last executing test programs: 2m17.133363932s ago: executing program 3 (id=47): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m16.997171112s ago: executing program 3 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x10009, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x57, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x6, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x700, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x80, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x3, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0xf2ff0000, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x7, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x2, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x1, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x3, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x6, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x5, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x2, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 2m16.956941551s ago: executing program 3 (id=50): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000", @ANYRES32, @ANYRES32=0x0], 0x50) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c4, 0x138, 0x111, 0x4b4, 0x0, 0x700, 0x1fc, 0x278, 0x278, 0x1fc, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xffffffff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x884, 0x4d0, 0x685be9652d09d588}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x9, 0x8, 'snmp_trap\x00', {0xfffffffc}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x320) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x4c, 0x2, {{0x6, [0x1, 0x4, 0x10, 0xa, 0x2, 0x1, 0xb, 0x1, 0x3, 0x7, 0xd, 0x3, 0x4, 0x10, 0x3, 0x2], 0x1, [0x1, 0x6, 0x2, 0x5, 0x7, 0x6, 0x0, 0xe278, 0x3, 0x6, 0x4, 0x8, 0x3, 0x6, 0x7, 0x4800], [0x3, 0xa, 0x40, 0x0, 0x2, 0x9, 0x2, 0x2, 0x80, 0x6, 0x3, 0x7, 0x9, 0xf630, 0x6, 0x10]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$rfkill(r0, &(0x7f0000000340)={0x4, 0x1, 0x2, 0x1, 0x1}, 0x8) r5 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000a00)={0x6, 0x7, 0xf7, 0x8, 0x4, 0x5}) 2m16.785606043s ago: executing program 3 (id=51): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000140)={0x8, 0x9, {0xffffffffffffffff}, {}, 0x2, 0x9}) prlimit64(r2, 0xf, &(0x7f0000000300)={0x8}, &(0x7f0000000340)) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107844e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000007f000001000600000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000a00ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000080fcffffff400000002abd7000043500000200010020000000480003006465666c61746500"/222], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m15.670531549s ago: executing program 3 (id=54): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r2, 0xfffffffffffffffe, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)="76656e646f80e22a723a6d6f1bede58a8c72951a8d9997987210b3e164656c3a", 0x20) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000080)={0x0}) sched_setscheduler(r4, 0x5, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f00000001c0)={0xd, 0x4}) r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000000)) fcntl$setstatus(r8, 0x4, 0x40000) socket$inet(0x2, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x27, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9ff3, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r6}, 0x94) 2m15.374355615s ago: executing program 3 (id=57): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) timer_create(0x3, 0x0, &(0x7f0000002300)=0x0) timer_settime(r2, 0x1, &(0x7f0000002340)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000002400)=0x0) timer_settime(r3, 0x1, &(0x7f0000002440)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@mcast1, 0x40000019, r7}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100f688dfefcd04c62e6ce6cb9180fb6be8feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e000000053500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000"], 0x140}, 0x1, 0x0, 0x0, 0x1000000}, 0x844) socket$netlink(0x10, 0x3, 0x0) 2m0.203940204s ago: executing program 32 (id=57): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) timer_create(0x3, 0x0, &(0x7f0000002300)=0x0) timer_settime(r2, 0x1, &(0x7f0000002340)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000002400)=0x0) timer_settime(r3, 0x1, &(0x7f0000002440)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@mcast1, 0x40000019, r7}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100f688dfefcd04c62e6ce6cb9180fb6be8feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e000000053500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000"], 0x140}, 0x1, 0x0, 0x0, 0x1000000}, 0x844) socket$netlink(0x10, 0x3, 0x0) 1m57.533643102s ago: executing program 0 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1f477aaf) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0xb, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "d7294b1a0ab9ca6ed0"}, {0xffffffffffffffcf}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 1m57.34471915s ago: executing program 0 (id=144): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000080)={r0, 0x4, 0x1, 0x82}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x9) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 1m57.238291567s ago: executing program 0 (id=145): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x10000000000001) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x14) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x4001) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x80fffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="4544f0fffcffbf19ff60e7f85ad72ea55f892aa43756473d32564a2eb530c001"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f00000001c0)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xa, 0xd02c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x10, 0x8000007}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000300)={0x0, 0x61, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x200488d4}, 0x20040000) 1m55.695100555s ago: executing program 0 (id=153): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 1m54.572542843s ago: executing program 0 (id=161): syz_io_uring_setup(0x3490, &(0x7f0000000140)={0x0, 0xd90a, 0x80, 0x6, 0x167}, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100e8058fc89eb6bc436a", 0x10) (async, rerun: 64) r4 = accept4(r0, 0x0, 0x0, 0x80800) (rerun: 64) syz_open_dev$evdev(0x0, 0x3, 0x822b01) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x6}, 0xfe}, 0x18) (async) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x8040) (async, rerun: 64) mkdir(&(0x7f0000000080)='local_sys\x00', 0x1ff) (rerun: 64) mount(&(0x7f00000000c0)=@filename='dummy\x00', &(0x7f0000000100)='local_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='local_sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x0, 0x0) read(r6, &(0x7f0000000000), 0x100) r7 = openat(0xffffffffffffffff, &(0x7f00000003c0)='local_sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x2000, 0x33) read(r7, &(0x7f0000000100), 0x100) close_range(r5, r5, 0x0) (async) sendmmsg$inet6(r4, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d", 0x4}], 0x1}}], 0x1, 0x44051) (async) r8 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xa) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000000c0)='SEG6\x00', &(0x7f0000000100)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000000c0)='xcbc(aes)\x00', 0xa) 1m54.155135583s ago: executing program 0 (id=164): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x28, r6, 0x852dd6c070cd7e4d, 0x0, 0x4, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 1m39.113523874s ago: executing program 33 (id=164): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x28, r6, 0x852dd6c070cd7e4d, 0x0, 0x4, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 57.156788966s ago: executing program 2 (id=585): r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000004c0)=0x1, 0x4) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) openat(r0, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet6_int(r1, 0x29, 0xcf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x4008, 0xe, 0xd615, 0x7, 0x3, 0xfffffffb, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './bus\x00'}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) setrlimit(0x8, &(0x7f0000000480)={0x5, 0xa}) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 57.077015728s ago: executing program 2 (id=588): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0xa08410, 0x0) 56.90691402s ago: executing program 2 (id=591): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 56.816293973s ago: executing program 2 (id=592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x13f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 56.725386992s ago: executing program 2 (id=593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001700)={0x17, {"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", 0x1000}}, 0x1006) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x7fff}}}, 0x84) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) bind$unix(r5, 0x0, 0x0) unshare(0x6a040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)={'nat\x00', 0x84, "2a0700000000000a6004f73ee036342ab5419ac029641a40acb6c6acbef14fd0f06cdd57e7959e9afc6130e77b5460f6bc51a657d23cd36109aee7dbc58804286e90c60fe7ee43eaaaac9ed2eb4e24f9567370bcfa1d473720e0a4626e7cc098ef924b864a9211d11bc5739b10c52ae07e86f89f0099a6c129d21156d4ff6532ff594cee"}, &(0x7f0000000340)=0xa8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r2, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001") setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x27c, 0xf0, 0xc8, 0x8, 0x0, 0x5803, 0x1b4, 0x2e8, 0x2e8, 0x1b4, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xffffff00, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x2c}, {[0x4d4, 0x4d3], 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d8) 55.596523355s ago: executing program 2 (id=601): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 40.50220902s ago: executing program 34 (id=601): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 32.462731948s ago: executing program 4 (id=753): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000f700000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 32.404677499s ago: executing program 4 (id=754): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b634", 0x92) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7e51e156e63b8ec"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 32.006940344s ago: executing program 4 (id=755): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a000000030000000000000000000000000000010500000000000001000000000000000300000000020000000200000000200000006100302e616161610061"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x8000000}, 0x28) 32.006700459s ago: executing program 4 (id=756): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000100)='./bus\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004000)=""/4099, 0x1003) creat(&(0x7f0000000100)='./file0\x00', 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000000)={0x28b1, 0x2, 0x0, 0x1000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') gettid() 30.128256511s ago: executing program 4 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700000000c3ffffffffffffff0000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 29.416353999s ago: executing program 4 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa996c4c3a4a6f8474614faece5c7daaaaaa19aaaaaaaaaaaa88a8250081000800000c01000060000200007c379b1a50101fc6"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x0, &(0x7f0000000780)) dup3(r8, r6, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r10, 0xc76ed000) 29.214301369s ago: executing program 35 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa996c4c3a4a6f8474614faece5c7daaaaaa19aaaaaaaaaaaa88a8250081000800000c01000060000200007c379b1a50101fc6"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x0, &(0x7f0000000780)) dup3(r8, r6, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r10, 0xc76ed000) 17.19676484s ago: executing program 7 (id=846): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b634", 0x92) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7e51e156e63b8ec"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 16.67940955s ago: executing program 7 (id=853): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0xc2) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x4003, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0xfffffffc, 0x200a00) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000300)={{0x9, 0x5, 0x1, 0xc, '\x00', 0x7}, 0x0, [0x400, 0x6, 0x9, 0x0, 0x8, 0x6, 0x3, 0x81, 0x80000001, 0xfff, 0x87, 0x4e6e, 0x9d22, 0x1ff, 0x8001, 0xa7, 0x1e3, 0xf, 0x8, 0x4, 0x7, 0x18000, 0x1b, 0x81, 0x4, 0x1, 0x6, 0x1, 0x12bf, 0xab8, 0x5, 0x7, 0x2, 0x7, 0x40b6, 0x9e, 0x1, 0x7, 0x2, 0x2, 0x273f, 0x8, 0x6, 0x5, 0x4, 0xc4, 0xf, 0x49, 0xfffffffc, 0x0, 0xd7, 0x20008001, 0xb93, 0xf, 0x4, 0x3ff, 0x1a40, 0x3fc, 0x8, 0x4, 0x0, 0xcaa, 0x7fff, 0xb, 0xffff, 0x6, 0x4, 0x829, 0xffffff7c, 0x401, 0x1, 0x12, 0x1, 0x6, 0x8f3, 0x8, 0x7ffc, 0x96ff, 0x1, 0xffffffff, 0x3, 0x8, 0x0, 0x7fffffff, 0x80000003, 0x1000, 0x7, 0x2, 0xf8fc, 0xffffffff, 0x40404, 0x4, 0x3ff, 0x8000, 0xfffffe02, 0x1, 0x180000, 0x8b99, 0xf, 0x28, 0x8, 0x4, 0x2, 0x4, 0xa, 0x8, 0x4, 0xad, 0x9, 0xfffffff9, 0xc50, 0x5, 0x5, 0xd, 0x7, 0x6, 0x8, 0x7f, 0x8, 0x0, 0x4, 0x80000000, 0x476, 0x80, 0x4, 0x4, 0xc, 0x2]}) ioperm(0x4, 0x2, 0x7ff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4004080) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x5}}]}}]}, 0x3c}}, 0x0) close(0x3) sendmmsg$alg(r4, 0x0, 0x0, 0x8c095) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)}, 0x1}], 0x1, 0x2021, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r8]}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r8], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r9, 0x0, 0x0}, 0x10) close(r4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9}) 16.424145706s ago: executing program 7 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 16.075015009s ago: executing program 7 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x4, 0xfffffffd, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 15.78669649s ago: executing program 7 (id=867): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 14.852770012s ago: executing program 7 (id=877): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2", 0x68) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5}) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 14.648104095s ago: executing program 36 (id=877): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2", 0x68) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5}) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 6.175718232s ago: executing program 1 (id=925): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e0c0)="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", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x9, 0xfffffffc}]}) syz_usb_disconnect(r2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x80) renameat2(r9, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7) close_range(r1, 0xffffffffffffffff, 0x0) 3.575816324s ago: executing program 5 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d000000000000300012800800010068737200240002800800020f", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.476584546s ago: executing program 5 (id=943): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1d543, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4f}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xff, 0x0, 0x9, 0x80000000, 0x7041, 0xff}]}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x4}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x200000, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x20800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x9, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x2, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0x4, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x4, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0x3, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000, 0x0, 0x81}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x2}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/exports\x00', 0x1, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x300000c, 0x1013, r10, 0x4456f000) r11 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x3, 0x5, 0xfffffffe, 0xffffffff, 0x5, 0xfffffffe, 0x20000004, 0x1, 0xffe, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x6, 0x830, 0x8, 0x10000, 0x6, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x9, 0x4, 0x5, 0x7fff, 0x1d7]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.173163956s ago: executing program 1 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000005800000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 3.125550743s ago: executing program 1 (id=946): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2", 0x68) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5}) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 2.810436655s ago: executing program 6 (id=947): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.514812239s ago: executing program 6 (id=949): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a000000030000000000000000000000000000010500000000000001000000000000000300000000020000000200000000200000006100302e616161610061"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000}, 0x28) 2.514191789s ago: executing program 6 (id=950): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00200018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2.3867562s ago: executing program 5 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0xfff0}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) 1.925741719s ago: executing program 1 (id=952): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_emit_ethernet(0xfeb8, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) openat$btrfs_control(0xffffff9c, &(0x7f00000010c0), 0x108400, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) (async) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x4a, 0x0, &(0x7f0000000280)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{r10, r11+60000000}}, &(0x7f00000003c0)) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 1.668826767s ago: executing program 8 (id=953): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a26000000000a01040000000000000000050000000900010073797a3000000000080002400000000254000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000280004800800024000000012080001400000000014000300776c616e3000000000000000000000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1.668496522s ago: executing program 1 (id=954): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 1.523815451s ago: executing program 6 (id=955): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x232) 1.523599144s ago: executing program 8 (id=956): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x42}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 