last executing test programs: 58.852665395s ago: executing program 2 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 57.894812979s ago: executing program 2 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) 56.666816144s ago: executing program 2 (id=66): r0 = socket(0x10, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000300)=""/137, &(0x7f00000003c0)=0x89) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f5, 0x0, 0x400000000000000}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) unshare(0x24020400) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x8914, &(0x7f0000000040)) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") socket(0x2b, 0x80801, 0x1) bind$unix(r2, &(0x7f0000000500)=@file={0x0, './proc_mnt\x00'}, 0xfffffffffffffe9e) ioctl(r5, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00') bind$x25(r5, &(0x7f0000000080), 0x12) connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0xfffffffffffffffb, {0x3, 0x0, 0x76, 0x8, 0x80002, 0x5, {0x0, 0x20000ffffffff, 0x8000000000, 0x0, 0x5, 0xfffff7fffffffffd, 0x3, 0x4, 0x2, 0x4000, 0xd, 0x0, 0x0, 0x800001, 0x88c9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000005200000428bd7000fcdbdf251c080006000700000008000100", @ANYRES32=0x0, @ANYBLOB="0000009081b059c57257e1cf024e153085139b26be645ebd0faf80644d56257ff4"], 0x24}, 0x1, 0xba01}, 0x0) 55.420056647s ago: executing program 2 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) 54.251967482s ago: executing program 2 (id=75): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00", 0x38415262}) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bf"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) 53.655107878s ago: executing program 2 (id=77): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xfffffee2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80, 0x0) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x3}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f00000001c0)=0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockname$llc(r7, 0x0, &(0x7f0000000100)) 53.393367606s ago: executing program 32 (id=77): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xfffffee2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80, 0x0) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x3}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f00000001c0)=0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockname$llc(r7, 0x0, &(0x7f0000000100)) 47.28599504s ago: executing program 0 (id=98): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x3}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 46.203587609s ago: executing program 0 (id=103): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r0, &(0x7f00000003c0), 0x0) 45.633143156s ago: executing program 0 (id=104): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000884) eventfd(0xfffffff9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r4}) r5 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x80ff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) 44.235035845s ago: executing program 0 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) 44.122450254s ago: executing program 0 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) sendmsg$kcm(r0, 0x0, 0x8000) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000080)='./sys/block/md0/md/dev-ram0/slot\x00', r2, 0x4000, r0}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(r2, 0x0, 0x1, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000800000000000000000000000200000000000000000000000b02000000020000000000000e0300000000000000005f61"], 0x0, 0x50}, 0x28) write(r7, &(0x7f0000000640)='1', 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x2287, &(0x7f0000000c00)={'\x00', 0x9, 0xfffffffc, 0xdbae, 0xffffffff80000000, 0x3}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 43.723040132s ago: executing program 0 (id=114): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x10000, &(0x7f0000001580)={0xa, 0x0, 0x0, @remote}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 43.507398618s ago: executing program 33 (id=114): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x10000, &(0x7f0000001580)={0xa, 0x0, 0x0, @remote}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 4.857377437s ago: executing program 5 (id=243): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') 4.779981119s ago: executing program 5 (id=245): socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 3.915544542s ago: executing program 5 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000d0a01030048cdf227000000000000000a0000010900020073797a310000008f0900303cc812f4d13ced7e01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0xced, 0x3, 0xf8, 0x401}, {0x5, 0xa, 0x8, 0x8}, {0x27, 0x7c, 0x3, 0x804}]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000400)="0096642f160ec189466a365b8bf1dd6c4543de0edf1f788d6457173535daa5fb85e7b3adaf96ee9d72012ed542211c70f7be1c9761675052471cf1e3b43a758cc5537d29b628f6b985e4d43600fc19069db2cde7c1fe163c1c32d17218024d464d634d0132cbb6fd547813db99922f7819e20a20b10bdf74b003396ef4353a7d05529e1a671f9b39a34867bafac5a00ce132514a90d053a6013bd0354c2c0022028000d5d0f3c861fd838a435c8547ec0149915618ef4a532a551529a2ce6dec6b1a", &(0x7f0000000640)="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"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0xffffffd9, 0x7, 0x9, 0x8, 0x80000000, 0x3, 0x401, 0x1, 0x4, 0x2, {0xf, 0x2}, 0x8, 0x5}}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 3.831853032s ago: executing program 5 (id=249): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x28aa02, 0x2f) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x240d4f6463445852, 0x10, 0x9, "ad862c930080149989fc8d503dc3bd3fe37d58128b9ad0099cebdc25f5ab60c9e6d66581000000000000ddffffff000000000000000000000000e800", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x9]}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:04.0/remove/file0\x00', 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x0, {0x1, 0xf0, 0x2}, {0xb9e0e51cfa797192}, 0xff}, {0x0, 0x1, {0x0, 0xf0}, {0x2}, 0x0, 0xfe}], 0x38) write(r2, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a000100"/28], 0x1c}}, 0x8040) write(r4, &(0x7f0000000600)='1', 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x9, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) 3.45030736s ago: executing program 1 (id=253): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) (fail_nth: 14) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.30047957s ago: executing program 3 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) sendmsg$kcm(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="17c85d8f78d5e27b40221ddffd377acb3869a4a8f2c7113fbec14fa12c2b9911f595d6cb1ff6b03c90f4ed76739e2cc28a3e573950e5d9a2fc52709bb112132f1d8a145960c4c622709ada610532ac7856366e3b0476e686b8514e8a85b2c27b2b21ce9f970985f2c567fc45eb71f0b7b2d1d27a5054dbbfefff", 0x7a}, {&(0x7f0000000380)="ab7880416f612bde24485a2ac318f9c03ba2b2d9aad09f60d2e327b437ac009b8adc52d447376a504a9705b1593d1be4b3d9b0c7c2543d7627cd805464bd", 0x3e}, {&(0x7f0000000680)="ca8d244c54184a80c3bf0ae05075198023e9e4ab9e57ea75036fbb7e541f7b40a5192df95efde4584d6dfec50f1adc7ae75dbcce07fc4f3731e602dcf8d22bb712636d70fdf7737cee35a6969f34c2f68bca02397c6f9f4a161500", 0x5b}, {&(0x7f0000000740)="b7584039bcb297996b223d8bc888cc9e73a1b4ff35e7d96dd79feaca7310bd68172e002647550222e78291c3fd43", 0x2e}, {&(0x7f0000000800)="49b3e2e3e654bca3b93973358d81b717aba0a4e60a64c1d9ab1f0a778d3642e45be83fd3de42b13502e293556516dea46054a4d9a302e0ce280f96b73ae16d21b8b0214236f213ecb79d6be82fd12a4c7973a17fae86d68a86779310f4b986f21bfa518bb86e53c124cc73a630ec8fb155d2849ed3ed24d4ee56c34bd3b99a4c4012da810d16a781d48d50d8a8feb0387c2da901eabf450e3783f55af54bd6840a51a6e8384464b7f515f699d62172562d6e8e8cfbcb04c87684ca", 0xbb}], 0x5, &(0x7f0000000900)=[{0x30, 0x103, 0x8000, "eb83ab7f5d163e3a188a78dc4c3d0d0adb3416dbc9af042acec9f82268f99537beb3db"}, {0x58, 0x103, 0x3, "f922115bad96318cb161205dbba8c09e4d453d101873e40e51c4c4caab4075cc9186347a96526c7eef9176d90d8bb35688eaeaddcbc62e636d7e6cddd4aaaa62a8e53f728842db897dd0"}, {0x100c, 0x10c, 0xbfa3, "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"}, {0x50, 0x104, 0x2, "a178fd0357bceba3936a3260088a74d8e3e970e4f18f69914015bbc349089e8815cdd7ccd27aefbbee3b0bbe8842fd7fbfd63793a6d04a74d93d1cabb9e912a382"}, {0x20, 0x103, 0x7, "f977e18dac8364219070f793ea05896e8fc02cb6"}, {0x44, 0x118, 0x6, "87d0f05a3604f2e2df6c6fbbfba17b374c08fb61618bda5d5658fb7ec4b0099713ef80cb6ccb9cc14399b775f14581eccfbfe7b88bcfb0f9"}, {0xc8, 0x108, 0xffff, "8d586b94818544cc70e04a730910fc3fc6256bd3b96335d1eff1979017a8120821a1afa398e79adaf9152e95109a3ba12752baca33b63c5e07fbc24b0c819aa752c1c275cea727787bb1054be8240b200f4b07faeca43a2f3cc2233a3f355f11d5a692c5365f38db1982d6bd74ea238d7b106e053e504a0bcc5ad04acfe6297cdffcf71de01813ba2aff585a157118388fda0cc21c6e37400cf2421c02075681d4b0a986b8d5e6a51fd7d2e487c7ae2841ffa0da21cbf391566f20dd"}, {0xbc, 0x104, 0x81, "89034eab387fde5bfce3973fb5688f562af53079ab34b7596b1edb9637c1afaa5bcb5d9fce17af92a5270a666e1ac04762c304c80ddfc301c550398153c295655340d2c9704640cc7689f1124329d68010fd134aca1fe34586a204ece4f3db31d226c77145d5b232e28cbc0b330d9c1f80096c28870b91bebc511945ba9a5076814d270dd36d568290ddfbdc39280bc19e3077442512f40c77001b713a935a2bdcbd9cc0f83e4114001dcce70bd2"}], 0x12cc}, 0x8000) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000080)='./sys/block/md0/md/dev-ram0/slot\x00', r1, 0x4000, r0}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1:0', 0x3) write(r4, &(0x7f00000004c0)='1:1', 0x3) write(r4, &(0x7f0000000500)='1:2', 0x3) write(r4, &(0x7f0000000540)='1:3', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='0', 0x1) r6 = openat(r1, 0x0, 0x1, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000800000000000000000000000200000000000000000000000b02000000020000000000000e0300000000000000005f61"], 