:6789 error -101 [ 736.755537][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 737.001281][T19726] ceph: No mds server is up or the cluster is laggy [ 737.830596][T19737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.833465][T19737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 737.888769][T19737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 737.962706][T19737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 737.977761][T19737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 738.015409][T19737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 738.523566][T19751] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3996'. [ 738.678846][T19756] binder_alloc: 19755: binder_alloc_buf, no vma [ 738.883566][T19761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3999'. [ 739.146158][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 739.630462][ T42] audit: type=1800 audit(1785689176.311:4501): pid=19768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4002" name="local" dev="configfs" ino=73579 res=0 errno=0 [ 739.958475][T19783] binder_alloc: 19782: binder_alloc_buf, no vma [ 740.022291][ T29] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 740.172003][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 740.184897][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.190386][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 740.196052][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 740.202307][ T29] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 740.205528][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.208169][ T29] usb 10-1: Product: syz [ 740.209566][ T29] usb 10-1: Manufacturer: syz [ 740.211597][ T29] usb 10-1: SerialNumber: syz [ 740.221089][ T29] usb 10-1: config 0 descriptor?? [ 740.223541][T19775] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 740.246884][T14591] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 740.268056][ T29] rc_core: IR keymap rc-streamzap not found [ 740.270198][ T29] Registered IR keymap rc-empty [ 740.276691][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 740.282720][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input44 [ 740.409451][T14591] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 740.412848][T14591] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 740.416367][T14591] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 740.420970][T14591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.429801][T14591] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 740.438277][T14591] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 740.483480][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4004'. [ 740.486296][T19775] bridge_slave_1: left allmulticast mode [ 740.488108][T19775] bridge_slave_1: left promiscuous mode [ 740.490027][T19775] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.497912][T19775] bridge_slave_0: left allmulticast mode [ 740.499787][T19775] bridge_slave_0: left promiscuous mode [ 740.501717][T19775] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.650437][T14591] usb 7-1: USB disconnect, device number 41 [ 740.661116][T14591] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 740.672350][T14591] spcp8x5 7-1:1.0: device disconnected [ 740.684488][T13806] usb 10-1: USB disconnect, device number 4 [ 741.368905][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 742.288287][T13805] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 742.345676][T19809] binder_alloc: 19808: binder_alloc_buf, no vma [ 742.379060][T19811] block2mtd: device name too long [ 742.394643][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 742.458862][T13805] usb 9-1: Using ep0 maxpacket: 32 [ 742.463098][T13805] usb 9-1: config 0 has no interfaces? [ 742.464877][T13805] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 742.472321][T13805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.478953][T13805] usb 9-1: config 0 descriptor?? [ 742.681422][ T42] audit: type=1326 audit(1785689179.166:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 742.689323][ T42] audit: type=1326 audit(1785689179.175:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 742.696461][ T42] audit: type=1326 audit(1785689179.175:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 742.704677][ T42] audit: type=1326 audit(1785689179.175:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 742.711810][ T42] audit: type=1326 audit(1785689179.175:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700efec code=0x7ffc0000 [ 742.806888][T13805] usb 9-1: USB disconnect, device number 20 [ 742.845663][T19825] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 743.067103][T19830] xt_cgroup: path and classid specified [ 743.188538][ T42] audit: type=1326 audit(1785689179.643:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 743.205630][ T42] audit: type=1326 audit(1785689179.643:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19819 comm="syz.2.4019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 743.603076][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 743.683591][T19835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.764782][T19835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.003225][T19846] binder_alloc: 19844: binder_alloc_buf, no vma [ 744.048616][T19849] block2mtd: device name too long [ 744.617306][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.911194][T14834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 744.921938][T14834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 744.926227][T14834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 744.946331][T14834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.950268][T14834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.175044][T19091] bridge0: port 3(syz_tun) entered disabled state [ 745.207813][T19091] syz_tun (unregistering): left allmulticast mode [ 745.209956][T19091] syz_tun (unregistering): left promiscuous mode [ 745.212071][T19091] bridge0: port 3(syz_tun) entered disabled state [ 745.546732][T19890] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 745.584007][ T5797] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.745309][ T5797] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.767903][T19874] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.770545][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.773922][T19874] bridge_slave_0: entered allmulticast mode [ 745.777222][T19874] bridge_slave_0: entered promiscuous mode [ 745.781121][T19874] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.783995][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.786689][T19874] bridge_slave_1: entered allmulticast mode [ 745.789970][T19874] bridge_slave_1: entered promiscuous mode [ 745.816281][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.823064][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.858046][ T5797] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.875104][T19874] team0: Port device team_slave_0 added [ 745.878568][T19874] team0: Port device team_slave_1 added [ 745.893426][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.895631][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.904038][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.912176][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.914632][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.927861][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.948480][ T5797] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.983299][T19874] hsr_slave_0: entered promiscuous mode [ 745.986327][T19874] hsr_slave_1: entered promiscuous mode [ 745.988654][T19874] debugfs: 'hsr0' already exists in 'hsr' [ 745.990481][T19874] Cannot create hsr debugfs directory [ 745.995888][ T29] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 746.169836][ T29] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 746.173494][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.179492][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.183799][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.189641][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.194132][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.198544][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.209118][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.215740][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.222991][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.228143][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.231321][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.234778][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.237954][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.240955][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.245164][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.251914][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.255961][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.259924][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.265819][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.268977][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.272346][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.279838][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.279855][ T5797] bridge_slave_1: left allmulticast mode [ 746.283711][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.289591][ T5797] bridge_slave_1: left promiscuous mode [ 746.293027][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.293071][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 746.300737][ T29] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 746.303812][ T29] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 746.307183][ T29] usb 9-1: Product: syz [ 746.308320][ T5797] bridge_slave_0: left allmulticast mode [ 746.308645][ T29] usb 9-1: Manufacturer: syz [ 746.312074][ T29] usb 9-1: SerialNumber: syz [ 746.318131][ T29] usb 9-1: config 0 descriptor?? [ 746.323241][T19904] binder_alloc: 19903: binder_alloc_buf, no vma [ 746.327091][ T5797] bridge_slave_0: left promiscuous mode [ 746.328928][ T29] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 746.329097][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.367475][T19907] block2mtd: device name too long [ 746.502720][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4039'. [ 746.509363][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.513998][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.517641][ T5797] bond0 (unregistering): Released all slaves [ 746.524592][ T5457] 8021q: adding VLAN 0 to HW filter on device eth15 [ 746.533658][T19874] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 746.540028][T19874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.543054][T19874] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 746.547097][T19874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.550739][T19874] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 746.559974][T19874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.565294][T19874] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 746.576565][T19874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.707790][T19921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.711571][T19921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.098563][T14834] Bluetooth: hci3: command tx timeout [ 747.140036][ T5457] 8021q: adding VLAN 0 to HW filter on device eth16 [ 747.269052][ T5797] hsr_slave_0: left promiscuous mode [ 747.271444][ T5797] hsr_slave_1: left promiscuous mode [ 747.273407][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.275715][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.279582][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.282080][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.290261][ T5797] veth1_macvtap: left promiscuous mode [ 747.292030][ T5797] veth0_macvtap: left promiscuous mode [ 747.294241][ T5797] veth1_vlan: left promiscuous mode [ 747.295838][ T5797] veth0_vlan: left promiscuous mode [ 747.497589][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 747.524983][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 747.537002][T19936] Unknown vers= option specified: 3.0 [ 747.537002][T19936] [ 747.540126][T19936] CIFS: VFS: Unknown vers= option specified: 3.0 [ 747.754104][T19943] binder_alloc: 19942: binder_alloc_buf, no vma [ 747.823873][ T149] usb 9-1: USB disconnect, device number 21 [ 747.845588][ T149] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 747.867931][T19874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.880460][T19874] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.896292][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.904953][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.944529][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.944616][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.967158][ T5457] 8021q: adding VLAN 0 to HW filter on device eth17 [ 748.229957][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.232980][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.282391][T19967] block2mtd: device name too long [ 748.310375][ T5457] 8021q: adding VLAN 0 to HW filter on device eth18 [ 748.350275][T19874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.354020][T19973] sg_write: data in/out 19942/40 bytes for SCSI command 0x32-- guessing data in; [ 748.354020][T19973] program syz.2.4046 not setting count and/or reply_len properly [ 748.558049][T19874] veth0_vlan: entered promiscuous mode [ 748.565231][T19874] veth1_vlan: entered promiscuous mode [ 748.588227][T19874] veth0_macvtap: entered promiscuous mode [ 748.593535][T19874] veth1_macvtap: entered promiscuous mode [ 748.602720][T19874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.611598][T19874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.722735][T10796] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.745311][T10796] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.751749][T10796] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.792993][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.796496][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.853723][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.861557][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.892606][T13402] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.287150][ T5830] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 749.319360][T14834] Bluetooth: hci3: command tx timeout [ 749.451819][ T5830] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 749.455332][ T5830] usb 12-1: config 0 has no interface number 0 [ 749.459628][ T5830] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 749.463657][ T5830] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.473280][ T5830] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 749.479311][ T5830] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 749.484568][ T5830] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 749.488043][ T5830] usb 12-1: Product: syz [ 749.489757][ T5830] usb 12-1: SerialNumber: syz [ 749.502048][ T5830] usb 12-1: config 0 descriptor?? [ 749.509345][ T5830] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 749.515002][ T5830] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input45 [ 749.692115][T20010] loop9: detected capacity change from 0 to 7 [ 749.705526][T20010] buffer_io_error: 10 callbacks suppressed [ 749.705545][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.715565][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.718846][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.722111][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.725545][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.729034][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.732220][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.735255][T20010] ldm_validate_partition_table(): Disk read failed. [ 749.739175][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.742357][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.745122][T20010] Buffer I/O error on dev loop9, logical block 0, async page read [ 749.748514][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 749.749867][T20010] Dev loop9: unable to read RDB block 0 [ 749.754924][T20010] loop9: unable to read partition table [ 749.756891][T20010] loop9: partition table beyond EOD, truncated [ 749.767074][T20010] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 749.767074][T20010] ) failed (rc=-5) [ 750.041351][T20021] block2mtd: illegal erase size [ 750.504522][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 750.504839][T13805] usb 12-1: USB disconnect, device number 2 [ 750.507456][ C3] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 750.587851][T13805] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 750.639033][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4057'. [ 751.370927][ T5830] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 751.541839][T14834] Bluetooth: hci3: command tx timeout [ 751.578340][ T5830] usb 12-1: Using ep0 maxpacket: 32 [ 751.684191][T20058] FAULT_INJECTION: forcing a failure. [ 751.684191][T20058] name