last executing test programs: 53.303432604s ago: executing program 1 (id=2987): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000400)=0x1) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r7, 0x0) close_range(r5, r5, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 52.439246851s ago: executing program 1 (id=2991): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x15, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="2e000000010000a655cd39a2881bb1ea3b71888a5654dc4ff7df00", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="ee", 0x1}, {&(0x7f0000000680)="c3b9dd62ff57e15202d99d17b820915ddeefe22f4b0572b0c759ef5e627e1731c9395e43a3a4c0a0c84b9fb7cc90be57ad51fbc73d24b96d7e616799c6ee3f5316eb2e44567392c39fbabc40f771a728c7c1ad6e452389ce8ca33c59c40f5ee0d9c73c456da5ee1bca871e12150532f77a37f1ad696b6af8ae73701b1f3284713579ab37a18ac2c22f142d59780b4a7061cefe6fc4e1cbbabe1f6ecb55aae3cfd5d502d6ac7f5535111648", 0xab}], 0x2}}], 0x1, 0x80050) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0xb, 0x6, 0xffffffffffffffff, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, 0x0, 0x4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r9, &(0x7f0000007400)=[{{0x0, 0x0, 0x0}, 0x7611}], 0x1, 0x40000040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.2527956s ago: executing program 1 (id=2992): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r1, r2, 0xfffffffffffffc01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa0002014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r8 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = dup(r7) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r4, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) 51.1346869s ago: executing program 1 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 50.926244437s ago: executing program 1 (id=3000): openat$nullb(0xffffffffffffff9c, 0x0, 0xa8a82, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x200) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2083, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x42000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)={[0x9, 0x5]}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) unshare(0x40400) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x2000, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x62040200) 49.072684911s ago: executing program 1 (id=3003): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4, 0x2, @loopback, 0xfffffffc}, 0x1b) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB="ffff000000000000000006000000000000000000"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) getpid() 33.898453204s ago: executing program 32 (id=3003): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4, 0x2, @loopback, 0xfffffffc}, 0x1b) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB="ffff000000000000000006000000000000000000"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) getpid() 8.76634095s ago: executing program 2 (id=3103): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r4, 0x125f, 0x1f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) 8.76604452s ago: executing program 3 (id=3104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 8.761293003s ago: executing program 0 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 7.896139604s ago: executing program 0 (id=3106): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 7.849213371s ago: executing program 3 (id=3107): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a01"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20008010) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 6.977928977s ago: executing program 4 (id=3108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 6.614482292s ago: executing program 0 (id=3109): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 6.265282655s ago: executing program 3 (id=3110): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) move_pages(r3, 0x5, &(0x7f00000001c0)=[&(0x7f000054a000/0x3000)=nil, &(0x7f0000207000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00004c0000/0x3000)=nil], &(0x7f0000000600)=[0xffff, 0x2, 0x15], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) sendmmsg$unix(r2, &(0x7f0000001b00)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000006c0)="5fb72109b8b5939737b37b2db42fbbd69504b37e793cdb409b80bce01510e4edce", 0x21}, {&(0x7f0000000700)="c9b56af8b05a15144ce798273520ad6587cc447b86c09689b1287d7f7b161ed108bacacb34ba2fa20bdaa0e45719a2ee5a063fdb038a14a235f6eaf39b90255d4065ef0ce9c219a88d78bfa41254063db29cbb17c9e70e1b7b974428b37fde1876d10a1bca4659c12296ecd8bb784e5ed69513add9009146e6a421ee9aa2f427282cda7c363012d9b5dbd0dd22135355d14ebc2b3a04dc47a57364e3010452ff0795ea0e7732801f8a5a8f3ea3e96f2fd8359755d5553e727e455664dda82a4326d5a3cd9963c1097a5613c540c849b899a225b517d02cad036e3e167c03499939fe81b9d83b", 0xe6}, {&(0x7f0000000800)="7b8326f7cfac89e101411b1f0314eb22adee381b244634df1573bd69002390ed382a3f9986165a99a9d65e8ae30cd65d117deb86193513d19a30618fab7c5f8ea126336020759b23c74a77e1fa6fc8e39b7f7d756b5c25ca132787aedb6107198dd699b5db0c921c44249adeace1ea69667440675213fa4d55201e77b18b6add5d7415f085e4", 