0x0, 0x50}, 0x28) write(r6, &(0x7f0000000640)='1', 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x2287, &(0x7f0000000c00)={'\x00', 0x9, 0xfffffffc, 0xdbae, 0xffffffff80000000, 0x3}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 3.223847241s ago: executing program 1 (id=256): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="41bfb0d8298a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000) 3.024073663s ago: executing program 4 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000d0a01030048cdf227000000000000000a0000010900020073797a310000008f0900303cc812f4d13ced7e01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0xced, 0x3, 0xf8, 0x401}, {0x5, 0xa, 0x8, 0x8}, {0x27, 0x7c, 0x3, 0x804}]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000400)="0096642f160ec189466a365b8bf1dd6c4543de0edf1f788d6457173535daa5fb85e7b3adaf96ee9d72012ed542211c70f7be1c9761675052471cf1e3b43a758cc5537d29b628f6b985e4d43600fc19069db2cde7c1fe163c1c32d17218024d464d634d0132cbb6fd547813db99922f7819e20a20b10bdf74b003396ef4353a7d05529e1a671f9b39a34867bafac5a00ce132514a90d053a6013bd0354c2c0022028000d5d0f3c861fd838a435c8547ec0149915618ef4a532a551529a2ce6dec6b1a", &(0x7f0000000640)="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"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0xffffffd9, 0x7, 0x9, 0x8, 0x80000000, 0x3, 0x401, 0x1, 0x4, 0x2, {0xf, 0x2}, 0x8, 0x5}}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 2.65956698s ago: executing program 4 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.645548716s ago: executing program 3 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) sendmsg$kcm(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="17c85d8f78d5e27b40221ddffd377acb3869a4a8f2c7113fbec14fa12c2b9911f595d6cb1ff6b03c90f4ed76739e2cc28a3e573950e5d9a2fc52709bb112132f1d8a145960c4c622709ada610532ac7856366e3b0476e686b8514e8a85b2c27b2b21ce9f970985f2c567fc45eb71f0b7b2d1d27a5054dbbfefff", 0x7a}, {&(0x7f0000000380)="ab7880416f612bde24485a2ac318f9c03ba2b2d9aad09f60d2e327b437ac009b8adc52d447376a504a9705b1593d1be4b3d9b0c7c2543d7627cd805464bd", 0x3e}, {&(0x7f0000000680)="ca8d244c54184a80c3bf0ae05075198023e9e4ab9e57ea75036fbb7e541f7b40a5192df95efde4584d6dfec50f1adc7ae75dbcce07fc4f3731e602dcf8d22bb712636d70fdf7737cee35a6969f34c2f68bca02397c6f9f4a161500", 0x5b}, {&(0x7f0000000740)="b7584039bcb297996b223d8bc888cc9e73a1b4ff35e7d96dd79feaca7310bd68172e002647550222e78291c3fd43", 0x2e}, {&(0x7f0000000800)="49b3e2e3e654bca3b93973358d81b717aba0a4e60a64c1d9ab1f0a778d3642e45be83fd3de42b13502e293556516dea46054a4d9a302e0ce280f96b73ae16d21b8b0214236f213ecb79d6be82fd12a4c7973a17fae86d68a86779310f4b9", 0x5e}], 0x5, &(0x7f0000000900)=[{0x30, 0x103, 0x8000, "eb83ab7f5d163e3a188a78dc4c3d0d0adb3416dbc9af042acec9f82268f99537beb3db"}, {0x58, 0x103, 0x3, "f922115bad96318cb161205dbba8c09e4d453d101873e40e51c4c4caab4075cc9186347a96526c7eef9176d90d8bb35688eaeaddcbc62e636d7e6cddd4aaaa62a8e53f728842db897dd0"}, {0x100c, 0x10c, 0xbfa3, "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"}, {0x50, 0x104, 0x2, "a178fd0357bceba3936a3260088a74d8e3e970e4f18f69914015bbc349089e8815cdd7ccd27aefbbee3b0bbe8842fd7fbfd63793a6d04a74d93d1cabb9e912a382"}, {0x20, 0x103, 0x7, "f977e18dac8364219070f793ea05896e8fc02cb6"}, {0x44, 0x118, 0x6, "87d0f05a3604f2e2df6c6fbbfba17b374c08fb61618bda5d5658fb7ec4b0099713ef80cb6ccb9cc14399b775f14581eccfbfe7b88bcfb0f9"}, {0xc8, 0x108, 0xffff, "8d586b94818544cc70e04a730910fc3fc6256bd3b96335d1eff1979017a8120821a1afa398e79adaf9152e95109a3ba12752baca33b63c5e07fbc24b0c819aa752c1c275cea727787bb1054be8240b200f4b07faeca43a2f3cc2233a3f355f11d5a692c5365f38db1982d6bd74ea238d7b106e053e504a0bcc5ad04acfe6297cdffcf71de01813ba2aff585a157118388fda0cc21c6e37400cf2421c02075681d4b0a986b8d5e6a51fd7d2e487c7ae2841ffa0da21cbf391566f20dd"}, {0xbc, 0x104, 0x81, "89034eab387fde5bfce3973fb5688f562af53079ab34b7596b1edb9637c1afaa5bcb5d9fce17af92a5270a666e1ac04762c304c80ddfc301c550398153c295655340d2c9704640cc7689f1124329d68010fd134aca1fe34586a204ece4f3db31d226c77145d5b232e28cbc0b330d9c1f80096c28870b91bebc511945ba9a5076814d270dd36d568290ddfbdc39280bc19e3077442512f40c77001b713a935a2bdcbd9cc0f83e4114001dcce70bd2"}], 0x12cc}, 0x8000) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000080)='./sys/block/md0/md/dev-ram0/slot\x00', r2, 0x4000, r0}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(r2, 0x0, 0x1, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000800000000000000000000000200000000000000000000000b02000000020000000000000e0300000000000000005f61"], 0x0, 0x50}, 0x28) write(r7, &(0x7f0000000640)='1', 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x2287, &(0x7f0000000c00)={'\x00', 0x9, 0xfffffffc, 0xdbae, 0xffffffff80000000, 0x3}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 2.312213391s ago: executing program 1 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) 1.379099106s ago: executing program 5 (id=261): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4) shutdown(r5, 0x1) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0xd4, 0x10000000, 0x61, 0x200002000001, 0x0, 0x2004c8, 0xffffffffffffffff, 0x0, 0x36ae, 0x800000000000005, 0x7fff, 0x3, 0x400800000, 0x0, 0xfffffffffffffffd], 0x50000, 0x84}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.378028636s ago: executing program 4 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000d0a01030048cdf227000000000000000a0000010900020073797a310000008f0900303cc812f4d13ced7e01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0xced, 0x3, 0xf8, 0x401}, {0x5, 0xa, 0x8, 0x8}, {0x27, 0x7c, 0x3, 0x804}]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000400)="0096642f160ec189466a365b8bf1dd6c4543de0edf1f788d6457173535daa5fb85e7b3adaf96ee9d72012ed542211c70f7be1c9761675052471cf1e3b43a758cc5537d29b628f6b985e4d43600fc19069db2cde7c1fe163c1c32d17218024d464d634d0132cbb6fd547813db99922f7819e20a20b10bdf74b003396ef4353a7d05529e1a671f9b39a34867bafac5a00ce132514a90d053a6013bd0354c2c0022028000d5d0f3c861fd838a435c8547ec0149915618ef4a532a551529a2ce6dec6b1a", &(0x7f0000000640)="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"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0xffffffd9, 0x7, 0x9, 0x8, 0x80000000, 0x3, 0x401, 0x1, 0x4, 0x2, {0xf, 0x2}, 0x8, 0x5}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_open(&(0x7f0000000140)='\x00', 0x80, 0x0, &(0x7f0000000340)={0xad, 0x10000, 0x5, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 1.377902913s ago: executing program 3 (id=263): socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 1.370787843s ago: executing program 1 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000001180)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x1000, &(0x7f00000012c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.27815139s ago: executing program 3 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) 1.246907221s ago: executing program 4 (id=266): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000001180)=@raw=[@generic={0xb7, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.169584305s ago: executing program 1 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x16, &(0x7f0000001180)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic={0xbf, 0x2, 0xa}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x1000, &(0x7f00000012c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.167382589s ago: executing program 4 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="41bfb0d8298a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x8864000000000000) 1.162085811s ago: executing program 3 (id=269): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="41bfb0d8298a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 1.161392779s ago: executing program 1 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) 1.113201595s ago: executing program 5 (id=271): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x3}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 255.467838ms ago: executing program 4 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48270' (ED25519) to the list of known hosts. [ 42.235079][ T5725] cgroup: Unknown subsys name 'net' [ 42.354371][ T5725] cgroup: Unknown subsys name 'cpuset' [ 42.358361][ T5725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.446524][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.535180][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.537895][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.539701][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.543662][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.544905][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.552443][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.555719][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.559064][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.559729][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.566170][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.568075][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.569939][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.570474][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.571397][ T5758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.572456][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.572798][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.574707][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.577848][ T5758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.582840][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.585900][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.247756][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.253531][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.256686][ T5746] bridge_slave_0: entered allmulticast mode [ 48.260722][ T5746] bridge_slave_0: entered promiscuous mode [ 