failslab, interval 1, probability 0, space 0, times 0 [ 751.689153][T20058] CPU: 1 UID: 0 PID: 20058 Comm: syz.4.4067 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.689181][T20058] Tainted: [L]=SOFTLOCKUP [ 751.689189][T20058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 751.689199][T20058] Call Trace: [ 751.689207][T20058] [ 751.689215][T20058] dump_stack_lvl+0x100/0x190 [ 751.689245][T20058] should_fail_ex.cold+0x5/0xa [ 751.689266][T20058] should_failslab+0xc2/0x120 [ 751.689293][T20058] kmem_cache_alloc_noprof+0x91/0x6a0 [ 751.689317][T20058] ? __pfx_map_id_range_down+0x10/0x10 [ 751.689342][T20058] ? security_inode_alloc+0x3b/0x2c0 [ 751.689369][T20058] security_inode_alloc+0x3b/0x2c0 [ 751.689390][T20058] inode_init_always_gfp+0xc77/0xfb0 [ 751.689414][T20058] alloc_inode+0x8e/0x250 [ 751.689438][T20058] sock_alloc+0x44/0x280 [ 751.689464][T20058] ? security_socket_create+0x7f/0x250 [ 751.689486][T20058] __sock_create+0xc2/0x860 [ 751.689505][T20058] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 751.689530][T20058] ? genl_rcv_msg+0x560/0x800 [ 751.689554][T20058] udp_sock_create4+0xa6/0x450 [ 751.689575][T20058] ? __pfx_udp_sock_create4+0x10/0x10 [ 751.689605][T20058] fou_create.constprop.0+0xae3/0xce0 [ 751.689632][T20058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 751.689685][T20058] ? __nla_validate_parse+0x1e7/0x28b0 [ 751.689723][T20058] ? __pfx_fou_create.constprop.0+0x10/0x10 [ 751.689748][T20058] ? __asan_memset+0x23/0x50 [ 751.689768][T20058] ? parse_nl_config+0x732/0xa80 [ 751.689802][T20058] ? rcu_is_watching+0x12/0xc0 [ 751.689823][T20058] ? trace_kmalloc+0xeb/0x110 [ 751.689850][T20058] fou_nl_add_doit+0xcf/0x130 [ 751.689877][T20058] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 751.689901][T20058] ? __nla_parse+0x40/0x60 [ 751.689924][T20058] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 751.689947][T20058] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 751.689976][T20058] genl_family_rcv_msg_doit+0x214/0x300 [ 751.690002][T20058] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 751.690025][T20058] ? genl_get_cmd+0x3e7/0x760 [ 751.690053][T20058] ? bpf_lsm_capable+0x9/0x10 [ 751.690073][T20058] ? security_capable+0x80/0x260 [ 751.690095][T20058] genl_rcv_msg+0x560/0x800 [ 751.690136][T20058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.690160][T20058] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 751.690189][T20058] ? __lock_acquire+0x49f/0x1a40 [ 751.690220][T20058] netlink_rcv_skb+0x159/0x420 [ 751.690241][T20058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.690265][T20058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.690295][T20058] ? netlink_deliver_tap+0x1ae/0xcc0 [ 751.690319][T20058] genl_rcv+0x28/0x40 [ 751.690338][T20058] netlink_unicast+0x585/0x850 [ 751.690362][T20058] ? __pfx_netlink_unicast+0x10/0x10 [ 751.690390][T20058] netlink_sendmsg+0x8b0/0xda0 [ 751.690414][T20058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.690439][T20058] ? apparmor_socket_sendmsg+0x15b/0x270 [ 751.690466][T20058] ____sys_sendmsg+0xa4d/0xbe0 [ 751.690483][T20058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.690505][T20058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.690535][T20058] ___sys_sendmsg+0x190/0x1e0 [ 751.690557][T20058] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.690589][T20058] ? find_held_lock+0x2b/0x80 [ 751.690626][T20058] __sys_sendmsg+0x160/0x210 [ 751.690651][T20058] ? __pfx___sys_sendmsg+0x10/0x10 [ 751.690683][T20058] ? __pfx_ksys_write+0x10/0x10 [ 751.690707][T20058] __do_fast_syscall_32+0xe7/0x970 [ 751.690732][T20058] ? lockdep_hardirqs_on+0x78/0x100 [ 751.690757][T20058] do_fast_syscall_32+0x32/0x70 [ 751.690782][T20058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 751.690810][T20058] RIP: 0023:0xf703efec [ 751.690831][T20058] Code: Unable to access opcode bytes at 0xf703efc2. [ 751.690840][T20058] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 751.690859][T20058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 751.690871][T20058] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.690881][T20058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.690890][T20058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 751.690902][T20058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.690925][T20058] [ 751.691101][T20058] socket: no more sockets [ 751.963640][T20062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 752.158881][T20065] binder: 20064:20065 ioctl c0306201 80000040 returned -14 [ 752.166002][T20067] CIFS: Attempting to mount //127.0.0.1/share [ 752.188325][ T5830] usb 12-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 752.233597][T20068] CIFS: VFS: Invalid response size 0 for command 0 [ 752.272433][T20067] CIFS: VFS: cifs_mount failed w/return code = -5 [ 752.356947][T20070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 752.412743][ T5830] usb 12-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.423633][ T5830] usb 12-1: config 1 interface 0 has no altsetting 0 [ 752.428395][ T5830] usb 12-1: New USB device found, idVendor=1477, idProduct=1021, bcdDevice= 0.40 [ 752.433245][ T5830] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.436422][ T5830] usb 12-1: Product: 䀁 [ 752.437984][ T5830] usb 12-1: Manufacturer: Ṅ웂隀ꔳ햆˩技亲璸䮲蓪᳨Ꮧ쥓擉娄や [ 752.440977][ T5830] usb 12-1: SerialNumber: d [ 752.475193][T20076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4073'. [ 752.487326][T20076] netlink: 'syz.5.4073': attribute type 1 has an invalid length. [ 752.693009][ T5830] usbhid 12-1:1.0: can't add hid device: -71 [ 752.704719][ T5830] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 752.718952][ T5830] usb 12-1: USB disconnect, device number 3 [ 