1.355497353s ago: executing program 1 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x1, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0x429) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0xffff1000, 0x1, 0x1a18, 0x0, 0x0, [{0x8, 0x2, 0x4, '\x00', 0x3}, {0x1, 0x2, 0xff, '\x00', 0x9}, {0x40, 0x7, 0x10, '\x00', 0xc}, {0x3, 0xb, 0x2, '\x00', 0x8}, {0x7f, 0x0, 0x4, '\x00', 0xb6}, {0x0, 0x1a, 0x2, '\x00', 0x9}, {0x10, 0x0, 0x0, '\x00', 0x3}, {0x4, 0x4, 0xff, '\x00', 0x80}, {0x6, 0x9, 0x30, '\x00', 0xf}, {0x4, 0x9, 0x4, '\x00', 0xc4}, {0xff, 0x2, 0x4c, '\x00', 0x9}, {0xc3, 0x6, 0xd0, '\x00', 0xf2}, {0xc, 0xc, 0x0, '\x00', 0x4}, {0x0, 0x81, 0x7, '\x00', 0x7}, {0x8, 0x8, 0x8, '\x00', 0x62}, {0x1, 0x5, 0xf3, '\x00', 0x4f}, {0x8, 0x4, 0x5, '\x00', 0x81}, {0x40, 0xaa, 0xec, '\x00', 0xca}, {0x6, 0x1, 0xf0, '\x00', 0x6}, {0xb9, 0xd6, 0x5, '\x00', 0x1}, {0x6, 0x3, 0x2, '\x00', 0x4}, {0x1, 0xfa, 0x3, '\x00', 0x7}, {0xd5, 0x0, 0x97, '\x00', 0x23}, {0x0, 0x7f, 0x8, '\x00', 0x4}]}}) 1.355199336s ago: executing program 6 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x13f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.354894555s ago: executing program 8 (id=959): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.306293735s ago: executing program 6 (id=960): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES16], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) msgget$private(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x50000000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000580)={r10, 0xe6}, &(0x7f00000005c0)=0x8) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff) openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r12, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 1.297910518s ago: executing program 8 (id=961): memfd_create(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)="6f66660a000329", 0x7) write(r2, &(0x7f0000000180)='on\n\x00', 0x3) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000800)=[{r3, 0x2053}], 0x1, 0x0, 0x0, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r5, 0x80000000, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @broadcast}, {0x306}, 0x44, {0x2, 0x4e23, @broadcast}, 'bond_slave_1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001240)={0x0, 0x8, 0x1000, "caf8d7bafc50958b0e78c7c363446955d54a85877427f04d71a7e7f977f0388906aa88e5d5a8d7261e431279a50dc05bc5e703aa849fbd9300c9cf8056342d7b7c18ea6f84120512210d1b1a5ce51456b240fc47e583800c1cf4b90a713ab377bf1d05d58e13aab1f65cbace7951f75aaca0ba315d16a5bb606cdf58fd28f2a7994f127c952970ef5fa14ce6ba9e98016ead61b8cb5558dae24861c9a644a44006556eee472f6f1968ee01f86baebe7efcf7026d1b621b6e36b42acfcece4366724e7373f4654c683df6b7d2f4e4f7468a76c60735e4de7f1a7107742b7498fb9d6596cecb7a916f6355b64452bb19f604ce4a50d1ee16e68e59173e0b685183ca0f8971ee33111219ec498e9e986c1093526278f95e35903a3415d57a46e309ee67e8d54249f7db2c3bee37a34f013e40ddf4ff417f02e85896520a14203db70d09371a6152ec31861fe18052b7add925973d159303afa1ceaf081677b2c79b2f5fff4c94373f087bc7ed2c9f4f57d9d958d83d49c139df17670ae227a07c2d61af56783dcb5b9e87af487ba4840a6d2592b7532a05624d5334a60655bfd340eff385729ed6a23fa4eb9907ddd7099ce0459ebd71b33293e528e15942f679cf5a013d4a9da800e33741d1da616a3066840323d5c45aea4b3a19e8988abbdfea8f231205b6c118925dc3a7ee35098b8785b4f8766b414d3a6159c5132d81274ceccc3354bc9d1f56c7926b40eb6220a0346055dd0541ffa51250ba4226c67c7558ff44531e6a7669ca44cfb6c469152400b1fd8ad4482f5cbaec7b5a5fbbf50b080678ccfe9fdd74452fb10e82ecd33008e38d61c67d5b57e2d623d5389d7778d1fd513a66288ebe1a95726b5ae1089de5b5e673738584b1b062c1651cd8d95d84623dade620e8582229e0aff0e7fb42146459db17fa5f5c67572f9eb0d2ff86860f013c662f18845b6f4e02eb69158681eb3b6af51fe2be345df60a42914fc8bae51a2dd01c6429ef9ff65baa3951257015339a61426460501699ce025412cab6977fb8ff344949ed8600a23622bc4e97f0dbdd5b0e9cfadabf8d4e33d94991dcf3a240a5da5bb629625230c1ecff2343ef3a4eb6d80b560af261390f2fc892eea8d3494352aa3c9cc922ae261d0d07ec1e067a37fde991dbd1b8fb2b5d64b28a977fc90566b892b17031ce1579b2fad953564abb14866cce5c6dbd76d36f9d4092547b95d79075442c65c16da5ae0bcb34754b999cb9c8f22f6bedb13deaf704ce8b29bd6b60b1ec9e9a64b41d16193b78627e2de80941ee7434f5d02d9f094b4b7fbb2d042ce57c48d782565dab251ec425953f16d1e6346385c5b5b30545e58038d0a134275d862189955a996a2821922363ee0afb7c90fa821dfb2767b2d5c68e7066bde1eb1098923e530cc2375d6deaaabe62829d7e938d55610a63ab411c627ab4fd4e40e673c76b253c7629d67bb014f4d86d40de0bbb95273abb5a24813ad8f7b6bc4397dcccc3a440964d96127d97a42d9de5558462ad6a06089c2bfe24bd3b4f8f475582c0ee04b6e5e966830deb0a52a019ec76835e4f3cc59ec70ca713e7da6b4efe399d591f9774a4fe956f5abc947da3c5fe6e8b88ea1b060b0f8794b51006840cc1e53056c662eba802595f72ecc71b9e68f9fa1faa281e1fb444601e0b5d4e70a083b6e1a45ea7ecd8ad4538895c0fbb9f1d1020ced57d226ffe8cbdcdd4eb7ca7cee0a6bd51ebfaccf4ac5526e6d7c04787a66d33f7ee8b5f400984d6631ea571aa7205f7697c172ea1a66bc51a484340374210539348475eaa51d9d7e6dd0ccc9679bf7690e5977d87589997bc829ddc7e09fc7405300ff1a8813058025ddfd56766cf78602c70571c9b1a5b170d5931abce17b60a4de416cb7dcbed778a6c552698cf2654a08d07db7fcbd7496a07e2d1f4c84e48c1dd09c3b3c66508ca7b3fa7454b4f60098e025b5eebf33176405f73ac89e82a624cd1deb2ad67d1196de8ad95a995f107251289be929fa2e155c5bd108dbb79ec8228cb5ec52a7f798ccf360f73d1a5027275fe0075a5772babde5efa8a51429e3a4154421dc9fea03c20608bb6cedaa0b198ba98297796c61ae794801d91b556ba86f5b118b6d7d2765bac3cc4844d3267edde6df28e175293da677aa0a400b5c896e9cfaa97ab96911bc28ea0bc78b10c6df4e967abbe1b4092924c2dc5bb7665cf4d288dc1f543a42672d9a3679d27c33254978c2cd4935861f3638d362b35f2fec88259fc4727a5ec6ffedbd9ee68bbcfc08adf4e8bf51efaab88a233d295bdf081907d1a1730dece4ef7313f771e3d8d1eb78c34a6e7d636d4cf8006a9858ac8da5314a836c8520c2217ec2035c175ca6983e04a4d269ecf95189bb1321d0649cfc50d22e6f76416b4c1c673a5e0709013d6b066436bef0f2e854c38706c0e1988e5dbe0f3756548377d91fef54033aa9c11d79b6cc39fabace875d2d5e5b0392c70a92ffba2880017eb47807d5d5813e5689ee0d1763b6f55cbe6eda36de6ac4efc794fdd88f31691481efe4ced8e75dc225806a76635af2ce25d76399b210bfab1b73b963bc20f7239097eb0b6425a7ca24f7398b58b2bcde00d9a562986043cd96ef04a7a0402d4f85af7b2426493a4344873448a67dd2f80516f2235c765209a61c52b98c2b5736bfe33186a1244481b273a9cb50c5cd84a6b37708710e60f4e108e9185bc3e9da348e1321adda664f5ae2cb58ffafddb3acef76d1ad74047357057d5b97cc468653fef51bf24e2c89a9c578cedda350b7c0f0e3582e93443d93cb931bfab975579d5ac42ff6e6a7774d80c5634d5d8f5c166bc614211125c4978a8b4d9ac4d40557d67dafaf73af7bf0f4b1151684511a5a6c06dff862471ab921d595d45727fc89d8cef15e3e4acc3a2f07b886651101b9a609d862fe2b8faec57a6e387953be2b03717eb33dca423294e01b122578f90cbbfd46a3c380c945827460f10376791645accbd1764722f678543dd556c7d749d5bad7ad84e634fcbf309d6a52a6cd03cca202ea3bb4f874520e16c2a5501a030baa97e3a606dd6dc1c7d41dc7e367bb1095e33ba647d9c7ae521eae7b0a12bda73162518a628bef1f5535b7c6afbb714bd5f28e998cb2683fc4df3b3284c0b9811850eafa67246b5b4876abc282d3cbb872d721007ebcf0de2a007f67f67d5807e32ccc749bd8c1c0ed5a941f8f0e1e29c7dd60d7a963d94c6cf52a94165dc06b084e043c6ff05e1f54375681c06d8194ba0dd8f99fb2211d689496d74f8cb010ef8fe2f6cca87a49566e1d19ecfa2198fa1d130cbf48f95591a468e347db0b5861dc824604c4d5224f089b13a42d610481c2d7d22a0aa742a9d827f66034e7e07c7b3696561eb7e440e36f4e6b59c72e9483bf0b570bb55725a3f85d10cc946766542399d6d07c2db5ba37c9c8f0a1fe071ebd8b602bc4975d1096ca95f43160732e438f63deb8cc46026ecbba8fc228cb57bb9bdda71313680bb39abea4d2636f2268d09322decaf940fa827934b3eb17c9852f8c19980516994c6947398732b0e3e581f56fc5e9f685d469323afb7b3980f732c3e6cb8d29ecfa61c32bfd84fb6541755af0695697f4b1711a7a4cc586fa9c20c619b5d6de31eab739816e64ecd8a11d37337db439534e0c3edcd78430d6768a7e0a294fbca3bbac65f365e7ad2b2e48d156c384a32c793ce89fb188f8015021c1f5b98637559cec2e0e9977d48a252efcd32c7cd88e2f4fe2ea1db6d1caa98162903dbfacc748805014ffd1070771ea9b05d12fc56e1d4c0b4bd015e61981eddc09655c48c7efb0c2d5acaf34bae23e54a5be39084e241d43ac39de3c44949aa25a471cfa2b5926a304558d0078ec91c0ca6643b0c25e5a57b2717476496e1dd91784dcd1cbe65aac7c406e82fb6f8bfce9eb5fe924513fd1024a2d15fc9a3d6bcd0e27f894f0de8befd22cdd8b1b59cea2f610c2d1a39a2d3467c38789fece27c3303e25d3374641c3fb551661f4f34521650e5d79f47d8af549d14c0de91fda3811a7c4b8bb348996d4caa10d5b02633fdb169a40b34aaa841d2dc51e02d7acaa932079ddc08f8ab90ac9d6fc4dc01220051dbd9dd75d59af934375ad83c4d11df085016f656ecc92fb0d36b4c16629ece9942db9e1258a71bdf9ee1a043123945b62d43e416527169431f2686f96b2b13ba464d3eb83de33da3e621c9d0c490bf86801203484423b8ca65962eafaa96a4e97f06969c4706a32fa10bf8443ad86219be7b92f7f16ec29d7d899e334ee45453a871985bf4b4e6a577d4086dfb7c18148708ffee7240262bd5b697c0e0c1489543a5760bb6e4e18ad849926f8f0d1b66e1c766c624f0fa7d6f5e06a91f0f69e297f2065a08b05bf032eab81711cdd368b9799e34ba71227fac5219fde7fa012082d9911ed6f75021e5ba8301ef93ecd04f384b27676a819188316835dc815f13b253b5edaf9c77e81b4632d03e9d7f6d35fa85500eec814802c16cabaf85ec229e85f7b944ba4173bd3bd4f3f70532c9637d9565728e0695b250c52e587f7190e9f4d6b39f4e8af8c43428a318c7c377309f1c0199267abaeb8973b89ef6588c0e63070277e5fe25e7102e45d9ae729fb6f48e9b9d9704b39f192aa1f497ea5f6fa04f53abaf7020ff16a87cf4e43918e0266ca5884f7edaf026f7edb8565fa9996a49d42935dd09f01fff42e585331838f937e13bfb3db1916612ae7b3671577207ac0c414b0741e1053fe33b975d36fe5657b021ccb64320e8e278e5b083d2fbff8d9b44de14f4df75f5efb9b8dc80aad2e679ddd41a1efa96701feb1ff4f9fd6a72eefbaee6b909281e4bb20f844271e5c7190aef52c84e3b95662354ed6445d5415d00628a9609e053694f319f696d29383f52b206ec8393ecfb27f5b69b6e6eb1400eb460e2e6927e3ff902b2782dc5fdce5e30fa276888102ac518189f510d14f29c935bb115c4c6c0ca7dffa9a304baf4cba795d291332791e3a748b47a5407e643b876a294405c3dda3a4d18a253b6a2c515f28f46850f13a7089f7f661edfaa88c5f265fcb9f6bc7d77dce0bb9db38df8e10043a01fceaad98a6fb21ece957fe7de2bdebd89ab4c86de4f30d205fe9e7a04e884cb80398ec78feb06a897b14c6508712e172856ddf4fec40adafbeeffdb6b0ae9aa7735d6b1024d1f2521de9c5ebf5ef3678c06002c0785d6c0643197def62b56170fd23d5b1bf21b347840d0ca65e084b20752a734f7bda7dee409fbcf22e236e922de3b6350512242ff480f37a2d3eba60695db8e14c506d4ba9618aa8f46e9144fc85bc0581665cce2b3ad6bd518166e9a584ec745864e99d65e22de1ddb5e7281707646b7a09d2e9abdfeae0d1a530e65271f961571ab3210ba7a754a4e28f3596eb5bd4bca360d780656f14f0db6c46f2927da6b7fcf1e822079d10280deef6f7295b2d604eb43c39f2a73f607e854cf64a7594b2a25a6ad6a3316eb92caf8e82b9fe4713dbed12258aa4deb24e79b73fc2d7301a7cb2d153c3a9be4e361540f160e3454a75e7524d01735b974fa08aaba1b5ce41b85185d021a989b71ef5a793a82369e5ff8de6d7072e2e5380c5b57f20dd4b852f0718c28619c81a9006d95803857b8c9b9a66b804edae316c1acdf1298f340d0fcf4287826e351c0cd82172581fb830dc37146a892c691494f11329a7a6b449a874a94fcbd9dbd9d675104017ba3b5aacc23db335e8469b4e43fc6ebbfa7e5200dc766da10b0b5fa9ee7fa60"}, 0x1008) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4020010, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_ACCEPT(r9, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0xfffffff4, 0x3, "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", 0x2, 0x10, 0x42, 0x0, 0x0, 0x4, 0x88}}}, 0x128) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x4) 1.186415032s ago: executing program 5 (id=962): r0 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x20, 0xa0, 0x3c0, 0x2000, 0x57463b3d, 0x9, 0x2, 0x2, {0x3, 0x8, 0xb8ac}, {0x3, 0x6, 0xfffffffd}, {0xffff, 0x6, 0x1}, {0xffffff80, 0x0, 0x1}, 0x1, 0x1, 0x8, 0x5, 0x1, 0x3, 0x7, 0x6, 0x8, 0x4, 0x5, 0x5, 0x8, 0x0, 0x2, 0x5}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000001c0)="e7823239b6f7a6c2dd6669094d08b169c0954c3b8282ae7bfb30fcf35f3d07c2c25a6248b11faf234ac8164d3378573b178fe09a1d", 0x35, 0x820, &(0x7f0000000340)={0x2, 0x4e22, @private=0xa010100}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x2036b, 0xd, 0x517, 0x1, 0x7fc}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0x9}, {0x401, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x8, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x203, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0xdffffffd}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x1, 0x804, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x6, 0x2, 0x37, 0x8, 0x3313, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x3, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0x8, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0x80, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x108, 0x3, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x2, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x400002}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x4, 0x8005a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x7, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x8, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x4, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x0, 0x3, 0x8000, 0x3ff}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x9, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0x5}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0x5489}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d4, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x3, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0xebbc}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x9, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff6}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x4, 0x4, 0x10, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x3, 0x1}, {0x4, 0x2}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16], 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES8=r7, @ANYRES16=r4, @ANYRESHEX], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) 354.149261ms ago: executing program 5 (id=963): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 289.968828ms ago: executing program 8 (id=964): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a000000030000000000000000000000000000010500000000000001000000000000000300000000020000000200000000200000006100302e616161610061"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value=0x4000}, 0x28) 274.183815ms ago: executing program 5 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x70, 0x16, 0x20, 0x70bd2d, 0x25dfdbfd, {0x5}, [@generic="017e78cfe8f2571d8135df66699509337f6faa64ce58a31fe9ad908288ba46e858afa1da6e5e8b6dcb0b5562ceda40888177594ae4f7e98f864492011b3d613c1a52b969b2f41be7be5706225cd6385729c673b122cecbc1f871"]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000020000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r5, 0x2e, 0x0, r5, @void, @value=r4}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x5b49e932, @remote, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x4b, 0x8, 0x7, 0xf, 0x2000001, 0xfffffffd], 0x1, 0x0, 0x0, [{}]}, 0x60) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r7, 0x0, 0x86) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, &(0x7f0000000140)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 0s ago: executing program 8 (id=966): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() r7 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r6}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 50969][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.853984][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.856876][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 91.066892][ T6673] x_tables: duplicate underflow at hook 1 [ 91.075582][ T6673] hub 8-0:1.0: USB hub found [ 91.086713][ T6673] hub 8-0:1.0: 1 port detected [ 91.587742][ T6681] team0: Cannot enslave team device to itself [ 91.969836][ T6695] tmpfs: Unknown parameter 'nr_inod' [ 91.975101][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 92.131827][ T6699] binder: 6698:6699 ioctl c008aeb0 80002180 returned -22 [ 92.138425][ T5101] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/1 [ 92.142369][ T5101] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 92.148728][ T6706] netlink: 6 bytes leftover after parsing attributes in process `syz.1.193'. [ 92.406480][ T6716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.195'. [ 92.410905][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 92.648963][ T6725] openvswitch: netlink: Missing key (keys=40, expected=80) [ 92.700624][ T42] audit: type=1804 audit(1785695939.640:13273): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.200" name="/newroot/66/file0" dev="tmpfs" ino=369 res=1 errno=0 [ 92.725821][ T6726] x_tables: duplicate underflow at hook 1 [ 92.732479][ T6726] hub 8-0:1.0: USB hub found [ 92.736812][ T6726] hub 8-0:1.0: 1 port detected [ 93.701695][ T6746] bond0: entered promiscuous mode [ 93.703316][ T6746] bond_slave_0: entered promiscuous mode [ 93.705692][ T6746] bond_slave_1: entered promiscuous mode [ 93.710384][ T6746] gretap0: entered promiscuous mode [ 93.712761][ T6746] debugfs: 'hsr1' already exists in 'hsr' [ 93.714580][ T6746] Cannot create hsr debugfs directory [ 93.716375][ T6746] hsr1: entered promiscuous mode [ 94.003090][ T6757] Invalid ELF header magic: != ELF [ 94.053774][ T6761] x_tables: duplicate underflow at hook 1 [ 94.067426][ T6761] hub 8-0:1.0: USB hub found [ 94.074702][ T6761] hub 8-0:1.0: 1 port detected [ 94.681614][ T6778] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 94.684362][ T6778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.698471][ T6778] vhci_hcd vhci_hcd.0: Device attached [ 94.709554][ T6779] vhci_hcd: connection closed [ 94.710487][ T12] vhci_hcd vhci_hcd.1: stop threads [ 94.722359][ T12] vhci_hcd vhci_hcd.1: release socket [ 94.724086][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 94.879066][ T6793] __nla_validate_parse: 5 callbacks suppressed [ 94.879079][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 94.886020][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 95.618128][ T6818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.627679][ T6818] bond1: (slave team0): Releasing backup interface [ 95.632217][ T6818] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.635269][ T6818] bond2: (slave team0): Enslaving as an active interface with an up link [ 95.905314][ T6833] netlink: 6 bytes leftover after parsing attributes in process `syz.2.233'. [ 96.156978][ T42] audit: type=1804 audit(1785695943.090:13274): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.237" name="/newroot/86/file0" dev="tmpfs" ino=473 res=1 errno=0 [ 96.159667][ T6844] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: 1 [ 96.171396][ T6844] ref_ctr increment failed for inode: 0x1d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021848000 [ 96.188568][ T6844] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: -1 [ 96.193289][ T6844] ref_ctr decrement failed for inode: 0x1d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021848000 [ 96.198921][ T6844] uprobe: syz.2.237:6844 failed to unregister, leaking uprobe [ 96.576804][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 97.549304][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.587520][ T6897] ip6gre1: entered allmulticast mode [ 97.597510][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.626261][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.652992][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.693587][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.754129][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 98.287518][ T5101] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.461142][ T5101] usb 9-1: Using ep0 maxpacket: 32 [ 98.470982][ T5101] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.479806][ T5101] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 98.490943][ T5101] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.501791][ T5101] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.523751][ T5101] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 98.549692][ T5101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.557652][ T5101] usb 9-1: Product: syz [ 98.559512][ T5101] usb 9-1: Manufacturer: syz [ 98.570110][ T5101] usb 9-1: SerialNumber: syz [ 98.620172][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 98.633124][ T5101] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input5 [ 98.839284][ T5101] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 98.842839][ T5101] (id 0x00) [ 98.907208][ T5101] rc_core: IR keymap rc-imon-pad not found [ 98.909114][ T5101] Registered IR keymap rc-empty [ 98.910882][ T5101] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 98.915015][ T5101] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 98.942232][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.955398][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.965374][ T6946] bond1: (slave team0): Enslaving as an active interface with an up link [ 99.042361][ T5101] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 99.051047][ T5101] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input6 [ 99.059753][ T5101] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:3> initialized [ 99.943257][ T42] audit: type=1326 audit(1785695946.880:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 99.954781][ T42] audit: type=1326 audit(1785695946.880:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 99.964538][ T42] audit: type=1326 audit(1785695946.880:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 99.984741][ T42] audit: type=1326 audit(1785695946.880:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.000422][ T42] audit: type=1326 audit(1785695946.880:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.029397][ T42] audit: type=1326 audit(1785695946.880:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.070302][ T42] audit: type=1326 audit(1785695946.880:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.079393][ T42] audit: type=1326 audit(1785695946.880:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.088262][ T42] audit: type=1326 audit(1785695946.880:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.097450][ T42] audit: type=1326 audit(1785695946.890:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 100.386793][ T6975] x_tables: duplicate underflow at hook 1 [ 100.396673][ T6975] hub 8-0:1.0: USB hub found [ 100.403739][ T6975] hub 8-0:1.0: 1 port detected [ 100.443186][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.259'. [ 100.664889][ T6990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.670397][ T6995] imon:vfd_write: invalid payload size [ 100.673875][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 101.687362][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.712467][ T5897] usb 9-1: USB disconnect, device number 3 [ 101.781271][ T7008] syz.4.267 uses obsolete (PF_INET,SOCK_PACKET) [ 102.164709][ T7017] tmpfs: Unknown parameter 'nr_inod' [ 102.186984][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 102.629880][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.638636][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.644997][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.650582][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.654366][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.734900][ T7025] x_tables: duplicate underflow at hook 1 [ 102.771811][ T7025] hub 8-0:1.0: USB hub found [ 102.792559][ T7025] hub 8-0:1.0: 1 port detected [ 103.580486][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.848211][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.998120][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.102854][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.138393][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.141493][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.144640][ T7024] bridge_slave_0: entered allmulticast mode [ 104.149099][ T7024] bridge_slave_0: entered promiscuous mode [ 104.152625][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.154916][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.158533][ T7024] bridge_slave_1: entered allmulticast mode [ 104.162197][ T7024] bridge_slave_1: entered promiscuous mode [ 104.177855][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.182342][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.213787][ T7024] team0: Port device team_slave_0 added [ 104.233413][ T7024] team0: Port device team_slave_1 added [ 104.240863][ T7055] netlink: 6 bytes leftover after parsing attributes in process `syz.1.277'. [ 104.288297][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.299566][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.310266][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.335370][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.339550][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.347792][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.422038][ T7024] hsr_slave_0: entered promiscuous mode [ 104.431796][ T7024] hsr_slave_1: entered promiscuous mode [ 104.441385][ T13] bridge_slave_1: left allmulticast mode [ 104.446650][ T13] bridge_slave_1: left promiscuous mode [ 104.451055][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.457460][ T13] bridge_slave_0: left allmulticast mode [ 104.459456][ T13] bridge_slave_0: left promiscuous mode [ 104.463083][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.632915][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.641750][ T13] bond0 (unregistering): Released all slaves [ 104.654316][ T13] bond1 (unregistering): Released all slaves [ 104.717296][ T65] Bluetooth: hci0: command tx timeout [ 104.837142][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.990844][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 104.995445][ T24] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 105.000231][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.000248][ T13] hsr_slave_0: left promiscuous mode [ 105.003175][ T24] usb 6-1: Product: syz [ 105.006431][ T24] usb 6-1: Manufacturer: syz [ 105.008812][ T24] usb 6-1: SerialNumber: syz [ 105.013276][ T13] hsr_slave_1: left promiscuous mode [ 105.016775][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.021819][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.026816][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.029522][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.040173][ T13] veth1_macvtap: left promiscuous mode [ 105.042409][ T13] veth0_macvtap: left promiscuous mode [ 105.044321][ T13] veth1_vlan: left promiscuous mode [ 105.047431][ T13] veth0_vlan: left promiscuous mode [ 105.241817][ T24] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 105.250294][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.254283][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 105.257699][ T24] usb 6-1: media controller created [ 105.270864][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.353272][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.365462][ T13] team0 (unregistering): Port device team_slave_0 removed [ 105.440531][ T7064] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 105.499293][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 105.505927][ T5460] 8021q: adding VLAN 0 to HW filter on device eth6 [ 105.512981][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.282'. [ 105.568854][ T7064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.583930][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 105.606964][ T7084] bond2: (slave batadv2): making interface the new active one [ 105.623029][ T7084] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 105.705472][ T7086] bond2 (unregistering): (slave batadv2): Releasing active interface [ 105.722000][ T7086] bond2 (unregistering): Released all slaves [ 105.870564][ T7024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.883491][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.891394][ T7024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.984115][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.997678][ T7024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.030699][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.041281][ T7024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.057513][ T24] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 106.063941][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.069829][ T24] usb 6-1: USB disconnect, device number 4 [ 106.188398][ T5460] 8021q: adding VLAN 0 to HW filter on device eth7 [ 106.256653][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.285655][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.296658][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.298971][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.314122][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.316541][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.475768][ T5460] 8021q: adding VLAN 0 to HW filter on device eth8 [ 106.559535][ T7117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 106.801826][ T65] Bluetooth: hci0: command tx timeout [ 106.885372][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.996172][ T5460] 8021q: adding VLAN 0 to HW filter on device eth9 [ 107.187484][ T7024] veth0_vlan: entered promiscuous mode [ 107.209585][ T7024] veth1_vlan: entered promiscuous mode [ 107.285042][ T7024] veth0_macvtap: entered promiscuous mode [ 107.294160][ T7024] veth1_macvtap: entered promiscuous mode [ 107.322695][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.333620][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.368871][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.417380][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.429164][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.479415][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.484139][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.485065][ T7158] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.497466][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.521369][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.524556][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.658515][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.272'. [ 108.051935][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 108.074189][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 108.078749][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 108.085617][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 108.109731][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 108.112437][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 108.118277][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 108.121481][ T7179] ceph: No mds server is up or the cluster is laggy [ 108.125211][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 108.150667][ T7185] netlink: 188 bytes leftover after parsing attributes in process `syz.2.293'. [ 108.772695][ T7195] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 108.774846][ T7195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.795083][ T7195] vhci_hcd vhci_hcd.0: Device attached [ 108.887820][ T65] Bluetooth: hci0: command tx timeout [ 108.964764][ T7202] 9pnet_virtio: no channels available for device syz [ 108.976003][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 108.985491][ T7202] tipc: Enabling of bearer rejected, failed to enable media [ 109.077387][ T10] usb 40-1: SetAddress Request (10) to port 0 [ 109.081329][ T10] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 109.133584][ T7208] tmpfs: Unknown parameter 'nr_inod' [ 109.147616][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 110.221530][ C2] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 110.224812][ C2] sr 2:0:0:0: [sr0] tag#16 CDB: Test Unit Ready [ 110.269273][ T7224] binder: 7222:7224 ioctl c00c6211 0 returned -14 [ 110.401110][ T7196] vhci_hcd: connection reset by peer [ 110.403347][ T5834] vhci_hcd vhci_hcd.1: stop threads [ 110.405080][ T5834] vhci_hcd vhci_hcd.1: release socket [ 110.413253][ T5834] vhci_hcd vhci_hcd.1: disconnect device [ 110.567164][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.957167][ T65] Bluetooth: hci0: command tx timeout [ 111.089493][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.310'. [ 111.165545][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.310'. [ 111.400657][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.310'. [ 111.409463][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.310'. [ 111.551179][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 111.554344][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 111.600889][ T7252] loop5: detected capacity change from 0 to 7 [ 111.605255][ T7252] Dev loop5: unable to read RDB block 7 [ 111.607302][ T7252] loop5: AHDI p1 [ 111.608866][ T7252] loop5: partition table partially beyond EOD, truncated [ 111.797096][ T5849] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.829360][ T7261] CIFS: VFS: UNC: missing share name [ 111.832897][ T7261] CIFS: VFS: Malformed UNC in devname [ 111.957093][ T5849] usb 9-1: Using ep0 maxpacket: 32 [ 111.961951][ T5849] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 111.969814][ T5849] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 111.979577][ T5849] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.987147][ T5897] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.989441][ T5849] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 111.998921][ T5849] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 112.008474][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.015580][ T5849] usb 9-1: Product: syz [ 112.016924][ T5849] usb 9-1: Manufacturer: syz [ 112.020280][ T5849] usb 9-1: SerialNumber: syz [ 112.030527][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 112.040151][ T5849] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input8 [ 112.147223][ T5897] usb 10-1: Using ep0 maxpacket: 16 [ 112.152667][ T5897] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 112.155690][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.158810][ T5897] usb 10-1: Product: syz [ 112.160299][ T5897] usb 10-1: Manufacturer: syz [ 112.161840][ T5897] usb 10-1: SerialNumber: syz [ 112.247346][ T5849] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 112.257065][ T5849] (id 0x00) [ 112.317212][ T5849] rc_core: IR keymap rc-imon-pad not found [ 112.319107][ T5849] Registered IR keymap rc-empty [ 112.320771][ T5849] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 112.328098][ T5849] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 112.375855][ T5897] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 112.381752][ T5897] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.385118][ T5897] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 112.388410][ T5897] usb 10-1: media controller created [ 112.395582][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.447603][ T5849] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 112.453858][ T5849] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input9 [ 112.471638][ T5849] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:4> initialized [ 112.595640][ T7260] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 112.618583][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 112.669577][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.680625][ T7268] bridge_slave_0 (unregistering): left allmulticast mode [ 112.687092][ T7268] bridge_slave_0 (unregistering): left promiscuous mode [ 112.693728][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.722835][ T7269] program syz.1.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.923974][ T5897] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 112.932794][ T5897] usb 10-1: USB disconnect, device number 2 [ 113.257768][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 113.322182][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 113.325314][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 113.328545][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 113.523152][ T9] usb 9-1: USB disconnect, device number 4 [ 113.560324][ T7269] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 113.595879][ T7269] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 113.598998][ T7269] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 113.601311][ T7269] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 113.604182][ T7269] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 113.642384][ T7269] pci 0000:00:01.0: Adding to iommu group 1 [ 113.689371][ T7269] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 113.691616][ T7269] pci 0000:00:01.0: vgaarb: bridge control possible [ 113.693688][ T7269] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 113.714044][ T7269] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 113.745034][ T7269] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 113.786109][ T7269] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 113.795807][ T7269] [drm] Found bochs VGA, ID 0xb0c5. [ 113.797628][ T7269] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 113.824234][ T7269] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 113.875071][ T7269] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 114.097097][ T5849] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 114.157211][ T10] usb 40-1: device descriptor read/8, error -110 [ 114.258571][ T5849] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.263714][ T5849] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.270273][ T5849] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 114.273740][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.276491][ T5849] usb 10-1: Product: syz [ 114.278305][ T5849] usb 10-1: Manufacturer: syz [ 114.279995][ T5849] usb 10-1: SerialNumber: syz [ 114.289320][ T5849] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 114.299863][ T5849] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 114.307532][ T5849] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 114.394302][ T7320] fuse: Unknown parameter '0xffffffffffffffff' [ 114.548276][ T10] usb usb40-port1: attempt power cycle [ 114.652387][ T7327] veth0: entered promiscuous mode [ 114.661792][ T7327] veth0: left promiscuous mode [ 115.108501][ T10] usb usb40-port1: unable to enumerate USB device [ 115.217107][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.306580][ T7370] trusted_key: syz.4.341 sent an empty control message without MSG_MORE. [ 115.367601][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 115.370945][ T9] usb 6-1: config index 0 descriptor too short (expected 13339, got 27) [ 115.374375][ T9] usb 6-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 