48.298083][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.301304][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.304387][ T5746] bridge_slave_1: entered allmulticast mode [ 48.308369][ T5746] bridge_slave_1: entered promiscuous mode [ 48.372191][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.380267][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.405671][ T5746] team0: Port device team_slave_0 added [ 48.409249][ T5746] team0: Port device team_slave_1 added [ 48.500789][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.503843][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.514369][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.550502][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.553268][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.563553][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.658012][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.661006][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.663875][ T5755] bridge_slave_0: entered allmulticast mode [ 48.667816][ T5755] bridge_slave_0: entered promiscuous mode [ 48.695532][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.698055][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.700786][ T5755] bridge_slave_1: entered allmulticast mode [ 48.704478][ T5755] bridge_slave_1: entered promiscuous mode [ 48.775669][ T5746] hsr_slave_0: entered promiscuous mode [ 48.780153][ T5746] hsr_slave_1: entered promiscuous mode [ 48.783848][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.786344][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.788618][ T5745] bridge_slave_0: entered allmulticast mode [ 48.791460][ T5745] bridge_slave_0: entered promiscuous mode [ 48.811461][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.816003][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.826381][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.828752][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.831168][ T5745] bridge_slave_1: entered allmulticast mode [ 48.834003][ T5745] bridge_slave_1: entered promiscuous mode [ 48.864239][ T5755] team0: Port device team_slave_0 added [ 48.866122][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.868650][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.871156][ T5754] bridge_slave_0: entered allmulticast mode [ 48.874128][ T5754] bridge_slave_0: entered promiscuous mode [ 48.877879][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.880317][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.882932][ T5754] bridge_slave_1: entered allmulticast mode [ 48.885682][ T5754] bridge_slave_1: entered promiscuous mode [ 48.918873][ T5755] team0: Port device team_slave_1 added [ 48.955834][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.992737][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.003501][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.006754][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.008903][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.016559][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.044785][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.048121][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.050195][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.057717][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.074440][ T5745] team0: Port device team_slave_0 added [ 49.106106][ T5745] team0: Port device team_slave_1 added [ 49.136751][ T5754] team0: Port device team_slave_0 added [ 49.177661][ T5754] team0: Port device team_slave_1 added [ 49.180645][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.183504][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.193640][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.201714][ T5755] hsr_slave_0: entered promiscuous mode [ 49.204391][ T5755] hsr_slave_1: entered promiscuous mode [ 49.206558][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 49.208378][ T5755] Cannot create hsr debugfs directory [ 49.239707][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.241991][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.250347][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.262455][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.264709][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.272462][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.276807][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.279627][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.289887][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.383390][ T5745] hsr_slave_0: entered promiscuous mode [ 49.386474][ T5745] hsr_slave_1: entered promiscuous mode [ 49.389381][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 49.391888][ T5745] Cannot create hsr debugfs directory [ 49.402156][ T5754] hsr_slave_0: entered promiscuous mode [ 49.404413][ T5754] hsr_slave_1: entered promiscuous mode [ 49.406476][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 49.408216][ T5754] Cannot create hsr debugfs directory [ 49.476464][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.490333][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.513133][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.519882][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.540133][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.547329][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.580120][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.584594][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.622212][ T5749] Bluetooth: hci1: command tx timeout [ 49.622465][ T5751] Bluetooth: hci0: command tx timeout [ 49.622996][ T5758] Bluetooth: hci3: command tx timeout [ 49.623183][ T64] Bluetooth: hci2: command tx timeout [ 49.674217][ T5755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.678547][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.684147][ T5755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.689324][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.692591][ T5755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.698130][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.700803][ T5755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.704886][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.783158][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.788105][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.792281][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.796860][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.799671][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.805180][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.809063][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.814157][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.885454][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.893431][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.898457][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.904420][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.911864][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.918299][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.922472][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.926949][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.965779][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.982240][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.019028][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.030794][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.034340][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.049989][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.058480][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.060829][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.079286][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.082334][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.091917][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.094908][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.145929][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.197134][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.210083][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.213280][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.233456][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.243615][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.246907][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.283850][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.302732][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.305679][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.313277][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.316181][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.597595][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.616997][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.660780][ T5746] veth0_vlan: entered promiscuous mode [ 50.667660][ T5755] veth0_vlan: entered promiscuous mode [ 50.678828][ T5755] veth1_vlan: entered promiscuous mode [ 50.687942][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.695927][ T5746] veth1_vlan: entered promiscuous mode [ 50.709410][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.747139][ T5755] veth0_macvtap: entered promiscuous mode [ 50.771057][ T5746] veth0_macvtap: entered promiscuous mode [ 50.776948][ T5755] veth1_macvtap: entered promiscuous mode [ 50.791536][ T5746] veth1_macvtap: entered promiscuous mode [ 50.808119][ T5745] veth0_vlan: entered promiscuous mode [ 50.823574][ T5754] veth0_vlan: entered promiscuous mode [ 50.827185][ T5745] veth1_vlan: entered promiscuous mode [ 50.831757][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.835053][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.845167][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.849209][ T5754] veth1_vlan: