last executing test programs: 5m1.497288952s ago: executing program 0 (id=4688): r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000380)="000c4a4f9f9664b689cf126901cc64dfacb06c1401000000d56d9931dbd38a1e865e60c9c58d34c8686425330e7a8de301ab70657eec5e0d94d46b192237", 0x3e}], 0x1) 5m1.42763045s ago: executing program 0 (id=4689): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000340)}], 0x1) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x0, 0x804, 0x388}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) io_uring_enter(r0, 0x47b5, 0x0, 0x0, 0x0, 0x0) 5m1.427519524s ago: executing program 0 (id=4690): openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x25, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x4, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5m1.377701087s ago: executing program 0 (id=4691): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 5m1.377507256s ago: executing program 0 (id=4692): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 5m1.136590517s ago: executing program 0 (id=4693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) 5m1.07777015s ago: executing program 32 (id=4693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) 4m5.816155235s ago: executing program 2 (id=5106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0xe0, &(0x7f0000007880)=[@ip_retopts={{0x10}}], 0x10}, 0x810) 4m5.747036471s ago: executing program 2 (id=5107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x801, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x2000c0d0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0x400007f) openat(r3, &(0x7f0000000100)='.\x00', 0x515401, 0x408) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), &(0x7f00000006c0)) (async) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x400543, 0x0) (async) r9 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x400543, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x1000}, 0x1, {0x0, r10}}) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x1000}, 0x1, {0x0, r10}}) 4m5.475872047s ago: executing program 2 (id=5111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) 4m3.816621524s ago: executing program 2 (id=5125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 4m3.646839001s ago: executing program 2 (id=5126): r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x80) 4m3.427006891s ago: executing program 2 (id=5127): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x1b, 0x0, 0x1ff}, {0x98d, 0x0, 0x3}]}) fchdir(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) 4m3.285181785s ago: executing program 33 (id=5127): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x1b, 0x0, 0x1ff}, {0x98d, 0x0, 0x3}]}) fchdir(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) 3m36.416284346s ago: executing program 5 (id=5320): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3b0, 0x0, 0xe0, 0xe0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @remote, 0x0, 0xffffff00, 0x3, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0xff]}}, 0x9, 0x2, 0x81, 0xfffc, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xbc, 0xe0}, @unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@arp={@remote, @multicast2, 0x0, 0xffffff00, 0xf, 0x1, {@mac=@multicast, {[0x7f, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x6, 0x53, 0x1ff, 0x0, 0x7, 'team_slave_0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x1}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="58538100", @multicast2, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x5, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x402, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x22c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14}, {0x14, 0x1, 'batadv_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x19c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008040) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) 3m36.289749753s ago: executing program 5 (id=5322): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74"], 0x44}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@setneightbl={0x24, 0x43, 0x2, 0x70bd2d, 0x25dfdbff, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x9}, @NDTA_THRESH2={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000610}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x85) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x1, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x41, 0xd08, 0x0, 0xfe, 0x0, 0x8, 0x7, 0x0, 0x122, 0xc000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x14, 0xff, {}, 0x0, 0x0, 0xfb}) 3m36.077058376s ago: executing program 5 (id=5324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x54, 0x22, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "ec8320f025d124f2737f95dd5e1c0855"}, @TCA_CT_LABELS={0x14, 0x7, "b89e50ff7fe78c30a67385f45b055cec"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffff8, 0x8}, {0xec1c, 0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x80}, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(&(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0xa000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x4000006e, 0x0, 0x8}]}) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 3m34.736638135s ago: executing program 5 (id=5330): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) move_mount(r0, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50) 3m34.674855078s ago: executing program 5 (id=5331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000380)={0x8, 0xd000, 0x4, r8, 0xe}) close(r5) 3m34.134973708s ago: executing program 5 (id=5337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000280)={0xfffffff8, r1, 'id0\x00'}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000048c0), 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000005bc0)=[{{&(0x7f0000000380)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1fffff8a, &(0x7f0000000480)=""/32, 0x20}, 0x7}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/183, 0xb7}], 0x1, &(0x7f0000000640)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/26, 0x1a}], 0x1}, 0x7}, {{&(0x7f0000000800)=@nl=@proc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a80)=""/202, 0xc9}], 0x1, &(0x7f0000002080)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000009c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000c00), 0x5}, 0x8}, {{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000000cc0)=""/191, 0xbf}, {&(0x7f0000004b00)=""/119, 0x77}, {&(0x7f00000076c0)=""/4110, 0x100e}, {&(0x7f0000000e00)=""/111, 0x6f}, {&(0x7f0000000a40)=""/22, 0x16}, {&(0x7f0000000ec0)=""/250, 0xfa}, {&(0x7f0000000fc0)=""/97, 0x44}], 0x7}, 0x7}, {{&(0x7f00000030c0)=@vsock, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003140)=""/205, 0xcd}, {&(0x7f0000003240)=""/109, 0x6d}, {&(0x7f00000032c0)=""/226, 0xe2}, {&(0x7f00000033c0)=""/42, 0x2a}, {&(0x7f0000003400)=""/55, 0x37}, {&(0x7f0000003440)=""/244, 0xf4}, {&(0x7f0000003540)=""/80, 0x50}, {&(0x7f00000066c0)=""/4096, 0x1000}, {0xffffffffffffffff}], 0x9, &(0x7f0000003640)=""/142, 0x8e}, 0x8}, {{&(0x7f0000003700)=@phonet, 0x80, &(0x7f0000005b00)=[{&(0x7f0000003780)=""/23, 0x17}, {&(0x7f00000037c0)=""/212, 0xd4}, {&(0x7f00000038c0)=""/226, 0xe2}, {&(0x7f0000004a40)=""/129, 0x81}, {&(0x7f00000039c0), 0xc}, {&(0x7f0000005ac0)=""/63, 0x3f}], 0x6, &(0x7f0000005b40)=""/113, 0x71}, 0x2}], 0x8, 0xa604f6a1af868a5a, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x2002}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0xd60fb0ed41debb90}) (async) sendmsg$nl_crypto(r5, 0x0, 0x60004014) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000001800"/28], 0x48) (async) unshare(0x22020400) (async) r10 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x3, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x46, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r12, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)}}], 0x1, 0x1000) 3m34.054499642s ago: executing program 34 (id=5337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000280)={0xfffffff8, r1, 'id0\x00'}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000048c0), 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000005bc0)=[{{&(0x7f0000000380)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1fffff8a, &(0x7f0000000480)=""/32, 0x20}, 0x7}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/183, 0xb7}], 0x1, &(0x7f0000000640)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/26, 0x1a}], 0x1}, 0x7}, {{&(0x7f0000000800)=@nl=@proc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a80)=""/202, 0xc9}], 0x1, &(0x7f0000002080)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000009c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000c00), 0x5}, 0x8}, {{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000000cc0)=""/191, 0xbf}, {&(0x7f0000004b00)=""/119, 0x77}, {&(0x7f00000076c0)=""/4110, 0x100e}, {&(0x7f0000000e00)=""/111, 0x6f}, {&(0x7f0000000a40)=""/22, 0x16}, {&(0x7f0000000ec0)=""/250, 0xfa}, {&(0x7f0000000fc0)=""/97, 0x44}], 0x7}, 0x7}, {{&(0x7f00000030c0)=@vsock, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003140)=""/205, 0xcd}, {&(0x7f0000003240)=""/109, 0x6d}, {&(0x7f00000032c0)=""/226, 0xe2}, {&(0x7f00000033c0)=""/42, 0x2a}, {&(0x7f0000003400)=""/55, 0x37}, {&(0x7f0000003440)=""/244, 0xf4}, {&(0x7f0000003540)=""/80, 0x50}, {&(0x7f00000066c0)=""/4096, 0x1000}, {0xffffffffffffffff}], 0x9, &(0x7f0000003640)=""/142, 0x8e}, 0x8}, {{&(0x7f0000003700)=@phonet, 0x80, &(0x7f0000005b00)=[{&(0x7f0000003780)=""/23, 0x17}, {&(0x7f00000037c0)=""/212, 0xd4}, {&(0x7f00000038c0)=""/226, 0xe2}, {&(0x7f0000004a40)=""/129, 0x81}, {&(0x7f00000039c0), 0xc}, {&(0x7f0000005ac0)=""/63, 0x3f}], 0x6, &(0x7f0000005b40)=""/113, 0x71}, 0x2}], 0x8, 0xa604f6a1af868a5a, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x2002}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0xd60fb0ed41debb90}) (async) sendmsg$nl_crypto(r5, 0x0, 0x60004014) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000001800"/28], 0x48) (async) unshare(0x22020400) (async) r10 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x3, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x46, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r12, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)}}], 0x1, 0x1000) 1m5.173842708s ago: executing program 1 (id=6166): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x6}], 0x2, 0x40002000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.120906874s ago: executing program 1 (id=6169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001680)=""/188, 0xbc}], 0x1}, 0x6}], 0x2, 0x40002000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.077418375s ago: executing program 1 (id=6171): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x20, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0xc}}], 0xc}, 0x800) 1m5.074394298s ago: executing program 4 (id=6172): mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc0ed0000, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) (async) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) 1m5.072269808s ago: executing program 1 (id=6173): epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x6000000, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) 1m4.996117564s ago: executing program 4 (id=6174): io_setup(0xa, &(0x7f00000001c0)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)=0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/hibernate_compression_threads', 0x80001, 0x20) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000bc0)='\x00\x00', 0x2, 0x1000000000003}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0xfffffffffffffe04, 0xffffffffffffffff, 0x0) clock_getres(0x5, &(0x7f0000000000)) 1m4.995876033s ago: executing program 1 (id=6175): ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 1m4.854099598s ago: executing program 4 (id=6176): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'fuse\x00'}, {0x20, '/dev/fuse\x00'}, {0x20, '&^/('}, {0x20, 'fuse\x00'}, {0x20, '-'}, {0x20, 'fuse\x00'}], 0xa, "a0a5eb8125d1cee13a1013ae441bca3f2ac92e7e17a4ccc131b11d87b2595d37f0b87a881cac004daa2134865dddd8deb4c5983b6cb5f325d07ad37654be354724e4be25424b69ba97dc36bb6a9c3a62cdbeca4bde6c3ef73115971eabcf61ccd3c413ca987ad6f4404f04be62fd41447195154e19a52b56143a3ee400df1f2ddafcbb8fde1ca7331e8c6f111d"}, 0x1bf) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x2444, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x100000, 0x400040, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) 1m4.853886591s ago: executing program 3 (id=6177): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2814\x00', [0x5c22, 0x800, 0x1, 0xffff3244, 0x82, 0xe6, 0xc, 0x4, 0x8005, 0x4, 0x695b, 0x2, 0xa0000000, 0x403, 0x6, 0x1, 0x1000001, 0x0, 0x10, 0x8, 0x90, 0x2, 0x200006, 0x5, 0x8006, 0x8, 0x2, 0x200008, 0x5, 0x41, 0xfffffffd, 0x225c0000]}) 1m4.783591965s ago: executing program 1 (id=6178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r2, r2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r3, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x140d, 0x800, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000040)) 1m4.782924482s ago: executing program 4 (id=6179): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x24000) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x5b304275, 0x6, 0x1010, 0x1, 0x480000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x101, 0x8}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, r0, 0x0, 0x1, 0x6}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5bf6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x2, 0xa, 0xffffffffffffffea, 0x10}, @ldst={0x0, 0x1, 0x1, 0x3, 0xe, 0xffffffffffffffc0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x44}, @ldst={0x0, 0x2, 0x6, 0x9, 0x0, 0x20, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0xd, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r3, r4, r5], &(0x7f0000000300)=[{0x4, 0x2, 0xa, 0xd}, {0x2, 0x5, 0x2, 0xb}, {0x2, 0x2, 0xd, 0xc}, {0x4, 0x3, 0x5, 0x3}, {0x0, 0x1, 0x4, 0xa}, {0x4, 0x3, 0x2, 0xa}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@bridge_getlink={0x130, 0x12, 0x500, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x400, 0x10000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'pimreg0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x5}}}}, @IFLA_IFALIASn={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_PHYS_SWITCH_ID={0x21, 0x24, "45b32745d977bd904a921436e17b0d8f5c5a488065520b2f700c8a1496"}, @IFLA_MAP={0x20, 0xe, {0x543e, 0xe, 0x6, 0x2, 0x51, 0x6}}, @IFLA_MAP={0x20, 0xe, {0xffffffffffffaee8, 0x85f, 0x0, 0xfff7, 0x26}}, @IFLA_MAP={0x20, 0xe, {0x0, 0x1, 0x7, 0xad3, 0x3, 0x6}}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000640), &(0x7f0000000680)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80, 0x100, &(0x7f00000006c0)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x4, 0x7, 0x4, "f6fc9e39b2773bff2354ed5f06d29059ff85aef47d4191791ad18192f9dd8a0adb250cd2b93fd8b6dc50df3e3d187a11645bae6267656ee945acc090c6408f2a", "037bd0608a5a2db46b8acc6757353eb8b07c0001788696e1b22892b2747bcf8853f4d02efffbac8ba94ca941c903d36f073897d61dd7c488654456ca617cee03", "6a8c0a877fc866a7a9b7192a5dea9dbd6e2c8a480f67a19d9fe20223a0aadd28", [0x3, 0x1]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r7) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000840), 0x4) fsetxattr$security_evm(r6, &(0x7f0000000880), &(0x7f00000008c0)=@v2={0x5, 0x0, 0xb, 0x0, 0x31, "86aef8c0382787b9c42a91568ba424066c5df563c0ff26a99b40d4a923e4122934cb4ab669244181df20b659cd2e5ad04d"}, 0x3a, 0x2) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000900)={'veth1_to_bridge\x00'}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0xf, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0x401, 0x77, &(0x7f0000000a00)=""/119, 0x40f00, 0x7, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x7, 0xaf21}, 0x10, 0xffffffffffffffff, r8, 0x3, 0x0, &(0x7f0000000b80)=[{0x0, 0x5, 0x4, 0x4}, {0x2, 0x3, 0xa, 0x2}, {0x2, 0x1, 0x10, 0x5}], 0x10, 0x8}, 0x94) r9 = openat$sndseq(0xffffff9c, &(0x7f0000000c80), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000cc0)={{0x80, 0x78}, {0x3, 0x5f}, 0x9, 0x5, 0x3}) openat$tun(0xffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000d80)={0x0, 0x0, "5b7cb1b0e83688cf06e77d92be1badf8"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000dc0)={0x2710, 0xc, 0x26000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, 0x0, 0x2, 0x101, 0x0, 0x0, {0xd386f722a2c7b898, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3e}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private2}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x40005}, 0x20000845) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000fc0)={0x4cc7, "8ad3a375e96480ab6d0331c89c7c144b3f20f547928178d0123c3f8cb4b1c1f9", 0x820, 0x1, 0xaec2, 0x8, 0x1}) socket$packet(0x11, 0x3, 0x300) recvfrom$inet(r2, &(0x7f0000001040)=""/131, 0x83, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001100)=0x3) 1m4.735911118s ago: executing program 4 (id=6180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001680)=""/188, 0xbc}], 0x1}, 0x6}], 0x2, 0x40002000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m4.735760286s ago: executing program 3 (id=6181): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x20fe}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05090110"], 0xf) 1m4.73555329s ago: executing program 4 (id=6182): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x40000, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1m4.665838883s ago: executing program 3 (id=6183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0xc050) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x10040000) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/47, 0x2f}, {&(0x7f0000002440)=""/106, 0x6a}], 0x8) (async) r2 = syz_io_uring_setup(0x2d9e, &(0x7f0000002500)={0x0, 0x78dd, 0x10000, 0x1, 0x2bf}, &(0x7f0000002580), &(0x7f00000025c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002640), r2) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002780)={&(0x7f0000002680)={0x100, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb9, 0x3, "a88706a43636a9d470402c575e72693da2b633f770c13e01a50fff8169e9a2a330d145ce396cddb6a037312508f1b0f61994c4c37bd15d78778da054cff67c947836aeecacaadc6ed45dccb37922ed507d2bb3021ceb57fedd887e240cbe38944dcce81bebf70e059ced6c067ce1df4490fc014b9a25096fc3fcd2b70f3ee6ad5b4005984fbd156faf1c3fda47d2eda05ffce6a7ef81e86c2a3d68b68509986082c3fd069d9ff59943f1e6ce9a086327c4cadff975"}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x41}, 0x84) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x88, 0x2, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xe}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x88}, 0x1, 0x0, 0x0, 0xc4}, 0x8c5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000002d80)={0x2, 0x1, 0xe, 0xd, 0x10e, &(0x7f0000002980)="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"}) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000002dc0)={0x4, "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"}) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000003180)={&(0x7f0000003000)=[{0x1, 0x0, 0x59a, 0x508, 0x200, 0x10a, 0x1, 0x1}, {0x1, 0x0, 0x1ff, 0x9, 0x9, 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0xf732, 0x2, 0x5, 0xff, 0x8, 0x7fffffffffffffff}, {0x3, 0x0, 0x4, 0x5, 0x40, 0x48cd1868, 0x5, 0x8}, {0x0, 0x0, 0x2, 0x6, 0x7, 0x4, 0x2, 0x52}, {0x3, 0x0, 0x6, 0x3, 0x80, 0x9, 0x15ea, 0x1000}], 0x6, 0x38, 0x1, 0xfffffffeffffffff}) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000031c0)=0x6, 0x2, 0x0) (rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000003200)=0xffffffffffffffff) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000003240)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x7, 0x2, 0x5, 0x2, 0x0, 0xacb, 0x52}, &(0x7f0000003300)=0x9c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000003340)={r7, 0x8}, &(0x7f0000003380)=0x8) (async, rerun: 64) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (rerun: 64) ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f00000033c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000003400)={0xfffffbf9, 0x40}) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$rfkill(0xffffff9c, &(0x7f0000003440), 0x0, 0x0) write$rfkill(r9, &(0x7f0000003480)={0x9, 0x6, 0x0, 0x1, 0x1}, 