0x86}, {&(0x7f00000008c0)="be039384b39b2098c80d9c7327eea7727d3aefe63558b6427b870891cc63a618e539fa81b7b92b5bfa4c934a93b91716b316bae605dd920eb14a5a0308ca398cdebd29b0ee42d77cb36ec8a016f177e263", 0x51}, {&(0x7f0000000940)="107e92ab6c84b2583581d244ca05c583fc1235adc0e4d32bcdc8973716f7b463e8c30d027ae6885bb0fbe5b04cf87911c7542d2af582adfcfbac491bb63934b1515145f3cbd1e311a6ed", 0x4a}, {&(0x7f0000000a40)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18dd7a165f9743b83f00000001000000", @ANYRES32=r1, @ANYRES32=r2], 0x18, 0x841}}], 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000580)={&(0x7f00003f0000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/118, 0x76, 0x1, &(0x7f00000004c0)=""/163, 0xa3}, &(0x7f00000005c0)=0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, &(0x7f0000003340)=""/5, 0x88, 0x5, 0x1, 0x6abb}, 0x28) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000020000100000000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x255}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r9, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r9, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x9}) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="07000000010000", 0x7) io_uring_enter(r6, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 6.013897406s ago: executing program 4 (id=3112): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000180)=0x10, 0x80800) sendmsg$tipc(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="94", 0x1}], 0x1, &(0x7f0000000640)="33e0f6d418a90ddbd1f2a591c6b4744914d85ff0b3747f0300861ba150b6042ea253f19a6a928664bebb7a3fb8ad7793bcd3b8f4c9779bc6ba551283a6490b918a2c71ecfc95220cb268ca3cb7e51d87b1e075f442a7a7af67b76c6917cd1e3d354ac5d296ec0d67c7dea62d47665a02177f6bb63deb6e2c53e27bd276e08894613c4fba1c60e236651326ac8fc72010b15353b00d2686aa6af85129a2c2bb819b27bbc99a19d43469cc69c0911b522d50dcd16c5fe709", 0xb7, 0x40805}, 0x20008004) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x24ba, @private1, 0xfff}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e7040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 5.089894611s ago: executing program 3 (id=3113): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x142) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r3, 0x125f, 0x1f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) 5.079034515s ago: executing program 2 (id=3121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 4.975040393s ago: executing program 4 (id=3114): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$hwrng(0xffffff9c, &(0x7f00000005c0), 0xa80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000080003"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 4.421530866s ago: executing program 0 (id=3115): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) 4.18020103s ago: executing program 2 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 3.269405791s ago: executing program 2 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 3.176709062s ago: executing program 3 (id=3118): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x7fffffff}, &(0x7f00000002c0)=0x2, &(0x7f0000000340)=0x10001, 0x0, 0x1, 0x81ed, 0x8, 0x1, 0x6}}], 0x58, 0x805}, 0x404c014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 2.705340668s ago: executing program 0 (id=3119): openat$khugepaged_scan(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0xffc, 0xb, 0x2, 0x7, 0x1, 0x4000401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x406a77, 0x5, 0x7, 0x8]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2.60373911s ago: executing program 4 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 2.258622253s ago: executing program 2 (id=3122): r0 = msgget$private(0x0, 0x1c0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$negate(0xd, r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044565d, &(0x7f0000000100)=@mmap={0x2008, 0x1, 0x4, 0xe000, 0x8d44, {}, {0x4, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) 1.658198134s ago: executing program 4 (id=3123): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f00000010c0)) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x44, &(0x7f0000000040)) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 1.371124501s ago: executing program 3 (id=3124): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)={[], [], 0x2c}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 199.358213ms ago: executing program 0 (id=3125): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000801) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000040)) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 194.962733ms ago: executing program 2 (id=3126): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 0s ago: executing program 4 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 0s ago: executing program 3 (id=3128): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) epoll_create1(0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r11, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4c080) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xfffffffffffffe5e}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') preadv(r12, &(0x7f0000007240)=[{&(0x7f0000006f80)=""/7, 0x7}], 0x1, 0x4, 