entered promiscuous mode [ 50.857840][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.892137][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.903560][ T5745] veth0_macvtap: entered promiscuous mode [ 50.917238][ T5745] veth1_macvtap: entered promiscuous mode [ 50.975792][ T5754] veth0_macvtap: entered promiscuous mode [ 50.992113][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.010055][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.013095][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.013335][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.017435][ T5754] veth1_macvtap: entered promiscuous mode [ 51.024719][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.028208][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.032664][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.064655][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.069807][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.087059][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.097286][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.102544][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.118617][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.133708][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.141799][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.166021][ T5755] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.174833][ T5755] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.184277][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.197680][ T5755] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.212067][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.228130][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.241636][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335911][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.340150][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.341346][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.343496][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.354496][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.408482][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.414518][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.465101][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.501440][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.506984][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.515683][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.531539][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.534908][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.538366][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.573088][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.577550][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.589385][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622543][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.639075][ T5913] Zero length message leads to an empty skb [ 51.681429][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 51.702029][ T5751] Bluetooth: hci0: command tx timeout [ 51.703491][ T5749] Bluetooth: hci1: command tx timeout [ 51.703783][ T5751] Bluetooth: hci2: command tx timeout [ 51.704302][ T64] Bluetooth: hci3: command tx timeout [ 51.714705][ T5917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.858168][ T5924] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7'. [ 51.941652][ T5099] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 52.060960][ T5907] Process accounting resumed [ 52.071783][ T5099] usb 7-1: device descriptor read/64, error -71 [ 52.311359][ T5099] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 52.441406][ T5099] usb 7-1: device descriptor read/64, error -71 [ 52.455799][ T5941] batman_adv: batadv0: Adding interface: veth0 [ 52.460472][ T5941] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.469619][ T5941] batman_adv: batadv0: Interface activated: veth0 [ 52.529039][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.533548][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.539495][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.542384][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.546082][ T5942] batman_adv: batadv0: Interface deactivated: veth0 [ 52.548127][ T5942] batman_adv: batadv0: Removing interface: veth0 [ 52.551578][ T5099] usb usb7-port1: attempt power cycle [ 52.570040][ T5751] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 52.570086][ T5751] Bluetooth: hci0: Malformed LE Event: 0x02 [ 52.578293][ T5937] xt_hashlimit: max too large, truncated to 1048576 [ 52.921826][ T5099] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 52.953345][ T5099] usb 7-1: device descriptor read/8, error -71 [ 52.954300][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 52.991629][ T5949] team0 (unregistering): Port device team_slave_0 removed [ 53.020906][ T5949] team0 (unregistering): Port device team_slave_1 removed [ 53.212791][ T5099] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 53.233659][ T5099] usb 7-1: device descriptor read/8, error -71 [ 53.354555][ T5099] usb usb7-port1: unable to enumerate USB device [ 53.781467][ T5751] Bluetooth: hci3: command tx timeout [ 53.785540][ T5749] Bluetooth: hci0: command tx timeout [ 53.785565][ T5758] Bluetooth: hci1: command tx timeout [ 53.787213][ T5758] Bluetooth: hci2: command tx timeout [ 54.838083][ T5963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.016654][ T5963] md: could not open device unknown-block(1,0). [ 55.215558][ T5963] md: could not open device unknown-block(1,2). [ 55.293580][ T5969] md: could not open device unknown-block(1,3). [ 55.488476][ T5971] team0: Port device geneve2 added [ 55.581667][ T5977] comedi comedi4: comedi_config --init_data is deprecated [ 55.831676][ T5982] md: could not open device unknown-block(1,0). [ 55.862447][ T5751] Bluetooth: hci3: command tx timeout [ 55.863024][ T5749] Bluetooth: hci0: command tx timeout [ 55.864987][ T5751] Bluetooth: hci1: command tx timeout [ 55.871397][ T5751] Bluetooth: hci2: command tx timeout [ 55.873856][ T5984] md: could not open device unknown-block(1,1). [ 55.911651][ T5982] md: could not open device unknown-block(1,2). [ 55.971689][ T5982] md: could not open device unknown-block(1,3). [ 56.805205][ T5965] Process accounting resumed [ 56.845745][ T6003] Need at least one configuration in g1. [ 56.848352][ T6003] udc dummy_udc.0: failed to start g1: -22 [ 56.850518][ T6003] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 56.857278][ T6003] UDC core: g1: couldn't find an available UDC or it's busy [ 56.886666][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 57.084444][ T6013] batman_adv: batadv0: Adding interface: veth0 [ 57.086740][ T6013] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.094543][ T6013] batman_adv: batadv0: Interface activated: veth0 [ 57.152283][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.154592][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.157590][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.159791][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.163443][ T6015] batman_adv: batadv0: Interface deactivated: veth0 [ 57.165456][ T6015] batman_adv: batadv0: Removing interface: veth0 [ 57.232636][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.391422][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 57.402297][ T10] usb 8-1: config 0 has no interfaces? [ 57.404046][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 57.409148][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.419272][ T10] usb 8-1: config 0 descriptor?? [ 57.671679][ T6009] netlink: 52 bytes leftover after parsing attributes in process `syz.3.28'. [ 57.795660][ T10] usb 8-1: USB disconnect, device number 2 [ 57.992771][ T6028] batman_adv: batadv0: Adding interface: veth0 [ 57.999956][ T6028] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.013098][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 58.023640][ T6028] batman_adv: batadv0: Interface activated: veth0 [ 58.052877][ T6029] bridge_slave_1: left allmulticast mode [ 58.054719][ T6029] bridge_slave_1: left promiscuous mode [ 58.058326][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.082392][ T6029] bridge_slave_0: left allmulticast mode [ 58.084904][ T6029] bridge_slave_0: left promiscuous mode [ 58.087649][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.264219][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.269030][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.340484][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.362336][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.407619][ T6030] batman_adv: batadv0: Interface deactivated: veth0 [ 58.417775][ T6030] batman_adv: batadv0: Removing interface: veth0 [ 58.728143][ T6036] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 59.022677][ T6038] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.149625][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 59.309927][ T6038] md: could not open device unknown-block(1,0). [ 59.434844][ T6042] md: could not open device unknown-block(1,1). [ 59.502215][ T6040] md: could not open device unknown-block(1,2). [ 59.562638][ T6038] md: could not open device unknown-block(1,3). [ 60.143129][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 60.401285][ T29] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 60.541301][ T29] usb 5-1: device descriptor read/64, error -71 [ 60.680869][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 60.692926][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 60.699336][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 60.704606][ T6083] team0 (unregistering): Port device geneve2 removed [ 60.781498][ T5099] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 61.009906][ T29] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 