0x8) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003540)={'ip6gre0\x00', &(0x7f00000034c0)={'ip6_vti0\x00', 0x0, 0x5e, 0xb, 0xfe, 0x1, 0x1, @empty, @mcast2, 0x40, 0x8, 0x0, 0xd8000000}}) sendmsg$xdp(r10, &(0x7f0000004980)={&(0x7f0000003580)={0x2c, 0xe, r11, 0x3a}, 0x10, &(0x7f0000004940)=[{&(0x7f00000035c0)="5aef48940e2ad143ebfee07a3c6e5ca1dee60872b171432e0c2679ff5cdaa48ff16b168791e8ec01158caf94a333fcf39a26320edb892a1cb626c0d16df597f02393c774f33dbde0c907b21c288c109b88d021c3933e7d6a90f3c6d197f6b86cd8b83c2d10c8f9fb3dc3619dde6521", 0x6f}, {&(0x7f0000003640)="139e33cc0527aec19942c86c9691f94cdd7141ff1bdeb5bf7c9b3466eeae00c51b039894d58b8d93e33016aa1abcf17829485392ab61e775ee554e41631f42074fdea3d259d86bf2497558691499b8a8133ade68035bc5c71b143c7f29cde5c157500da88e7cdc97830ce8a708eaaafefa550834853e3cc679d9a0cc06d1ba2e3c3da0e55a3a114db8c388ed19c7718685941809373ebefcdc3151dc2a4ba224c90f46229bbb9e", 0xa7}, {&(0x7f0000003700)="3fa339addd2fb5cd9813b969e7e65ec988bfbfabd7ca6621c99e4c2f2cbc242f24d52470259438ee8c700aaafe176ce387459f368a034c7e5dacc6d72de807695a3912", 0x43}, {&(0x7f0000003780)="b182cda0e21ef627d5a9d1e84f34e8756b082ca67e0e84011d0c10040b728df98f949ef6fb15de483d06e242ba9a01fc84f63e82cefaa073aa352d30545ace7cb9d6fa1862a8f0cb60d27ebb0532217dcab9af8e1e103d433fb5c59b28e7e803daf25be99199f6bf33f0f6cfe93cacf4e06fe3144a8acfd51e2647eb92b3936fe4ac2c6e9cef367c1257c3bfa36457e18bfd241ddcbf64e83a68896f9c9f94f7df0b556f0bede9966f9336020d7c6f50477d6c70fd3d1a90121b5f3062bfa699a9009b6f702774b5b844e9ee5629f1366641ef35d71478d9865c85808fcc", 0xde}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000004880)="b1e0da060a37d8a6b7f351ad86b8d30bc92d0054b62cbdddfc79835adddfeb6b2fb4c403207d5907629ddf7b2dddd0928654308a15cb086cde8c28d5854e42573d520fe9e3fc21f081d9a7a61c14ad837ca8ffcdc4a41ebb8f4372b50c904502147c0b5b790520a4a1703c6b046e75b202f32b8f41e36e8170783ddbf04b45732a448de5284481657afbfe4cead7698293e8119d67f803cb01298507804c6ab7e60abf55c84fbf4bd0e138fb50e815e5354f18f135d8a05d", 0xb8}], 0x6}, 0x84) r12 = openat$null(0xffffff9c, &(0x7f00000049c0), 0x101002, 0x0) recvfrom$phonet(r12, &(0x7f0000004a00)=""/174, 0xae, 0x102, &(0x7f0000004ac0)={0x23, 0x4, 0x3, 0x9}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000004b00)={0x0, 0xff, 0x8, 0x4}) 1m4.576230622s ago: executing program 3 (id=6184): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x20, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0xc}}], 0xc}, 0x800) 1m4.575979925s ago: executing program 3 (id=6185): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xa, 0x0, 0x1, 0x0, 0xf9}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) 1m4.525716351s ago: executing program 3 (id=6186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 24.199938821s ago: executing program 35 (id=6182): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x40000, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 24.125238118s ago: executing program 36 (id=6178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r2, r2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r3, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x140d, 0x800, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000040)) 24.085105673s ago: executing program 37 (id=6186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.155695564s ago: executing program 6 (id=6261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797b30000000c03c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c6173740000000004000280140001800a0001006c696d697400000004000280140000001000010000000000000000000084000ae95103a7295d1f7410ecd7c9f580919145f4ae268740d8486c"], 0x118}}, 0x0) 7.155384006s ago: executing program 6 (id=6262): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) read$char_usb(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="b7d3772235fa90c21cbcfeb521b85429d41476c2e9e568de9de94a04f87186d6d3fcb035ef996ad0623f3d53843019e54cc547", 0x33}, {&(0x7f0000000540)="cf1607220e39070b08485896e9ca94dc0fd0e62bbbc644a3351e17c601af68d4a4f0f73917", 0x25}], 0x2, &(0x7f0000001600)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8000}], 0x1, 0x40800) 5.935669536s ago: executing program 8 (id=6271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r3, 0x1) 4.84774135s ago: executing program 8 (id=6277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) sendfile(r1, r1, 0x0, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000100fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000050) openat$binderfs(0xffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000500)={&(0x7f0000000440), 0x0, 0x38, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x13, 0x1, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0b000005000000feffffffffffffff0100010000000000bd0b00000000000001000000000000000000000000000000000000000000000000000000000100060000000800000000000000070000000000000000100000000000000700"/443]) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4.660354572s ago: executing program 9 (id=6280): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = syz_io_uring_setup(0x3de6, &(0x7f0000000300)={0x0, 0x9d2f, 0x800, 0x200000, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4) io_uring_enter(r2, 0x47bc, 0x20, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000100)=@overlay={0xc2, 0xc, 0x4, 0x8, 0x4, {}, {0x5, 0x0, 0xff, 0x8, 0x3, 0xdd, '-VT9'}, 0x8, 0x3, {}, 0xffffffff}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/219, 0xdb) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 3.995098029s ago: executing program 7 (id=6281): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x749b, 0x7, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.894818407s ago: executing program 7 (id=6282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x800940, 0x41) pread64(r2, &(0x7f00000001c0)=""/271, 0x10f, 0x2) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000190001002dbd7000fcdbdf251d01060015003b23a0906cc60f7604000000080005000506fbfc"], 0x34}, 0x1, 0x0, 0x0, 0x2404c080}, 0x24008080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 3.843017975s ago: executing program 8 (id=6283): prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setgid(0xee00) dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) 3.725296436s ago: executing program 6 (id=6284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @local, 0xb}, 0x48) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0185134372446b63f4a9f1dabf6a0bdcbcd5235f8e78eac207f174028bf01aad", "7c269401476e3e012fa8e66e904dcd37f99b4f81b10e92d3f9f5e798de88bd23ca8e3f2155654fdcc87453025baa6840", "af941fbfeed0bd78a40c117998f3f054c46704735d948e7ea72a8936", {"1a8a905ce8ee8798dfdbf2bae3764e97", "4fc3ca5e160ed750474da90e2a078b59"}}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r4, 0x25, 0x2, @void}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7b, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r7, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x184, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.615910663s ago: executing program 9 (id=6285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r3, 0x1) 3.098263674s ago: executing program 6 (id=6286): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x890c}], 0x20, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r4}}], 0x1c, 0x2400e044}, 0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r4, 0x4b, 0x200}, &(0x7f0000000080)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) 3.00471655s ago: executing program 7 (id=6287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.865738586s ago: executing program 7 (id=6288): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 2.685550439s ago: executing program 9 (id=6289): prctl$PR_SET_TSC(0x1a, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x5c22, 0x800, 0x1, 0xffff32c4, 0x2, 0x1, 0x6, 0x4, 0x5, 0x4, 0x695b, 0x0, 0x41, 0x403, 0x6, 0x1, 0x7020, 0x0, 0x3, 0x6, 0x90, 0x4, 0x200006, 0x6, 0x8004, 0x8, 0x0, 0x8, 0x4, 0x44, 0xfffffffd]}) r2 = userfaultfd(0x80001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2d, 0x0, 0x3fff}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) read(r2, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7000004, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x0, 0x9, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x7800, 0xca1f, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7780000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)='GPL\x00', 0xfffffffc, 0x25, &(0x7f0000000380)=""/37, 0x41100, 0x3c, '\x00', r8, 0x0, r5, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x8, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000006c0)=[{0x1, 0x4, 0x8, 0xc}, {0x3, 0x1, 0xe, 0x3}, {0x4, 0x1, 0x2, 0x7}, {0x5, 0x1, 0x7, 0x1}, {0x4, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x7, 0x5}, {0x2, 0x1, 0xb, 0xa}, {0x4, 0x3, 0x1, 0xc}, {0x3, 0x4, 0x9}], 0x10, 0x5}, 0x94) ioctl$COMEDI_INSN(r1, 0x8020640c, &(0x7f00000003c0)={0x6000004, 0x0, 0x0, 0x9, 0xfffffff8}) 2.244809797s ago: executing program 8 (id=6290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x400}}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0xc, &(0x7f0000000300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r10 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000380)=""/225, &(0x7f0000000240)=""/148, &(0x7f0000000140)=""/3, 0x70000}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xfd2f, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="284804000022010024001280110001006272696467655f736c617665000000000c0005800500200000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) 2.195724066s ago: executing program 6 (id=6291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @local}}, 0x76, 0x6, 0x2, 0x8001, 0xff}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f00000001c0)=0x4) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x9, 0x900) sendmsg$inet_sctp(r3, &(0x7f0000000600)={&(0x7f0000000240)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="1bbf8abd9bc888bd41a74c9ec639085fc5f45a225106a99ff81eceac9c99dbd0e4e30bfe81d933c95d4da7697e3373d6c0def3a51ca3c427302621499d4ee23f018365e8fe6d3dc86e357149e98ba276803a178c43c8f965e9525393", 0x5c}, {&(0x7f0000000400)="a49371d16736cae219e335d032e699a49b611a8ba8942418159808cf0a5edced81697c916d1be0546635c721e3934a090a6fa5d9c7395a07531904bf226573812c36f56b556ae54b06f85f28d580d246be2e3427f7dad10f032dbc2ae021a2de5719f7a1e2f697f58cff6acaf2c35c43f248b12fca1dc9c98afe", 0x7a}], 0x3, &(0x7f00000004c0)=[@dstaddrv6={0x1c, 0x84, 0x8, @private1}, @sndrcv={0x2c, 0x84, 0x1, {0x1, 0x9, 0x200, 0xffffffff, 0x8001, 0x7, 0x4, 0x2f}}, @sndrcv={0x2c, 0x84, 0x1, {0xff, 0x2, 0x8009, 0x80000000, 0x38, 0xff, 0x1ccc, 0x5, r1}}, @authinfo={0x10}, @dstaddrv4={0x10, 0x84, 0x7, @broadcast}, @dstaddrv4={0x10, 0x84, 0x7, @empty}, @init={0x14, 0x84, 0x0, {0xc, 0x8001, 0x0, 0x7}}, @dstaddrv6={0x1c, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0x2}}, @sndinfo={0x1c, 0x84, 0x2, {0x6, 0x1, 0x7, 0x7, r2}}], 0x104, 0x4000000}, 0x404c004) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000640)={@mcast2, @empty}) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000680)={0x0, 0x1, 0x3, 0x13a3d924, 0xdc7}) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f00000006c0)) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000700)={0xff}, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={0x0, 0x8, 0x1, [0x8001, 0xfffffffffffffffc, 0x7, 0x60, 0x7], [0x5, 0xffffffff, 0xa87d, 0x100, 0x5a, 0x80000001, 0x7, 0x4, 0x7, 0x9, 0x3, 0x101, 0x401, 0x5, 0x5, 0x7, 0x5, 0x4, 0x3, 0x8, 0x8, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0xf, 0x100000001, 0x4f, 0xb6, 0x401, 0x8108, 0x40, 0x1, 0x10000, 0xf, 0x331, 0x2, 0x4, 0x5, 0x9, 0x1, 0x800, 0x9, 0xffffffff, 0x0, 0x9, 0xf, 0x5, 0x4, 0x5, 0x4, 0x3, 0x7, 0x7, 0x4, 0x3, 0x7, 0x40, 0x711, 0xfffffffffffffffc, 0x2, 0x100000000, 0x8155, 0x4, 0x8001, 0x100000001, 0x4, 0x7800000, 0x8, 0x0, 0x7ff, 0x2, 0xfb, 0xfffffffffffffffc, 0x5, 0xd, 0xb7, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x80000000, 0x1, 0xffffffffffffffff, 0x80, 0x2, 0x200, 0x0, 0xad3d, 0x4, 0x8, 0xd8b, 0x7, 0x7, 0x0, 0x1, 0x8, 0x9, 0x4, 0x7, 0x9dc, 0x4, 0x824e, 0x3, 0x3, 0xf, 0xd, 0x3, 0x7, 0x1, 0x2, 0x1, 0x100000001, 0x7f, 0x9, 0x3, 0xffffffff, 0x8, 0xffffffffffffffff, 0xd4e, 0x10001]}) fchdir(r0) splice(r3, &(0x7f0000000b80)=0xf, r3, &(0x7f0000000bc0)=0x9, 0x8000, 0x1) mount(&(0x7f0000000c00)=@sr0, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='bfs\x00', 0xa0000, &(0x7f0000000cc0)='\x00') r4 = openat$procfs(0xffffff9c, &(0x7f0000000d00)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000d40)={0x0, @bt={0x0, 0x4, 0x0, 0x0, 0x3, 0x81, 0xffffb50d, 0x5, 0x80, 0x8, 0x2, 0x9, 0x2, 0x401, 0x11, 0x10, {0x6, 0x6}, 0x99, 0x4}}) fcntl$notify(r4, 0x402, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000e00)={{r4}, "361fb66e5cfffad783e7b004a4ca6b5f68dd688491eac001f4f1b06940b14899b0a531f00ed375ac9e75234ec3960d642aafae0431693996c717e6504cae27a69f71881d5bdb79ae960e8d8cf46951d8728fce23000136e16a4a38e18da93af50af92e89fb140255490abe5c57ed34803ec6af34bd676aed38674731b303d26ec2e51d39bbe3bc082a10f4c3c14bcd7594386f4dd74d06265fa7f1bd4b0a8b4ad317d753ab67cc7ef03fe59182494df36190fefa47a034346919f166a781b18708b481e07552b16d6bf4e88299c4ff1b8a39c0d9b4962461cb1a78dccb7b8bc9a74d4a8e8f53b65cd5f99530ca548fc4e1f975fe0945db4f30cde353b9464ea27b94a76dbd57aaf1d581514a0fe1c81b5644e3b9912fdbc18994871b7111328392e66dc60f888be3e3015f3a66cf70416d6a37db2dcc0438ba1ece43a26a39c8d6c5feffbc27c4a9a9c8314380f1201a68cf3f798fc0cff23a477c2bd893e8e35fa26d21f4587fb6065f9466fbfa34aaca029894c05f0bf0fdda13132298d5321830001aa547a321fd29be1bd462d0e07217f87bb15e3a9d8c969ac8642aef6f2a939720c5ef6ee0ea8d6a35303245489c813a50a740e761fcc3e83b8aa43e9850f24f284f721c9745e9a1d92ab0d14090a048ebc86612cfec2d04b92437351c482ce23388e892a3efcbd9a72eb318c06cb50d5414e7c48e79c1c7335c23e578fc1706e0e3fa0b8e927880ef15848cefce2095ee9b22a899c0e2d2125400cf2a5872a69fa985c9ef430c9373af4d1b0c5d59ded7eddacda7dfd86d031df14a8309aadd8a4631042f73facd60edd9023956be8b6c5d5eddabf6eb34ddf9914956391e3e9c788a9752daeb4c20f543f250c0c727ff0bb45974a7b6c8d5184393e550fcf2a767350caa662028d7a930fd00e1c7343283dede6a39e37a0bcafb086f52fa3453562b0dd0ac19228e31b50362fef8b69721fcd0d92a236ff7de6b275042cb0a3665aa95316cbb204029bf257c5fff260d90b95f55fe8c1b55ddfd1f9425add904ce846e3ddfe0f0c505f2acca55b77ab9808f0ef24be08925b2b9feebd74308b9bbe165b5ce5f524a7caa164708fa124d80182e75a784df2771c70c94a44f000b404c8f148ea8646bd6541c5963184b5b36cde79509bbe95fef3b16c25aa7e86d2aa336a3a075093858acb62c7d7ea8e6d0228134fc574d87a73c7b7dcdfe2b48c30850b22c473644bec2aca09a1dd8d0cb544b21e76107be3128c784372d8e378897973c7507f12fa48885015087d820746c6ec6c93463cb41e3f9d3c5e0c7f05a488788326a27fafcea16703f9274c414261e48182844fb22199863056b1aaaefa1b2d638be8a6af11316f252db5fcb96719a920b7fce43d8fff13dac5f1acb5533da5d7fbda8efb7aede91ab1e288b630822fbd47aa854f0f561d65decd83fa9ef6ff97fb515b957f7019a6c1294aff9a3426278b79bddefbb426739582361bf9daf735e495e0ad843079c35ec3ac972531c7b41926288a20c706485464cd443c971d660e363171307fb837768fbfc55ef31b06468a8665b3d24b244835f8be1dbb013ad7d47630b332b499d63ecc76b6ca11094ff5a8a448eec051240bd815594438f2e7ad5b60b4c3425de15047b12553e7715e30b0e20ef0c8eab2d121e52789be2c0969550a5431d5092514c244f37f37e736748208b45404f8f7d2eed4eac79f83365483a3f146a582b2d6b265f4815598d0193a2ae85f866ee4583c701a21b00b234567874d6ffd305e1919daa339e1441f9c873ebc01d308cdf727fb770d9ce15f609da0af45760cf1383fa3b79c8991cefacf4257f4844667749f9598fd4ae1d98f7c49d1437a1675f65b31a1ef2ae007a9e3b07f7d72d490ef1084de091fc5c3158687b4fd6c51cff00cd6351bbbcb6ea0815d012f2d3c68021b7ddbba40010b7b2251072842dad56d1e0a40f5057988ca5b82b17c8cf999e6e2c14fa8030b9f86a30de61e7501e5d9cf34f3c294d4b18dac5f1220f8fccc6832f1f49f9dfec1e1b63bbd61b890d5414e241d3ad97390e1e3c8d20c0ea4ebe9a0f2d9fe920c6a9ac07e238e5db6d674df9419acd60593a2379620699a186b965f3bdf7858b607e30382b338648eec765f7336f69e4351500975c6daac5b3ccd2ebe632bcd17f68f4c45d02305dc200a486a5d5b8f2f75af22bf3a3575dcce9be739cee500158a65a9e083b719a1fc542df6af421e02eecdbcfc38f52e401812bbae7f57b716ba86a56e9e688824c7199551170dc65760586485ddc2633b1f43fa9bdd24a3b71cca3600dd2ac5fe65b301b5b201d1cb7ab95a2e053d9bd85d0b7907d5482afa0f6967dfc33b4fdbcd367e0803076c1c21b810d3c4fc56d966a32dfbdc0128a30ae30eecceda587f7c8c3d81e50fa5d48948477a1df895f0d6de0f5bef1e75b1480722970b86a5e4d3a86057cceb07d1f2034f195cf3ef81c2ae9a38d852afcdb2ff12fc6972b77b78b357749fc6e9a6e6c8d512737c2327600e5b870cf512a7bcb66a5db79bd3c1600f12122d9b03039c789800a9e51c0dbf1eef3321ecdec573f9431405dfc828a370f1ebbb248dd02ec49082300a160dfa28c438286f5d41484654fa6c36258c5931fd5ee860abc6b331b551607171462bef050c5eb3ef25c7fdf913db53df54735ef7b22866c672a1ec1c8df551613d730558aaa2fcf3ab5ae7032b618f5411deb84d2af6f0283293f329e74d361fd0caedcb5c1112cd3f31b83fc5c1314e16d96389530787cc97439c40100bfc16c07187fa093c2510a15fbb995e9250c36b6de4d84040f4880e7b9399e41398803fdbc679a00fcff69768a5013527c1f5c56b81e38e0b7d27514b5f4e352d626f83e3abb54c142dc5ab88acf482843c0d0868ae3278b1e668a389908f3c69c640bfab0101ec00cfa76d9e5ce6cb8f079bf2829ea308d007e27267bb9f738daff823cef2acd16403da85c3324743baa499027459ac0b2eb6b2aea151cc1bd50881624987f0507aa5889255ff879584764d915074496257ede354c4eaad33494120adf06a88b697287c50e84bdc90451ef36d81910c07ecc0ffd26917e34c209fcf7c248a66bc82be16e2c93951c84fc56ad6fa603ee259e76a3d87a64e1d98346c6d6ac3ff5677bb3ee961899d1d3ad1fa8c73733dac1b1df08b6aa9d9ae8c3e392066d6fcad887bfe9777e3635d1f53745d7659ce7cb76bec185f7978d6217eab6c78897dbf9f342022444a3c1d1f85d1dc00113d9a5bba024ef3d017027b1a3ce3d667fa21873797b0babc378ac31fab14680b58ced718919970ed7633bf7e896e911cc78b5b7fc5a5618aa808e6452b60e726774ca84dbac15e9844cacfedcbf910dfd0b8f0316e6f651bbf73b7b8c9e1616b9a2dfb8db9150aedf0318a90740cb03fa77b4f36a3675e17feb3130179d42ef25633db1508ab1588de1caa6b2cfd9655d924673a024828be124f72461c28ae21e94f2d2e84ca148e9ac249b11b96b60f7c9d96490d322b80ba19617788efbc628627bd4e2dd0d57e17827eac0f6d91cc1de0a91eb94b626dd54b2de04007e8b401e3ada0ae828a91cab0832f343f3b31b5ef9f74ab1dd09f4f4a077f9574dff1dc85376bcb63be945a4809264643640a2a79cf6c5b51fa9d2eb9634e759ac8aea84b161f36035444905b23534f86eae1bb688ecdaffa4e82229e05b533f4e084aad2f872d110f4bfbfd56b45c90f1c9c628b6a6df9336e431ac906dce624a75348929f68e4f80fe458193a086874f26357aaed92fb4771e1a98f491692f69b5348777321a91b12fd8b7c530b3548c6dbc3ba47b5aacbdd5cdc98b1336da147325107eb19e8b3a9e4d9e74803b865a0ae8263f4a5b0dab9ac141f4897527c0b0f61d47b89adc21cd8b3f36a9215895a45192d50399f162ca20e5ca16209910e9dc40aa1a8e1126345a9f5daed5c74924f708491b49377cbec6a0a75fe063eaf7a141fc6f9b232b41ebce77e73dd0048cf58544076553cfd5ba19519f3b2c9c6a1b63587cfe7b60bc43bbaf79c7eec71b55c20b704a6ade6c791bfbe97b0c5d0a95e62d46ae60f73b758441ca111ac7e6e344a0718a5256b30cccf5b3d21c9105a36ce356caced03855595e333b0bc8c9174dfca27199fa4477f2b28e52cd0805b223eb37f3c6c34f82558fdd285341362de93f748c71a95caf661c17e7c1c6f4e187bf7f276f95422279c767d3c7e7117eb514949894dcf5968819011f519d13acc7de1adcabbb8a9ed9ebfbc9402aba27ab10b2ee10bda0b9bc704e466447ba088f44258d4a49efabea8c7ce6f9fe6d7c23b44b3f109d075952c4bf7060aa67b9e9db3167eb7f666bea3cb9184bc4e1c07ba58c42bddb37e381e5f07639962cef715927e572aab14de203119614485e4826f54411b5a23d11f599b479457a073a8f9d16597314fb17824eee2d6fbf78698ede77f88c6aeb3015fc3b215e1ae4ae37ba5d28c63b9c578c5f5918085d33ad4062a90ce977a323eb8e468ce896b34dc9aef003a7de44492927e786c07b24bb3b10c63797aee57862b1e21c765b8ce35d716d869cbca459051b78a8d98b8d1c972d9f135d54c7eeb2e695ca1d3c1c9aa8aba2e3199322762a29a0896e78d38e5ba10dcf54cad522926b552b32f65e429fdd2b449f3f96587eed23a3d3d104f6ac0a9ed14a2016b936fec256fa6d247dfbd452d679afeaa6cdd2ff46cb6a928ef934363f128540a85f73b2e0d8fcbafe08334069648b6777192b07480bdde8bec474f218473cca9717f824aaa6fe259ef240835537eafcdd6fa36f7cc36a710f84aae74dd631da9cbfe22e52176661b965fe799a24cd55b9a7fd3a0b25eb1069f23e1fb0f89bf6b5a92c9b86b473789705bc61246ca6bb5ed26455355303ec76593af85ae213585f4413a3f3e4ca110ae882bf272ed3236ab92cc3fde35c3fd083cffbbfdc50c8714eb9ed9539de2ff9ffeef76de495a9204de622a193e75469974b1d3cde5d0a1429b97b6e92732bf67a9395d393a34c2bb27093a86d68234881146a9cedfceefd7496d5e569c7b28bb62c310e678c428f809ed18a3e0cecd991906de7b36f4573bfcff251e3df17596c1411e2fa9d241a945b3df20b9324650fbb225027054424e768726b8fc6e57703e9013d6137e8b52394df1ea9137a48523d8094f33e434fa12e14cf262b235bebb612d2cc3d9dc5d878fa7a16f927dd5ff24137765bb1d69f987373a252da81c21923925aaae9d8b9bac2afcf12bb9e8c49cd17c6aab7b0f787de9baf5b3e7c1470946b6fde2adaae334112b35c34a0e95f7b4b911a033966f54e2218c70b768be0f8c2fb78a855d0a8d2f6f26d8b6f5ca8fae1e587b995ae93730a3846341d17874fc41a23a7343c103f3be9b62f660741ca2c82781caedc948c0a03f94b81b9ef9a07599256f418ed3eae71f6e449b855408f632e7bf5761669efc75aa794853474877bd5e6709c605860c9b66d72fb7ae465adcfc0b685e9876fe86ad5c3433affc28fbd5ec2110b0b463c94bc9282a2bb4c5d78f01eb3e6ead98bcd90751da514f944dde51122a174e03ab8b91c8f21f525570de6fc388a58d377d1f830119f5ba5c2ddd2ca02a7e07f518a119ff6b5326bce254101d1de6468aef4b1aedf109f0501c38727546703a105206ac227fbbe6a9d4a7aeabcdd8558791416999e63fa9f19e6d4ab36a000740d2831feb5ab90f05df12e51826b2f86696b05912cbdcd6788"}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001e00)=0x2, 