752.771591][T20083] i2c i2c-0: Failed to register i2c client wcd9390-usbss at 0x04 (-16) [ 752.777370][T20083] FAULT_INJECTION: forcing a failure. [ 752.777370][T20083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.786805][T20083] CPU: 3 UID: 0 PID: 20083 Comm: syz.5.4076 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.786824][T20083] Tainted: [L]=SOFTLOCKUP [ 752.786829][T20083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 752.786836][T20083] Call Trace: [ 752.786840][T20083] [ 752.786845][T20083] dump_stack_lvl+0x100/0x190 [ 752.786863][T20083] should_fail_ex.cold+0x5/0xa [ 752.786877][T20083] _copy_to_user+0x32/0xd0 [ 752.786897][T20083] simple_read_from_buffer+0xcb/0x170 [ 752.786937][T20083] proc_fail_nth_read+0x1af/0x230 [ 752.786960][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.786994][T20083] ? rw_verify_area+0xce/0x6d0 [ 752.787020][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.787044][T20083] vfs_read+0x1e4/0xb40 [ 752.787065][T20083] ? __pfx_vfs_read+0x10/0x10 [ 752.787081][T20083] ? find_held_lock+0x2b/0x80 [ 752.787104][T20083] ? __fget_files+0x215/0x3d0 [ 752.787121][T20083] ? __fget_files+0x21f/0x3d0 [ 752.787136][T20083] ksys_read+0x12a/0x250 [ 752.787146][T20083] ? __pfx_ksys_read+0x10/0x10 [ 752.787156][T20083] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 752.787174][T20083] ? syscall_user_dispatch+0x76/0x130 [ 752.787189][T20083] do_int80_emulation+0x14b/0x720 [ 752.787207][T20083] asm_int80_emulation+0x1a/0x20 [ 752.787219][T20083] RIP: 0023:0xf71473eb [ 752.787229][T20083] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 752.787240][T20083] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 752.787253][T20083] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd5d0 [ 752.787260][T20083] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 752.787266][T20083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 752.787272][T20083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 752.787279][T20083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 752.787293][T20083] [ 753.137110][T20086] team0: Port device dummy0 removed [ 753.178084][T20086] team0: Port device team_slave_0 removed [ 753.276809][T20086] team0: Port device team_slave_1 removed [ 753.283240][T20097] block2mtd: parameter too long [ 753.333106][T20086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.764643][T14834] Bluetooth: hci3: command tx timeout [ 753.829560][T20108] netlink: 'syz.4.4082': attribute type 1 has an invalid length. [ 754.245692][T20114] i2c i2c-0: Failed to register i2c client wcd9390-usbss at 0x04 (-16) [ 754.453922][T20126] binder_alloc: 20125: binder_alloc_buf, no vma [ 754.454554][T20128] block2mtd: device name too long [ 754.790675][T13805] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 754.805192][T20140] netlink: 'syz.7.4094': attribute type 1 has an invalid length. [ 754.973524][T13805] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 112, setting to 64 [ 754.978137][T13805] usb 9-1: config 0 interface 0 has no altsetting 0 [ 754.984971][T13805] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 754.989898][T13805] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 754.997818][T13805] usb 9-1: Product: syz [ 754.999127][T13805] usb 9-1: Manufacturer: syz [ 755.003175][T13805] usb 9-1: SerialNumber: syz [ 755.010046][T13805] usb 9-1: config 0 descriptor?? [ 755.020142][T13805] usb 9-1: selecting invalid altsetting 0 [ 755.417234][T20134] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 755.429728][T20134] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 756.198930][T20160] comedi comedi3: pcl818: I/O base address or length out of range [ 757.026549][T20177] loop5: detected capacity change from 0 to 7 [ 757.205548][T20177] Dev loop5: unable to read RDB block 7 [ 757.208021][T20177] loop5: unable to read partition table [ 757.210868][T20177] loop5: partition table beyond EOD, truncated [ 757.213206][T20177] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 757.369868][T20185] dlm: Using TCP for communications [ 757.390570][T20131] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 757.468527][T20191] syzkaller0: entered promiscuous mode [ 757.470923][T20191] syzkaller0: entered allmulticast mode [ 757.648071][T20193] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 757.822755][T20200] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 757.840293][T20200] bond2: entered promiscuous mode [ 757.842911][T20200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.881335][T20200] ipvlan1: entered allmulticast mode [ 757.883379][T20200] bond2: entered allmulticast mode [ 757.896055][T20200] ipvlan2: entered allmulticast mode [ 757.921196][T20200] bond2: (slave bridge1): making interface the new active one [ 757.924437][T20200] bridge1: entered promiscuous mode [ 757.926783][T20200] bridge1: entered allmulticast mode [ 757.930931][T20200] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 758.474184][T19247] usb 9-1: USB disconnect, device number 22 [ 758.572004][T20210] fuse: Unknown parameter '' [ 758.659834][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4114'. [ 758.670890][T20216] lo speed is unknown, defaulting to 1000 [ 758.672758][T20216] lo speed is unknown, defaulting to 1000 [ 758.674914][T20216] lo speed is unknown, defaulting to 1000 [ 758.677147][T20216] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 758.681798][T20216] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 758.695662][T20216] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 758.703245][T20216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 758.732719][T20216] lo speed is unknown, defaulting to 1000 [ 758.736539][T20216] lo speed is