0x8000) fsetxattr$security_evm(r12, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "0f09d1429f8914bf5afc854c90089a71"}, 0x11, 0x0) kernel console output (not intermixed with test programs): 2 pages reserved [ 675.955388][T15335] 0 pages cma reserved [ 676.259093][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 677.103618][T15358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 677.106718][T15358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 677.112086][T15358] vhci_hcd vhci_hcd.0: Device attached [ 677.390146][T14947] usb 42-1: SetAddress Request (22) to port 0 [ 677.392110][T14947] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 677.474773][T15364] fuse: Unknown parameter 'fd00000000000000000000' [ 677.685214][T15359] vhci_hcd: connection reset by peer [ 677.688017][ T12] vhci_hcd vhci_hcd.2: stop threads [ 677.690257][ T12] vhci_hcd vhci_hcd.2: release socket [ 677.692594][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 677.852918][T15371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 677.856209][T15371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 677.877617][T15371] vhci_hcd vhci_hcd.0: Device attached [ 677.889167][T15375] sit1: entered promiscuous mode [ 678.059959][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 678.120033][ T24] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 678.166305][ T4040] libceph: connect (1)[c::]:6789 error -101 [ 678.169003][ T4040] libceph: mon0 (1)[c::]:6789 connect error [ 678.176777][ T4040] libceph: connect (1)[c::]:6789 error -101 [ 678.179277][ T4040] libceph: mon0 (1)[c::]:6789 connect error [ 678.203030][T15380] ceph: No mds server is up or the cluster is laggy [ 678.610980][T15372] vhci_hcd: connection reset by peer [ 678.613477][ T12] vhci_hcd vhci_hcd.3: stop threads [ 678.615629][ T12] vhci_hcd vhci_hcd.3: release socket [ 678.618032][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 678.630741][ T5816] usb 38-1: device descriptor read/8, error -110 [ 679.031509][ T5816] usb usb38-port1: attempt power cycle [ 679.357948][T15400] syz.1.2279 (15400): drop_caches: 2 [ 679.951053][ T5816] usb usb38-port1: unable to enumerate USB device [ 680.801489][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 680.980952][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 680.985358][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 682.470590][T14947] usb 42-1: device descriptor read/8, error -110 [ 682.860772][T14947] usb usb42-port1: attempt power cycle [ 683.260292][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 683.420734][T14947] usb usb42-port1: unable to enumerate USB device [ 685.352067][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.318435][T13086] Bluetooth: hci2: unexpected event for opcode 0x201c [ 696.628414][T15464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 696.631164][T15464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 696.650785][T15464] vhci_hcd vhci_hcd.0: Device attached [ 696.980155][ T5816] usb 38-1: SetAddress Request (26) to port 0 [ 696.982749][ T5816] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 697.320278][T15480] syz.2.2290 (15480): drop_caches: 2 [ 697.384438][T15466] vhci_hcd: connection reset by peer [ 697.388082][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 697.394645][ T5823] vhci_hcd vhci_hcd.0: release socket [ 697.399370][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 699.121940][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 699.944075][T15516] veth1_vlan: entered allmulticast mode [ 702.070538][ T5816] usb 38-1: device descriptor read/8, error -110 [ 702.461426][ T5816] usb usb38-port1: attempt power cycle [ 703.020931][ T5816] usb usb38-port1: unable to enumerate USB device [ 714.256928][T15539] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 714.262028][T15539] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2299'. [ 714.349316][T15544] autofs4:pid:15544:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 714.787380][T15555] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2304'. [ 714.790780][T15555] tc_dump_action: action bad kind [ 715.277091][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 716.702942][T15578] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2309'. [ 716.706209][T15578] openvswitch: netlink: Flow actions attr not present in new flow. [ 716.729588][T15574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.050401][ T5816] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 718.200439][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 718.207710][ T5816] usb 6-1: config 0 has no interfaces? [ 718.223431][ T5816] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 718.242378][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 718.495295][ T5816] usb 6-1: Product: syz [ 718.504972][ T5816] usb 6-1: Manufacturer: syz [ 718.507118][ T5816] usb 6-1: SerialNumber: syz [ 718.586785][ T5816] usb 6-1: config 0 descriptor?? [ 720.188153][T14947] usb 6-1: USB disconnect, device number 18 [ 720.414357][T15622] ptrace attach of ""[15623] was attempted by "/syz-executor exec"[15622] [ 720.453564][T15628] bond7: (slave bond_slave_1): Device is not our slave [ 720.456215][T15628] bond7: option