0x4) write$fb(r4, &(0x7f0000001e40)="06fbc117e8c668f800a5e3d5db9f926f6642cacf50b5af76582104a5ae0682788da0f0e3", 0x24) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001e80)) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001ec0)={r2, 0x7fffffff}, &(0x7f0000001f00)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000001f40)={0x0, 0x9, 0x85}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, &(0x7f0000001fc0)={r4}) syz_genetlink_get_family_id$nfc(&(0x7f0000002000), 0xffffffffffffffff) 2.144656048s ago: executing program 6 (id=6292): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) read$char_usb(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="b7d3772235fa90c21cbcfeb521b85429d41476c2e9e568de9de94a04f87186d6d3fcb035ef996ad0623f3d53843019e54cc547", 0x33}, {&(0x7f0000000540)="cf1607220e39070b08485896e9ca94dc0fd0e62bbbc644a3351e17c601af68d4a4f0f73917", 0x25}], 0x2, &(0x7f0000001600)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8000}], 0x1, 0x40800) 2.051235921s ago: executing program 8 (id=6293): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000c00)={0x60, 0x19c50b885bc933d4, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8, 0x0, 0x0, 0xb, 0x0, 0x41, 0x1, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000180)={r1}) r2 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) keyctl$read(0xb, r2, &(0x7f0000000c80)=""/4096, 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x80, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x32400, 0x12345}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.865890591s ago: executing program 7 (id=6294): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xa, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcf, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xf, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x7f, 0x0, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x7, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x0, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x8, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x3, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001d14230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(&(0x7f0000000080)) 1.184310753s ago: executing program 8 (id=6295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffe27, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xffffffffffffffe8}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) openat$snapshot(0xffffff9c, 0x0, 0x20900, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0xa, 0x4e20, 0x377, @remote, 0x10}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)="eab26e4cd8c0f149", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="100000002900000043000000ff030000100000002900000008000000060000001000000029000000430000000900000010000000290000000b0000000000010010000000290000000b000000000100001000000029000000080000009c0600001000000084000000000000000400"], 0x80}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000580)={0x5, 0x0, [{0xa0f, 0x0, 0x8000000000000000}, {0x9bf, 0x0, 0x2}, {0xa5c, 0x0, 0x4}, {0x38c, 0x0, 0x9}, {0xb3e, 0x0, 0x1ff}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000780)="b2a30b8cb21d49b67be5603c1dbc8d42dd7f576667e5dd306ade1ebdbaad433de8aa7b356349d3447943bd1ea5999578f26fe1564539df62b7f2035a30b3a2e24655120228c2bb3817114b35183eae26002916cb4d7051156677a1ca62f9bb4dcd046dab95a2822d79a429c89cbe85a94ac4617665ea697a630796cbadee0e5b3d6deb450f3d4b73b722fc6a188415291f5d38c6184d599d573438a0d9986af7ffa0de429910910ded002e3334cb34502ad70e589f66f641d8927ed914d24e934117b738a7d6e26b92", 0xc9}, {&(0x7f0000000640)="0d134064c04a91f74e7ae755840ead152f4d1a", 0x13}, {&(0x7f0000000680)="8f0b7c2683faeabbd8aa99e055bffe64e6149c7ec9d06a3cec84cac9ca8656f60856c903b0073b6c41d58117111e7092c7862881511f57fb20d5234c91b56915c33a4f68852f7cbb61a75c12f79f3e90ebc7f68cc8e9a6cc6c421d82961bd6bc8bda283dab791217", 0x68}, {&(0x7f0000000880)="cef54388895e1f128d45a0be1f65b36d2eee217f02317055058c9d286592d499153b988f22aaefbb734ee2174be80a6fb200819baf13d925b2e6dd88c3f7fdb5f47f3d993c0f0fcd071ebf42a0923ba167684c9b39c47acaaac927910457116ba5bdf58fe8129d6ca20f51c09d8156813f3509f00ed1e22809", 0x79}, {&(0x7f0000000900)="59f17c416dcaf65c5a080ef3780d88728bb3eae62f01b4a6446eb434efede16ae77aedfe7d497b4dc5c5bae0a818d07871fa751349c70f09c3377b054114ba091d24129a6def890fc05463bf44689cc38294025669da8830ee2e94e9ecb291fc4c741a0ba3fb468e9d8ed9e5cbc5507294c0ece3f6f34ee36e0564cd27f42423030024ad41725d1a5c3475f27d1be7b184123bdd6d97a8e69416103c5b44c1861e5c8370fa71cba0d76999563235f77c46224d82dc", 0xb5}], 0x5, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)="c692ac3f38d1884036d18dd5ab794f8e6876b10411ea1cbf2f9f32cfb90a27f38afafd93a840efd088f6e9651d1507e880ce528437cd91841f714b259f6b50c80764479f184b3eecc4ab6ef5cb6ffb592112df0b87018e8c4515a38853866975491c2c085eca71b505d0a7a52f40479af2e7171cd6e2fb82ec4c88f739e5e90130a0c7f8fb3aa2b0fad8cb95a11697ce9bd2c1e67d0ed14137a0a962a46825b130ae1da80bff68c5b00c4a3f59cd39b5f1b2c983a1e397f85f600f87caed78c8c95422b3fd79a2855653f2599352ef8b073aad1b3f918d", 0xd7}, {&(0x7f0000000b40)="a7f380d002afdbe16312b901db62b2b2ddee7f60797c91b32ed24e9b00785e94921886113a2001af7c582e96bd7f27b5980496f6a69a604ff0cb51c51729fe56374143d968710d6aa8225a1777b9e795310668cf45bf82ada4ec4f1b8fd1e8d4def4d5cf15888430e12baae9b36e0ce26948da94eb8d624473576d206afe2e643da99733d748f45ad65ad532cbb61e4a6db4f4f9435e05312eca7501dac275a252fe266e76518a00b8fa44df9d6538463e0538a6afe05d8ba9d5ec73", 0xbc}], 0x2, &(0x7f0000000c40)=[@rthdrdstopts={{0x14, 0x29, 0x37, {0x84}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}], 0x24}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x100, @loopback, 0x8790}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="b5ea4488e3f751027c84222238dc01d78aa8867342e23f48d8e8f5b0fd2c77bbf66941052b441f77e831c2fe24cb493e78703df784c72bd54673cad27553c75f00b8939f768f249b6295b6c5c883983a5ee3f24aacb1a530abc8d3e2048e4e81f4660108ad09d8b01cb3bab23d4b3311e5d441788d4c6f352eb77f88452169018e05b325ded457f7bd3d6d98dafa097901363a3db0fe513e970091f9316bb1200e84ac29f660a1d0bc3ae823e6c13fbea55fe844f1f1fb55501927bf1bec", 0xbe}], 0x1}}], 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xffffffffffffffc7, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x20, 0x0, 0x8040}, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001800dd8d200000006302000000000000000a000500010000180016801400030000000000000000000000ffffe00000020600150007000000898842f940dc486858498f9475dc9f6cd0b08e0c1bbb9c49ad10ee1b16f0a1d8bc91b97f9937e00ac310e4"], 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000e9000000192600000200000080000000", @ANYRES32, @ANYBLOB="89000000000020000000fabeea7b73920dafa118", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0400000002000000040000000100"/28], 0x50) 1.184166014s ago: executing program 9 (id=6296): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 974.999123ms ago: executing program 9 (id=6297): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1cdf0943670231e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000005000000", @ANYRES32=r3], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 44.809734ms ago: executing program 7 (id=6298): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x0, 0x30e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xf) ftruncate(r5, 0x8800000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000580)={0x1f, @none}, 0x8) listen(r7, 0x0) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r8, r5, 0x0, 0x558410e9) 0s ago: executing program 9 (id=6299): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008530000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfaf00000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (rerun: 64) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, 0x0, 0x800) (async) syz_open_dev$video(&(0x7f0000000040), 0x6f6, 0x640041) (async, rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0xc0, 0x80, 0xff, 0x0, r9}, {0x4, 0x0, 0x100000001, 0x80000000, 0xfff, 0x6, 0x9a, 0x6}, {0x3, 0x200, 0x1, 0x10000}, 0x8, 0x6e6bbd, 0x2, 0x0, 0x0, 0x3}, {{@in6=@local, 0x4d4, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x1, 0x82, 0x3, 0x81, 0x3}}, 0xe4) (async) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000001220f50004"], 0x20) kernel console output (not intermixed with test programs): -19 [ 668.798008][T21573] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5439'. [ 668.801570][T21573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.804938][T21573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.807879][T21573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.811300][T21572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.814854][T21572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.885490][T21575] netlink: 'syz.6.5440': attribute type 1 has an invalid length. [ 668.888855][T21575] macsec0: entered promiscuous mode [ 668.895042][T21575] veth1_macvtap: left promiscuous mode [ 668.904375][T21575] macsec0 (unregistering): left promiscuous mode [ 669.533715][T21607] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5449'. [ 670.378861][T21627] vivid-003: disconnect [ 671.004907][T21624] vivid-003: reconnect [ 671.266478][T21644] vivid-003: disconnect [ 672.123877][T21640] vivid-003: reconnect [ 672.197018][T21657] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5470'. [ 672.201966][T21657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5470'. [ 672.205890][T21657] unsupported nlmsg_type 40 [ 672.230426][T21659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5469'. [ 672.368746][T21669] vivid-003: disconnect [ 673.170344][ T34] net_ratelimit: 24 callbacks suppressed [ 673.170358][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.248020][T21664] vivid-003: reconnect [ 673.334400][T21182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.880161][ T4212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.888331][ T1462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.918954][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.922556][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.925784][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.939828][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.942823][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.956607][T21688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.969778][T21689] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5480'. [ 673.972716][T21689] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5480'. [ 674.462081][T20921] syz_tun (unregistering): left allmulticast mode [ 674.505335][T21700] macvtap1: entered promiscuous mode [ 674.507245][T21700] macvtap1: entered allmulticast mode [ 674.509034][T21700] veth1_vlan: entered allmulticast mode [ 674.667857][T20916] vhci_hcd: connection reset by peer [ 674.671206][T21182] vhci_hcd vhci_hcd.1: stop threads [ 674.673372][T21182] vhci_hcd vhci_hcd.1: release socket [ 674.686465][T21182] vhci_hcd vhci_hcd.1: disconnect device [ 674.736858][T21182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.757300][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 674.824659][T21182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.893129][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.898037][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.901977][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.904737][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.910320][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.949990][T21711] vivid-003: disconnect [ 674.982720][T21182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.094781][T21709] wg2 speed is unknown, defaulting to 1000 [ 675.254723][T21182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.499762][T21182] bridge_slave_1: left allmulticast mode [ 675.506286][T21182] bridge_slave_1: left promiscuous mode [ 675.510884][T21182] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.525325][T21182] bridge_slave_0: left allmulticast mode [ 675.527267][T21182] bridge_slave_0: left promiscuous mode [ 675.529120][T21182] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.624260][T21182] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 675.763079][T21182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.768326][T21182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.772359][T21182] bond0 (unregistering): Released all slaves [ 675.779418][T21706] vivid-003: reconnect [ 675.877344][T21182] tipc: Left network mode [ 675.905344][T21709] chnl_net:caif_netlink_parms(): no params data found [ 676.056765][T21709] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.059158][T21709] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.061527][T21709] bridge_slave_0: entered allmulticast mode [ 676.064728][T21709] bridge_slave_0: entered promiscuous mode [ 676.069321][T21709] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.071673][T21709] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.074026][T21709] bridge_slave_1: entered allmulticast mode [ 676.076744][T21709] bridge_slave_1: entered promiscuous mode [ 676.113172][T21709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.118221][T21709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.134679][T21709] team0: Port device team_slave_0 added [ 676.137936][T21709] team0: Port device team_slave_1 added [ 676.165393][T21709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.175855][T21709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.204413][T21709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.223243][T21709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.229607][T21709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.241842][T21709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.393839][T21709] hsr_slave_0: entered promiscuous mode [ 676.396318][T21709] hsr_slave_1: entered promiscuous mode [ 676.398522][T21709] debugfs: 'hsr0' already exists in 'hsr' [ 676.400415][T21709] Cannot create hsr debugfs directory [ 676.422416][T21182] hsr_slave_0: left promiscuous mode [ 676.425371][T21182] hsr_slave_1: left promiscuous mode [ 676.432515][T21182] veth1_macvtap: left promiscuous mode [ 676.434298][T21182] veth0_macvtap: left promiscuous mode [ 676.436170][T21182] veth1_vlan: left promiscuous mode [ 676.437867][T21182] veth0_vlan: left promiscuous mode [ 676.585449][T21182] team0 (unregistering): Port device team_slave_1 removed [ 676.595223][T21182] team0 (unregistering): Port device team_slave_0 removed [ 676.986335][ T5950] Bluetooth: hci3: command tx timeout [ 677.076652][T21182] IPVS: stop unused estimator thread 0... [ 677.225159][T21779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5499'. [ 677.324378][T21709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.329152][T21709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.333124][T21709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.337583][T21709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.390726][T21709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.400240][T21709] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.408539][T21182] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.411384][T21182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.424532][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.426866][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.432935][T21793] binder: 21792:21793 ioctl c00c6211 ffffffff returned -14 [ 677.491075][T21799] netlink: 'syz.6.5503': attribute type 2 has an invalid length. [ 677.537334][T21709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.561105][T21709] veth0_vlan: entered promiscuous mode [ 677.566726][T21709] veth1_vlan: entered promiscuous mode [ 677.587140][T21709] veth0_macvtap: entered promiscuous mode [ 677.590912][T21709] veth1_macvtap: entered promiscuous mode [ 677.598764][T21709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.604176][T21709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.610314][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.613340][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.616160][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.619211][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.651028][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.651042][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.676618][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.676632][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.879573][T21821] overlayfs: failed to clone upperpath [ 677.976934][T21825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5512'. [ 677.988919][T21825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.283620][T21835] macvtap2: entered promiscuous mode [ 678.285710][T21835] macvtap2: entered allmulticast mode [ 679.066123][ T5950] Bluetooth: hci3: command tx timeout [ 679.069032][ T34] net_ratelimit: 13 callbacks suppressed [ 679.069043][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.391568][T21858] tipc: Started in network mode [ 679.393188][T21858] tipc: Node identity deb436bc551f, cluster identity 4711 [ 679.395575][T21858] tipc: Enabled bearer , priority 0 [ 679.399260][T21858] syzkaller0: entered promiscuous mode [ 679.401007][T21858] syzkaller0: entered allmulticast mode [ 679.415249][T21858] tipc: Resetting bearer [ 679.419393][T21856] tipc: Resetting bearer [ 679.431132][T21856] tipc: Disabling bearer [ 679.467829][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.593210][T21871] fuse: blksize only supported for fuseblk [ 680.117211][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.426709][ T4212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.851660][T21906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.146095][ T5950] Bluetooth: hci3: command tx timeout [ 681.148371][ T6540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.386283][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.738534][ T41] audit: type=1326 audit(1774140583.619:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.763124][ T41] audit: type=1326 audit(1774140583.619:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.782348][ T41] audit: type=1326 audit(1774140583.619:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.796172][ T41] audit: type=1326 audit(1774140583.619:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.808596][ T41] audit: type=1326 audit(1774140583.619:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.817635][ T41] audit: type=1326 audit(1774140583.619:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.826305][ T41] audit: type=1326 audit(1774140583.619:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.834877][ T41] audit: type=1326 audit(1774140583.619:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.843868][ T41] audit: type=1326 audit(1774140583.619:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 681.853034][ T41] audit: type=1326 audit(1774140583.629:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.3.5553" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 682.188908][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.549793][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5558'. [ 682.569333][T21948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.574891][T21948] bond1: entered promiscuous mode [ 682.582867][T21948] dummy0: entered promiscuous mode [ 682.585113][T21948] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 682.589586][T21947] bond1: left promiscuous mode [ 682.591247][T21947] dummy0: left promiscuous mode [ 682.667081][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.747668][T21951] block device autoloading is deprecated and will be removed. [ 683.226051][ T5950] Bluetooth: hci3: command tx timeout [ 683.228021][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.881697][T21981] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 