61.621425][ T29] usb 5-1: device descriptor read/64, error -71 [ 61.654002][ T847] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.661814][ T847] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 61.732536][ T29] usb usb5-port1: attempt power cycle [ 61.841897][ T6098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.931446][ T6098] md: could not open device unknown-block(1,0). [ 61.991620][ T6098] md: could not open device unknown-block(1,1). [ 62.032741][ T6101] md: could not open device unknown-block(1,2). [ 62.091509][ T29] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 62.092625][ T6098] md: could not open device unknown-block(1,3). [ 62.112901][ T29] usb 5-1: device descriptor read/8, error -71 [ 62.361564][ T29] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 62.382069][ T29] usb 5-1: device descriptor read/8, error -71 [ 62.495386][ T29] usb usb5-port1: unable to enumerate USB device [ 62.632519][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.648136][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.700465][ T5099] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.708042][ T5099] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 62.712166][ T5099] usb 6-1: can't read configurations, error -71 [ 63.648062][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 63.903511][ T5099] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.124105][ T5099] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.131879][ T5099] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 64.147395][ T5099] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.168648][ T5099] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 64.185475][ T5099] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 64.291161][ T5099] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.307646][ T5099] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.314891][ T5099] usb 6-1: Product: syz [ 64.320927][ T5099] usb 6-1: Manufacturer: syz [ 64.416950][ T5099] cdc_wdm 6-1:1.0: skipping garbage [ 64.418870][ T5099] cdc_wdm 6-1:1.0: skipping garbage [ 64.430959][ T5099] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 64.436023][ T5099] cdc_wdm 6-1:1.0: Unknown control protocol [ 64.787592][ T6152] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 64.845939][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 64.956841][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.536793][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 65.572153][ T6167] team0 (unregistering): Port device team_slave_0 removed [ 65.592981][ T6167] team0 (unregistering): Port device team_slave_1 removed [ 66.411279][ T5099] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.503755][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 66.561557][ T5099] usb 8-1: Using ep0 maxpacket: 8 [ 66.588259][ T5099] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 66.597581][ T5099] usb 8-1: config 0 has no interface number 0 [ 66.604901][ T5099] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.614182][ T5099] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 66.636532][ T5099] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.641917][ T5099] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.645922][ T5099] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 66.648634][ T5099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.678541][ T5744] usb 6-1: USB disconnect, device number 4 [ 66.713290][ T5099] usb 8-1: config 0 descriptor?? [ 66.853523][ T5099] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.591134][ T6191] evm: overlay not supported [ 67.615851][ T6174] ======================================================= [ 67.615851][ T6174] WARNING: The mand mount option has been deprecated and [ 67.615851][ T6174] and is ignored by this kernel. Remove the mand [ 67.615851][ T6174] option from the mount to silence this warning. [ 67.615851][ T6174] ======================================================= [ 67.699393][ T42] audit: type=1804 audit(1786092531.608:2): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.65" name="/newroot/13/file0/file1" dev="overlay" ino=100 res=1 errno=0 [ 67.748361][ T6195] random: crng reseeded on system resumption [ 67.824039][ T6195] Restarting kernel threads ... [ 67.829487][ T6195] Done restarting kernel threads. [ 67.834033][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-1) [ 67.837973][ T5824] usb 8-1: USB disconnect, device number 3 [ 67.848553][ T5824] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 68.077798][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 68.146404][ T6202] netlink: 192 bytes leftover after parsing attributes in process `syz.0.68'. [ 69.288550][ T6212] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.321895][ T6212] CIFS: Attempting to mount //127.0.0.1/share [ 69.382708][ T6212] CIFS: VFS: Error connecting to socket. Aborting operation. [ 69.393325][ T6212] CIFS: VFS: cifs_mount failed w/return code = -111 [ 69.445493][ T6212] netlink: 116 bytes leftover after parsing attributes in process `syz.3.70'. [ 69.577440][ T42] audit: type=1800 audit(1786092533.488:3): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.71" name="zoned" dev="configfs" ino=11466 res=0 errno=0 [ 69.627324][ T42] audit: type=1800 audit(1786092533.528:4): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.71" name="zone_nr_conv" dev="configfs" ino=11468 res=0 errno=0 [ 69.644611][ T42] audit: type=1800 audit(1786092533.538:5): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.71" name="power" dev="configfs" ino=11469 res=0 errno=0 [ 69.670113][ T6214] null_blk: nullb1: using native zone append [ 69.973329][ T6214] null_blk: disk nullb1 created [ 70.111844][ T5746] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 70.121413][ T5746] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 70.240675][ T6226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'. [ 70.252879][ T6223] bond1: Removing last arp target with arp_interval on [ 70.259372][ T6223] bond1: entered promiscuous mode [ 70.261148][ T6223] bond1: entered allmulticast mode [ 70.265002][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.483702][ T6231] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 70.692014][ T6235] xt_connbytes: Forcing CT accounting to be enabled [ 70.698161][ T6235] xt_SECMARK: invalid mode: 0 [ 70.829524][ T5823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.908478][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.914475][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.930484][ T5823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.019159][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 71.054899][ T6240] team0 (unregistering): Port device team_slave_0 removed [ 71.062293][ T6240] team0 (unregistering): Port device team_slave_1 removed [ 71.092786][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.099635][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.103892][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.120103][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.126366][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.215927][ T5823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.445270][ T5823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.244180][ T5823] bridge_slave_1: left allmulticast mode [ 72.247404][ T5823] bridge_slave_1: left promiscuous mode [ 72.258060][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.293560][ T5823] bridge_slave_0: left allmulticast mode [ 72.295944][ T5823] bridge_slave_0: left promiscuous mode [ 72.298188][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.318388][ T6263] jffs2: notice: (6263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.477934][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.484781][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.490469][ T5823] bond0 (unregistering): Released all slaves [ 72.511936][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.741465][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.887461][ T6279] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.929279][ T5823] hsr_slave_0: left promiscuous mode [ 72.937373][ T5823] hsr_slave_1: left promiscuous mode [ 72.940700][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.943165][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.946794][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.952499][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.971944][ T5823] veth1_macvtap: left promiscuous mode [ 72.980756][ T5823] veth0_macvtap: left promiscuous mode [ 72.984304][ T5823] veth1_vlan: left promiscuous mode [ 72.990454][ T5823] veth0_vlan: left promiscuous mode [ 73.221297][ T5751] Bluetooth: hci1: command tx timeout [ 73.432796][ T6309] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.484472][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.533108][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.538284][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.543256][ T6242] bridge_slave_0: entered allmulticast mode [ 73.550849][ T6242] bridge_slave_0: entered promiscuous mode [ 73.554189][ T6309] md: could not open device unknown-block(1,1). [ 73.561904][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.569276][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.572145][ T6242] bridge_slave_1: entered allmulticast mode [ 73.576768][ T6242] bridge_slave_1: entered promiscuous mode [ 73.612053][ T6312] md: could not open device unknown-block(1,2). [ 73.615437][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.625277][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.646357][ T6242] team0: Port device team_slave_0 added [ 73.649685][ T6242] team0: Port device team_slave_1 added [ 73.651984][ T6309] md: could not open device