active_slave: invalid value (bond_slave_1) [ 720.472775][T15628] bond7 (unregistering): Released all slaves [ 720.517994][T15622] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 720.542883][ T42] audit: type=1326 audit(1785755567.560:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.554125][ T42] audit: type=1326 audit(1785755567.560:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.565258][ T42] audit: type=1326 audit(1785755567.560:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.577668][ T42] audit: type=1326 audit(1785755567.560:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.587519][ T42] audit: type=1326 audit(1785755567.560:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.597456][ T42] audit: type=1326 audit(1785755567.570:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.607998][ T42] audit: type=1326 audit(1785755567.570:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.617698][ T42] audit: type=1326 audit(1785755567.570:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.629102][ T42] audit: type=1326 audit(1785755567.570:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 720.638326][ T42] audit: type=1326 audit(1785755567.580:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 721.503849][T15640] ipt_rpfilter: unknown options [ 722.076950][T15650] program syz.1.2322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.765474][T15659] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2323'. [ 722.952658][T15661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 722.954940][T15661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.004307][T15661] vhci_hcd vhci_hcd.0: Device attached [ 723.160501][T15650] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 723.189639][T15650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 723.192691][T15650] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 723.195423][T15650] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 723.199422][T15650] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 723.218702][T15650] pci 0000:00:01.0: Adding to iommu group 1 [ 723.226781][T15650] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 723.229313][T15650] pci 0000:00:01.0: vgaarb: bridge control possible [ 723.231714][T15650] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 723.260104][T14947] usb 38-1: SetAddress Request (30) to port 0 [ 723.262651][T14947] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 723.277389][T15650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 723.289038][T15650] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 723.295406][T15650] pci 0000:00:04.0: PCI bridge to [bus 01] [ 723.298657][T15650] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 723.308279][T15650] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 723.315475][T15650] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 723.325359][T15650] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 723.346142][T15650] [drm] Found bochs VGA, ID 0xb0c5. [ 723.348271][T15650] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 723.355554][T15650] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 723.592191][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 723.715609][T15662] vhci_hcd: connection reset by peer [ 723.719195][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 723.721473][ T5823] vhci_hcd vhci_hcd.0: release socket [ 723.723236][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 723.750463][ T5920] IPVS: ip_vs_send_async error -101 [ 723.790839][T15675] bridge_slave_0: default FDB implementation only supports local addresses [ 724.153849][T13086] Bluetooth: hci1: unexpected event for opcode 0x201c [ 725.593107][T15696] bond5: entered promiscuous mode [ 726.235038][T15698] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 726.385832][T15706] netlink: 'syz.2.2332': attribute type 4 has an invalid length. [ 726.468112][T15706] netlink: 'syz.2.2332': attribute type 4 has an invalid length. [ 727.280547][T15718] bridge_slave_0: default FDB implementation only supports local addresses [ 728.327449][T14947] usb 38-1: device descriptor read/8, error -110 [ 728.950003][ T5920] IPVS: ip_vs_send_async error -101 [ 729.124933][ T24] libceph: connect (1)[c::]:6789 error -101 [ 729.128701][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 729.132378][ T24] libceph: connect (1)[c::]:6789 error -101 [ 729.135308][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 729.149896][T15743] ceph: No mds server is up or the cluster is laggy [ 729.220653][T14947] usb usb38-port1: attempt power cycle [ 729.486349][T15753] syz.3.2344: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 729.499520][T15753] CPU: 2 UID: 0 PID: 15753 Comm: syz.3.2344 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.499542][T15753] Tainted: [L]=SOFTLOCKUP [ 729.499546][T15753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 729.499565][T15753] Call Trace: [ 729.499570][T15753] [ 729.499575][T15753] dump_stack_lvl+0x100/0x190 [ 729.499680][T15753] warn_alloc.cold+0x94/0xa8 [ 729.499700][T15753] ? __pfx_warn_alloc+0x10/0x10 [ 729.499731][T15753] ? kasan_save_stack+0x3f/0x50 [ 