683.883727][T21981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.889740][T21981] vhci_hcd vhci_hcd.0: Device attached [ 683.890002][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.899209][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.903153][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.905743][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.909022][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.931529][T21982] wg2 speed is unknown, defaulting to 1000 [ 684.126046][ T4212] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 684.175189][T21982] chnl_net:caif_netlink_parms(): no params data found [ 684.235660][T21982] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.238236][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.240565][T21982] bridge_slave_0: entered allmulticast mode [ 684.243305][T21982] bridge_slave_0: entered promiscuous mode [ 684.246580][T21982] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.248858][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.251159][T21982] bridge_slave_1: entered allmulticast mode [ 684.253784][T21982] bridge_slave_1: entered promiscuous mode [ 684.269300][T21982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.274069][T21982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.277204][ T34] net_ratelimit: 2 callbacks suppressed [ 684.277213][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.293998][T21982] team0: Port device team_slave_0 added [ 684.297409][T21982] team0: Port device team_slave_1 added [ 684.311692][T21982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.313889][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.321604][T21982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.325797][T21982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.328065][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.335674][T21982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.360063][T21982] hsr_slave_0: entered promiscuous mode [ 684.362332][T21982] hsr_slave_1: entered promiscuous mode [ 684.364426][T21982] debugfs: 'hsr0' already exists in 'hsr' [ 684.366281][T21982] Cannot create hsr debugfs directory [ 684.473848][T21983] vhci_hcd: connection reset by peer [ 684.478022][ T6208] vhci_hcd vhci_hcd.6: stop threads [ 684.479659][ T6208] vhci_hcd vhci_hcd.6: release socket [ 684.482023][ T6208] vhci_hcd vhci_hcd.6: disconnect device [ 684.486430][T21982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.574223][T21982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.770391][T21982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.829753][T21982] team0: Port device netdevsim0 removed [ 684.833279][T21982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.901656][ T1144] bridge_slave_1: left allmulticast mode [ 684.903430][ T1144] bridge_slave_1: left promiscuous mode [ 684.905374][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.909085][ T1144] bridge_slave_0: left allmulticast mode [ 684.910982][ T1144] bridge_slave_0: left promiscuous mode [ 684.912862][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.009885][ T1144] dvmrp6 (unregistering): left allmulticast mode [ 685.150577][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.155547][ T1144] bond0 (unregistering): Released all slaves [ 685.160772][ T1144] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 685.167422][ T1144] bond1 (unregistering): Released all slaves [ 685.189337][ T34] wg2 speed is unknown, defaulting to 1000 [ 685.196722][ T34] syz2: Port: 1 Link DOWN [ 685.210357][ T34] wg2 speed is unknown, defaulting to 1000 [ 685.245678][T21982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.252338][T21982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.258412][T21982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 685.264305][T21982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.274006][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.309665][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.345191][T21982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.357952][T21982] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.363553][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.365810][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.373607][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.375763][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.392236][T22018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.598617][T21982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.622021][T21982] veth0_vlan: entered promiscuous mode [ 685.635397][T21982] veth1_vlan: entered promiscuous mode [ 685.656163][T21982] veth0_macvtap: entered promiscuous mode [ 685.660309][T21982] veth1_macvtap: entered promiscuous mode [ 685.670250][T21982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.676699][T21982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.682405][T21182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.685032][T21182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.691032][T21182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.693591][T21182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.755808][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.758987][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.812830][T21182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.815271][T21182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.848705][ T1144] hsr_slave_0: left promiscuous mode [ 685.852292][ T1144] veth1_macvtap: left promiscuous mode [ 685.854124][ T1144] veth0_macvtap: left promiscuous mode [ 685.857427][ T1144] veth1_vlan: left promiscuous mode [ 685.859230][ T1144] veth0_vlan: left promiscuous mode [ 685.957215][ T5939] Bluetooth: hci4: command tx timeout [ 686.052473][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 686.063415][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 686.088332][ T6213] smc: removing ib device syz2 [ 686.363746][ T6540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.679540][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.682351][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.881909][ T1144] IPVS: stop unused estimator thread 0... [ 686.999529][T22048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.316646][ T6540] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 687.466210][ T6540] usb 11-1: Using ep0 maxpacket: 8 [ 687.469902][ T6540] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 687.472479][ T6540] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.475811][ T6540] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 687.480634][ T6540] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 687.484095][ T6540] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.488324][ T6540] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.491170][ T6540] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.747650][ T6540] usb 11-1: usb_control_msg returned -32 [ 687.749474][ T6540] usbtmc 11-1:16.0: can't read capabilities [ 687.806503][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.810098][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.026138][ T5939] Bluetooth: hci4: command tx timeout [ 689.102616][T22067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.105067][T22067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.109762][T22067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.112356][T22067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.886058][ T4212] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 690.106044][ T5939] Bluetooth: hci4: command tx timeout [ 690.976528][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.235563][T18534] usb 11-1: USB disconnect, device number 4 [ 692.415981][ T5939] Bluetooth: hci4: command tx timeout [ 692.592771][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.595185][T22100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.678856][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.681274][T22100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.481451][T22123] rdma_rxe: rxe_newlink: failed to add syz_tun [ 693.485373][T22123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5609'. [ 694.330337][T22145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5618'. [ 694.388360][T22144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5618'. [ 695.034810][T22156] rdma_rxe: rxe_newlink: failed to add syz_tun [ 695.039508][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5622'. [ 696.626060][ T6540] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 696.796123][ T6540] usb 11-1: Using ep0 maxpacket: 8 [ 696.801347][ T6540] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 696.804791][ T6540] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.809196][ T6540] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.813238][ T6540] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.818427][ T6540] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.823760][ T6540] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.827807][ T6540] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.037163][ T6540] usb 11-1: usb_control_msg returned -32 [ 697.038984][ T6540] usbtmc 11-1:16.0: can't read capabilities [ 697.386972][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.809401][T22244] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -90 [ 698.953931][T22253] program syz.1.5663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.394300][ T4212] usb 11-1: USB disconnect, device number 5 [ 699.614654][T22273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.618424][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.518713][ T39] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 700.537070][T22285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.541110][T22285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.666029][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 700.670198][ T39] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 700.673700][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.676954][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.680180][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.683940][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.688327][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.692556][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.904087][ T39] usb 6-1: usb_control_msg returned -32 [ 700.906815][ T39] usbtmc 6-1:16.0: can't read capabilities [ 702.637961][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5690'. [ 702.641902][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5690'. [ 702.647758][T22319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 702.650556][T22319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.653241][T22319] vhci_hcd vhci_hcd.0: Device attached [ 702.656868][T22319] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 702.658955][T22319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.661397][T22320] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 702.664192][T22320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.668093][T22319] vhci_hcd vhci_hcd.0: Device attached [ 702.670197][T22320] vhci_hcd vhci_hcd.0: Device attached [ 702.674475][T22319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 702.676970][T22319] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 702.680137][T22319] vhci_hcd vhci_hcd.0: Device attached [ 702.683779][T22319] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 702.686260][T22319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.690736][T22319] vhci_hcd vhci_hcd.0: Device attached [ 702.693299][T22319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 702.697522][T22331] vhci_hcd: connection closed [ 702.697642][T22329] vhci_hcd: connection closed [ 702.697662][T22325] vhci_hcd: connection closed [ 702.699502][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 702.701239][T22322] vhci_hcd: connection closed [ 702.702457][ T6210] vhci_hcd vhci_hcd.3: release socket [ 702.702471][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 702.702530][T22324] vhci_hcd: connection closed [ 702.704885][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 702.713505][ T6210] vhci_hcd vhci_hcd.3: release socket [ 702.715332][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 702.718021][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 702.719793][ T6210] vhci_hcd vhci_hcd.3: release socket [ 702.721581][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 702.724898][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 702.726842][ T6210] vhci_hcd vhci_hcd.3: release socket [ 702.729018][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 702.732252][ T6210] vhci_hcd vhci_hcd.3: stop threads [ 702.734390][ T6210] vhci_hcd vhci_hcd.3: release socket [ 702.738649][ T6210] vhci_hcd vhci_hcd.3: disconnect device [ 703.250123][T22341] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 703.286420][T17464] usb 6-1: USB disconnect, device number 74 [ 704.457896][T22362] /dev/sr0: Can't open blockdev [ 704.786039][ T4212] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 704.946013][ T4212] usb 6-1: Using ep0 maxpacket: 8 [ 704.949019][ T4212] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 704.951659][ T4212] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 704.954779][ T4212] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 704.958687][ T4212] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.962693][ T4212] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.967269][ T4212] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 704.970066][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.178595][ T4212] usb 6-1: usb_control_msg returned -32 [ 705.180403][ T4212] usbtmc 6-1:16.0: can't read capabilities [ 706.245568][T22399] tipc: Enabling of bearer rejected, failed to enable media [ 706.996350][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.538473][T22434] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 707.542451][ T9] usb 6-1: USB disconnect, device number 75 [ 707.797145][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5735'. [ 708.066064][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 708.226099][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 708.231010][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 708.234679][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.239932][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.243976][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.248571][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.254028][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 708.257845][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.477874][ T9] usb 6-1: usb_control_msg returned -32 [ 708.484722][ T9] usbtmc 6-1:16.0: can't read capabilities [ 708.493687][ T9] usb 6-1: USB disconnect, device number 76 [ 709.060178][T22478] netlink: 'syz.1.5744': attribute type 2 has an invalid length. [ 709.068357][T22478] hmaÓË224): entered promiscuous mode [ 709.127984][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5746'. [ 709.992743][T22494] gfs2: error -5 reading superblock [ 711.093842][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5756'. [ 711.096024][ T6540] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 711.246025][ T6540] usb 6-1: Using ep0 maxpacket: 8 [ 711.250112][ T6540] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 711.253766][ T6540] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.258002][ T6540] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.262062][ T6540] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 711.265417][ T6540] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.270370][ T6540] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 711.273366][ T6540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.510580][ T6540] usb 6-1: usb_control_msg returned -32 [ 711.512693][ T6540] usbtmc 6-1:16.0: can't read capabilities [ 711.527757][ T6540] usb 6-1: USB disconnect, device number 77 [ 711.592099][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5764'. [ 712.106232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.109642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.177748][T22543] xt_TPROXY: Can be used only with -p tcp or -p udp [ 712.746904][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.749494][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.315098][T22560] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 713.676041][T18534] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 713.836902][T18534] usb 8-1: Using ep0 maxpacket: 8 [ 713.840717][T18534] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 713.843375][T18534] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.846553][T18534] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 713.849619][T18534] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 713.852701][T18534] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.857764][T18534] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 713.861573][T18534] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.075571][T18534] usb 8-1: usb_control_msg returned -32 [ 714.079856][T18534] usbtmc 8-1:16.0: can't read capabilities [ 714.089617][T18534] usb 8-1: USB disconnect, device number 16 [ 714.626480][T22577] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5781'. [ 714.733055][T22593] netlink: 'syz.3.5787': attribute type 2 has an invalid length. [ 715.721089][T22605] QAT: failed to copy from user cfg_data. [ 716.006697][T18534] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 716.166002][T18534] usb 11-1: Using ep0 maxpacket: 8 [ 716.169151][T18534] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 716.171991][T18534] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.175069][T18534] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.180416][T18534] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.184159][T18534] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.189836][T18534] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.194313][T18534] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.259183][T22615] overlayfs: failed to resolve './file1/file0': -2 [ 716.408850][T18534] usb 11-1: usb_control_msg returned -32 [ 716.416123][T18534] usbtmc 11-1:16.0: can't read capabilities [ 716.429241][T18534] usb 11-1: USB disconnect, device number 6 [ 717.496714][ T41] kauditd_printk_skb: 39 callbacks suppressed [ 717.496725][ T41] audit: type=1326 audit(1774140619.379:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.4.5802" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26f6c code=0x0 [ 718.471060][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5803'. [ 720.116072][ T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 720.266077][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 720.270314][ T9] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 720.273120][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.276512][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 720.280069][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 720.283402][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.287945][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.290814][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.500460][ T9] usb 11-1: usb_control_msg returned -32 [ 720.502505][ T9] usbtmc 11-1:16.0: can't read capabilities [ 720.512688][ T9] usb 11-1: USB disconnect, device number 7 [ 722.808823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.106385][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.109399][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.111860][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.677162][T22704] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 723.679182][T22704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.681659][T22704] vhci_hcd vhci_hcd.0: Device attached [ 723.701012][T22704] random: crng reseeded on system resumption [ 723.714216][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.718563][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.780992][T22716] netlink: 'syz.4.5824': attribute type 1 has an invalid length. [ 723.891987][T22713] vhci_hcd: connection closed [ 