unknown, defaulting to 1000 [ 758.739396][T20216] lo speed is unknown, defaulting to 1000 [ 758.742049][T20216] lo speed is unknown, defaulting to 1000 [ 758.744832][T20216] lo speed is unknown, defaulting to 1000 [ 758.950162][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4117'. [ 758.953923][T20221] netlink: 'syz.7.4117': attribute type 10 has an invalid length. [ 758.957183][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4117'. [ 759.065639][T13806] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 759.225171][T13806] usb 9-1: Using ep0 maxpacket: 16 [ 759.229116][T13806] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 759.234969][T13806] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 759.238175][T13806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.240781][T13806] usb 9-1: Product: syz [ 759.242105][T13806] usb 9-1: Manufacturer: syz [ 759.243549][T13806] usb 9-1: SerialNumber: syz [ 759.248097][T13806] usb 9-1: config 0 descriptor?? [ 759.252442][T13806] hub 9-1:0.0: bad descriptor, ignoring hub [ 759.255012][T13806] hub 9-1:0.0: probe with driver hub failed with error -5 [ 759.260433][T13806] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.262771][T20238] lo speed is unknown, defaulting to 1000 [ 759.307879][T20238] netlink: 'syz.5.4123': attribute type 4 has an invalid length. [ 759.312699][T20238] netlink: 'syz.5.4123': attribute type 4 has an invalid length. [ 759.558611][T19247] usb 9-1: USB disconnect, device number 23 [ 759.695342][T20007] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 759.866280][T20007] usb 10-1: Using ep0 maxpacket: 32 [ 759.872189][T20007] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 759.876479][T20007] usb 10-1: config 0 has no interface number 0 [ 759.881457][T20007] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 759.888576][T20007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.892255][T20007] usb 10-1: Product: syz [ 759.894706][T20007] usb 10-1: Manufacturer: syz [ 759.896055][T20007] usb 10-1: SerialNumber: syz [ 759.899991][T20007] usb 10-1: config 0 descriptor?? [ 759.906303][T20007] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 759.911924][T20007] usb 10-1: selecting invalid altsetting 1 [ 759.913799][T20007] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 759.931600][T20007] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 759.935539][T20007] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 759.938128][T20007] usb 10-1: media controller created [ 759.944550][T20007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.963932][T20258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 760.197399][T20265] kvm: apic: phys broadcast and lowest prio [ 760.286235][T20265] ================================================================== [ 760.288847][T20265] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 760.291379][T20265] Read of size 8 at addr ffff88802ab9d938 by task syz.5.4124/20265 [ 760.294564][T20265] [ 760.295603][T20265] CPU: 1 UID: 0 PID: 20265 Comm: syz.5.4124 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.295623][T20265] Tainted: [L]=SOFTLOCKUP [ 760.295629][T20265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.295637][T20265] Call Trace: [ 760.295643][T20265] [ 760.295649][T20265] dump_stack_lvl+0x100/0x190 [ 760.295665][T20265] print_report+0x13d/0x4b0 [ 760.295685][T20265] ? __virt_addr_valid+0x239/0x430 [ 760.295702][T20265] ? __release_resource+0x276/0x2c0 [ 760.295715][T20265] kasan_report+0xdf/0x1c0 [ 760.295733][T20265] ? __release_resource+0x276/0x2c0 [ 760.295749][T20265] __release_resource+0x276/0x2c0 [ 760.295764][T20265] release_resource+0x26/0x40 [ 760.295778][T20265] pci_remove_bus_device+0x2d3/0x3b0 [ 760.295809][T20265] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 760.295827][T20265] remove_store+0x123/0x140 [ 760.295845][T20265] ? __pfx_remove_store+0x10/0x10 [ 760.295863][T20265] ? find_held_lock+0x2b/0x80 [ 760.295880][T20265] ? sysfs_file_kobj+0xe4/0x290 [ 760.295901][T20269] input: syz0 as /devices/virtual/input/input46 [ 760.295901][T20265] ? sysfs_file_kobj+0xe4/0x290 [ 760.295916][T20265] ? __pfx_remove_store+0x10/0x10 [ 760.295931][T20265] dev_attr_store+0x58/0x80 [ 760.295967][T20265] ? __pfx_dev_attr_store+0x10/0x10 [ 760.295986][T20265] sysfs_kf_write+0xf2/0x150 [ 760.296004][T20265] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.296017][T20265] ? __pfx_sysfs_kf_write+0x10/0x10 [ 760.296035][T20265] vfs_write+0x6ac/0x1050 [ 760.296047][T20265] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 760.296062][T20265] ? __pfx_vfs_write+0x10/0x10 [ 760.296072][T20265] ? find_held_lock+0x2b/0x80 [ 760.296089][T20265] ksys_write+0x12a/0x250 [ 760.296099][T20265] ? __pfx_ksys_write+0x10/0x10 [ 760.296111][T20265] __do_fast_syscall_32+0xe7/0x970 [ 760.296128][T20265] do_fast_syscall_32+0x32/0x70 [ 760.296144][T20265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.296159][T20265] RIP: 0023:0xf700efec [ 760.296169][T20265] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 760.296180][T20265] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 760.296192][T20265] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 760.296199][T20265] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.296206][T20265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.296212][T20265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 760.296219][T20265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.296232][T20265] [ 760.296236][T20265] [ 760.378855][T20265] Allocated by task 13642: [ 760.380274][T20265] kasan_save_stack+0x30/0x50 [ 760.381775][T20265] kasan_save_track+0x14/0x30 [ 760.383280][T20265] __kasan_kmalloc+0xaa/0xb0 [ 