unknown-block(1,3). [ 73.679202][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.688355][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.715822][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.722479][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.724738][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.734401][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.766971][ T6242] hsr_slave_0: entered promiscuous mode [ 73.769686][ T6242] hsr_slave_1: entered promiscuous mode [ 73.855540][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.948564][ T6242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.967438][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.978227][ T6242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.986847][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.997099][ T6242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.003164][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.005917][ T6242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.009939][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.135323][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.159277][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.165688][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.168011][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.180764][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.183143][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.458030][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.659436][ T6242] veth0_vlan: entered promiscuous mode [ 74.670029][ T6242] veth1_vlan: entered promiscuous mode [ 74.689707][ T6242] veth0_macvtap: entered promiscuous mode [ 74.694570][ T6242] veth1_macvtap: entered promiscuous mode [ 74.703936][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.712967][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.767780][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.774779][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.809347][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.816177][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.841507][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.845260][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848444][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871719][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.310181][ T5751] Bluetooth: hci1: command tx timeout [ 75.637979][ T6358] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 75.643724][ T6358] netlink: 84 bytes leftover after parsing attributes in process `syz.1.91'. [ 75.646740][ T6358] netlink: 'syz.1.91': attribute type 2 has an invalid length. [ 75.649411][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 76.661586][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.834665][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.837395][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.840675][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.845480][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 76.849653][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 76.857416][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.860394][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.865428][ T34] usb 8-1: Product: syz [ 76.867094][ T34] usb 8-1: Manufacturer: syz [ 76.887276][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 76.891980][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 76.912046][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 76.914559][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 77.391307][ T5751] Bluetooth: hci1: command tx timeout [ 77.651042][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 78.041770][ T6397] jffs2: notice: (6397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.283658][ T6409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 79.428461][ T24] usb 8-1: USB disconnect, device number 4 [ 79.464880][ T5751] Bluetooth: hci1: command tx timeout [ 79.825878][ T6430] program syz.4.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.085410][ T42] audit: type=1800 audit(1786092543.998:6): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.112" name="zoned" dev="configfs" ino=12884 res=0 errno=0 [ 80.105945][ T42] audit: type=1800 audit(1786092544.008:7): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.112" name="zone_nr_conv" dev="configfs" ino=12886 res=0 errno=0 [ 80.119833][ T42] audit: type=1800 audit(1786092544.008:8): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.112" name="power" dev="configfs" ino=12887 res=0 errno=0 [ 80.135311][ T5745] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 80.148157][ T5745] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 80.536246][ T6431] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 80.593258][ T6431] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 80.598686][ T6431] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 80.606051][ T6431] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 80.619267][ T6431] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 80.631280][ T6431] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11959 usecs [ 80.673803][ T6431] pci 0000:00:01.0: Adding to iommu group 1 [ 80.682816][ T6431] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 80.685061][ T6431] pci 0000:00:01.0: vgaarb: bridge control possible [ 80.686975][ T5825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.687119][ T6431] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 80.706329][ T6431] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 80.723352][ T6431] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 80.732342][ T6431] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 80.747155][ T6431] [drm] Found bochs VGA, ID 0xb0c5. [ 80.748990][ T6431] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 80.784894][ T6431] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 80.844878][ T6431] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 80.949390][ T5758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.954078][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.954302][ T5825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.958081][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.965642][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.969328][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.969378][ T6445] comedi comedi4: comedi_config --init_data is deprecated [ 81.053524][ T5825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.147937][ T5825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.150534][ T60] cfg80211: failed to load regulatory.db [ 81.411329][ T5744] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.584698][ T5744] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.588299][ T5744] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.594941][ T5744] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.597978][ T5744] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 81.603981][ T5744] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 81.614261][ T5744] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.617604][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.620132][ T5744] usb 6-1: Product: syz [ 81.625194][ T5744] usb 6-1: Manufacturer: syz [ 81.639061][ T5744] cdc_wdm 6-1:1.0: skipping garbage [ 81.640915][ T5744] cdc_wdm 6-1:1.0: skipping garbage [ 81.650365][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.655534][ T5744] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 81.657712][ T5744] cdc_wdm 6-1:1.0: Unknown control protocol [ 81.663785][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.668662][ T5825] bond0 (unregistering): Released all slaves [ 81.685483][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 82.053702][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 82.128389][ T6487] netlink: 192 bytes leftover after parsing attributes in process `syz.3.123'. [ 82.290215][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.292836][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.295231][ T6441] bridge_slave_0: entered allmulticast mode [ 82.298036][ T6441] bridge_slave_0: entered promiscuous mode [ 82.302291][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.304711][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.313907][ T6441] bridge_slave_1: entered allmulticast mode [ 82.338769][ T6441] bridge_slave_1: entered promiscuous mode [ 82.487795][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.603500][ T5825] hsr_slave_0: left promiscuous mode [ 82.614368][ T5825] hsr_slave_1: left promiscuous mode [ 82.656499][ T5825] veth1_macvtap: left promiscuous mode [ 82.661862][ T5825] veth0_macvtap: left promiscuous mode [ 82.665297][ T5825] veth1_vlan: left promiscuous mode [ 82.677278][ T5825] veth0_vlan: left promiscuous mode [ 82.975938][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.983595][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 83.004606][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.030467][ T6441] team0: Port device team_slave_0 added [ 83.040443][ T6441] team0: Port device team_slave_1 added [ 83.068246][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.071587][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.072860][ T5751] Bluetooth: hci0: command tx timeout [ 83.079460][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.081242][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.087848][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.098022][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.128785][ T6441] hsr_slave_0: entered promiscuous mode [ 83.131417][ T6441] hsr_slave_1: entered promiscuous mode [ 83.134016][ T6441] debugfs: 'hsr0' already exists in 'hsr' [ 83.135932][ T6441] Cannot create hsr debugfs