723.896322][ T104] vhci_hcd vhci_hcd.6: stop threads [ 723.905986][ T104] vhci_hcd vhci_hcd.6: release socket [ 723.908514][ T104] vhci_hcd vhci_hcd.6: disconnect device [ 723.956027][T17464] usb 50-1: enqueue for inactive port 0 [ 724.456436][T17464] usb usb50-port1: attempt power cycle [ 724.950531][T22746] program syz.3.5833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.016099][T18534] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 725.113123][ T1462] libceph: connect (1)[c::]:6789 error -101 [ 725.115258][ T1462] libceph: mon0 (1)[c::]:6789 connect error [ 725.159304][T22748] ceph: No mds server is up or the cluster is laggy [ 725.183374][T18534] usb 6-1: Using ep0 maxpacket: 8 [ 725.184812][T18534] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 725.184836][T18534] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.184848][T18534] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.184860][T18534] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.184872][T18534] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.184892][T18534] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 725.184903][T18534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.390751][T18534] usb 6-1: usb_control_msg returned -32 [ 725.393651][T18534] usbtmc 6-1:16.0: can't read capabilities [ 725.403851][T18534] usb 6-1: USB disconnect, device number 78 [ 726.020650][T22770] netlink: 'syz.6.5842': attribute type 3 has an invalid length. [ 726.177475][T17464] usb usb50-port1: unable to enumerate USB device [ 726.193460][T21182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.196125][T21182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.513291][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5852'. [ 728.516117][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5852'. [ 728.518771][T22808] netlink: 'syz.4.5852': attribute type 11 has an invalid length. [ 728.568164][T22811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5853'. [ 728.862698][T22822] netlink: 'syz.4.5858': attribute type 13 has an invalid length. [ 728.865223][T22822] netlink: 'syz.4.5858': attribute type 17 has an invalid length. [ 729.181690][T22822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.219850][T22827] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.222625][T22827] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.287093][T22835] netlink: 'syz.1.5861': attribute type 1 has an invalid length. [ 729.289917][T22833] netlink: 'syz.1.5861': attribute type 1 has an invalid length. [ 729.395958][T21182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.403683][T21182] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.432676][T21182] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.446329][T21182] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.466006][T22845] input: syz0 as /devices/virtual/input/input40 [ 732.066034][T17616] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 732.246020][T17616] usb 8-1: Using ep0 maxpacket: 8 [ 732.249831][T17616] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.253324][T17616] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.256247][T17616] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 732.259710][T17616] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 732.263170][T17616] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 732.266033][T17616] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.272423][T17616] hub 8-1:1.0: bad descriptor, ignoring hub [ 732.274316][T17616] hub 8-1:1.0: probe with driver hub failed with error -5 [ 732.276815][T17616] cdc_wdm 8-1:1.0: skipping garbage [ 732.278453][T17616] cdc_wdm 8-1:1.0: skipping garbage [ 732.283084][T17616] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 732.285496][T17616] cdc_wdm 8-1:1.0: Unknown control protocol [ 732.542687][ T6210] usb 8-1: Failed to suspend device, error -71 [ 732.543095][ T9] usb 8-1: USB disconnect, device number 17 [ 732.589667][T17464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.696935][T22904] xt_l2tp: v2 tid > 0xffff: 37482740 [ 732.832655][T22908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 732.834769][T22908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.838467][T22908] vhci_hcd vhci_hcd.0: Device attached [ 733.086022][T17464] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 733.438637][T22909] vhci_hcd: connection reset by peer [ 733.446801][T22856] vhci_hcd vhci_hcd.1: stop threads [ 733.448496][T22856] vhci_hcd vhci_hcd.1: release socket [ 733.450249][T22856] vhci_hcd vhci_hcd.1: disconnect device [ 735.737383][T22943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5892'. [ 737.044993][T22951] mkiss: ax0: crc mode is auto. [ 737.740533][T22969] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 737.932145][T22972] netlink: 'syz.4.5901': attribute type 4 has an invalid length. [ 737.935635][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5901'. [ 738.187081][T17464] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 738.587614][ T41] audit: type=1326 audit(1774140640.469:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22995 comm="syz.4.5909" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26f6c code=0x0 [ 738.690471][T23003] overlayfs: failed to resolve './file1/file0': -2 [ 739.572357][T23009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5912'. [ 739.935998][ T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 740.076101][ T9] usb 11-1: device descriptor read/64, error -71 [ 740.317145][ T9] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 740.456071][ T9] usb 11-1: device descriptor read/64, error -71 [ 740.566561][ T9] usb usb11-port1: attempt power cycle [ 740.906762][ T9] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 740.926428][ T9] usb 11-1: device descriptor read/8, error -71 [ 741.176793][ T9] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 741.198205][ T9] usb 11-1: device descriptor read/8, error -71 [ 741.307627][ T9] usb usb11-port1: unable to enumerate USB device [ 741.555308][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5922'. [ 741.558296][T23036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5922'. [ 741.819534][T23040] siw: device registration error -23 [ 741.831563][T23040] 9pnet_virtio: no channels available for device syz [ 742.689649][T17464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.676061][T17464] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 743.846011][T17464] usb 8-1: Using ep0 maxpacket: 8 [ 743.849054][T17464] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.852535][T17464] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 743.855545][T17464] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.860154][T17464] usb 8-1: config 0 descriptor?? [ 744.069677][T17464] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 744.523176][T17464] usb 8-1: USB disconnect, device number 18 [ 746.177021][T17464] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 746.346155][T17464] usb 8-1: Using ep0 maxpacket: 8 [ 746.351240][T17464] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 746.355497][T17464] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.360751][T17464] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.577206][T23086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.582445][T23086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.706990][T17464] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 746.952403][T23101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.955155][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.496703][ T6005] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 747.549693][T23102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 747.567736][T23102] netlink: 'syz.3.5939': attribute type 10 has an invalid length. [ 747.570413][T23102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5939'. [ 747.575020][T23102] dummy0: entered promiscuous mode [ 747.588205][T23102] bridge0: port 3(dummy0) entered blocking state [ 747.590578][T23102] bridge0: port 3(dummy0) entered disabled state [ 747.593128][T23102] dummy0: entered allmulticast mode [ 747.636610][ T6005] usb 6-1: device descriptor read/64, error -71 [ 747.877094][ T6005] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 748.016006][ T6005] usb 6-1: device descriptor read/64, error -71 [ 748.126101][ T6005] usb usb6-port1: attempt power cycle [ 748.466060][ T6005] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 748.486706][ T6005] usb 6-1: device descriptor read/8, error -71 [ 748.726055][ T6005] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 748.746505][ T6005] usb 6-1: device descriptor read/8, error -71 [ 748.856454][ T6005] usb usb6-port1: unable to enumerate USB device [ 748.908974][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 749.000902][ T6005] usb 8-1: USB disconnect, device number 19 [ 751.792101][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.796292][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.175635][T23149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 757.178425][T23149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.182172][T23149] vhci_hcd vhci_hcd.0: Device attached [ 757.456540][ T39] usb 40-1: SetAddress Request (3) to port 0 [ 757.458585][ T39] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 757.766870][T23151] vhci_hcd: connection reset by peer [ 757.768829][ T6208] vhci_hcd vhci_hcd.1: stop threads [ 757.771004][ T6208] vhci_hcd vhci_hcd.1: release socket [ 757.773153][ T6208] vhci_hcd vhci_hcd.1: disconnect device [ 761.396792][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.506194][ T39] usb 40-1: device descriptor read/8, error -110 [ 762.906842][ T39] usb usb40-port1: attempt power cycle [ 763.488762][ T39] usb usb40-port1: unable to enumerate USB device [ 764.657180][T23179] : renamed from bond_slave_0 [ 764.672735][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'. [ 764.710300][T23180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.869858][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 765.943492][T23199] openvswitch: netlink: Duplicate or invalid key (type 0). [ 765.945721][T23199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.049054][T23205] netlink: 'syz.4.5964': attribute type 2 has an invalid length. [ 766.053105][T23205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5964'. [ 766.137313][T23209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.606964][ T24] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 766.646001][ T39] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 766.745986][ T24] usb 6-1: device descriptor read/64, error -71 [ 766.818446][ T39] usb 11-1: config 0 has no interfaces? [ 766.822397][ T39] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 766.825733][ T39] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 766.828673][ T39] usb 11-1: Product: syz [ 766.830033][ T39] usb 11-1: Manufacturer: syz [ 766.833778][ T39] usb 11-1: config 0 descriptor?? [ 766.996063][ T24] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 767.039024][ T39] usb 11-1: USB disconnect, device number 12 [ 767.125978][ T24] usb 6-1: device descriptor read/64, error -71 [ 767.146177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.149055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.236165][ T24] usb usb6-port1: attempt power cycle [ 767.596031][ T24] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 767.616700][ T24] usb 6-1: device descriptor read/8, error -71 [ 767.622845][T23238] netlink: 'syz.4.5976': attribute type 2 has an invalid length. [ 767.625400][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5976'. [ 767.652552][T23241] netlink: 'syz.4.5977': attribute type 10 has an invalid length. [ 767.655726][T23241] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.658557][T23241] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.666901][T23241] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.669147][T23241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.671469][T23241] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.673622][T23241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.675993][ T6005] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 767.678348][T23241] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 767.812534][T23244] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5978'. [ 767.815706][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5978'. [ 767.819056][T23244] bridge_slave_1: left promiscuous mode [ 767.820900][T23244] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.824556][T23244] bridge_slave_0: left allmulticast mode [ 767.826547][T23244] bridge_slave_0: left promiscuous mode [ 767.827312][ T6005] usb 11-1: config 0 has no interfaces? [ 767.828437][T23244] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.831478][ T6005] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 767.835294][ T6005] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 767.837820][ T6005] usb 11-1: Product: syz [ 767.839109][ T6005] usb 11-1: Manufacturer: syz [ 767.841761][ T6005] usb 11-1: config 0 descriptor?? [ 767.853671][T23244] bond0: (slave bridge0): Releasing backup interface [ 767.876316][ T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 767.897205][ T24] usb 6-1: device descriptor read/8, error -71 [ 768.010264][ T24] usb usb6-port1: unable to enumerate USB device [ 768.047294][ T6005] usb 11-1: USB disconnect, device number 13 [ 768.556010][ T39] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 768.609868][T23251] ata1.00: invalid multi_count 128 ignored [ 768.717796][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.721401][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 768.724879][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 768.737824][ T39] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 768.741032][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.747190][T23247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 768.751338][ T39] hub 8-1:1.0: bad descriptor, ignoring hub [ 768.753660][ T39] hub 8-1:1.0: probe with driver hub failed with error -5 [ 768.757980][ T39] cdc_wdm 8-1:1.0: skipping garbage [ 768.760160][ T39] cdc_wdm 8-1:1.0: skipping garbage [ 768.763790][ T39] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 768.767115][ T39] cdc_wdm 8-1:1.0: Unknown control protocol [ 769.046024][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 769.197901][ T34] usb 11-1: config 0 has no interfaces? [ 769.201547][ T34] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 769.204407][ T34] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 769.207646][ T34] usb 11-1: Product: syz [ 769.208986][ T34] usb 11-1: Manufacturer: syz [ 769.211814][ T34] usb 11-1: config 0 descriptor?? [ 769.420960][ T39] usb 11-1: USB disconnect, device number 14 [ 769.573978][T23247] usb 8-1: reset low-speed USB device number 20 using dummy_hcd [ 769.866074][T23247] usb 8-1: device descriptor read/64, error -71 [ 769.872180][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5987'. [ 769.884174][T23274] block device autoloading is deprecated and will be removed. [ 769.895453][T23274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5987'. [ 769.899968][T23274] netlink: 'syz.1.5987': attribute type 4 has an invalid length. [ 770.076055][ T24] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 770.200385][T23286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 770.229170][ T24] usb 11-1: config 0 has no interfaces? [ 770.234191][ T24] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 770.237815][ T24] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 770.240073][ T24] usb 11-1: Product: syz [ 770.241299][ T24] usb 11-1: Manufacturer: syz [ 770.246625][ T24] usb 11-1: config 0 descriptor?? [ 770.256002][T23247] usb 8-1: reset low-speed USB device number 20 using dummy_hcd [ 770.450300][T18991] usb 11-1: USB disconnect, device number 15 [ 770.546055][T23247] usb 8-1: device descriptor read/64, error -71 [ 770.922525][T23290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5993'. [ 770.945977][T23247] usb 8-1: reset low-speed USB device number 20 using dummy_hcd [ 770.976540][T23247] usb 8-1: device descriptor read/8, error -71 [ 770.986394][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.376120][T23247] usb 8-1: reset low-speed USB device number 20 using dummy_hcd [ 771.420417][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.423127][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.425727][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.428311][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.430899][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.433430][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.436384][T23296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.816750][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.820076][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.823443][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.828873][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.833472][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.837722][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.841109][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.844484][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.848595][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 771.853071][T23297] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.450883][ T39] net_ratelimit: 135 callbacks suppressed [ 772.450903][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.456018][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.571619][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 772.574546][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 772.769949][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 772.772813][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 772.806808][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 772.809666][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5996'. [ 773.229202][T23302] Process accounting resumed [ 774.146791][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'. [ 774.158468][T23330] netlink: 'syz.4.6002': attribute type 4 has an invalid length. [ 774.675940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 774.705970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 774.815937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 775.270099][T23341] netlink: 'syz.1.6006': attribute type 7 has an invalid length. [ 775.272602][T23341] netlink: 'syz.1.6006': attribute type 8 has an invalid length. [ 775.275068][T23341] netlink: 'syz.1.6006': attribute type 9 has an invalid length. [ 776.032776][T23358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.427911][T23247] usb 8-1: device descriptor read/8, error -110 [ 776.546354][T23247] cdc_wdm 8-1:1.0: Error autopm - -16 [ 776.546458][ T29] usb 8-1: USB disconnect, device number 20 [ 776.686020][ T34] IPVS: starting estimator thread 0... [ 776.786161][T23401] IPVS: using max 44 ests per chain, 105600 per kthread [ 778.067104][T23431] __nla_validate_parse: 1 callbacks suppressed [ 778.067117][T23431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6023'. [ 778.100123][T23436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6024'. [ 778.123746][T23435] fuse: Unknown parameter '—pÏ쾂7›¯R]¼' [ 778.159124][T23441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6025'. [ 778.352041][ T41] audit: type=1804 audit(1774140680.230:1526): pid=23447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6027" name="file0" dev="ramfs" ino=92576 res=1 errno=0 [ 778.984257][T23458] overlay: Bad value for 'index' [ 779.153965][T17616] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 779.191824][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 779.237897][T23466] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.240413][T23466] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.316238][T17616] usb 11-1: Using ep0 maxpacket: 16 [ 779.320073][T17616] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 779.326694][T17616] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 779.330012][T17616] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.333252][T17616] usb 11-1: Product: syz [ 779.335011][T17616] usb 11-1: Manufacturer: syz [ 