115.378816][ T9] usb 6-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 115.384774][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.389194][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.392749][ T9] usb 6-1: Product: syz [ 115.394411][ T9] usb 6-1: Manufacturer: syz [ 115.396280][ T9] usb 6-1: SerialNumber: syz [ 115.578963][ T7381] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 115.634004][ T9] usb 6-1: USB disconnect, device number 5 [ 115.802081][ T7383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(0) [ 115.804179][ T7383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.808878][ T7383] vhci_hcd vhci_hcd.0: Device attached [ 116.047482][ T5101] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 116.203444][ T7398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.210503][ T7398] __nla_validate_parse: 5 callbacks suppressed [ 116.210514][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 116.517158][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.632054][ T7391] vhci_hcd: connection reset by peer [ 116.637757][ T12] vhci_hcd vhci_hcd.4: stop threads [ 116.642002][ T12] vhci_hcd vhci_hcd.4: release socket [ 116.649580][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 116.667277][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 116.671457][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.677122][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.680653][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.683138][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.686236][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.692451][ T34] usb 6-1: config 0 descriptor?? [ 116.898308][ T5833] usb 10-1: USB disconnect, device number 3 [ 116.934415][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.351'. [ 116.951539][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 116.960871][ T5833] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 116.964265][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 116.966564][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 116.970472][ T5833] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 116.974206][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 116.976453][ T34] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 116.980515][ T5833] ti_usb_3410_5052 10-1:2.0: device disconnected [ 116.983426][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 117.117617][ T62] usb 6-1: USB disconnect, device number 6 [ 117.221446][ T7428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.231558][ T7428] bond2: (slave team0): Releasing backup interface [ 117.240854][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.245374][ T7428] bond4: (slave team0): Enslaving as an active interface with an up link [ 118.087997][ T7464] netlink: 6 bytes leftover after parsing attributes in process `syz.1.368'. [ 118.204896][ T7469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.233980][ T7469] bond1: (slave team0): Releasing backup interface [ 118.239600][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.246121][ T7469] bond3: (slave team0): Enslaving as an active interface with an up link [ 118.414889][ T7482] x_tables: duplicate underflow at hook 1 [ 118.427489][ T7482] hub 8-0:1.0: USB hub found [ 118.434869][ T7482] hub 8-0:1.0: 1 port detected [ 118.553557][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 118.567305][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 118.573164][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 118.578723][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 118.582665][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 119.526873][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 119.533240][ T7517] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 119.856948][ T7532] netlink: 6 bytes leftover after parsing attributes in process `syz.4.384'. [ 119.893992][ T7533] Cache volume key already in use (9p,syz,) [ 120.416013][ T7556] input: syz1 as /devices/virtual/input/input10 [ 120.423517][ T7557] db_root: cannot open: ./my_ [ 120.464449][ T7560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.475488][ T7560] bond3: (slave team0): Releasing backup interface [ 120.480936][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.484745][ T7560] bond4: (slave team0): Enslaving as an active interface with an up link [ 121.187921][ T5101] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 121.767481][ T7594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.905444][ T7596] bond4: (slave team0): Releasing backup interface [ 121.979728][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.987694][ T7596] bond5: (slave team0): Enslaving as an active interface with an up link [ 122.202460][ T7605] __nla_validate_parse: 12 callbacks suppressed [ 122.202479][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.210206][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.214400][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.219384][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.223640][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.384090][ T7613] loop5: detected capacity change from 0 to 7 [ 122.388795][ T7613] Dev loop5: unable to read RDB block 7 [ 122.390813][ T7613] loop5: AHDI p1 [ 122.393335][ T7613] loop5: partition table partially beyond EOD, truncated [ 122.448274][ T7617] netlink: 6 bytes leftover after parsing attributes in process `syz.5.410'. [ 122.487226][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.412'. [ 122.492464][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.533017][ T7618] x_tables: duplicate underflow at hook 1 [ 122.536831][ T7618] hub 8-0:1.0: USB hub found [ 122.547886][ T7618] hub 8-0:1.0: 1 port detected [ 122.576639][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 122.590449][ T7624] nbd: illegal input index -855506932 [ 123.242947][ T7652] loop5: detected capacity change from 0 to 7 [ 123.248125][ T7652] Dev loop5: unable to read RDB block 7 [ 123.253991][ T7652] loop5: AHDI p1 [ 123.255467][ T7652] loop5: partition table partially beyond EOD, truncated [ 123.482757][ T7663] CIFS: Attempting to mount //127.0.0.1/share [ 123.523833][ T7663] CIFS: VFS: Error connecting to socket. Aborting operation. [ 123.541099][ T7663] CIFS: VFS: cifs_mount failed w/return code = -4 [ 124.421439][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 124.426020][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 124.785159][ T7709] 9p: Bad value for 'wfdno' [ 124.801899][ T7711] loop5: detected capacity change from 0 to 7 [ 124.805612][ T7711] Dev loop5: unable to read RDB block 7 [ 124.809081][ T7711] loop5: AHDI p1 [ 124.811975][ T7711] loop5: partition table partially beyond EOD, truncated [ 126.290847][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.327420][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.727464][ T7758] x_tables: duplicate underflow at hook 1 [ 126.741911][ T7758] hub 8-0:1.0: USB hub found [ 126.754168][ T7758] hub 8-0:1.0: 1 port detected [ 127.628508][ T7776] input: syz0 as /devices/virtual/input/input12 [ 127.837329][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.057756][ T7780] __nla_validate_parse: 11 callbacks suppressed [ 128.057775][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 128.118331][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 128.121499][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 128.124464][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 128.127378][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 128.131509][ T7780] 9pnet_virtio: no channels available for device syz [ 128.486244][ T7785] e1000e 0000:00:02.0 eth1: removed PHC [ 128.561587][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 129.073776][ T7785] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 129.274326][ T7820] x_tables: duplicate underflow at hook 1 [ 129.286797][ T7820] hub 8-0:1.0: USB hub found [ 129.294663][ T7820] hub 8-0:1.0: 1 port detected [ 129.470316][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 129.476679][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 129.479973][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 129.482823][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 129.576637][ T7835] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 129.677243][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.678871][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 129.682225][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 130.167372][ T5101] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 130.347230][ T5101] usb 7-1: Using ep0 maxpacket: 16 [ 130.370134][ T5101] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 130.382339][ T5101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.394418][ T5101] usb 7-1: Product: syz [ 130.396294][ T5101] usb 7-1: Manufacturer: syz [ 130.412218][ T5101] usb 7-1: SerialNumber: syz [ 130.644625][ T5101] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 130.655603][ T5101] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.665212][ T5101] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 130.677569][ T5101] usb 7-1: media controller created [ 130.698077][ T5101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.853742][ T7856] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 130.918544][ T5101] zl10353_read_register: readreg error (reg=127, ret==-110) [ 130.962597][ T7856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.021360][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.041738][ T7884] bond5: (slave batadv1): making interface the new active one [ 131.109910][ T7884] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 131.157603][ T7856] bond5 (unregistering): (slave batadv1): Releasing active interface [ 131.178388][ T7856] bond5 (unregistering): Released all slaves [ 131.274071][ T5101] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 131.310506][ T5101] usb 7-1: USB disconnect, device number 3 [ 131.757173][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.761304][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 131.765165][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 132.074074][ T7909] x_tables: duplicate underflow at hook 1 [ 132.078808][ T7909] hub 8-0:1.0: USB hub found [ 132.081858][ T7909] hub 8-0:1.0: 1 port detected [ 132.328393][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.331180][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.451288][ T7910] bridge_slave_1: left allmulticast mode [ 132.453676][ T7910] bridge_slave_1: left promiscuous mode [ 132.458610][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.583825][ T7910] bridge_slave_0: left allmulticast mode [ 132.590822][ T7910] bridge_slave_0: left promiscuous mode [ 132.607165][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.640212][ T7908] syz_tun: entered allmulticast mode [ 132.822286][ T7919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.827765][ T7919] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 133.837120][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 133.839452][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 134.144432][ T7966] Bluetooth: MGMT ver 1.23 [ 134.163531][ T7965] sch_tbf: burst 4 is lower than device lo mtu (1550) ! [ 134.170792][ T7965] __nla_validate_parse: 6 callbacks suppressed [ 134.170803][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 134.220364][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 136.002810][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.005394][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.007513][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 136.383367][ T7997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.519'. [ 136.640956][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 136.680500][ T8004] bond0: entered promiscuous mode [ 136.682859][ T8004] bond_slave_0: entered promiscuous mode [ 136.687318][ T8004] bond_slave_1: entered promiscuous mode [ 136.718209][ T8004] gretap0: entered promiscuous mode [ 136.723467][ T8004] debugfs: 'hsr1' already exists in 'hsr' [ 136.730332][ T8004] Cannot create hsr debugfs directory [ 136.732950][ T8004] hsr1: entered promiscuous mode [ 137.234606][ T8017] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 137.250997][ T8017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.314992][ T8023] macvlan3: entered promiscuous mode [ 137.318228][ T8023] macvlan3: entered allmulticast mode [ 137.349022][ T8017] bond2: (slave ip6gretap1): making interface the new active one [ 137.353646][ T8017] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 137.473238][ T8026] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.477836][ T8026] block device autoloading is deprecated and will be removed. [ 137.665500][ T8034] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 137.668045][ T8034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 137.674324][ T8034] vhci_hcd vhci_hcd.0: Device attached [ 137.795833][ T8035] vhci_hcd: connection closed [ 137.839243][ T5834] vhci_hcd vhci_hcd.2: stop threads [ 137.854387][ T5834] vhci_hcd vhci_hcd.2: release socket [ 137.864126][ T5834] vhci_hcd vhci_hcd.2: disconnect device [ 137.990106][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'. [ 138.334872][ T8056] netlink: 'syz.4.538': attribute type 2 has an invalid length. [ 138.336248][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'. [ 138.370528][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 138.370547][ T42] audit: type=1800 audit(1785695984.314:13288): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.530" name="bus" dev="ramfs" ino=19019 res=0 errno=0 [ 139.070610][ T42] audit: type=1326 audit(1785695985.014:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.092853][ T42] audit: type=1326 audit(1785695985.024:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.113029][ T42] audit: type=1326 audit(1785695985.024:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.129324][ T42] audit: type=1326 audit(1785695985.024:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c73eb code=0x7ffc0000 [ 139.138123][ T42] audit: type=1326 audit(1785695985.024:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.146707][ T42] audit: type=1326 audit(1785695985.024:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.155588][ T42] audit: type=1326 audit(1785695985.024:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.165309][ T42] audit: type=1326 audit(1785695985.024:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.174258][ T42] audit: type=1326 audit(1785695985.024:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.541" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 139.604271][ T5101] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 139.658889][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.662982][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.666532][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.672313][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.675841][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.743933][ T8082] binder: 8081:8082 ioctl c0c09425 800005c0 returned -22 [ 139.763796][ T8082] binder: 8081:8082 ioctl c0306201 80000680 returned -14 [ 139.777202][ T5101] usb 9-1: Using ep0 maxpacket: 16 [ 139.782533][ T5101] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 139.786492][ T5101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.789933][ T5101] usb 9-1: Product: syz [ 139.791715][ T5101] usb 9-1: Manufacturer: syz [ 139.793660][ T5101] usb 9-1: SerialNumber: syz [ 139.874556][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'. [ 140.016931][ T5101] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 140.041552][ T5101] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.051687][ T5101] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 140.060093][ T5101] usb 9-1: media controller created [ 140.069271][ T5101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.225270][ T8069] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 140.287310][ T5101] zl10353_read_register: readreg error (reg=127, ret==-110) [ 140.307652][ T8069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.330370][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.344558][ T8098] bond3: (slave batadv1): making interface the new active one [ 140.349971][ T8098] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 140.470479][ T8069] bond3 (unregistering): (slave batadv1): Releasing active interface [ 140.561903][ T8069] bond3 (unregistering): Released all slaves [ 141.043036][ T5101] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 141.051525][ T5101] usb 9-1: USB disconnect, device number 5 [ 141.174390][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 141.178978][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 141.182928][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 141.186918][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 142.050079][ T8134] loop5: detected capacity change from 0 to 7 [ 142.063112][ T8134] Dev loop5: unable to read RDB block 7 [ 142.066177][ T8134] loop5: AHDI p1 [ 142.077462][ T8134] loop5: partition table partially beyond EOD, truncated [ 144.495064][ T8210] NILFS (nullb0): couldn't find nilfs on the device [ 144.862588][ T8226] usb usb7: usbfs: process 8226 (syz.2.593) did not claim interface 0 before use [ 144.912879][ T8228] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 145.253322][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.274347][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.317159][ T8226] 0x20000000,0x20000000 overlaps existing 0x20000000,0x20000 [ 145.468127][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.473220][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.476766][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.481793][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.179621][ T8257] x_tables: duplicate underflow at hook 1 [ 146.188403][ T8257] hub 8-0:1.0: USB hub found [ 146.193814][ T8257] hub 8-0:1.0: 1 port detected [ 147.079334][ T5833] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 147.100936][ T8275] loop5: detected capacity change from 0 to 7 [ 147.103791][ T8273] syzkaller1: entered promiscuous mode [ 147.106900][ T8273] syzkaller1: entered allmulticast mode [ 147.109534][ T8275] Dev loop5: unable to read RDB block 7 [ 147.112162][ T8275] loop5: AHDI p1 [ 147.113735][ T8275] loop5: partition table partially beyond EOD, truncated [ 147.228044][ T5833] usb 10-1: Using ep0 maxpacket: 16 [ 147.235900][ T5833] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 147.240175][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.243648][ T5833] usb 10-1: Product: syz [ 147.245245][ T5833] usb 10-1: Manufacturer: syz [ 147.248938][ T5833] usb 10-1: SerialNumber: syz [ 147.561827][ T5833] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 147.573232][ T5833] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.580479][ T5833] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 147.583984][ T5833] usb 10-1: media controller created [ 147.598868][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.738675][ T8289] x_tables: duplicate underflow at hook 1 [ 147.751641][ T8289] hub 8-0:1.0: USB hub found [ 147.756428][ T8289] hub 8-0:1.0: 1 port detected [ 147.763313][ T8261] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 147.822371][ T8261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.826897][ T5833] zl10353_read_register: readreg error (reg=127, ret==-110) [ 147.868596][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.890436][ T8291] bond1: (slave batadv1): making interface the new active one [ 147.898296][ T8291] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 147.921731][ T8261] bond1 (unregistering): (slave batadv1): Releasing active interface [ 147.936695][ T8261] bond1 (unregistering): Released all slaves [ 148.046196][ T5833] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 148.059899][ T5833] usb 10-1: USB disconnect, device number 4 [ 148.535848][ T8281] dvmrp8: entered allmulticast mode [ 149.177943][ T8307] __nla_validate_parse: 11 callbacks suppressed [ 149.177966][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.618'. [ 149.410705][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.414097][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.417511][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.421206][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.424600][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.575548][ T8319] loop5: detected capacity change from 0 to 7 [ 149.586140][ T8319] Dev loop5: unable to read RDB block 7 [ 149.589867][ T8319] loop5: AHDI p1 [ 149.591437][ T8319] loop5: partition table partially beyond EOD, truncated [ 149.742886][ T8322] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.759132][ T8322] bond5: (slave team0): Releasing backup interface [ 149.773742][ T8322] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.781385][ T8322] bond6: (slave team0): Enslaving as an active interface with an up link [ 149.854325][ T8327] x_tables: duplicate underflow at hook 1 [ 149.893852][ T8327] hub 8-0:1.0: USB hub found [ 149.903847][ T8327] hub 8-0:1.0: 1 port detected [ 149.948604][ T8330] Invalid source name [ 150.327459][ T62] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 150.422641][ T8340] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 150.427507][ T8341] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 150.493845][ T62] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 150.501174][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.506008][ T8341] bond7: entered promiscuous mode [ 150.508320][ T62] usb 9-1: Product: syz [ 150.510066][ T62] usb 9-1: Manufacturer: syz [ 150.514088][ T62] usb 9-1: SerialNumber: syz [ 150.516786][ T8341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 150.630539][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 150.948631][ T62] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 151.260326][ T8366] x_tables: duplicate underflow at hook 1 [ 151.279300][ T8366] hub 8-0:1.0: USB hub found [ 151.287319][ T8366] hub 8-0:1.0: 1 port detected [ 151.338147][ T8368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.362597][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.371371][ T8368] bond1: (slave team0): Enslaving as an active interface with an up link [ 152.029885][ T8379] netlink: 52 bytes leftover after parsing attributes in process `syz.5.642'. [ 152.200287][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'. [ 153.114380][ T5101] usb 9-1: USB disconnect, device number 6 [ 153.130831][ T5101] usblp0: removed [ 153.312784][ T8410] x_tables: duplicate underflow at hook 1 [ 153.321505][ T8410] hub 8-0:1.0: USB hub found [ 153.357720][ T8410] hub 8-0:1.0: 1 port detected [ 153.524841][ T8416] loop5: detected capacity change from 0 to 7 [ 153.535260][ T8416] Dev loop5: unable to read RDB block 7 [ 153.538736][ T8416] loop5: AHDI p1 [ 153.540518][ T8416] loop5: partition table partially beyond EOD, truncated [ 153.894574][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 154.088370][ T8426] overlayfs: failed to resolve './file0:/': -2 [ 154.164653][ T8428] openvswitch: netlink: Message has 512 unknown bytes. [ 154.944192][ T8436] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 154.981631][ T8436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 155.214644][ T8445] loop5: detected capacity change from 0 to 7 [ 155.230052][ T8445] Dev loop5: unable to read RDB block 7 [ 155.236794][ T8445] loop5: AHDI p1 [ 155.238779][ T8445] loop5: partition table partially beyond EOD, truncated [ 156.696373][ C2] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 156.699692][ C2] sr 2:0:0:0: [sr0] tag#3 CDB: Test Unit Ready [ 156.961699][ T8471] __nla_validate_parse: 1 callbacks suppressed [ 156.961714][ T8471] netlink: 6 bytes leftover after parsing attributes in process `syz.4.672'. [ 157.542101][ T42] kauditd_printk_skb: 141 callbacks suppressed [ 157.542120][ T42] audit: type=1326 audit(1785696003.484:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.577390][ T42] audit: type=1326 audit(1785696003.504:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.592071][ T42] audit: type=1326 audit(1785696003.514:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.607730][ T42] audit: type=1326 audit(1785696003.514:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.625618][ T42] audit: type=1326 audit(1785696003.524:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.637434][ T42] audit: type=1326 audit(1785696003.534:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.654518][ T42] audit: type=1326 audit(1785696003.584:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.669621][ T42] audit: type=1326 audit(1785696003.614:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.685302][ T42] audit: type=1326 audit(1785696003.624:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 157.701778][ T42] audit: type=1326 audit(1785696003.634:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.4.677" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 158.089497][ T8499] loop5: detected capacity change from 0 to 7 [ 158.161682][ T8499] Dev loop5: unable to read RDB block 7 [ 158.165561][ T8499] loop5: AHDI p1 [ 158.179814][ T8499] loop5: partition table partially beyond EOD, truncated [ 159.025792][ T8514] netlink: 6 bytes leftover after parsing attributes in process `syz.5.687'. [ 159.483685][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 159.769738][ T8521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.058219][ T8534] loop5: detected capacity change from 0 to 7 [ 160.071244][ T8534] Dev loop5: unable to read RDB block 7 [ 160.073268][ T8534] loop5: AHDI p1 [ 160.078227][ T8534] loop5: partition table partially beyond EOD, truncated [ 160.079016][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 160.237229][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 160.246153][ T5897] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 160.255835][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.263285][ T5897] usb 6-1: Product: syz [ 160.264703][ T5897] usb 6-1: Manufacturer: syz [ 160.270770][ T5897] usb 6-1: SerialNumber: syz [ 160.507619][ T5897] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 160.536796][ T5897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.541782][ T5897] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 160.544464][ T5897] usb 6-1: media controller created [ 160.555914][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.714192][ T8531] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 160.767177][ T5101] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 160.782174][ T8531] 8021q: adding VLAN 0 to HW filter on device bond8 [ 160.790195][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 160.813077][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 160.827190][ T8545] bond8: (slave batadv3): making interface the new active one [ 160.830710][ T8545] bond8: (slave batadv3): Enslaving as an active interface with an up link [ 160.867267][ T8531] bond8 (unregistering): (slave batadv3): Releasing active interface [ 160.871367][ T8531] bond8 (unregistering): Released all slaves [ 160.930202][ T5101] usb 9-1: Using ep0 maxpacket: 16 [ 160.938672][ T5101] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 160.945023][ T5101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.950682][ T5101] usb 9-1: Product: syz [ 160.952113][ T5101] usb 9-1: Manufacturer: syz [ 160.955951][ T5101] usb 9-1: SerialNumber: syz [ 160.960022][ T5897] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 160.975667][ T5897] usb 6-1: USB disconnect, device number 7 [ 161.079498][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.086353][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.089415][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.093021][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.096059][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.108113][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.113311][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.116540][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.121848][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.124767][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.179163][ T5101] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 161.183493][ T8231] syz_tun (unregistering): left allmulticast mode [ 161.186392][ T5101] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.190699][ T5101] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 161.193612][ T5101] usb 9-1: media controller created [ 161.199998][ T5101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.382731][ T8543] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 161.421645][ T5834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.427364][ T5101] zl10353_read_register: readreg error (reg=127, ret==-110) [ 161.477704][ T8543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.558332][ T8543] bond4 (unregistering): Released all slaves [ 161.610940][ T5834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.685302][ T5101] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 161.700126][ T5101] usb 9-1: USB disconnect, device number 7 [ 161.757308][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.785793][ T5834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.894920][ T8579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.927127][ T5834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.977218][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.979939][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.018567][ T8550] bridge_slave_0: entered allmulticast mode [ 162.021550][ T8550] bridge_slave_0: entered promiscuous mode [ 162.027172][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.030796][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.033662][ T8550] bridge_slave_1: entered allmulticast mode [ 162.036673][ T8550] bridge_slave_1: entered promiscuous mode [ 162.065856][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.070756][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.130846][ T8550] team0: Port device team_slave_0 added [ 162.151177][ T8550] team0: Port device team_slave_1 added [ 162.206943][ T5834] bridge_slave_1: left allmulticast mode [ 162.209093][ T5834] bridge_slave_1: left promiscuous mode [ 162.211348][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.228493][ T5834] bridge_slave_0: left allmulticast mode [ 162.237480][ T5834] bridge_slave_0: left promiscuous mode [ 162.239483][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.493162][ T5834] gretap0 (unregistering): left promiscuous mode [ 162.536409][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.543864][ T5834] bond_slave_0: left promiscuous mode [ 162.548984][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.552149][ T5834] bond_slave_1: left promiscuous mode [ 162.554727][ T5834] bond0 (unregistering): Released all slaves [ 162.560173][ T5834] bond1 (unregistering): Released all slaves [ 162.567843][ T5834] bond2 (unregistering): Released all slaves [ 162.577787][ T5834] bond3 (unregistering): Released all slaves [ 162.591940][ T5834] bond4 (unregistering): (slave team0): Releasing backup interface [ 162.596065][ T5834] bond4 (unregistering): Released all slaves [ 162.609462][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.612562][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.622445][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.629401][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.632258][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.642750][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.653939][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.833345][ T8550] hsr_slave_0: entered promiscuous mode [ 162.843172][ T8550] hsr_slave_1: entered promiscuous mode [ 162.855735][ T8550] debugfs: 'hsr0' already exists in 'hsr' [ 162.857703][ T8550] Cannot create hsr debugfs directory [ 163.018527][ T8624] loop5: detected capacity change from 0 to 7 [ 163.021773][ T8624] Dev loop5: unable to read RDB block 7 [ 163.044272][ T8624] loop5: AHDI p1 [ 163.045805][ T8624] loop5: partition table partially beyond EOD, truncated [ 163.216887][ T5753] Bluetooth: hci3: command tx timeout [ 163.742393][ T5460] 8021q: adding VLAN 0 to HW filter on device eth10 [ 164.095106][ T8550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.112632][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.116111][ T8550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.170242][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.173784][ T8550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.184554][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.210674][ T8550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.288302][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.420580][ T5460] 8021q: adding VLAN 0 to HW filter on device eth11 [ 164.436653][ T5834] hsr_slave_0: left promiscuous mode [ 164.441602][ T5834] hsr_slave_1: left promiscuous mode [ 164.444726][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.449155][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.459467][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.462757][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.482246][ T5834] veth1_macvtap: left promiscuous mode [ 164.490861][ T5834] veth0_macvtap: left promiscuous mode [ 164.495912][ T5834] veth1_vlan: left promiscuous mode [ 164.501076][ T5834] veth0_vlan: left promiscuous mode [ 164.962326][ T5834] team0 (unregistering): Port device team_slave_1 removed [ 165.287234][ T5753] Bluetooth: hci3: command tx timeout [ 165.370533][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 165.373733][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.391515][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.397731][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.400431][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.429560][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.431979][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.706185][ T5460] 8021q: adding VLAN 0 to HW filter on device eth12 [ 165.791385][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.802836][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 166.033179][ T8713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.038572][ T8714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.111585][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.130559][ T8714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.131262][ T8723] netlink: 6 bytes leftover after parsing attributes in process `syz.1.727'. [ 166.135988][ T8714] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.176661][ T8714] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.336363][ T8550] veth0_vlan: entered promiscuous mode [ 166.349909][ T8550] veth1_vlan: entered promiscuous mode [ 166.362421][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 166.408917][ T8550] veth0_macvtap: entered promiscuous mode [ 166.415304][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 166.419616][ T8550] veth1_macvtap: entered promiscuous mode [ 166.451949][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.465902][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.507602][ T7476] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.559674][ T5834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.578807][ T5834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.787598][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.788852][ T5864] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 166.807273][ T7476] usb 6-1: Using ep0 maxpacket: 16 [ 166.815501][ T7476] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 166.818744][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.822340][ T7476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.825288][ T7476] usb 6-1: Product: syz [ 166.826619][ T7476] usb 6-1: Manufacturer: syz [ 166.828433][ T7476] usb 6-1: SerialNumber: syz [ 166.938784][ T8755] x_tables: duplicate underflow at hook 1 [ 166.945261][ T8755] hub 8-0:1.0: USB hub found [ 166.949027][ T8755] hub 8-0:1.0: 1 port detected [ 167.034723][ T851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.048440][ T851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.049104][ T7476] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 167.066017][ T7476] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.072066][ T7476] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 167.077309][ T7476] usb 6-1: media controller created [ 167.508818][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.515200][ T8728] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 167.528595][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.543636][ T8728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.550528][ T7476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.617867][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 167.633013][ T8728] bond8: (slave batadv4): making interface the new active one [ 167.656617][ T8728] bond8: (slave batadv4): Enslaving as an active interface with an up link [ 167.668774][ T8762] bond8 (unregistering): (slave batadv4): Releasing active interface [ 167.676914][ T8762] bond8 (unregistering): Released all slaves [ 167.810549][ T7476] zl10353_read_register: readreg error (reg=127, ret==-110) [ 167.850177][ T7476] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 167.869056][ T7476] usb 6-1: USB disconnect, device number 8 [ 167.951737][ T8776] loop5: detected capacity change from 0 to 7 [ 167.959420][ T8776] Dev loop5: unable to read RDB block 7 [ 167.962224][ T8776] loop5: AHDI p1 [ 167.963866][ T8776] loop5: partition table partially beyond EOD, truncated [ 167.965160][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 167.975529][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 167.979772][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 