760.384740][T20265] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 760.386759][T20265] kmemdup_noprof+0x29/0x60 [ 760.388262][T20265] platform_device_add_resources+0x37/0x100 [ 760.390133][T20265] dwc2_pci_probe+0x1d3/0x360 [ 760.391626][T20265] local_pci_probe+0xdd/0x1b0 [ 760.393122][T20265] pci_call_probe+0x176/0x800 [ 760.394618][T20265] pci_device_probe+0x1cd/0x370 [ 760.396175][T20265] really_probe+0x241/0xa60 [ 760.397626][T20265] __driver_probe_device+0x20e/0x450 [ 760.399308][T20265] device_driver_attach+0xd1/0x220 [ 760.400929][T20265] bind_store+0xf4/0x190 [ 760.402297][T20265] drv_attr_store+0x74/0xb0 [ 760.403772][T20265] sysfs_kf_write+0xf2/0x150 [ 760.405248][T20265] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.406936][T20265] vfs_write+0x6ac/0x1050 [ 760.408343][T20265] ksys_write+0x12a/0x250 [ 760.409708][T20265] __do_fast_syscall_32+0xe7/0x970 [ 760.411317][T20265] do_fast_syscall_32+0x32/0x70 [ 760.412866][T20265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.414858][T20265] [ 760.415635][T20265] Freed by task 20265: [ 760.416929][T20265] kasan_save_stack+0x30/0x50 [ 760.418492][T20265] kasan_save_track+0x14/0x30 [ 760.419969][T20265] kasan_save_free_info+0x3b/0x70 [ 760.421555][T20265] __kasan_slab_free+0x5f/0x80 [ 760.423084][T20265] kfree+0x22b/0x6c0 [ 760.424330][T20265] platform_device_release+0x8a/0xb0 [ 760.426010][T20265] device_release+0xd2/0x270 [ 760.427474][T20265] kobject_put+0x1f7/0x640 [ 760.428922][T20265] put_device+0x1f/0x30 [ 760.430255][T20265] platform_device_unregister+0x45/0x50 [ 760.432003][T20265] dwc2_pci_remove+0x55/0xd0 [ 760.433471][T20265] pci_device_remove+0xb2/0x1d0 [ 760.435061][T20265] device_remove+0xcb/0x180 [ 760.436505][T20265] device_release_driver_internal+0x44e/0x620 [ 760.438451][T20265] pci_stop_bus_device+0x120/0x160 [ 760.440067][T20265] pci_stop_and_remove_bus_device+0x58/0xa0 [ 760.441931][T20265] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 760.443976][T20265] remove_store+0x123/0x140 [ 760.445423][T20265] dev_attr_store+0x58/0x80 [ 760.446875][T20265] sysfs_kf_write+0xf2/0x150 [ 760.448366][T20265] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.450050][T20265] vfs_write+0x6ac/0x1050 [ 760.451441][T20265] ksys_write+0x12a/0x250 [ 760.452808][T20265] __do_fast_syscall_32+0xe7/0x970 [ 760.454433][T20265] do_fast_syscall_32+0x32/0x70 [ 760.455977][T20265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.457975][T20265] [ 760.458757][T20265] The buggy address belongs to the object at ffff88802ab9d900 [ 760.458757][T20265] which belongs to the cache kmalloc-128 of size 128 [ 760.463054][T20265] The buggy address is located 56 bytes inside of [ 760.463054][T20265] freed 128-byte region [ffff88802ab9d900, ffff88802ab9d980) [ 760.467192][T20265] [ 760.467948][T20265] The buggy address belongs to the physical page: [ 760.469961][T20265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab9d [ 760.472688][T20265] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 760.474909][T20265] page_type: f5(slab) [ 760.476183][T20265] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 760.478879][T20265] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 760.481571][T20265] page dumped because: kasan: bad access detected [ 760.483592][T20265] page_owner tracks the page as allocated [ 760.485385][T20265] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6846, tgid 6830 (syz.1.220), ts 119212962356, free_ts 111057569869 [ 760.491433][T20265] post_alloc_hook+0xfd/0x120 [ 760.492958][T20265] get_page_from_freelist+0xf48/0x3530 [ 760.494702][T20265] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 760.496617][T20265] new_slab+0xa2/0x640 [ 760.497935][T20265] ___slab_alloc+0x5d1/0x800 [ 760.499423][T20265] __kmalloc_flags_noprof+0x473/0x8b0 [ 760.501127][T20265] alloc_slab_obj_exts+0x5a/0x160 [ 760.502731][T20265] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 760.504632][T20265] __kmalloc_cache_noprof+0x592/0x6c0 [ 760.506346][T20265] nf_tables_addchain.constprop.0+0x28e/0x1ca0 [ 760.508302][T20265] nf_tables_newchain+0x17c3/0x2d30 [ 760.509962][T20265] nfnetlink_rcv_batch+0x1410/0x2880 [ 760.511634][T20265] nfnetlink_rcv+0x3bd/0x440 [ 760.513145][T20265] netlink_unicast+0x585/0x850 [ 760.514684][T20265] netlink_sendmsg+0x8b0/0xda0 [ 760.516213][T20265] ____sys_sendmsg+0xa4d/0xbe0 [ 760.517749][T20265] page last free pid 5755 tgid 5755 stack trace: [ 760.519733][T20265] __free_frozen_pages+0x79f/0x1090 [ 760.521385][T20265] qlist_free_all+0x47/0xf0 [ 760.522835][T20265] kasan_quarantine_reduce+0x1a0/0x1f0 [ 760.524535][T20265] __kasan_kmalloc+0x8a/0xb0 [ 760.526025][T20265] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 760.528098][T20265] kmalloc_reserve+0xe8/0x350 [ 760.529592][T20265] __alloc_skb+0x185/0x710 [ 760.531032][T20265] mld_newpack.isra.0+0x18e/0xa20 [ 760.532650][T20265] add_grhead+0x299/0x340 [ 760.534039][T20265] add_grec+0x1389/0x1930 [ 760.535416][T20265] mld_ifc_work+0x3c5/0xc10 [ 760.536822][T20265] process_one_work+0xa23/0x1940 [ 760.538381][T20265] worker_thread+0x5ef/0xe50 [ 760.539865][T20265] kthread+0x370/0x450 [ 760.541193][T20265] ret_from_fork+0x72b/0xd50 [ 760.542675][T20265] ret_from_fork_asm+0x1a/0x30 [ 760.544230][T20265] [ 760.545002][T20265] Memory state around the buggy address: [ 760.546766][T20265] ffff88802ab9d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 760.549279][T20265] ffff88802ab9d880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 760.551806][T20265] >ffff88802ab9d900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.554324][T20265] ^ [ 760.556187][T20265] ffff88802ab9d980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 