779.337104][T17616] usb 11-1: SerialNumber: syz [ 779.340592][T17616] usb 11-1: config 0 descriptor?? [ 779.352279][T17616] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 779.360203][T23466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.367447][T17616] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 779.371911][T23466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.581755][ T104] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.585446][ T104] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.589781][ T104] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.593025][ T104] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.659909][T23479] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 779.711606][T23479] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 779.717808][T23479] overlayfs: failed to look up (tracing) for ino (-66) [ 779.955104][T17616] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 780.030477][T17616] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 780.034575][T17616] em28xx 11-1:0.0: board has no eeprom [ 780.080625][T23481] comedi: valid board names for 8255 driver are: [ 780.082637][T23481] 8255 [ 780.083560][T23481] comedi: valid board names for vmk80xx driver are: [ 780.085598][T23481] vmk80xx [ 780.086830][T23481] comedi: valid board names for usbduxsigma driver are: [ 780.089011][T23481] usbduxsigma [ 780.090101][T23481] comedi: valid board names for usbduxfast driver are: [ 780.092241][T23481] usbduxfast [ 780.093307][T23481] comedi: valid board names for usbdux driver are: [ 780.095413][T23481] usbdux [ 780.095999][T17616] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 780.096875][T23481] comedi: valid board names for ni6501 driver are: [ 780.099504][T17616] em28xx 11-1:0.0: dvb set to bulk mode. [ 780.101407][T23481] ni6501 [ 780.101414][T23481] comedi: valid board names for dt9812 driver are: [ 780.101419][T23481] dt9812 [ 780.101423][T23481] comedi: valid board names for ni_labpc_cs driver are: [ 780.101429][T23481] ni_labpc_cs [ 780.101434][T23481] comedi: valid board names for ni_daq_700 driver are: [ 780.104267][ T34] em28xx 11-1:0.0: Binding DVB extension [ 780.109059][T23481] ni_daq_700 [ 780.116652][T23481] comedi: valid board names for labpc_pci driver are: [ 780.118784][T23481] labpc_pci [ 780.119826][T23481] comedi: valid board names for adl_pci9118 driver are: [ 780.121987][T23481] pci9118dg [ 780.123046][T23481] pci9118hg [ 780.124093][T23481] pci9118hr [ 780.124217][T17616] usb 11-1: USB disconnect, device number 16 [ 780.125128][T23481] comedi: valid board names for 8255_pci driver are: [ 780.125135][T23481] 8255_pci [ 780.125139][T23481] comedi: valid board names for s526 driver are: [ 780.125145][T23481] s526 [ 780.125149][T23481] comedi: valid board names for multiq3 driver are: [ 780.125154][T23481] multiq3 [ 780.125158][T23481] comedi: valid board names for pcmuio driver are: [ 780.127768][T17616] em28xx 11-1:0.0:qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x102000) Disconnecting em28xx [ 780.132249][T23481] pcmuio48 [ 780.146250][T23481] pcmuio96 [ 780.147485][T23481] comedi: valid board names for pcmmio driver are: [ 780.149813][T23481] pcmmio [ 780.150921][T23481] comedi: valid board names for pcmda12 driver are: [ 780.153182][T23481] pcmda12 [ 780.154291][T23481] comedi: valid board names for pcmad driver are: [ 780.156669][T23481] pcmad12 [ 780.157810][T23481] pcmad16 [ 780.158964][T23481] comedi: valid board names for ni_labpc driver are: [ 780.161137][T23481] lab-pc-1200 [ 780.162216][T23481] lab-pc-1200ai [ 780.163393][T23481] lab-pc+ [ 780.164397][T23481] comedi: valid board names for atmio16 driver are: [ 780.166805][T23481] atmio16 [ 780.167885][T23481] atmio16d [ 780.168257][ T34] em28xx 11-1:0.0: Registering input extension [ 780.171010][T23481] comedi: valid board names for ni_at_ao driver are: [ 780.172702][T17616] em28xx 11-1:0.0: Closing input extension [ 780.173264][T23481] at-ao-6 [ 780.177236][T23481] at-ao-10 [ 780.178326][T23481] comedi: valid board names for ni_at_a2150 driver are: [ 780.180856][T23481] ni_at_a2150 [ 780.182030][T23481] comedi: valid board names for adq12b driver are: [ 780.184434][T23481] adq12b [ 780.185701][T23481] comedi: valid board names for mpc624 driver are: [ 780.194783][T23481] mpc624 [ 780.195773][T23481] comedi: valid board names for c6xdigio driver are: [ 780.202978][T23481] c6xdigio [ 780.204395][T23481] comedi: valid board names for aio_iiro_16 driver are: [ 780.205393][T17616] em28xx 11-1:0.0: Freeing device [ 780.216053][T23481] aio_iiro_16 [ 780.217188][T23481] comedi: valid board names for aio_aio12_8 driver are: [ 780.219412][T23481] aio_aio12_8 [ 780.220549][T23481] aio_ai12_8 [ 780.221626][T23481] aio_ao12_4 [ 780.222714][T23481] comedi: valid board names for fl512 driver are: [ 780.224760][T23481] fl512 [ 780.225690][T23481] comedi: valid board names for dmm32at driver are: [ 780.230056][T23481] dmm32at [ 780.231098][T23481] comedi: valid board names for dt282x driver are: [ 780.233176][T23481] dt2821 [ 780.234133][T23481] dt2821-f [ 780.235172][T23481] dt2821-g [ 780.237513][T23481] dt2823 [ 780.238482][T23481] dt2824-pgh [ 780.239574][T23481] dt2824-pgl [ 780.240731][T23481] dt2825 [ 780.241706][T23481] dt2827 [ 780.242661][T23481] dt2828 [ 780.243832][T23481] dt2829 [ 780.245084][T23481] dt21-ez [ 780.246406][T23481] dt23-ez [ 780.247454][T23481] dt24-ez [ 780.248470][T23481] dt24-ez-pgl [ 780.249585][T23481] comedi: valid board names for dt2817 driver are: [ 780.251745][T23481] dt2817 [ 780.252725][T23481] comedi: valid board names for dt2815 driver are: [ 780.254862][T23481] dt2815 [ 780.256293][T23481] comedi: valid board names for dt2814 driver are: [ 780.258511][T23481] dt2814 [ 780.259484][T23481] comedi: valid board names for dt2811 driver are: [ 780.261528][T23481] dt2811-pgh [ 780.262687][T23481] dt2811-pgl [ 780.263812][T23481] comedi: valid board names for dt2801 driver are: [ 780.265850][T23481] dt2801 [ 780.267057][T23481] comedi: valid board names for das6402 driver are: [ 780.269124][T23481] das6402-12 [ 780.270204][T23481] das6402-16 [ 780.271329][T23481] comedi: valid board names for das1800 driver are: [ 780.273651][T23481] das-1701st [ 780.274744][T23481] das-1701st-da [ 780.276137][T23481] das-1702st [ 780.277213][T23481] das-1702st-da [ 780.278358][T23481] das-1702hr [ 780.279449][T23481] das-1702hr-da [ 780.280596][T23481] das-1701ao [ 780.281685][T23481] das-1702ao [ 780.282764][T23481] das-1801st [ 780.283961][T23481] das-1801st-da [ 780.285108][T23481] das-1802st [ 780.286438][T23481] das-1802st-da [ 780.287594][T23481] das-1802hr [ 780.288663][T23481] das-1802hr-da [ 780.289810][T23481] das-1801hc [ 780.290888][T23481] das-1802hc [ 780.291976][T23481] das-1801ao [ 780.293049][T23481] das-1802ao [ 780.294199][T23481] comedi: valid board names for das800 driver are: [ 780.296284][T23481] das-800 [ 780.297281][T23481] cio-das800 [ 780.298350][T23481] das-801 [ 780.299353][T23481] cio-das801 [ 780.300422][T23481] das-802 [ 780.301433][T23481] cio-das802 [ 780.302503][T23481] cio-das802/16 [ 780.303728][T23481] comedi: valid board names for isa-das08 driver are: [ 780.307256][T23481] isa-das08 [ 780.308654][T23481] das08-pgm [ 780.309972][T23481] das08-pgh [ 780.311402][T23481] das08-pgl [ 780.312791][T23481] das08-aoh [ 780.314192][T23481] das08-aol [ 780.315609][T23481] das08-aom [ 780.317537][T23481] das08/jr-ao [ 780.319024][T23481] das08jr-16-ao [ 780.320553][T23481] pc104-das08 [ 780.322021][T23481] das08jr/16 [ 780.323459][T23481] comedi: valid board names for das16m1 driver are: [ 780.326553][T23481] das16m1 [ 780.328056][T23481] comedi: valid board names for dac02 driver are: [ 780.330581][T23481] dac02 [ 780.331544][T23481] comedi: valid board names for rti802 driver are: [ 780.334240][T23481] rti802 [ 780.335528][T23481] comedi: valid board names for rti800 driver are: [ 780.337952][T23481] rti800 [ 780.339012][T23481] rti815 [ 780.339963][T23481] comedi: valid board names for pcm3724 driver are: [ 780.342026][T23481] pcm3724 [ 780.343048][T23481] comedi: valid board names for pcl818 driver are: [ 780.345104][T23481] pcl818l [ 780.347531][T23481] pcl818h [ 780.348534][T23481] pcl818hd [ 780.349643][T23481] pcl818hg [ 780.350671][T23481] pcl818 [ 780.351640][T23481] pcl718 [ 780.352610][T23481] pcm3718 [ 780.353938][T23481] comedi: valid board names for pcl816 driver are: [ 780.357353][T23481] pcl816 [ 780.358638][T23481] pcl814b [ 780.360115][T23481] comedi: valid board names for pcl812 driver are: [ 780.362846][T23481] pcl812 [ 780.364120][T23481] pcl812pg [ 780.365467][T23481] acl8112pg [ 780.367281][T23481] acl8112dg [ 780.368681][T23481] acl8112hg [ 780.370055][T23481] a821pgl [ 780.371170][T23481] a821pglnda [ 780.372248][T23481] a821pgh [ 780.373333][T23481] a822pgl [ 780.374664][T23481] a822pgh [ 780.376366][T23481] a823pgl [ 780.377640][T23481] a823pgh [ 780.378925][T23481] pcl813 [ 780.380049][T23481] pcl813b [ 780.381050][T23481] acl8113 [ 780.382154][T23481] iso813 [ 780.383191][T23481] acl8216 [ 780.384525][T23481] a826pg [ 780.385723][T23481] comedi: valid board names for pcl730 driver are: [ 780.388101][T23481] pcl730 [ 780.389101][T23481] iso730 [ 780.390319][T23481] acl7130 [ 780.391621][T23481] pcm3730 [ 780.393021][T23481] pcl725 [ 780.394287][T23481] p8r8dio [ 780.395760][T23481] acl7225b [ 780.397648][T23481] p16r16dio [ 780.399089][T23481] pcl733 [ 780.400366][T23481] pcl734 [ 780.401647][T23481] opmm-1616-xt [ 780.403280][T23481] pearl-mm-p [ 780.404449][T23481] ir104-pbf [ 780.405506][T23481] comedi: valid board names for pcl726 driver are: [ 780.407845][T23481] pcl726 [ 780.408814][T23481] pcl727 [ 780.409780][T23481] pcl728 [ 780.410750][T23481] acl6126 [ 780.411780][T23481] acl6128 [ 780.412790][T23481] comedi: valid board names for pcl724 driver are: [ 780.415179][T23481] pcl724 [ 780.416211][T23481] pcl722 [ 780.417178][T23481] pcl731 [ 780.418158][T23481] acl7122 [ 780.419179][T23481] acl7124 [ 780.420187][T23481] pet48dio [ 780.421221][T23481] pcmio48 [ 780.422237][T23481] onyx-mm-dio [ 780.423477][T23481] comedi: valid board names for pcl711 driver are: [ 780.426363][T23481] pcl711 [ 780.427673][T23481] pcl711b [ 780.429003][T23481] acl8112hg [ 780.430415][T23481] acl8112dg [ 780.431858][T23481] comedi: valid board names for amplc_pc263 driver are: [ 780.434771][T23481] pc263 [ 780.436116][T23481] comedi: valid board names for amplc_pc236 driver are: [ 780.439112][T23481] pc36at [ 780.440383][T23481] comedi: valid board names for amplc_dio200 driver are: [ 780.443311][T23481] pc212e [ 780.444554][T23481] pc214e [ 780.445819][T23481] pc215e [ 780.447208][T23481] pc218e [ 780.448483][T23481] pc272e [ 780.449876][T23481] comedi: valid board names for comedi_parport driver are: [ 780.452927][T23481] comedi_parport [ 780.454507][T23481] comedi: valid board names for comedi_test driver are: [ 780.457507][T23481] comedi_test [ 780.459000][T23481] comedi: valid board names for comedi_bond driver are: [ 780.461959][T23481] comedi_bond [ 780.777505][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6046'. [ 782.517107][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.552354][T22853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.555264][T22853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.557850][T22853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.560419][T22853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.568657][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.571610][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.574164][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.577304][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.587749][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.681849][ T34] libceph: connect (1)[c::]:6789 error -101 [ 782.683843][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 782.735269][T23505] ceph: No mds server is up or the cluster is laggy [ 783.192059][T23522] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 783.194170][T23522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 783.197315][T23522] vhci_hcd vhci_hcd.0: Device attached [ 783.254475][T23523] usbip_core: unknown command [ 783.256158][T23523] vhci_hcd: unknown pdu 3587178197 [ 783.258320][T23523] usbip_core: unknown command [ 783.260541][T22856] vhci_hcd vhci_hcd.1: stop threads [ 783.262137][T22856] vhci_hcd vhci_hcd.1: release socket [ 783.263696][T22856] vhci_hcd vhci_hcd.1: disconnect device [ 783.948145][T23534] ptrace attach of "/syz-executor exec"[21982] was attempted by ""[23534] [ 784.023020][T23538] netlink: 'syz.3.6053': attribute type 15 has an invalid length. [ 784.025590][T23538] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6053'. [ 784.034119][T23538] syzkaller1: entered allmulticast mode [ 784.336178][T23545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 784.338286][T23545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 784.340695][T23545] vhci_hcd vhci_hcd.0: Device attached [ 784.349431][T23549] vhci_hcd: connection closed [ 784.355985][T14703] vhci_hcd vhci_hcd.3: stop threads [ 784.359230][T14703] vhci_hcd vhci_hcd.3: release socket [ 784.360918][T14703] vhci_hcd vhci_hcd.3: disconnect device [ 785.171990][T23539] delete_channel: no stack [ 785.699040][T23561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6060'. [ 785.702030][T23561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6060'. [ 785.707375][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6060'. [ 785.716277][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6060'. [ 785.819440][T23566] 9p: Bad value for 'rfdno' [ 785.909533][T23571] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 786.255255][T23585] netlink: 'syz.3.6066': attribute type 7 has an invalid length. [ 786.257856][T23585] netlink: 'syz.3.6066': attribute type 8 has an invalid length. [ 786.260849][T23585] netlink: 'syz.3.6066': attribute type 9 has an invalid length. [ 786.846354][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 787.631590][T23606] overlayfs: failed to clone lowerpath [ 787.695547][T23608] overlayfs: failed to resolve 'defcontext=system_u': -2 [ 787.759442][T22856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.762193][T22856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.764841][T22856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.767620][T22856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.772083][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.774636][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.777231][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.518882][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.421834][T23625] : renamed from bond_slave_0 [ 789.489049][T23634] netlink: zone id is out of range [ 789.490758][T23634] netlink: zone id is out of range [ 790.131205][T23644] netlink: 'syz.1.6084': attribute type 12 has an invalid length. [ 790.133836][T23644] netlink: 'syz.1.6084': attribute type 29 has an invalid length. [ 790.136577][T23644] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6084'. [ 790.139482][T23644] netlink: 'syz.1.6084': attribute type 2 has an invalid length. [ 790.142045][T23644] netlink: 23 bytes leftover after parsing attributes in process `syz.1.6084'. [ 790.149405][T23644] netlink: 'syz.1.6084': attribute type 6 has an invalid length. [ 790.174763][ T41] audit: type=1326 audit(1774140692.050:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.183441][ T41] audit: type=1326 audit(1774140692.050:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.190762][ T41] audit: type=1326 audit(1774140692.060:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.197847][ T41] audit: type=1326 audit(1774140692.060:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.205677][ T41] audit: type=1326 audit(1774140692.060:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.220783][ T41] audit: type=1326 audit(1774140692.060:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.240912][ T41] audit: type=1326 audit(1774140692.060:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.265981][ T41] audit: type=1326 audit(1774140692.060:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.273136][ T41] audit: type=1326 audit(1774140692.060:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.296028][ T41] audit: type=1326 audit(1774140692.060:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.6083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 790.615415][T23655] vivid-003: disconnect [ 790.623720][T23654] vivid-003: reconnect [ 790.784082][T23663] IPv6: sit1: Disabled Multicast RS [ 790.787831][T23663] sit1: entered allmulticast mode [ 790.792520][T23659] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6088'. [ 790.944771][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 790.953672][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 791.455310][T23670] overlay: Unknown parameter '/' [ 793.276758][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6100'. [ 794.051566][T23729] vivid-003: disconnect [ 794.655496][T23714] vivid-003: reconnect [ 794.703683][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 794.766683][T23735] netlink: 'syz.6.6102': attribute type 1 has an invalid length. [ 794.770734][T23735] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6102'. [ 795.111702][T23750] binder: 23747:23750 ioctl 8010aa02 80000800 returned -22 [ 795.705507][T23759] overlayfs: missing 'workdir' [ 795.711987][T23759] loop4: detected capacity change from 0 to 524287936 [ 796.146139][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 796.295961][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 796.299484][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 796.303658][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 796.308281][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.312459][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.318094][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 796.321728][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.519790][ T41] kauditd_printk_skb: 48 callbacks suppressed [ 796.519801][ T41] audit: type=1326 audit(1774140698.400:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.529848][ T41] audit: type=1326 audit(1774140698.410:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.538394][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 796.538865][ T41] audit: type=1326 audit(1774140698.410:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.540205][ T10] usbtmc 8-1:16.0: can't read capabilities [ 796.549992][ T41] audit: type=1326 audit(1774140698.410:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.557088][ T41] audit: type=1326 audit(1774140698.410:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.563957][ T41] audit: type=1326 audit(1774140698.410:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.571153][ T41] audit: type=1326 audit(1774140698.410:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.578776][ T41] audit: type=1326 audit(1774140698.410:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.585562][ T41] audit: type=1326 audit(1774140698.410:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.593246][ T41] audit: type=1326 audit(1774140698.410:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.6.6119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 796.749738][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'. [ 796.781199][T23777] tipc: Started in network mode [ 796.782810][T23777] tipc: Node identity 4, cluster identity 4711 [ 796.784752][T23777] tipc: Node number set to 4 [ 796.847114][ T39] usb 8-1: USB disconnect, device number 22 [ 798.173243][T23830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.345675][T23832] comedi comedi0: comedi_config --init_data is deprecated [ 799.065045][T23852] overlayfs: failed to clone lowerpath [ 800.839646][T23895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6157'. [ 802.763956][T23920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6165'. [ 802.769275][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'. [ 802.773384][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'. [ 802.958974][T23942] netlink: 'syz.1.6175': attribute type 1 has an invalid length. [ 