167.983831][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 167.987746][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 168.159070][ T5753] Bluetooth: hci3: command 0x0419 tx timeout [ 168.289395][ T8789] bond0: entered promiscuous mode [ 168.291746][ T8789] bond_slave_0: entered promiscuous mode [ 168.294302][ T8789] bond_slave_1: entered promiscuous mode [ 168.301453][ T8789] gretap0: entered promiscuous mode [ 168.305023][ T8789] hsr1: entered promiscuous mode [ 168.667397][ T6570] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.847198][ T6570] usb 6-1: Using ep0 maxpacket: 8 [ 168.850844][ T6570] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.853771][ T6570] usb 6-1: config 179 has no interface number 0 [ 168.855949][ T6570] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.860277][ T6570] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.864172][ T6570] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.867942][ T6570] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.871681][ T6570] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.876044][ T6570] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.883253][ T6570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.893375][ T8794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.981912][ T8810] loop5: detected capacity change from 0 to 7 [ 168.985363][ T8810] Dev loop5: unable to read RDB block 7 [ 168.987376][ T8810] loop5: AHDI p1 [ 168.988770][ T8810] loop5: partition table partially beyond EOD, truncated [ 169.186923][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.186946][ T7476] usb 6-1: USB disconnect, device number 9 [ 169.189585][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.784744][ T8830] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.815865][ T8830] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 169.821528][ T8830] overlayfs: failed to look up (tracing) for ino (-66) [ 169.962224][ T8836] CIFS: bad ip= option (127®0.0.1) [ 169.977615][ T8836] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.994815][ T8836] CIFS: Attempting to mount (null) [ 170.007670][ T8838] loop5: detected capacity change from 0 to 7 [ 170.011860][ T8838] Dev loop5: unable to read RDB block 7 [ 170.014367][ T8838] loop5: AHDI p1 [ 170.016946][ T8838] loop5: partition table partially beyond EOD, truncated [ 170.237128][ T5753] Bluetooth: hci3: command 0x0419 tx timeout [ 170.595836][ T8836] CIFS: VFS: Error connecting to socket. Aborting operation. [ 170.598890][ T8836] CIFS: VFS: cifs_mount failed w/return code = -4 [ 171.011299][ T8873] loop9: detected capacity change from 0 to 255852544 [ 171.132256][ T8873] loop9: detected capacity change from 255852544 to 524287871 [ 171.258661][ T8879] x_tables: duplicate underflow at hook 1 [ 171.267653][ T8879] hub 8-0:1.0: USB hub found [ 171.272984][ T8879] hub 8-0:1.0: 1 port detected [ 172.317163][ T5753] Bluetooth: hci3: command 0x0419 tx timeout [ 172.388675][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.393339][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.397867][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.412255][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.415709][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.424176][ T5834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.481719][ T8914] FAULT_INJECTION: forcing a failure. [ 172.481719][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.486032][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.6.791 Not tainted syzkaller #0 PREEMPT(full) [ 172.486049][ T8914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.486056][ T8914] Call Trace: [ 172.486070][ T8914] [ 172.486076][ T8914] dump_stack_lvl+0x100/0x190 [ 172.486188][ T8914] should_fail_ex.cold+0x5/0xa [ 172.486202][ T8914] _copy_from_iter+0x1f4/0x1690 [ 172.486248][ T8914] ? bpf_ksym_find+0x124/0x1c0 [ 172.486268][ T8914] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 172.486294][ T8914] ? __pfx__copy_from_iter+0x10/0x10 [ 172.486313][ T8914] ? find_held_lock+0x2b/0x80 [ 172.486327][ T8914] ? rawv6_sendmsg+0xb3c/0x4420 [ 172.486394][ T8914] ? rawv6_sendmsg+0xb3c/0x4420 [ 172.486409][ T8914] rawv6_sendmsg+0x244a/0x4420 [ 172.486427][ T8914] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 172.486457][ T8914] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 172.486475][ T8914] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 172.486489][ T8914] ? inet_sendmsg+0x11c/0x140 [ 172.486506][ T8914] inet_sendmsg+0x11c/0x140 [ 172.486522][ T8914] __sys_sendto+0x453/0x4e0 [ 172.486549][ T8914] ? __pfx_inet_sendmsg+0x10/0x10 [ 172.486565][ T8914] ? __pfx___sys_sendto+0x10/0x10 [ 172.486589][ T8914] ? fput+0x79/0x100 [ 172.486603][ T8914] ? ksys_write+0x1ac/0x250 [ 172.486615][ T8914] __ia32_sys_sendto+0xdd/0x1b0 [ 172.486629][ T8914] ? __do_fast_syscall_32+0x98/0x970 [ 172.486695][ T8914] ? lockdep_hardirqs_on+0x78/0x100 [ 172.486714][ T8914] __do_fast_syscall_32+0xe7/0x970 [ 172.486734][ T8914] ? lockdep_hardirqs_on+0x78/0x100 [ 172.486750][ T8914] do_fast_syscall_32+0x32/0x70 [ 172.486765][ T8914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.486787][ T8914] RIP: 0023:0xf7f55fec [ 172.486801][ T8914] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 172.486820][ T8914] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 172.486832][ T8914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 172.486839][ T8914] RDX: 0000000000000016 RSI: 0000000000003b00 RDI: 0000000000000000 [ 172.486846][ T8914] RBP: 00000000fffffdfd R08: 0000000000000000 R09: 0000000000000000 [ 172.486852][ T8914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.486858][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.486872][ T8914] [ 172.633809][ T5834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.690505][ T5834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.732658][ T8926] x_tables: duplicate underflow at hook 1 [ 172.740219][ T8926] hub 8-0:1.0: USB hub found [ 172.744988][ T8926] hub 8-0:1.0: 1 port detected [ 172.847789][ T5834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.985378][ T8927] __nla_validate_parse: 3 callbacks suppressed [ 172.985399][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 173.021663][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 173.035478][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 173.074164][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 173.466441][ T5834] bridge_slave_1: left allmulticast mode [ 173.476044][ T5834] bridge_slave_1: left promiscuous mode [ 173.483227][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.499891][ T5834] bridge_slave_0: left allmulticast mode [ 173.506884][ T5834] bridge_slave_0: left promiscuous mode [ 173.516707][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.785726][ T5834] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 173.891174][ T5834] gretap0 (unregistering): left promiscuous mode [ 173.927935][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 173.933091][ T5834] bond0 (unregistering): left promiscuous mode [ 173.935048][ T5834] bond_slave_0: left promiscuous mode [ 173.936845][ T5834] bond_slave_1: left promiscuous mode [ 173.954253][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.964537][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.972179][ T5834] bond0 (unregistering): Released all slaves [ 173.978743][ T5834] bond1 (unregistering): Released all slaves [ 173.992653][ T5834] bond2 (unregistering): Released all slaves [ 174.001454][ T5834] bond3 (unregistering): Released all slaves [ 174.013816][ T5460] 8021q: adding VLAN 0 to HW filter on device eth13 [ 174.099195][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 174.108214][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.118581][ T9] usb 10-1: config 0 has no interface number 0 [ 174.129761][ T9] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 174.133004][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.140699][ T9] usb 10-1: Product: syz [ 174.142478][ T9] usb 10-1: Manufacturer: syz [ 174.164008][ T9] usb 10-1: SerialNumber: syz [ 174.181074][ T9] usb 10-1: config 0 descriptor?? [ 174.190746][ T9] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 174.206253][ T9] usb 10-1: selecting invalid altsetting 1 [ 174.208298][ T9] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 174.229355][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 174.234404][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 174.243226][ T9] usb 10-1: media controller created [ 174.257688][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.410023][ T5753] Bluetooth: hci3: command 0x0419 tx timeout [ 174.477390][ T5753] Bluetooth: hci2: command tx timeout [ 174.715795][ T5460] 8021q: adding VLAN 0 to HW filter on device eth14 [ 175.021766][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.799'. [ 175.346371][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.355615][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.360623][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.366824][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.371121][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.379669][ T8972] 9pnet_virtio: no channels available for device syz [ 175.487507][ T9] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 175.493710][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 175.868900][ T9] usb 10-1: USB disconnect, device number 5 [ 176.047498][ T5460] 8021q: adding VLAN 0 to HW filter on device eth15 [ 176.074651][ T5834] hsr_slave_0: left promiscuous mode [ 176.080638][ T5834] hsr_slave_1: left promiscuous mode [ 176.083725][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.086767][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.091247][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.093650][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.100927][ T5834] veth1_macvtap: left promiscuous mode [ 176.103174][ T5834] veth0_macvtap: left promiscuous mode [ 176.105384][ T5834] veth1_vlan: left promiscuous mode [ 176.107297][ T5834] veth0_vlan: left promiscuous mode [ 176.297196][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 176.456166][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.471311][ T5897] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 176.476309][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.486817][ T5897] usb 6-1: Product: syz [ 176.495732][ T5897] usb 6-1: Manufacturer: syz [ 176.502616][ T5897] usb 6-1: SerialNumber: syz [ 176.528246][ T5897] kl5kusb105 6-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 176.543152][ T5897] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 176.557358][ T5753] Bluetooth: hci2: command tx timeout [ 176.585212][ T5834] team0 (unregistering): Port device team_slave_1 removed [ 176.604769][ T5834] team0 (unregistering): Port device team_slave_0 removed [ 176.724640][ T8988] x_tables: duplicate underflow at hook 1 [ 176.734924][ T8988] hub 8-0:1.0: USB hub found [ 176.737424][ T8988] hub 8-0:1.0: 1 port detected [ 176.775265][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.779734][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.782970][ T8897] bridge_slave_0: entered allmulticast mode [ 176.787667][ T8897] bridge_slave_0: entered promiscuous mode [ 176.800161][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.807531][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.812065][ T8897] bridge_slave_1: entered allmulticast mode [ 176.821281][ T8897] bridge_slave_1: entered promiscuous mode [ 176.970569][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.980318][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.054619][ T8897] team0: Port device team_slave_0 added [ 177.094806][ T8897] team0: Port device team_slave_1 added [ 177.311050][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.315530][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.354215][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.380006][ T5460] 8021q: adding VLAN 0 to HW filter on device eth16 [ 177.389129][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.402407][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.437210][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.515294][ T8897] hsr_slave_0: entered promiscuous mode [ 177.534857][ T8897] hsr_slave_1: entered promiscuous mode [ 177.539197][ T8897] debugfs: 'hsr0' already exists in 'hsr' [ 177.541707][ T8897] Cannot create hsr debugfs directory [ 177.787324][ T8897] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.862266][ T8897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.869160][ T8897] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 177.880259][ T8897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.884230][ T8897] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.896005][ T8897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.900676][ T8897] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.906214][ T8897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.920399][ T9012] loop5: detected capacity change from 0 to 7 [ 177.923821][ T9012] Dev loop5: unable to read RDB block 7 [ 177.926197][ T9012] loop5: AHDI p1 [ 177.928269][ T9012] loop5: partition table partially beyond EOD, truncated [ 177.968553][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.978292][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.000768][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.003252][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.008005][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.010393][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.265601][ T9027] kl5kusb105d ttyUSB0: reading line status failed: -32 [ 178.341380][ T9032] lo: entered allmulticast mode [ 178.344313][ T9032] tunl0: entered allmulticast mode [ 178.349802][ T9032] gre0: entered allmulticast mode [ 178.352756][ T9032] gretap0: entered allmulticast mode [ 178.355549][ T9032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.480713][ T5101] usb 6-1: USB disconnect, device number 10 [ 178.489808][ T5101] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 178.508408][ T5101] kl5kusb105 6-1:1.0: device disconnected [ 178.526173][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.648633][ T5753] Bluetooth: hci2: command tx timeout [ 178.999461][ T9057] __nla_validate_parse: 5 callbacks suppressed [ 178.999482][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'. [ 179.008853][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'. [ 179.013325][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'. [ 179.017562][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'. [ 179.275997][ T8897] veth0_vlan: entered promiscuous mode [ 179.303362][ T8897] veth1_vlan: entered promiscuous mode [ 179.353611][ T8897] veth0_macvtap: entered promiscuous mode [ 179.364719][ T8897] veth1_macvtap: entered promiscuous mode [ 179.382459][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.389358][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.488691][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.493650][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.501202][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.509342][ T5834] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.521449][ T5834] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.557928][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.558272][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.565690][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.885127][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.785'. [ 180.088444][ T9063] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 180.359333][ T9100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.816'. [ 180.527200][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 180.535762][ T9063] usb 11-1: Using ep0 maxpacket: 16 [ 180.588676][ T9102] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 180.591516][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.609103][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 180.627280][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.631102][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.687252][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 180.697787][ T10] usb 12-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 180.709978][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.723803][ T10] usb 12-1: Product: syz [ 180.727223][ T5753] Bluetooth: hci2: command tx timeout [ 180.731116][ T10] usb 12-1: Manufacturer: syz [ 180.736816][ T10] usb 12-1: SerialNumber: syz [ 180.849623][ T9063] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 180.897385][ T845] usb 40-1: SetAddress Request (14) to port 0 [ 180.905529][ T845] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 180.980883][ T10] usb 12-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 180.998764][ T10] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.012046][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 181.022014][ T10] usb 12-1: media controller created [ 181.061930][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.105549][ T9063] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.116541][ T9063] usb 11-1: Product: syz [ 181.129264][ T9063] usb 11-1: Manufacturer: syz [ 181.131259][ T9063] usb 11-1: SerialNumber: syz [ 181.194536][ T9098] netlink: 'syz.7.815': attribute type 1 has an invalid length. [ 181.260051][ T9103] vhci_hcd: connection reset by peer [ 181.264380][ T5826] vhci_hcd vhci_hcd.1: stop threads [ 181.268030][ T5826] vhci_hcd vhci_hcd.1: release socket [ 181.270805][ T5826] vhci_hcd vhci_hcd.1: disconnect device [ 181.310064][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 181.357202][ T9063] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 181.364385][ T10] dvb_usb_gl861 12-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 181.365038][ T9063] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.370727][ T10] usb 12-1: USB disconnect, device number 2 [ 181.372902][ T9063] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 181.380646][ T9063] usb 11-1: media controller created [ 181.398292][ T9063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.559608][ T9085] netlink: 'syz.6.812': attribute type 1 has an invalid length. [ 181.638634][ T9063] zl10353_read_register: readreg error (reg=127, ret==-110) [ 181.670931][ T9063] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 181.716061][ T10] usb 11-1: USB disconnect, device number 2 [ 181.916689][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'. [ 181.968448][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.819'. [ 181.973355][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.7.819'. [ 182.186933][ T9128] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.194610][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 183.139866][ T9154] 9pnet_virtio: no channels available for device syz [ 183.684501][ T9169] bond0: entered promiscuous mode [ 183.687227][ T9169] bond_slave_0: entered promiscuous mode [ 183.690384][ T9169] bond_slave_1: entered promiscuous mode [ 183.695828][ T9169] gretap0: entered promiscuous mode [ 183.700254][ T9169] debugfs: 'hsr1' already exists in 'hsr' [ 183.702648][ T9169] Cannot create hsr debugfs directory [ 183.704998][ T9169] hsr1: entered promiscuous mode [ 183.958214][ T9183] loop5: detected capacity change from 0 to 7 [ 183.968209][ T9183] Dev loop5: unable to read RDB block 7 [ 183.972478][ T9183] loop5: AHDI p1 [ 183.973725][ T9183] loop5: partition table partially beyond EOD, truncated [ 184.023443][ T9185] __nla_validate_parse: 9 callbacks suppressed [ 184.023456][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 184.046734][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 184.063067][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 184.073075][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 184.843835][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 184.856770][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.851'. [ 184.862473][ T9210] binder: 9209:9210 ioctl c0145608 80000140 returned -22 [ 184.884625][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.853'. [ 185.079154][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.857'. [ 185.490641][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 185.546833][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.862'. [ 185.705037][ T9254] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 185.950148][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.975566][ T9257] xt_cgroup: path and classid specified [ 185.977729][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.997166][ T845] usb 40-1: device descriptor read/8, error -110 [ 186.008222][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.148658][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.159098][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.173305][ T9254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.180746][ T9254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.199295][ T9254] veth1_vlan: left promiscuous mode [ 186.204590][ T9254] veth0_vlan: left promiscuous mode [ 186.209455][ T9254] veth0_vlan: entered promiscuous mode [ 186.217517][ T9254] veth1_vlan: entered promiscuous mode [ 186.227307][ T9254] veth1_macvtap: left promiscuous mode [ 186.232673][ T9254] veth0_macvtap: left promiscuous mode [ 186.237771][ T9254] veth0_macvtap: entered promiscuous mode [ 186.243245][ T9254] veth1_macvtap: entered promiscuous mode [ 186.261239][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.271801][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.285107][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.292440][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.296814][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 186.300066][ T9254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.303519][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 186.306250][ T9254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.309271][ T9254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.312080][ T9254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.315052][ T9254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.332707][ T9254] hsr1: left promiscuous mode [ 186.336103][ T9254] bond7: left promiscuous mode [ 186.339122][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 186.342202][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 186.400312][ T845] usb usb40-port1: attempt power cycle [ 186.437462][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.441183][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.444474][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.473872][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.533904][ T10] kernel read not supported for file /swradio3 (pid: 10 comm: kworker/0:1) [ 186.551960][ T9272] batadv_slave_0: entered promiscuous mode [ 186.565549][ T9272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.589771][ T9272] batadv_slave_0 (unregistering): left promiscuous mode [ 186.592918][ T9272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.814820][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.945684][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.968047][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.988422][ T845] usb usb40-port1: unable to enumerate USB device [ 186.994931][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.004631][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.013119][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.019083][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.296357][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.404121][ T9284] x_tables: duplicate underflow at hook 1 [ 187.455071][ T9284] hub 8-0:1.0: USB hub found [ 187.457433][ T9284] hub 8-0:1.0: 1 port detected [ 187.473861][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.784533][ T13] bridge_slave_1: left allmulticast mode [ 187.786385][ T13] bridge_slave_1: left promiscuous mode [ 187.796990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.815533][ T13] bridge_slave_0: left allmulticast mode [ 187.821921][ T13] bridge_slave_0: left promiscuous mode [ 187.824544][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.077562][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.086402][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.092138][ T13] bond0 (unregistering): Released all slaves [ 188.119973][ T5460] 8021q: adding VLAN 0 to HW filter on device eth17 [ 188.725248][ T5460] 8021q: adding VLAN 0 to HW filter on device eth18 [ 188.771816][ T13] hsr_slave_0: left promiscuous mode [ 188.775040][ T13] hsr_slave_1: left promiscuous mode [ 188.778278][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.781526][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.785387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.788733][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.799890][ T13] veth1_macvtap: left promiscuous mode [ 188.802339][ T13] veth0_macvtap: left promiscuous mode [ 188.804806][ T13] veth1_vlan: left promiscuous mode [ 188.806664][ T13] veth0_vlan: left promiscuous mode [ 188.913236][ T9342] x_tables: duplicate underflow at hook 1 [ 188.942480][ T9342] hub 8-0:1.0: USB hub found [ 188.949666][ T9342] hub 8-0:1.0: 1 port detected [ 189.011304][ T13] team0 (unregistering): Port device team_slave_1 removed [ 189.025332][ T13] team0 (unregistering): Port device team_slave_0 removed [ 189.127211][ T5753] Bluetooth: hci2: command tx timeout [ 189.255583][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.266618][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.274278][ T9285] bridge_slave_0: entered allmulticast mode [ 189.281735][ T9285] bridge_slave_0: entered promiscuous mode [ 189.301165][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.305171][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.310629][ T9285] bridge_slave_1: entered allmulticast mode [ 189.314822][ T9285] bridge_slave_1: entered promiscuous mode [ 189.388345][ T9285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.448585][ T9285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.572473][ T9285] team0: Port device team_slave_0 added [ 189.579118][ T9285] team0: Port device team_slave_1 added [ 189.617357][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.626239][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.692798][ T9285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.707861][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.713011][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.738949][ T9285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.756274][ T5460] 8021q: adding VLAN 0 to HW filter on device eth19 [ 190.143376][ T9285] hsr_slave_0: entered promiscuous mode [ 190.162152][ T9285] hsr_slave_1: entered promiscuous mode [ 190.175408][ T9285] debugfs: 'hsr0' already exists in 'hsr' [ 190.185038][ T9285] Cannot create hsr debugfs directory [ 190.199571][ T9352] __nla_validate_parse: 2 callbacks suppressed [ 190.199593][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 190.378214][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 190.382413][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 190.385791][ T9368] x_tables: duplicate underflow at hook 1 [ 190.395376][ T9368] hub 8-0:1.0: USB hub found [ 190.403871][ T9368] hub 8-0:1.0: 1 port detected [ 190.469727][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 190.616227][ T9374] x_tables: duplicate underflow at hook 1 [ 190.626297][ T9374] hub 8-0:1.0: USB hub found [ 190.633506][ T9374] hub 8-0:1.0: 1 port detected [ 190.944662][ T9285] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 190.954241][ T9285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.957956][ T9285] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 190.971318][ T9285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.980003][ T9285] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.000472][ T9285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.013782][ T9285] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.030431][ T9285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.121139][ T9382] macsec1: entered promiscuous mode [ 191.127201][ T9382] virt_wifi0: entered promiscuous mode [ 191.195007][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.198491][ T5753] Bluetooth: hci2: command tx timeout [ 191.252396][ T9285] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.271630][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.274702][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.339652][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.342667][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.350123][ T9395] loop5: detected capacity change from 0 to 7 [ 191.355936][ T9395] Dev loop5: unable to read RDB block 7 [ 191.360770][ T9395] loop5: AHDI p1 [ 191.363188][ T9395] loop5: partition table partially beyond EOD, truncated [ 191.430075][ T9397] netlink: 6 bytes leftover after parsing attributes in process `syz.6.898'. [ 191.816600][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 191.833802][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 191.837605][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 191.843522][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 191.858768][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 192.107147][ T9021] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 192.112882][ T5460] 8021q: adding VLAN 0 to HW filter on device eth20 [ 192.368292][ T9021] usb 11-1: Using ep0 maxpacket: 16 [ 192.390871][ T9021] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 192.403293][ T9021] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.415333][ T9021] usb 11-1: Product: syz [ 192.420032][ T9021] usb 11-1: Manufacturer: syz [ 192.426688][ T9021] usb 11-1: SerialNumber: syz [ 192.830181][ T9021] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 192.852236][ T9021] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.856748][ T9021] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 192.867873][ T9021] usb 11-1: media controller created [ 192.883465][ T9021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.984533][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.051299][ T9420] netlink: 'syz.6.903': attribute type 1 has an invalid length. [ 193.112657][ T9420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.113350][ T9021] zl10353_read_register: readreg error (reg=127, ret==-110) [ 193.120279][ T9456] smpboot: CPU 3 is now offline [ 193.174379][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.205668][ T9457] bond1: (slave batadv1): making interface the new active one [ 193.214030][ T9457] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 193.219075][ T9459] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 193.267145][ T845] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 193.270462][ T9459] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 193.271164][ T9420] bond1 (unregistering): (slave batadv1): Releasing active interface [ 193.278150][ T5753] Bluetooth: hci2: command tx timeout [ 193.294032][ T9420] bond1 (unregistering): Released all slaves [ 193.396804][ T9021] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 193.409933][ T9021] usb 11-1: USB disconnect, device number 3 [ 193.413694][ T9285] veth0_vlan: entered promiscuous mode [ 193.418548][ T845] usb 6-1: Using ep0 maxpacket: 16 [ 193.425251][ T9285] veth1_vlan: entered promiscuous mode [ 193.431019][ T845] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 193.435842][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.440206][ T845] usb 6-1: Product: syz [ 193.442048][ T845] usb 6-1: Manufacturer: syz [ 193.443789][ T845] usb 6-1: SerialNumber: syz [ 193.450540][ T9285] veth0_macvtap: entered promiscuous mode [ 193.455895][ T9285] veth1_macvtap: entered promiscuous mode [ 193.468277][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.478273][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.507150][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.510753][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.594216][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.607911][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.614908][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.618571][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.623147][ T9464] loop5: detected capacity change from 0 to 7 [ 193.627761][ T9464] Dev loop5: unable to read RDB block 7 [ 193.629872][ T9464] loop5: AHDI p1 [ 193.631289][ T9464] loop5: partition table partially beyond EOD, truncated [ 193.641177][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.646729][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.656482][ T845] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 193.665354][ T845] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.669526][ T845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 193.672758][ T845] usb 6-1: media controller created [ 193.686110][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.758615][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.763079][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.858662][ T9452] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 193.878670][ T9452] 8021q: adding VLAN 0 to HW filter on device bond9 [ 193.910869][ T845] zl10353_read_register: readreg error (reg=127, ret==-110) [ 193.943132][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 193.953708][ T9452] bond9: (slave batadv5): making interface the new active one [ 193.983297][ T9452] bond9: (slave batadv5): Enslaving as an active interface with an up link [ 194.011143][ T9489] bond9 (unregistering): (slave batadv5): Releasing active interface [ 194.016401][ T9489] bond9 (unregistering): Released all slaves [ 194.134438][ T845] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 194.155633][ T845] usb 6-1: USB disconnect, device number 11 [ 195.262575][ T9517] loop5: detected capacity change from 0 to 7 [ 195.268712][ T9517] Dev loop5: unable to read RDB block 7 [ 195.271193][ T9517] loop5: AHDI p1 [ 195.272888][ T9517] loop5: partition table partially beyond EOD, truncated [ 195.336901][ T9525] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 195.342456][ T9525] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 195.357281][ T5753] Bluetooth: hci2: command tx timeout [ 195.439866][ T9531] CIFS mount error: No usable UNC path provided in device string! [ 195.439866][ T9531] [ 195.444691][ T9531] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.478761][ T9533] __nla_validate_parse: 8 callbacks suppressed [ 195.478980][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 195.494422][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 195.500172][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 195.504952][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 195.509407][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 195.567193][ T6033] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 195.728605][ T6033] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 195.732368][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.735473][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.739795][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.743938][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.748085][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.752058][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.754984][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.758115][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.761560][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.765248][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.769139][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.773283][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.776582][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.779735][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.783374][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.787556][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.791418][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.796110][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.800245][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.803237][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.806617][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.809764][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.812770][ T6033] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.816239][ T6033] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.823628][ T6033] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 195.827285][ T6033] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 195.830817][ T6033] usb 6-1: Product: syz [ 195.832435][ T6033] usb 6-1: Manufacturer: syz [ 195.834407][ T6033] usb 6-1: SerialNumber: syz [ 195.841144][ T6033] usb 6-1: config 0 descriptor?? [ 195.850135][ T6033] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 196.069826][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 196.083018][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 196.087878][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 196.092156][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 196.114375][ T9536] 9pnet_virtio: no channels available for device syz [ 196.379875][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.384540][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.522631][ T10] usb 6-1: USB disconnect, device number 12 [ 196.531525][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 196.547855][ T5826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.567487][ T5834] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.571709][ T5834] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.575617][ T5834] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.416180][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.938'. [ 197.509156][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 197.509176][ T42] audit: type=1326 audit(197.394:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.526275][ T42] audit: type=1326 audit(197.414:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.539469][ T42] audit: type=1326 audit(197.424:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.550547][ T42] audit: type=1326 audit(197.424:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.775249][ T42] audit: type=1326 audit(197.654:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.797598][ T42] audit: type=1326 audit(197.654:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 197.816414][ T42] audit: type=1326 audit(197.654:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="syz.8.