760.558728][T20265] ffff88802ab9da00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.561229][T20265] ================================================================== [ 760.564229][T20265] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 760.566536][T20265] CPU: 1 UID: 0 PID: 20265 Comm: syz.5.4124 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.569946][T20265] Tainted: [L]=SOFTLOCKUP [ 760.571318][T20265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.574508][T20265] Call Trace: [ 760.575591][T20265] [ 760.576548][T20265] dump_stack_lvl+0x100/0x190 [ 760.578065][T20265] vpanic+0x552/0x970 [ 760.579354][T20265] ? __pfx_vpanic+0x10/0x10 [ 760.580784][T20265] ? mark_held_locks+0x40/0x70 [ 760.582334][T20265] ? irqentry_exit+0x24d/0xa00 [ 760.583865][T20265] ? __release_resource+0x276/0x2c0 [ 760.585525][T20265] panic+0xd1/0xe0 [ 760.586738][T20265] ? __pfx_panic+0x10/0x10 [ 760.588177][T20265] check_panic_on_warn.cold+0x19/0x34 [ 760.589891][T20265] end_report.part.0+0x3a/0x90 [ 760.591422][T20265] kasan_report.cold+0xe/0x18 [ 760.592964][T20265] ? __release_resource+0x276/0x2c0 [ 760.594628][T20265] __release_resource+0x276/0x2c0 [ 760.596237][T20265] release_resource+0x26/0x40 [ 760.597752][T20265] pci_remove_bus_device+0x2d3/0x3b0 [ 760.599451][T20265] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 760.601504][T20265] remove_store+0x123/0x140 [ 760.602970][T20265] ? __pfx_remove_store+0x10/0x10 [ 760.604579][T20265] ? find_held_lock+0x2b/0x80 [ 760.606142][T20265] ? sysfs_file_kobj+0xe4/0x290 [ 760.607706][T20265] ? sysfs_file_kobj+0xe4/0x290 [ 760.609271][T20265] ? __pfx_remove_store+0x10/0x10 [ 760.610908][T20265] dev_attr_store+0x58/0x80 [ 760.612388][T20265] ? __pfx_dev_attr_store+0x10/0x10 [ 760.614062][T20265] sysfs_kf_write+0xf2/0x150 [ 760.615514][T20265] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.617138][T20265] ? __pfx_sysfs_kf_write+0x10/0x10 [ 760.618741][T20265] vfs_write+0x6ac/0x1050 [ 760.620086][T20265] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 760.621954][T20265] ? __pfx_vfs_write+0x10/0x10 [ 760.623478][T20265] ? find_held_lock+0x2b/0x80 [ 760.624987][T20265] ksys_write+0x12a/0x250 [ 760.626369][T20265] ? __pfx_ksys_write+0x10/0x10 [ 760.627923][T20265] __do_fast_syscall_32+0xe7/0x970 [ 760.629581][T20265] do_fast_syscall_32+0x32/0x70 [ 760.631155][T20265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.633154][T20265] RIP: 0023:0xf700efec [ 760.634471][T20265] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 760.640535][T20265] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 760.643160][T20265] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 760.645644][T20265] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.648126][T20265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.650630][T20265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 760.653149][T20265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.655655][T20265] [ 760.657421][T20265] Kernel Offset: disabled [ 760.658814][T20265] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:16:49 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff9670de98 RBX=0000000000000612 RCX=ffffffff966b5408 RDX=ffffffff966fe0b0 RSI=000000000000061c RDI=ffffffff97fa9198 RBP=0000000000000030 RSP=ffffc9000341f358 R8 =ffffffff966fe0e0 R9 =000000000000000b R10=ffffc9000341f4e8 R11=0000000000000000 R12=ffffffff81e4e660 R13=ffffc9000341f400 R14=ffffffff81e4f470 R15=ffffffff97fe3968 RIP=ffffffff81e4fe9a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000004cb80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc9000df7f530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6f71ec R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f3aa3000 CR3=000000007525c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000202 RBX=0000000000000008 RCX=ffffffff852669cc RDX=0000000000000008 RSI=0000000000000008 RDI=0000000000000001 RBP=ffffc9000411f2c8 RSP=ffffc9000411f068 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000000 R12=0000000000000008 R13=ffffc9000411f120 R14=ffff8880294c37f3 R15=00000000000002b5 RIP=ffffffff8209a6c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbdc3982300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055983fe6f000 CR3=000000004bf30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001027 0000001400000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0280020208000008 0006015ba60e0800 0280032c00000689 0000000d00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffdf0803a003 06080003980302b8 c40484000390031c 8080808404880003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8803028804000380 03028808000a0800 040800060274ac02 8808000208000408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060074ac0fffff ffff0202d0900800 010800060128e404 0800218002010800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06010181e2000800 2198030fffffffff 0221900300080021 88030b8002218003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 18b00300080018a8 0300100018980300 0800189003020800 1888030884c38ca2 ZMM25=72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 72fce9f572fce9f5 ZMM26=3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d 3d59cf2d3d59cf2d ZMM27=a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 a6aa8ab8a6aa8ab8 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 0b1a00000b1a0000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=0000000000000000 RCX=ffffc9002c3c2000 RDX=0000000000080000 RSI=ffffffff851a864d RDI=0000000000000000 RBP=ffffc9000598fb80 RSP=ffffc9000598f950 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffffc9000598fb80 R14=0000000000000008 R15=0000000000000001 RIP=ffffffff8209ae2a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004d6f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000