directory [ 83.367560][ T6441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.375456][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.379600][ T6441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.396155][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.403679][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 83.406296][ T6441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.414621][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.418857][ T6441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.428266][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.523704][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.545269][ T6441] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.554788][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.557105][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.568841][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.571261][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.926394][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.145152][ T10] usb 6-1: USB disconnect, device number 5 [ 84.214752][ T5852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.232439][ T6441] veth0_vlan: entered promiscuous mode [ 84.234712][ T5852] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 84.282616][ T6441] veth1_vlan: entered promiscuous mode [ 84.406613][ T6441] veth0_macvtap: entered promiscuous mode [ 84.418936][ T6441] veth1_macvtap: entered promiscuous mode [ 84.441497][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 84.448650][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.466827][ T6558] team0 (unregistering): Port device team_slave_0 removed [ 84.474241][ T6558] team0 (unregistering): Port device team_slave_1 removed [ 84.485358][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.748422][ T5825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.753865][ T5825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.757612][ T5825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.761306][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.153102][ T5751] Bluetooth: hci0: command tx timeout [ 85.605627][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.611397][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.979770][ T6586] binder: BINDER_SET_CONTEXT_MGR already set [ 85.982652][ T6586] binder: 6572:6586 ioctl 4018620d 80000040 returned -16 [ 86.195698][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.201388][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.675948][ T6604] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.792320][ T6604] md: could not open device unknown-block(1,0). [ 86.904526][ T6604] md: could not open device unknown-block(1,1). [ 86.947481][ T6607] md: could not open device unknown-block(1,2). [ 87.011819][ T6610] md: could not open device unknown-block(1,3). [ 87.146802][ T6613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.233501][ T5751] Bluetooth: hci0: command tx timeout [ 87.291449][ T6613] md: could not open device unknown-block(1,0). [ 87.332872][ T6613] md: could not open device unknown-block(1,1). [ 87.393210][ T6613] md: could not open device unknown-block(1,2). [ 87.498902][ T6619] md: could not open device unknown-block(1,3). [ 88.077015][ T6630] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 88.099216][ T6630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.150040][ T6630] bond1: (slave veth3): Enslaving as an active interface with an up link [ 88.168166][ T60] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 88.180990][ T60] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.231272][ T5852] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.392874][ T5852] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.396238][ T5852] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.399960][ T5852] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.403505][ T5852] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.407131][ T5852] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.412740][ T5852] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.416099][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.419171][ T5852] usb 9-1: Product: syz [ 88.420816][ T5852] usb 9-1: Manufacturer: syz [ 88.429882][ T5852] cdc_wdm 9-1:1.0: skipping garbage [ 88.432094][ T5852] cdc_wdm 9-1:1.0: skipping garbage [ 88.435204][ T5852] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 88.437534][ T5852] cdc_wdm 9-1:1.0: Unknown control protocol [ 89.183247][ T6661] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.187646][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 89.265328][ T6661] md: could not open device unknown-block(1,0). [ 89.311408][ T5751] Bluetooth: hci0: command tx timeout [ 89.324443][ T6661] md: could not open device unknown-block(1,1). [ 89.371346][ T6664] md: could not open device unknown-block(1,2). [ 89.411545][ T6661] md: could not open device unknown-block(1,3). [ 89.870023][ T42] audit: type=1804 audit(1786092553.778:9): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.145" name="/newroot/5/file0/file1" dev="overlay" ino=48 res=1 errno=0 [ 90.190867][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 90.319607][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 90.955431][ T5852] usb 9-1: USB disconnect, device number 2 [ 91.126384][ T6690] CIFS: Attempting to mount //127.0.0.1/share [ 91.250981][ T6690] CIFS: VFS: Error connecting to socket. Aborting operation. [ 91.273914][ T6690] CIFS: VFS: cifs_mount failed w/return code = -111 [ 91.345784][ T6690] netlink: 116 bytes leftover after parsing attributes in process `syz.4.152'. [ 91.873559][ T6699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.961404][ T6699] md: could not open device unknown-block(1,0). [ 92.002076][ T6699] md: could not open device unknown-block(1,1). [ 92.061644][ T6699] md: could not open device unknown-block(1,2). [ 92.111404][ T6702] md: could not open device unknown-block(1,3). [ 92.131556][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 93.797386][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 94.419717][ T42] audit: type=1804 audit(1786092558.278:10): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.160" name="/newroot/36/file0/file1" dev="overlay" ino=218 res=1 errno=0 [ 94.777087][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 94.832956][ T6745] jffs2: notice: (6745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.136490][ T6766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.176283][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.168'. [ 95.217083][ T6771] md: could not open device unknown-block(1,0). [ 95.233379][ T6769] team0 (unregistering): Port device team_slave_0 removed [ 95.280234][ T6766] md: could not open device unknown-block(1,1). [ 95.297642][ T6769] team0 (unregistering): Port device team_slave_1 removed [ 95.382581][ T6771] md: could not open device unknown-block(1,2). [ 95.445501][ T6766] md: could not open device unknown-block(1,3). [ 95.954742][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 97.374488][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 97.447639][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 100.541404][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 100.544373][ T6823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.852549][ T6823] md: could not open device unknown-block(1,0). [ 101.037634][ T6832] md: could not open device unknown-block(1,1). [ 101.176088][ T6823] md: could not open device unknown-block(1,2). [ 101.325331][ T6834] md: could not open device unknown-block(1,3). [ 101.651984][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.183'. [ 102.308810][ T6850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.441481][ T6850] md: could not open device unknown-block(1,0). [ 102.491419][ T6850] md: could not open device unknown-block(1,1). [ 102.531883][ T6850] md: could not open device unknown-block(1,2). [ 102.571403][ T6850] md: could not open device unknown-block(1,3). [ 102.620656][ T6852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.711441][ T6852] md: could not open device unknown-block(1,0). [ 102.751471][ T6852] md: could not open device unknown-block(1,1). [ 102.801371][ T6852] md: could not open device unknown-block(1,2). [ 102.804783][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.5.187'. [ 102.841793][ T6852] md: could not open device unknown-block(1,3). [ 102.938403][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 103.278334][ T6870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.423141][ T6870] md: could not open device unknown-block(1,0). [ 103.462031][ T6870] md: could not open device unknown-block(1,1). [ 103.502174][ T6870] md: could not open device unknown-block(1,2). [ 103.552165][ T6870] md: could not open device unknown-block(1,3). [ 104.371822][ T6878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.405938][ T6880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.522656][ T6881] md: could not open device unknown-block(1,0). [ 104.525842][ T6878] md: could not open device unknown-block(1,0). [ 104.528248][ T6882] md: could not open device unknown-block(1,1). [ 104.530424][ T6880] md: could not open device unknown-block(1,1). [ 104.533623][ T6878] md: could not open device unknown-block(1,2). [ 104.585088][ T6878] md: could not open device unknown-block(1,3). [ 104.590575][ T6880] md: could not open device unknown-block(1,2). [ 104.633272][ T6881] md: could not open device unknown-block(1,3). [ 104.731236][ T6888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.739115][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.198'. [ 104.851408][ T6888] md: could not open device unknown-block(1,0). [ 104.891510][ T6888] md: could not open device unknown-block(1,1). [ 104.931636][ T6888] md: could not open device unknown-block(1,2). [ 104.992498][ T6888] md: could not open device unknown-block(1,3). [ 105.032740][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 105.095342][ T6899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 105.637265][ T6904] random: crng reseeded on system resumption [ 105.666048][ T6904] Restarting kernel threads ... [ 105.675420][ T6904] Done restarting kernel threads. [ 105.764767][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 105.860279][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.204'. [ 106.048570][ T6916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.127320][ T6919] random: crng reseeded on system resumption [ 106.149553][ T6919] Restarting kernel threads ... [ 106.155541][ T6922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.159983][ T6919] Done restarting kernel threads. [ 106.231522][ T6922] md: could not open device unknown-block(1,0). [ 106.256997][ T6926] random: crng reseeded on system resumption [ 106.275984][ T6926] Restarting kernel threads ... [ 106.279298][ T6926] Done restarting kernel threads. [ 106.281855][ T6922] md: could not open device unknown-block(1,1). [ 106.321366][ T6922] md: could not open device unknown-block(1,2). [ 106.331674][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 106.345486][ T6930] jffs2: notice: (6930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.361629][ T6922] md: could not open device unknown-block(1,3). [ 106.444075][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'. [ 107.499584][ T6951] faux_driver vkms: [drm] Unknown color mode 8448; guessing buffer size. [ 107.505114][ T6953] random: crng reseeded on system resumption [ 107.513548][ T6953] Restarting kernel threads ... [ 107.515411][ T6953] Done restarting kernel threads. [ 107.567407][ T6958] __nla_validate_parse: 1 callbacks suppressed [ 107.567421][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.225'. [ 107.590952][ T6958] jffs2: notice: (6958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.634362][ T1479] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 107.685401][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 117.776384][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 117.788169][ T7017] fuse: Bad value for 'fd' [ 117.892499][ T7025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.935259][ T7026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.236'. [ 118.084698][ T7020] md: could not open device unknown-block(1,0). [ 118.124629][ T7025] md: could not open device unknown-block(1,1). [ 118.143440][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.5.237'. [ 118.275489][ T7020] md: could not open device unknown-block(1,2). [ 118.335601][ T7025] md: could not open device unknown-block(1,3). [ 119.496088][ T7048] binder: 7047:7048 ioctl 54a2 0 returned -22 [ 119.590628][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'. [ 120.462520][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.246'. [ 120.466746][ T7065] random: crng reseeded on system resumption [ 120.483767][ T7065] Restarting kernel threads ... [ 120.491328][ T7065] Done restarting kernel threads. [ 120.503528][ T7063] jffs2: notice: (7063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.576876][ T7071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.681467][ T7071] md: could not open device unknown-block(1,0). [ 120.753023][ T7071] md: could not open device unknown-block(1,1). [ 120.791356][ T7075] md: could not open device unknown-block(1,2). [ 120.867145][ T7071] md: could not open device unknown-block(1,3). [ 120.959338][ T7086] FAULT_INJECTION: forcing a failure. [ 120.959338][ T7086] name failslab, interval 1, probability 0, space 0, times 1 [ 120.965348][ T7086] CPU: 2 UID: 0 PID: 7086 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(full) [ 120.965364][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.965370][ T7086] Call Trace: [ 120.965389][ T7086] [ 120.965394][ T7086] dump_stack_lvl+0x100/0x190 [ 120.965536][ T7086] should_fail_ex.cold+0x5/0xa [ 120.965557][ T7086] should_failslab+0xc2/0x120 [ 120.965590][ T7086] __kmalloc_noprof+0xfc/0x820 [ 120.965605][ T7086] ? lsm_blob_alloc+0x68/0x90 [ 120.965662][ T7086] ? __pfx_nfsd_fill_super+0x10/0x10 [ 120.965705][ T7086] lsm_blob_alloc+0x68/0x90 [ 120.965715][ T7086] security_sb_alloc+0x25/0x240 [ 120.965729][ T7086] sget_fc+0x3d0/0x1d80 [ 120.965754][ T7086] ? __pfx_test_keyed_super+0x10/0x10 [ 120.965771][ T7086] ? __pfx_set_anon_super_fc+0x10/0x10 [ 120.965787][ T7086] ? __pfx_sget_fc+0x10/0x10 [ 120.965802][ T7086] ? kasan_save_track+0x14/0x30 [ 120.965817][ T7086] ? __kasan_kmalloc+0xaa/0xb0 [ 120.965832][ T7086] ? rcu_is_watching+0x12/0xc0 [ 120.965864][ T7086] ? apparmor_capable+0x1d7/0x4d0 [ 120.965893][ T7086] ? __pfx_nfsd_fill_super+0x10/0x10 [ 120.965914][ T7086] get_tree_keyed+0x59/0x1d0 [ 120.965939][ T7086] vfs_get_tree+0x92/0x320 [ 120.965962][ T7086] path_mount+0x7d0/0x23d0 [ 120.965992][ T7086] ? __pfx_path_mount+0x10/0x10 [ 120.966004][ T7086] ? lockdep_hardirqs_on+0x78/0x100 [ 120.966064][ T7086] ? putname+0xb1/0x110 [ 120.966077][ T7086] ? kmem_cache_free+0x127/0x6b0 [ 120.966093][ T7086] ? __ia32_sys_mount+0x292/0x310 [ 120.966108][ T7086] __ia32_sys_mount+0x292/0x310 [ 120.966123][ T7086] ? __pfx___ia32_sys_mount+0x10/0x10 [ 120.966136][ T7086] ? ksys_write+0x1ac/0x250 [ 120.966146][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 120.966172][ T7086] __do_fast_syscall_32+0xe7/0x970 [ 120.966189][ T7086] ? lockdep_hardirqs_on+0x78/0x100 [ 120.966205][ T7086] do_fast_syscall_32+0x32/0x70 [ 120.966221][ T7086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.966236][ T7086] RIP: 0023:0xf7f42fec [ 120.966250][ T7086] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 120.966255][ T7086] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 120.966266][ T7086] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 120.966273][ T7086] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.966279][ T7086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.966285][ T7086] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.966292][ T7086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.966305][ T7086] [ 121.273609][ T7092] md: could not open device unknown-block(1,0). [ 121.334085][ T7097] md: could not open device unknown-block(1,1). [ 121.406782][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 121.411703][ T7092] md: could not open device unknown-block(1,2). [ 121.431137][ T7099] jffs2: notice: (7099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.452992][ T7097] md: could not open device unknown-block(1,3). [ 121.797970][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 121.814133][ T7104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.033909][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 122.062753][ T7104] md: could not open device unknown-block(1,0). [ 122.105721][ T7106] md: could not open device unknown-block(1,1). [ 122.172104][ T7104] md: could not open device unknown-block(1,2). [ 122.221642][ T7106] md: could not open device unknown-block(1,3). [ 123.011857][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 123.046678][ T7116] jffs2: notice: (7116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.082861][ T7119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.339939][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 124.129710][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.272'. [ 124.437467][ T12] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 124.528101][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 132.345867][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.348579][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 08:49:48 Registers: info registers vcpu 0 CPU#0 RAX=00000000002956e7 RBX=ffffffff8e891480 RCX=ffffffff8bb8b335 RDX=0000000000000000 RSI=ffffffff8e1aa1ca RDI=ffffffff8c400c80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb898ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7406288 CR3=000000005120f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001f495d RBX=ffff88801c73a540 RCX=ffffffff8bb8b335 RDX=0000000000000000 RSI=ffffffff8e1aa1ca RDI=ffffffff8c400c80 RBP=ffffed10038e74a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb898ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c37e156 CR3=0000000025ac6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000022000 RBX=ffff888023c0b1a8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888023c0b180 RDI=ffffffff8ebe8000 RBP=ffff888023c0a540 RSP=ffffc90000538408 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000007 R13=0000000000000005 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff81e54452 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73c82f0 CR3=0000000060aa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005600ff238510 00005600ff237510 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005600ff237510 00005600ff237510 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005600ff176a10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005600ff178d30 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb6f1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb6f152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004d 4554535953425553 0000000000000021 000000007064752d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff8211fdaf RDX=0000000000000000 RSI=ffffffff8c400c00 RDI=ffffffff8e46e938 RBP=0000000000000202 RSP=ffffc90005aef810 R8 =0000000000000000 R9 =fffffbfff224569a R10=ffffffff9122b4d7 R11=0000000000000000 R12=0000000000000001 R13=ffffc90005aefa30 R14=ffffffff8bd2e260 R15=1ffff92000b5df0e RIP=ffffffff8211fdbd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080004000 CR3=0000000060aa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000