802.971274][T23942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.983233][T23942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.985443][T23942] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 802.990713][T23942] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 803.037623][T23944] bond2: entered promiscuous mode [ 803.040919][T23944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.045566][T23944] bond1: (slave bond2): Enslaving as an active interface with a down link [ 803.058341][T23942] macvlan3: entered promiscuous mode [ 803.059909][T23942] macvlan3: entered allmulticast mode [ 803.061849][T23942] bond1: entered promiscuous mode [ 803.063783][T23942] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 803.067234][T23942] bond1: left promiscuous mode [ 803.099421][T23947] overlay: ./file0 is not a directory [ 803.186341][T23949] comedi comedi2: comedi_config --init_data is deprecated [ 805.066017][ T5950] Bluetooth: hci3: command 0x0406 tx timeout [ 813.229455][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.436061][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 825.546264][ T5950] Bluetooth: hci2: command 0x0406 tx timeout [ 843.346089][ T1112] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 843.348762][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 843.350685][ T1112] ata1.00: cmd 60/10:70:de:3d:01/08:00:00:00:00/40 tag 14 ncq dma 1056768 in [ 843.350685][ T1112] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 843.356001][ T1112] ata1.00: status: { DRDY } [ 843.357471][ T1112] ata1: hard resetting link [ 843.679846][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 843.682835][ T1112] ata1.00: configured for UDMA/100 [ 843.684714][ T1112] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=63s [ 843.688077][ T1112] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 843.690771][ T1112] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 843.693394][ T1112] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3d de 00 08 10 00 [ 843.696432][ T1112] I/O error, dev sda, sector 81374 op 0x0:(READ) flags 0x80700 phys_seg 45 prio class 2 [ 843.699691][ T1112] ata1: EH complete [ 843.917505][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 843.979692][T18328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 843.982974][T18328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 843.986249][T18328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 843.988754][T18328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 843.996754][T18328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.001602][T18328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.006542][ T5939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.017829][ T5939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.021559][ T5939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.057412][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.071968][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.075864][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.081402][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.086024][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.093005][T22853] smc: removing ib device syz1 [ 844.095315][ T9] syz1: Port: 1 Link DOWN [ 844.735061][T23980] chnl_net:caif_netlink_parms(): no params data found [ 844.749277][T23988] chnl_net:caif_netlink_parms(): no params data found [ 844.820094][T23984] chnl_net:caif_netlink_parms(): no params data found [ 844.949835][T23988] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.952192][T23988] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.954538][T23988] bridge_slave_0: entered allmulticast mode [ 844.967046][T23988] bridge_slave_0: entered promiscuous mode [ 844.984844][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6192'. [ 844.991424][T23988] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.995361][T23988] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.997763][T23988] bridge_slave_1: entered allmulticast mode [ 845.000469][T23988] bridge_slave_1: entered promiscuous mode [ 845.008344][T23980] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.010637][T23980] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.012912][T23980] bridge_slave_0: entered allmulticast mode [ 845.016277][T23980] bridge_slave_0: entered promiscuous mode [ 845.019348][T23980] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.021594][T23980] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.023850][T23980] bridge_slave_1: entered allmulticast mode [ 845.026678][T23980] bridge_slave_1: entered promiscuous mode [ 845.029280][T23984] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.031896][T23984] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.034865][T23984] bridge_slave_0: entered allmulticast mode [ 845.038939][T23984] bridge_slave_0: entered promiscuous mode [ 845.043306][T23984] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.046743][T23984] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.049842][T23984] bridge_slave_1: entered allmulticast mode [ 845.053675][T23984] bridge_slave_1: entered promiscuous mode [ 845.091639][T23988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.097018][T23988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.114957][T23984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.168119][T23988] team0: Port device team_slave_0 added [ 845.171943][T23984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.182693][T23980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.186742][T23988] team0: Port device team_slave_1 added [ 845.188816][T14703] bridge_slave_1: left allmulticast mode [ 845.190626][T14703] bridge_slave_1: left promiscuous mode [ 845.192508][T14703] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.196162][T14703] bridge_slave_0: left allmulticast mode [ 845.199312][T14703] bridge_slave_0: left promiscuous mode [ 845.201221][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.471820][T14703] bond0 (unregistering): (slave 30): Releasing backup interface [ 845.475291][T14703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.478879][T14703] bond0 (unregistering): Released all slaves [ 845.484610][T14703] bond1 (unregistering): (slave bond2): Releasing active interface [ 845.487794][T14703] bond1 (unregistering): Released all slaves [ 845.494063][T14703] bond2 (unregistering): Released all slaves [ 845.507163][T23980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.533719][T23980] team0: Port device team_slave_0 added [ 845.580690][T23980] team0: Port device team_slave_1 added [ 845.588643][T23984] team0: Port device team_slave_0 added [ 845.590803][T23988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.592990][T23988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.601584][T23988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.613236][T14703] hmaÓË224): left promiscuous mode [ 845.622628][T23984] team0: Port device team_slave_1 added [ 845.624992][T23988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.629033][T23988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.629084][T24017] Bluetooth: MGMT ver 1.23 [ 845.641528][T23988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.645466][T23980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.647974][T23980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.656498][T23980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.660745][T23980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.662938][T23980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.671062][T23980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.693769][T14703] tipc: Left network mode [ 845.735110][T23984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.738639][T23984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.750715][T23984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.763433][T23984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.766472][T23984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.776672][T23984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.784293][T23980] hsr_slave_0: entered promiscuous mode [ 845.786882][T23980] hsr_slave_1: entered promiscuous mode [ 845.798674][T23988] hsr_slave_0: entered promiscuous mode [ 845.800912][T23988] hsr_slave_1: entered promiscuous mode [ 845.803017][T23988] debugfs: 'hsr0' already exists in 'hsr' [ 845.804869][T23988] Cannot create hsr debugfs directory [ 845.903980][T23984] hsr_slave_0: entered promiscuous mode [ 845.906433][T23984] hsr_slave_1: entered promiscuous mode [ 845.908582][T23984] debugfs: 'hsr0' already exists in 'hsr' [ 845.910428][T23984] Cannot create hsr debugfs directory [ 846.035979][ T5950] Bluetooth: hci1: command tx timeout [ 846.099245][T14703] hsr_slave_0: left promiscuous mode [ 846.101401][T14703] hsr_slave_1: left promiscuous mode [ 846.103467][T14703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.105957][ T5950] Bluetooth: hci5: command tx timeout [ 846.106949][T14703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.186205][ T5950] Bluetooth: hci0: command tx timeout [ 846.242016][T14703] team0 (unregistering): Port device team_slave_1 removed [ 846.252897][T14703] team0 (unregistering): Port device team_slave_0 removed [ 846.485633][T23988] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 846.493121][T23988] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 846.497185][T23988] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 846.508613][T23988] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 846.619443][T23980] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 846.635313][T23980] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 846.653903][T23980] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 846.674365][T23980] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 846.746725][T23984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 846.751017][T23984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 846.761615][T23988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.764931][T23984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 846.770111][T23984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 846.814210][T23988] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.829212][T23980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.841277][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.843625][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.850015][T23980] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.865351][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.867740][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.875462][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.877798][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.893901][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.896381][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.991934][T23984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.008086][T23984] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.013880][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.016349][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.024380][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.026816][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.041383][T24068] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 847.043562][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.050547][T24068] vhci_hcd vhci_hcd.0: Device attached [ 847.106084][T23988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.136232][T14703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.196089][T23980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.234258][T14703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.304956][ T10] hid-generic 0005:0B57:0C6E.0013: unknown main item tag 0x0 [ 847.320883][ T10] hid-generic 0005:0B57:0C6E.0013: hidraw1: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 847.324038][T23988] veth0_vlan: entered promiscuous mode [ 847.345074][T23984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.357580][T17616] usb 50-1: SetAddress Request (6) to port 0 [ 847.359800][T17616] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 847.364807][T23988] veth1_vlan: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x217000) [ 847.389378][T14703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.398980][T24068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.402155][T24068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 847.438988][T24068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.446006][T24068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 847.452268][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 847.455116][ T1112] ata1: failed to read log page 10h (errno=-5) [ 847.457962][ T1112] ata1.00: exception Emask 0x1 SAct 0x18000000 SErr 0x0 action 0x0 [ 847.460419][T23988] veth0_macvtap: entered promiscuous mode [ 847.464323][T24068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 847.466275][ T1112] ata1.00: irq_stat 0x41000000 [ 847.466324][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 847.466337][ T1112] ata1.00: cmd 60/b8:d8:6e:1b:01/10:00:00:00:00/40 tag 27 ncq dma 2191360 in [ 847.466337][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 847.466386][ T1112] ata1.00: status: { DRDY } [ 847.466403][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 847.466414][ T1112] ata1.00: cmd 60/28:e0:26:2c:01/07:00:00:00:00/40 tag 28 ncq dma 937984 in [ 847.466414][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 847.470171][T23988] veth1_macvtap: entered promiscuous mode [ 847.470417][ T1112] ata1.00: status: { DRDY } [ 847.493449][T24068] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.496681][T24068] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 847.503053][T24068] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 847.514229][ T1112] ata1.00: configured for UDMA/100 [ 847.515633][T24068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 847.516333][ T1112] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 847.518153][T24068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 847.519508][T14703] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.521159][ T1112] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 847.529654][ T1112] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 847.532328][ T1112] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 01 1b 6e 00 10 b8 00 [ 847.534970][ T1112] I/O error, dev sda, sector 72558 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 847.539752][ T1112] sd 0:0:0:0: [sda] tag#28 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 847.542891][ T1112] sd 0:0:0:0: [sda] tag#28 Sense Key : Aborted Command [current] [ 847.545362][ T1112] sd 0:0:0:0: [sda] tag#28 Add. Sense: No additional sense information [ 847.548113][ T1112] sd 0:0:0:0: [sda] tag#28 CDB: Read(10) 28 00 00 01 2c 26 00 07 28 00 [ 847.550645][ T1112] I/O error, dev sda, sector 76838 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 847.554250][ T1112] ata1: EH complete [ 847.554489][T24068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 847.590075][T23988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.603196][T24074] vhci_hcd: connection reset by peer [ 847.605095][T22856] vhci_hcd vhci_hcd.6: stop threads [ 847.607308][T22856] vhci_hcd vhci_hcd.6: release socket [ 847.607313][T23980] veth0_vlan: entered promiscuous mode [ 847.609291][T22856] vhci_hcd vhci_hcd.6: disconnect device [ 847.621557][T23988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.633326][T23980] veth1_vlan: entered promiscuous mode [ 847.639864][ T6208] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.642795][ T6208] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.653628][ T6208] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.656822][ T6208] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.714642][T23980] veth0_macvtap: entered promiscuous mode [ 847.724603][T23980] veth1_macvtap: entered promiscuous mode [ 847.749234][T24109] fido_id[24109]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/report_descriptor': No such file or directory [ 847.807299][T22853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.808582][T23980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.809886][T22853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.819879][T23980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.825353][T23984] veth0_vlan: entered promiscuous mode [ 847.844989][T22856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.854443][T22856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.858417][T22856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.867577][T22856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.867635][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.870874][T23984] veth1_vlan: entered promiscuous mode [ 847.872996][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.938260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.941085][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.967610][T23984] veth0_macvtap: entered promiscuous mode [ 847.973058][T23984] veth1_macvtap: entered promiscuous mode [ 847.992735][T22856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.002218][T22856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.099009][T23984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.104504][T23984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.115747][ T6208] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.123383][ T6208] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.131072][ T6208] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.134683][ T6208] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.320317][ T6208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.323405][ T6208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.359222][T22856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.364247][T22856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.466972][T24134] netfs: Couldn't get user pages (rc=-14) [ 848.714494][T14703] dummy0: left allmulticast mode [ 848.719596][T14703] bridge0: port 3(dummy0) entered disabled state [ 848.724119][T14703] bridge_slave_1: left allmulticast mode [ 848.726045][T14703] bridge_slave_1: left promiscuous mode [ 848.728025][T14703] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.731898][T14703] bridge_slave_0: left allmulticast mode [ 848.733867][T14703] bridge_slave_0: left promiscuous mode [ 848.735721][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.740546][T24152] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6189'. [ 848.892131][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6200'. [ 849.088910][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.091870][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.365978][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.368975][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.420287][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.423293][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6199'. [ 849.423789][T14703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.432826][T14703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.437988][T14703] bond0 (unregistering): Released all slaves [ 849.443221][T14703] bond1 (unregistering): Released all slaves [ 849.466124][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 849.466150][ T5950] Bluetooth: hci2: command 0x0406 tx timeout [ 849.545992][ T5950] Bluetooth: hci0: command 0x040f tx timeout [ 849.546030][ T5939] Bluetooth: hci5: command 0x040f tx timeout [ 849.573667][T24163] Process accounting resumed [ 849.841093][T14703] bond0 (unregistering): (slave 30): Releasing backup interface [ 849.848092][T14703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.852412][T14703] bond0 (unregistering): Released all slaves [ 849.891881][T24173] syzkaller0: entered promiscuous mode [ 849.900350][T24173] syzkaller0: entered allmulticast mode [ 850.065834][T24192] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.068687][T24192] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.361992][T14703] tipc: Left network mode [ 850.392866][T21182] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.404093][T21182] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.591633][T21182] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.594781][T21182] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.744925][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6208'. [ 