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 198.084677][ T9577] tc action pedit 'at' offset -2147483648 out of bounds [ 198.111907][ T9577] comedi comedi1: comedi_config --init_data is deprecated [ 198.234746][ T9523] Process accounting resumed [ 200.009030][ T9617] netlink: 'syz.8.956': attribute type 1 has an invalid length. [ 200.291979][ T9628] smpboot: CPU 1 is now offline [ 200.344056][ T9633] vhci_hcd vhci_hcd.0: remove, state 4 [ 200.346286][ T9633] usb usb38: USB disconnect, device number 1 [ 200.412093][ T9628] smpboot: CPU 3 is now offline [ 200.443344][ T5585] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 200.619365][ T5585] usb 11-1: Using ep0 maxpacket: 16 [ 200.716392][ T5585] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 200.771802][ T5585] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.856931][ T5585] usb 11-1: Product: syz [ 200.878951][ T5585] usb 11-1: Manufacturer: syz [ 200.912788][ T5585] usb 11-1: SerialNumber: syz [ 200.994718][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 200.999678][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.002030][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.004453][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.006308][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.010274][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.012725][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.014912][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.019492][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.023703][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.028279][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.034432][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.043834][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.049069][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.053266][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.058700][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.062671][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.068133][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.074636][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.083922][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.094184][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.099904][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 201.103510][ T5826] vhci_hcd vhci_hcd.0: release socket [ 201.106433][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 201.110491][ T9633] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 201.206509][ T9633] vhci_hcd vhci_hcd.0: remove, state 4 [ 201.210349][ T9633] usb usb37: USB disconnect, device number 1 [ 201.211669][ T5585] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 201.249057][ T5585] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.258124][ T5585] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 201.262564][ T5585] usb 11-1: media controller created [ 201.282066][ T5585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.426213][ T9633] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 201.476969][ T5826] ================================================================== [ 201.480341][ T5826] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 201.483544][ T5826] Read of size 8 at addr ffff888024bb44f8 by task kworker/u32:3/5826 [ 201.488119][ T5826] [ 201.489351][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 201.489373][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.489385][ T5826] Workqueue: usbip_event event_handler [ 201.489451][ T5826] Call Trace: [ 201.489458][ T5826] [ 201.489465][ T5826] dump_stack_lvl+0x100/0x190 [ 201.489486][ T5826] print_report+0x13d/0x4b0 [ 201.489510][ T5826] ? __virt_addr_valid+0x239/0x430 [ 201.489532][ T5826] ? __mutex_lock+0x15ca/0x1bd0 [ 201.489556][ T5826] kasan_report+0xdf/0x1c0 [ 201.489581][ T5826] ? __mutex_lock+0x15ca/0x1bd0 [ 201.489605][ T5826] __mutex_lock+0x15ca/0x1bd0 [ 201.489628][ T5826] ? event_handler+0x1b8/0x570 [ 201.489648][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 201.489674][ T5826] ? event_handler+0xc0/0x570 [ 201.489699][ T5826] ? event_handler+0x158/0x570 [ 201.489715][ T5826] ? kfree+0x22b/0x6c0 [ 201.489733][ T5826] ? event_handler+0x1b8/0x570 [ 201.489750][ T5826] event_handler+0x1b8/0x570 [ 201.489771][ T5826] process_one_work+0xa23/0x1940 [ 201.489802][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 201.489830][ T5826] ? __pfx_event_handler+0x10/0x10 [ 201.489850][ T5826] worker_thread+0x5ef/0xe50 [ 201.489877][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 201.489902][ T5826] ? kthread+0x13a/0x450 [ 201.489922][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 201.489946][ T5826] kthread+0x370/0x450 [ 201.489968][ T5826] ? __pfx_kthread+0x10/0x10 [ 201.489992][ T5826] ret_from_fork+0x72b/0xd50 [ 201.490014][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 201.490034][ T5826] ? __switch_to+0x800/0x10f0 [ 201.490058][ T5826] ? __pfx_kthread+0x10/0x10 [ 201.490080][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.490107][ T5826] [ 201.490114][ T5826] [ 201.558110][ T5826] Allocated by task 1: [ 201.559850][ T5826] kasan_save_stack+0x30/0x50 [ 201.561875][ T5826] kasan_save_track+0x14/0x30 [ 201.563872][ T5826] __kasan_kmalloc+0xaa/0xb0 [ 201.565800][ T5826] __kmalloc_noprof+0x322/0x820 [ 201.567853][ T5826] __usb_create_hcd+0x5e/0xac0 [ 201.569880][ T5826] vhci_hcd_probe+0xf3/0x4e0 [ 201.571842][ T5826] platform_probe+0x106/0x1d0 [ 201.573802][ T5826] really_probe+0x241/0xa60 [ 201.575729][ T5826] __driver_probe_device+0x20e/0x450 [ 201.577816][ T5826] driver_probe_device+0x4a/0x140 [ 201.579840][ T5826] __device_attach_driver+0x1df/0x320 [ 201.582125][ T5826] bus_for_each_drv+0x159/0x1e0 [ 201.584183][ T5826] __device_attach+0x1e4/0x4d0 [ 201.586166][ T5826] device_initial_probe+0xaf/0xd0 [ 201.588256][ T5826] bus_probe_device+0x64/0x160 [ 201.590256][ T5826] device_add+0x121d/0x1970 [ 201.592059][ T5826] platform_device_add+0x35a/0x800 [ 201.593704][ T5826] platform_device_register_full+0x5cf/0x830 [ 201.595638][ T5826] vhci_hcd_init+0x1a1/0x2f0 [ 201.597465][ T5826] do_one_initcall+0x11d/0x700 [ 201.599423][ T5826] kernel_init_freeable+0x6ea/0x7b0 [ 201.601353][ T5826] kernel_init+0x1f/0x1e0 [ 201.602929][ T5826] ret_from_fork+0x72b/0xd50 [ 201.604775][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.606788][ T5826] [ 201.607803][ T5826] Freed by task 9633: [ 201.609488][ T5826] kasan_save_stack+0x30/0x50 [ 201.611550][ T5826] kasan_save_track+0x14/0x30 [ 201.613548][ T5826] kasan_save_free_info+0x3b/0x70 [ 201.615561][ T5826] __kasan_slab_free+0x5f/0x80 [ 201.617487][ T5826] kfree+0x22b/0x6c0 [ 201.619120][ T5826] usb_put_hcd+0x149/0x1f0 [ 201.620927][ T5826] vhci_hcd_remove+0x107/0x1b0 [ 201.622864][ T5826] platform_remove+0x5f/0x80 [ 201.624835][ T5826] device_remove+0xcb/0x180 [ 201.626783][ T5826] device_release_driver_internal+0x44e/0x620 [ 201.629051][ T5826] unbind_store+0xf8/0x110 [ 201.630747][ T5826] drv_attr_store+0x74/0xb0 [ 201.632483][ T5826] sysfs_kf_write+0xf2/0x150 [ 201.634187][ T5826] kernfs_fop_write_iter+0x3e0/0x5f0 [ 201.636111][ T5826] vfs_write+0x6ac/0x1050 [ 201.637687][ T5826] ksys_write+0x12a/0x250 [ 201.639270][ T5826] __do_fast_syscall_32+0xe7/0x970 [ 201.641175][ T5826] do_fast_syscall_32+0x32/0x70 [ 201.643227][ T5826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.645873][ T5826] [ 201.646906][ T5826] Last potentially related work creation: [ 201.649253][ T5826] kasan_save_stack+0x30/0x50 [ 201.651226][ T5826] kasan_record_aux_stack+0xa7/0xc0 [ 201.653389][ T5826] insert_work+0x36/0x230 [ 201.655220][ T5826] __queue_work+0x9bc/0x12b0 [ 201.657150][ T5826] queue_work_on+0x1a9/0x1e0 [ 201.659116][ T5826] usb_hcd_giveback_urb+0x330/0x4a0 [ 201.661303][ T5826] unlink1+0x418/0x510 [ 201.663056][ T5826] usb_hcd_unlink_urb+0x131/0x210 [ 201.665195][ T5826] usb_kill_urb+0x121/0x320 [ 201.667124][ T5826] hub_quiesce+0x1e9/0x320 [ 201.668979][ T5826] hub_suspend+0x4ab/0x9e0 [ 201.670816][ T5826] usb_suspend_both+0x288/0x950 [ 201.672900][ T5826] usb_runtime_suspend+0x49/0x120 [ 201.674913][ T5826] __rpm_callback+0xc8/0x620 [ 201.676886][ T5826] rpm_callback+0x16a/0x1b0 [ 201.678791][ T5826] rpm_suspend+0x2f4/0x11a0 [ 201.680662][ T5826] __pm_runtime_suspend+0xba/0x1a0 [ 201.682802][ T5826] usb_new_device.cold+0xd61/0x115c [ 201.684980][ T5826] register_root_hub+0x4e6/0x639 [ 201.687049][ T5826] usb_add_hcd.cold+0xccd/0x1158 [ 201.689108][ T5826] vhci_hcd_probe+0x14b/0x4e0 [ 201.691095][ T5826] platform_probe+0x106/0x1d0 [ 201.693128][ T5826] really_probe+0x241/0xa60 [ 201.695041][ T5826] __driver_probe_device+0x20e/0x450 [ 201.697176][ T5826] driver_probe_device+0x4a/0x140 [ 201.699334][ T5826] __device_attach_driver+0x1df/0x320 [ 201.701632][ T5826] bus_for_each_drv+0x159/0x1e0 [ 201.703555][ T5826] __device_attach+0x1e4/0x4d0 [ 201.705519][ T5826] device_initial_probe+0xaf/0xd0 [ 201.707628][ T5826] bus_probe_device+0x64/0x160 [ 201.709578][ T5826] device_add+0x121d/0x1970 [ 201.711146][ T5826] platform_device_add+0x35a/0x800 [ 201.713271][ T5826] platform_device_register_full+0x5cf/0x830 [ 201.715821][ T5826] vhci_hcd_init+0x1a1/0x2f0 [ 201.717775][ T5826] do_one_initcall+0x11d/0x700 [ 201.719811][ T5826] kernel_init_freeable+0x6ea/0x7b0 [ 201.722037][ T5826] kernel_init+0x1f/0x1e0 [ 201.723880][ T5826] ret_from_fork+0x72b/0xd50 [ 201.725830][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.727678][ T5826] [ 201.728642][ T5826] Second to last potentially related work creation: [ 201.731335][ T5826] kasan_save_stack+0x30/0x50 [ 201.733271][ T5826] kasan_record_aux_stack+0xa7/0xc0 [ 201.735400][ T5826] insert_work+0x36/0x230 [ 201.737237][ T5826] __queue_work+0x9bc/0x12b0 [ 201.739191][ T5826] queue_work_on+0x1a9/0x1e0 [ 201.741089][ T5826] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 201.743258][ T5826] usb_hcd_submit_urb+0xab7/0x2150 [ 201.745356][ T5826] usb_submit_urb+0x827/0x19b0 [ 201.747324][ T5826] usb_start_wait_urb+0x10e/0x580 [ 201.749365][ T5826] usb_control_msg+0x328/0x4b0 [ 201.751417][ T5826] hub_ext_port_status+0x152/0x600 [ 201.753580][ T5826] hub_activate+0x6e5/0x1c40 [ 201.755562][ T5826] process_one_work+0xa23/0x1940 [ 201.757610][ T5826] worker_thread+0x5ef/0xe50 [ 201.759546][ T5826] kthread+0x370/0x450 [ 201.761245][ T5826] ret_from_fork+0x72b/0xd50 [ 201.763132][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.765113][ T5826] [ 201.766152][ T5826] The buggy address belongs to the object at ffff888024bb4000 [ 201.766152][ T5826] which belongs to the cache kmalloc-8k of size 8192 [ 201.771812][ T5826] The buggy address is located 1272 bytes inside of [ 201.771812][ T5826] freed 8192-byte region [ffff888024bb4000, ffff888024bb6000) [ 201.777395][ T5826] [ 201.778447][ T5826] The buggy address belongs to the physical page: [ 201.781119][ T5826] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24bb0 [ 201.784768][ T5826] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 201.788226][ T5826] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 201.791380][ T5826] page_type: f5(slab) [ 201.793078][ T5826] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 201.796551][ T5826] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 201.800108][ T5826] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 201.803665][ T5826] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 201.807214][ T5826] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 201.810729][ T5826] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 201.814288][ T5826] page dumped because: kasan: bad access detected [ 201.816848][ T5826] page_owner tracks the page as allocated [ 201.819092][ T5826] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8146135344, free_ts 7780764814 [ 201.827028][ T5826] post_alloc_hook+0xfd/0x120 [ 201.829037][ T5826] get_page_from_freelist+0xf48/0x3530 [ 201.831357][ T5826] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 201.833835][ T5826] new_slab+0xa2/0x640 [ 201.835539][ T5826] refill_objects+0xe3/0x410 [ 201.837502][ T5826] __pcs_replace_empty_main+0x376/0x680 [ 201.839832][ T5826] __kmalloc_cache_noprof+0x479/0x6c0 [ 201.842116][ T5826] dummy_hcd_init+0x3ce/0xc00 [ 201.844126][ T5826] do_one_initcall+0x11d/0x700 [ 201.846088][ T5826] kernel_init_freeable+0x6ea/0x7b0 [ 201.848218][ T5826] kernel_init+0x1f/0x1e0 [ 201.850025][ T5826] ret_from_fork+0x72b/0xd50 [ 201.851948][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.853952][ T5826] page last free pid 1 tgid 1 stack trace: [ 201.856348][ T5826] __free_frozen_pages+0x79f/0x1090 [ 201.858522][ T5826] qlist_free_all+0x47/0xf0 [ 201.860406][ T5826] kasan_quarantine_reduce+0x1a0/0x1f0 [ 201.862725][ T5826] __kasan_slab_alloc+0x69/0x90 [ 201.864825][ T5826] __kmalloc_cache_noprof+0x265/0x6c0 [ 201.867085][ T5826] bus_add_driver+0x92/0x5b0 [ 201.869050][ T5826] driver_register+0x1e2/0x360 [ 201.871096][ T5826] __usb_serial_register_drivers+0x66e/0xe60 [ 201.873573][ T5826] do_one_initcall+0x11d/0x700 [ 201.875573][ T5826] kernel_init_freeable+0x6ea/0x7b0 [ 201.877761][ T5826] kernel_init+0x1f/0x1e0 [ 201.879604][ T5826] ret_from_fork+0x72b/0xd50 [ 201.881568][ T5826] ret_from_fork_asm+0x1a/0x30 [ 201.883548][ T5826] [ 201.884558][ T5826] Memory state around the buggy address: [ 201.886867][ T5826] ffff888024bb4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.890152][ T5826] ffff888024bb4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.893060][ T5826] >ffff888024bb4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.896108][ T5826] ^ [ 201.899348][ T5826] ffff888024bb4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.902636][ T5826] ffff888024bb4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.905887][ T5826] ================================================================== [ 202.049065][ T5585] zl10353_read_register: readreg error (reg=127, ret==-110) [ 202.122001][ T9651] raw_sendmsg: syz.8.966 forgot to set AF_INET. Fix it! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.364702][ T9021] libceph: connect (1)[c::]:6789 error -101 [ 202.606764][ T9021] libceph: mon0 (1)[c::]:6789 connect error [ 202.619948][ T5826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.622585][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 202.625667][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.628944][ T5826] Workqueue: usbip_event event_handler [ 202.631009][ T5826] Call Trace: [ 202.632375][ T5826] [ 202.633335][ T5826] dump_stack_lvl+0x100/0x190 [ 202.635017][ T5826] vpanic+0x552/0x970 [ 202.636711][ T5826] ? __pfx_vpanic+0x10/0x10 [ 202.638400][ T5826] ? mark_held_locks+0x40/0x70 [ 202.640262][ T5826] ? __mutex_lock+0x15ca/0x1bd0 [ 202.642080][ T5826] panic+0xd1/0xe0 [ 202.643667][ T5826] ? __pfx_panic+0x10/0x10 [ 202.645512][ T5826] ? __mutex_lock+0x15ca/0x1bd0 [ 202.647526][ T5826] ? preempt_schedule_common+0x42/0xc0 [ 202.649760][ T5826] ? check_panic_on_warn+0x1f/0x90 [ 202.651912][ T5826] check_panic_on_warn.cold+0x19/0x34 [ 202.654145][ T5826] end_report.part.0+0x3a/0x90 [ 202.656103][ T5826] kasan_report.cold+0xe/0x18 [ 202.658061][ T5826] ? __mutex_lock+0x15ca/0x1bd0 [ 202.660148][ T5826] __mutex_lock+0x15ca/0x1bd0 [ 202.662159][ T5826] ? event_handler+0x1b8/0x570 [ 202.664170][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 202.666275][ T5826] ? event_handler+0xc0/0x570 [ 202.668245][ T5826] ? event_handler+0x158/0x570 [ 202.670247][ T5826] ? kfree+0x22b/0x6c0 [ 202.672038][ T5826] ? event_handler+0x1b8/0x570 [ 202.674070][ T5826] event_handler+0x1b8/0x570 [ 202.676056][ T5826] process_one_work+0xa23/0x1940 [ 202.678135][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 202.680391][ T5826] ? __pfx_event_handler+0x10/0x10 [ 202.682593][ T5826] worker_thread+0x5ef/0xe50 [ 202.684578][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 202.686721][ T5826] ? kthread+0x13a/0x450 [ 202.688512][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 202.690656][ T5826] kthread+0x370/0x450 [ 202.692332][ T5826] ? __pfx_kthread+0x10/0x10 [ 202.693822][ T5826] ret_from_fork+0x72b/0xd50 [ 202.695373][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 202.697396][ T5826] ? __switch_to+0x800/0x10f0 [ 202.699354][ T5826] ? __pfx_kthread+0x10/0x10 [ 202.701284][ T5826] ret_from_fork_asm+0x1a/0x30 [ 202.703260][ T5826] [ 202.705226][ T5826] Kernel Offset: disabled [ 202.706804][ T5826] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:40:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc90004957490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6234323038386552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6f721c R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033e19ff8 CR3=00000000254dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f0000000 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=00000000efffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557779a12bd0 000055774642f040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557779a12bd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557779a4b140 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557779a07360 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9da83f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af58ce058b110616 737326015da0295f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737352 737373435c021e73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6273752f302e6463 685f696368762f6d 726f6674616c702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000302e6463 685f696368762f6d 726f6674616c702f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9da83f1b30 0048544150564544 0000000000000021 0000557779a29000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004c00314b4652 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5424ff4 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff88804c7f9438 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff8c400a00 RDI=ffffffff8c400a40 RBP=ffffffff825ac3f0 RSP=ffffc90004ff7968 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88804e102b40 R13=ffff88804fa42b98 R14=0000000000000000 R15=1ffff920009fef42 RIP=ffffffff8bb92a50 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c0df2 CR3=000000004e18c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801cb02540 RSI=ffffffff81b51ece RDI=ffff88801cb02540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031217ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000