851.287794][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.290855][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.519233][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.522705][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.546038][ T5939] Bluetooth: hci2: command 0x0406 tx timeout [ 851.556300][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 851.582964][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.585835][T24240] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6211'. [ 851.631460][ T5939] Bluetooth: hci0: command 0x040f tx timeout [ 851.633789][ T5939] Bluetooth: hci5: command 0x040f tx timeout [ 851.684574][T24254] nfs: Unknown parameter 'zc' [ 851.827578][T14703] hsr_slave_0: left promiscuous mode [ 851.830286][T14703] hsr_slave_1: left promiscuous mode [ 851.838508][T14703] hsr_slave_0: left promiscuous mode [ 851.847364][T14703] hsr_slave_1: left promiscuous mode [ 851.870029][T14703] veth1_vlan: left allmulticast mode [ 851.871922][T14703] veth1_macvtap: left promiscuous mode [ 851.873669][T14703] veth0_macvtap: left promiscuous mode [ 851.875463][T14703] veth1_vlan: left promiscuous mode [ 851.886594][T14703] veth0_vlan: left promiscuous mode [ 852.230735][T14703] team0 (unregistering): Port device team_slave_1 removed [ 852.260840][T14703] team0 (unregistering): Port device team_slave_0 removed [ 852.351844][T24243] Process accounting resumed [ 852.787326][T17616] usb 50-1: device descriptor read/8, error -110 [ 853.110562][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6217'. [ 853.114316][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6217'. [ 853.238764][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6217'. [ 853.242144][T14703] team0 (unregistering): Port device team_slave_1 removed [ 853.249392][T14703] team0 (unregistering): Port device team_slave_0 removed [ 853.319859][T24286] 9pnet_virtio: no channels available for device syz [ 853.485822][T18534] infiniband syz0: ib_query_port failed (-19) [ 853.486623][T17616] usb usb50-port1: attempt power cycle [ 853.511094][T24280] Process accounting resumed [ 853.583539][T24296] FAULT_INJECTION: forcing a failure. [ 853.583539][T24296] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 853.588450][T24296] CPU: 3 UID: 0 PID: 24296 Comm: syz.9.6223 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.588468][T24296] Tainted: [L]=SOFTLOCKUP [ 853.588472][T24296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.588479][T24296] Call Trace: [ 853.588484][T24296] [ 853.588488][T24296] dump_stack_lvl+0x100/0x190 [ 853.588515][T24296] should_fail_ex.cold+0x5/0xa [ 853.588528][T24296] _copy_from_user+0x2e/0xd0 [ 853.588546][T24296] get_compat_msghdr+0xb3/0x4b0 [ 853.588563][T24296] ? _parse_integer_limit+0x17f/0x1d0 [ 853.588579][T24296] ? __pfx_get_compat_msghdr+0x10/0x10 [ 853.588595][T24296] ? _kstrtoull+0x13c/0x1f0 [ 853.588610][T24296] ? __pfx__kstrtoull+0x10/0x10 [ 853.588627][T24296] ___sys_sendmsg+0x1b6/0x1e0 [ 853.588640][T24296] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.588652][T24296] ? __lock_acquire+0x4a5/0x2630 [ 853.588671][T24296] ? find_held_lock+0x2b/0x80 [ 853.588690][T24296] __sys_sendmmsg+0x2ff/0x430 [ 853.588707][T24296] ? __pfx___sys_sendmmsg+0x10/0x10 [ 853.588727][T24296] ? __fget_files+0x215/0x3d0 [ 853.588743][T24296] ? fput+0x79/0x100 [ 853.588761][T24296] ? ksys_write+0x1ac/0x250 [ 853.588770][T24296] ? __pfx_ksys_write+0x10/0x10 [ 853.588782][T24296] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 853.588797][T24296] ? lockdep_hardirqs_on+0x78/0x100 [ 853.588813][T24296] __do_fast_syscall_32+0xe3/0x8c0 [ 853.588831][T24296] do_fast_syscall_32+0x32/0x70 [ 853.588848][T24296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.588862][T24296] RIP: 0023:0xf702ef6c [ 853.588872][T24296] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 853.588882][T24296] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 853.588893][T24296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004680 [ 853.588900][T24296] RDX: 0000000000000002 RSI: 000000000400c404 RDI: 0000000000000000 [ 853.588906][T24296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.588912][T24296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.588918][T24296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.588931][T24296] [ 853.635985][ T5950] Bluetooth: hci1: command 0x040f tx timeout [ 853.706297][ T5950] Bluetooth: hci5: command 0x040f tx timeout [ 853.708154][ T5939] Bluetooth: hci0: command 0x040f tx timeout [ 853.778800][T24299] qnx6: unable to read the first superblock [ 854.021456][T24329] overlayfs: missing 'workdir' [ 854.058049][T17616] usb usb50-port1: unable to enumerate USB device [ 854.334225][T14703] IPVS: stop unused estimator thread 0... [ 855.326436][ T5939] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 855.786015][ T5939] Bluetooth: hci5: command 0x040f tx timeout [ 855.787301][ T5950] Bluetooth: hci0: command 0x040f tx timeout [ 856.049348][ T5950] Bluetooth: unknown link type 134 [ 856.051108][ T5950] Bluetooth: hci5: connection err: -111 [ 856.178235][T24354] __nla_validate_parse: 4 callbacks suppressed [ 856.178274][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.184238][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.225835][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.228893][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.296043][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.299698][T24354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6232'. [ 856.425153][T24357] Process accounting resumed [ 856.501452][T24389] netlink: 'syz.6.6242': attribute type 3 has an invalid length. [ 856.503948][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6242'. [ 856.508713][T24389] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 857.073541][T24406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6243'. [ 857.865960][ T5950] Bluetooth: hci5: command 0x040f tx timeout [ 857.878271][ T5950] Bluetooth: hci0: command 0x040f tx timeout [ 857.945162][T24397] syzkaller0: entered promiscuous mode [ 857.969638][T24406] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.972629][T24406] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.032619][T24406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.040841][T24406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.464357][T21182] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.467117][T21182] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.469610][T21182] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.480099][T21182] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.707976][T24442] net_ratelimit: 38 callbacks suppressed [ 859.707988][T24442] openvswitch: netlink: Key type 204 is out of range max 32 [ 859.786358][T24450] binder: 24448:24450 ioctl c0306201 80000240 returned -14 [ 860.966339][T24427] Process accounting resumed [ 861.043579][T24495] netlink: 'syz.8.6264': attribute type 1 has an invalid length. [ 861.051371][T24495] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6264'. [ 861.105010][T24500] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6266'. [ 861.113831][T24500] IPv6: sit1: Disabled Multicast RS [ 861.117000][T24500] sit1: entered allmulticast mode [ 861.123696][T24500] IPv6: NLM_F_CREATE should be specified when creating new route [ 861.127902][T24500] netlink: 'syz.7.6266': attribute type 1 has an invalid length. [ 861.863034][ T41] kauditd_printk_skb: 98 callbacks suppressed [ 861.863118][ T41] audit: type=1326 audit(1774140763.740:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24494 comm="syz.8.6264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7fc00000 [ 862.551839][T24531] random: crng reseeded on system resumption [ 862.995980][T18991] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 863.068549][T24527] Process accounting resumed [ 863.178478][T18991] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 863.182312][T18991] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.187877][T18991] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 863.191735][T18991] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 863.195389][T18991] usb 12-1: Manufacturer: syz [ 863.202689][T18991] usb 12-1: config 0 descriptor?? [ 863.415968][T18991] rc_core: IR keymap rc-hauppauge not found [ 863.418835][T18991] Registered IR keymap rc-empty [ 863.426678][T18991] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 863.435792][T18991] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input43 [ 863.444391][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 863.447006][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 863.461883][T18991] usb 12-1: USB disconnect, device number 2 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb8000) [ 863.527603][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 863.533957][ T1112] ata1: failed to read log page 10h (errno=-5) [ 863.541102][ T1112] ata1.00: NCQ disabled due to excessive errors [ 863.547021][ T1112] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 863.553739][ T1112] ata1.00: irq_stat 0x41000000 [ 863.558064][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 863.563639][ T1112] ata1.00: cmd 60/c0:70:6e:5b:01/05:00:00:00:00/40 tag 14 ncq dma 753664 in [ 863.563639][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 863.580538][ T1112] ata1.00: status: { DRDY } [ 863.584847][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 863.592883][ T1112] ata1.00: cmd 60/88:78:2e:61:01/04:00:00:00:00/40 tag 15 ncq dma 593920 in [ 863.592883][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 863.609342][ T1112] ata1.00: status: { DRDY } [ 863.623264][ T1112] ata1.00: configured for UDMA/100 [ 863.632923][ T1112] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 863.643938][ T1112] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 863.652257][ T1112] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 863.660081][ T1112] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 5b 6e 00 05 c0 00 [ 863.668316][ T1112] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 863.678799][ T1112] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 863.685977][ T1112] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 863.688621][ T1112] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 863.691306][ T1112] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 61 2e 00 04 88 00 [ 863.693937][ T1112] I/O error, dev sda, sector 90414 op 0x0:(READ) flags 0x80700 phys_seg 143 prio class 2 [ 863.697582][ T1112] ata1: EH complete [ 863.707459][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 863.710050][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 863.958378][T24554] __nla_validate_parse: 1 callbacks suppressed [ 863.958420][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6281'. [ 864.063070][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6282'. [ 864.194224][T24549] ceph: No mds server is up or the cluster is laggy [ 864.221465][T15034] libceph: connect (1)[c::]:6789 error -101 [ 864.231999][T15034] libceph: mon0 (1)[c::]:6789 connect error [ 864.262889][T24563] IPVS: Error connecting to the multicast addr [ 864.881037][ T41] audit: type=1326 audit(1774140766.760:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24579 comm="syz.6.6286" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 865.287227][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.290220][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.411057][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.414023][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.485228][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.488175][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6288'. [ 865.674956][T24608] comedi comedi2: bad chanlist[0]=0x00000000 chan=0 range length=4 [ 865.742061][T24631] sctp: [Deprecated]: syz.6.6291 (pid 24631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 865.742061][T24631] Use struct sctp_sack_info instead [ 865.748020][T24631] sctp: [Deprecated]: syz.6.6291 (pid 24631) Use of int in maxseg socket option. [ 865.748020][T24631] Use struct sctp_assoc_value instead [ 865.906215][T24642] binder: 24641:24642 ioctl 400c620e 80000180 returned -22 [ 865.940852][T24605] Process accounting resumed [ 866.232701][T24654] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 866.234827][T24654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 866.251161][T24654] vhci_hcd vhci_hcd.0: Device attached [ 866.556392][T24376] usb 52-1: SetAddress Request (2) to port 0 [ 866.563425][T24376] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 866.887579][T24655] vhci_hcd: connection reset by peer [ 866.904457][T14703] vhci_hcd vhci_hcd.7: stop threads [ 866.913038][T14703] vhci_hcd vhci_hcd.7: release socket [ 866.914834][T14703] vhci_hcd vhci_hcd.7: disconnect device [ 867.341545][T24662] netfs: Couldn't get user pages (rc=-14) [ 867.985718][T24662] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 867.988250][T24662] #PF: supervisor instruction fetch in kernel mode [ 867.990532][T24662] #PF: error_code(0x0010) - not-present page [ 867.994471][T24662] PGD 2b386067 P4D 2b386067 PUD 133cd067 PMD 0 [ 867.996504][T24662] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 867.998307][T24662] CPU: 0 UID: 0 PID: 24662 Comm: syz.8.6295 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.001663][T24662] Tainted: [L]=SOFTLOCKUP [ 868.003063][T24662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 868.006215][T24662] RIP: 0010:0x0 [ 868.007340][T24662] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 868.009685][T24662] RSP: 0000:ffffc90007cf7b80 EFLAGS: 00010246 [ 868.011632][T24662] RAX: 0000000000000000 RBX: ffff88806fabbd70 RCX: ffffc90037a18000 [ 868.013622][T24682] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6300'. [ 868.014098][T24662] RDX: 0000000000080000 RSI: ffffffff82c2cc3c RDI: ffff88806fabbcc0 [ 868.014107][T24662] RBP: 0000000000c3ffc0 R08: 0000000000000001 R09: 0000000000000000 [ 868.014114][T24662] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806fabbd58 [ 868.014121][T24662] R13: dffffc0000000000 R14: ffff88806fabbcc0 R15: ffff888066a10780 [ 868.014128][T24662] FS: 0000000000000000(0000) GS:ffff888097149000(0063) knlGS:00000000f5455b40 [ 868.030230][T24662] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 868.032303][T24662] CR2: ffffffffffffffd6 CR3: 000000002b387000 CR4: 0000000000352ef0 [ 868.034859][T24662] Call Trace: [ 868.035956][T24662] [ 868.036910][T24662] netfs_unbuffered_write+0xae5/0x2080 [ 868.038658][T24662] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 868.040672][T24662] netfs_unbuffered_write_iter+0x40c/0x710 SYZFAIL: failed to recv rpc [ 868.042579][T24662] v9fs_file_write_iter+0xbf/0x100 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 868.044307][T24662] vfs_write+0x6ac/0x1070 [ 868.045751][T24662] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 868.047577][T24662] ? __pfx_vfs_write+0x10/0x10 [ 868.049106][T24662] ksys_write+0x12a/0x250 [ 868.050488][T24662] ? __pfx_ksys_write+0x10/0x10 [ 868.052158][T24662] __do_fast_syscall_32+0xe3/0x8c0 [ 868.054008][T24662] do_fast_syscall_32+0x32/0x70 [ 868.055790][T24662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 868.057907][T24662] RIP: 0023:0xf7fb3f6c [ 868.059230][T24662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 868.065398][T24662] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 868.068062][T24662] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 868.070601][T24662] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 868.073111][T24662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.075592][T24662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 868.078184][T24662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.080670][T24662] [ 868.081664][T24662] Modules linked in: [ 868.082921][T24662] CR2: 0000000000000000 [ 868.084239][T24662] ---[ end trace 0000000000000000 ]--- [ 868.085956][T24662] RIP: 0010:0x0 [ 868.087088][T24662] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 868.089382][T24662] RSP: 0000:ffffc90007cf7b80 EFLAGS: 00010246 [ 868.091320][T24662] RAX: 0000000000000000 RBX: ffff88806fabbd70 RCX: ffffc90037a18000 [ 868.093828][T24662] RDX: 0000000000080000 RSI: ffffffff82c2cc3c RDI: ffff88806fabbcc0 [ 868.096322][T24662] RBP: 0000000000c3ffc0 R08: 0000000000000001 R09: 0000000000000000 [ 868.098883][T24662] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806fabbd58 [ 868.101399][T24662] R13: dffffc0000000000 R14: ffff88806fabbcc0 R15: ffff888066a10780 [ 868.103888][T24662] FS: 0000000000000000(0000) GS:ffff888097149000(0063) knlGS:00000000f5455b40 [ 868.106706][T24662] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 868.108840][T24662] CR2: ffffffffffffffd6 CR3: 000000002b387000 CR4: 0000000000352ef0 [ 868.111359][T24662] Kernel panic - not syncing: Fatal exception [ 868.113854][T24662] Kernel Offset: disabled [ 868.115270][T24662] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:40:02 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85779c15 RDI=ffffffff9b48f180 RBP=ffffffff9b48f140 RSP=ffffc90007cf7408 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000002e R14=0000000000000010 R15=ffffffff85779bb0 RIP=ffffffff85779c3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097149000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b387000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010002 RBX=0000000000000001 RCX=ffffffff81f4306a RDX=ffff88801c71a4c0 RSI=ffffffff81f4314c RDI=ffff88801c71a4c0 RBP=0000000000000000 RSP=ffffc90000590e40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88802b3284c0 R13=ffff88802418b268 R14=ffff88802b328540 R15=dffffc0000000000 RIP=ffffffff82081bfe RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097249000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800b3000 CR3=0000000013057000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100568843a RBX=dffffc0000000000 RCX=fffffbfff21b397d RDX=dffffc0000000000 RSI=1ffffffff1c25d1e RDI=ffffffff8e12e8f0 RBP=0000000000000002 RSP=ffffc9000425f7a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=00000000000159cd R12=ffff88802b4421d0 R13=ffff88802b4421c0 R14=ffffffff940f91c0 R15=1ffffffff21b397d RIP=ffffffff827d6f63 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6f8c77c300 ffffffff 00c00000 GS =0000 ffff888097349000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558de3a15f40 CR3=000000004eb06000 CR4=00352ef0 DR0=0000000000000006 DR1=1000000000000004 DR2=000000007fffdffd DR3=0000800000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=53d74ad9e760c399 aa311d04fc182de4 53d74ad9e760c399 aa311d04fc182de4 53d74ad9e760c399 aa311d04fc182de4 53d74ad9e760c399 aa311d04fc182de4 ZMM18=7e5dc483122b2f64 e8056bdcfa6b1e57 7e5dc483122b2f64 e8056bdcfa6b1e57 7e5dc483122b2f64 e8056bdcfa6b1e57 7e5dc483122b2f64 e8056bdcfa6b1e57 ZMM19=7e1f000000000000 0000000000000004 7e1f000000000000 0000000000000003 7e1f000000000000 0000000000000002 7e1f000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000000000000 0000000000000000 000001ffffffffff ffffffdf0821e003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56080021d80320c0 80080021d0030580 0421c00302f40800 21b80304080021b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03004c504701ffff fffffffffffff708 0003000421a0030e 8004219003060800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc e8056bdce8056bdc ZMM26=122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 122b2f64122b2f64 ZMM27=7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 7e5dc4837e5dc483 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 7d1f00007d1f0000 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=ffff8880291b0000 RCX=ffffffff86809c3f RDX=ffff888000e04980 RSI=ffffffff86809c59 RDI=ffff888000e04980 RBP=0000000000000000 RSP=ffffc900005e8da0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900005e8ff8 R12=ffffc90000415100 R13=ffff888020c65028 R14=0000000000000000 R15=ffff88802913d828 RIP=ffffffff86809c5e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097449000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000637f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000