729.499748][T15753] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 729.499761][T15753] ? xskq_create+0x52/0x1d0 [ 729.499805][T15753] ? xsk_setsockopt+0x743/0xab0 [ 729.499817][T15753] ? do_sock_setsockopt+0xf3/0x1d0 [ 729.499830][T15753] ? __sys_setsockopt+0x119/0x190 [ 729.499847][T15753] ? __ia32_sys_setsockopt+0xbc/0x160 [ 729.499863][T15753] ? __do_fast_syscall_32+0xe7/0x970 [ 729.499881][T15753] ? do_fast_syscall_32+0x32/0x70 [ 729.499900][T15753] ? xskq_create+0xfb/0x1d0 [ 729.499913][T15753] __vmalloc_node_range_noprof+0x136c/0x1630 [ 729.499939][T15753] ? xskq_create+0xfb/0x1d0 [ 729.499958][T15753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 729.499979][T15753] ? kasan_save_track+0x14/0x30 [ 729.499994][T15753] ? __kasan_kmalloc+0xaa/0xb0 [ 729.500014][T15753] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 729.500026][T15753] ? xskq_create+0xfb/0x1d0 [ 729.500039][T15753] vmalloc_user_noprof+0x9e/0xe0 [ 729.500057][T15753] ? xskq_create+0xfb/0x1d0 [ 729.500072][T15753] xskq_create+0xfb/0x1d0 [ 729.500088][T15753] xsk_setsockopt+0x743/0xab0 [ 729.500101][T15753] ? __pfx_aa_sk_perm+0x10/0x10 [ 729.500159][T15753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.500174][T15753] ? find_held_lock+0x2b/0x80 [ 729.500199][T15753] ? aa_sock_opt_perm+0xfe/0x1b0 [ 729.500213][T15753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.500228][T15753] do_sock_setsockopt+0xf3/0x1d0 [ 729.500242][T15753] __sys_setsockopt+0x119/0x190 [ 729.500260][T15753] __ia32_sys_setsockopt+0xbc/0x160 [ 729.500275][T15753] ? __do_fast_syscall_32+0x98/0x970 [ 729.500291][T15753] ? lockdep_hardirqs_on+0x78/0x100 [ 729.500306][T15753] __do_fast_syscall_32+0xe7/0x970 [ 729.500327][T15753] do_fast_syscall_32+0x32/0x70 [ 729.500343][T15753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.500357][T15753] RIP: 0023:0xf70cefec [ 729.500372][T15753] Code: Unable to access opcode bytes at 0xf70cefc2. [ 729.500377][T15753] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 729.500390][T15753] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 729.500396][T15753] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 729.500403][T15753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.500409][T15753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 729.500416][T15753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.500430][T15753] [ 729.702157][T15753] Mem-Info: [ 729.717082][T15753] active_anon:1675 inactive_anon:5010 isolated_anon:0 [ 729.717082][T15753] active_file:4039 inactive_file:17504 isolated_file:0 [ 729.717082][T15753] unevictable:775 dirty:603 writeback:0 [ 729.717082][T15753] slab_reclaimable:6437 slab_unreclaimable:61459 [ 729.717082][T15753] mapped:24357 shmem:1924 pagetables:1383 [ 729.717082][T15753] sec_pagetables:320 bounce:0 [ 729.717082][T15753] kernel_misc_reclaimable:0 [ 729.717082][T15753] free:57443 free_pcp:11602 free_cma:0 [ 729.779884][T15753] Node 0 active_anon:404kB inactive_anon:56kB active_file:0kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:1420kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.780825][T14947] usb usb38-port1: unable to enumerate USB device [ 729.829905][T15753] Node 1 active_anon:6340kB inactive_anon:19984kB active_file:16156kB inactive_file:69980kB unevictable:1564kB isolated(anon):0kB isolated(file):0kB mapped:97384kB dirty:2412kB writeback:0kB shmem:6160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6752kB pagetables:4112kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.855852][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 729.855865][ T42] audit: type=1800 audit(1785755576.870:1414): pid=15757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2345" name="file0" dev="overlay" ino=3082 res=0 errno=0 [ 729.889887][T15753] Node 0 DMA free:2012kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:608kB local_pcp:184kB free_cma:0kB [ 729.927211][T15753] lowmem_reserve[]: 0 280 280 280 280 [ 729.967436][T15753] Node 0 DMA32 free:15404kB boost:2048kB min:14816kB low:18008kB high:21200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:396kB inactive_anon:56kB active_file:0kB inactive_file:36kB unevictable:1536kB writepending:4kB zspages:56kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:10240kB local_pcp:2636kB free_cma:0kB [ 729.992421][T15753] lowmem_reserve[]: 0 0 0 0 0 [ 729.993990][T15753] Node 1 DMA32 free:212356kB boost:18432kB min:65576kB low:77360kB high:89144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4340kB inactive_anon:19984kB active_file:16156kB inactive_file:69980kB unevictable:1564kB writepending:2412kB zspages:2608kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37536kB local_pcp:3184kB free_cma:0kB [ 730.011567][T15753] lowmem_reserve[]: 0 0 0 0 0 [ 730.013251][T15753] Node 0 DMA: 97*4kB (UM) 1*8kB (M) 3*16kB (UM) 5*32kB (U) 4*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2012kB [ 730.017928][T15753] Node 0 DMA32: 383*4kB (UE) 110*8kB (UME) 48*16kB (UME) 40*32kB (UE) 55*64kB (UME) 26*128kB (UME) 4*256kB (ME) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 15404kB [ 730.023578][T15753] Node 1 DMA32: 3162*4kB (UME) 2346*8kB (UM) 1403*16kB (UME) 733*32kB (UME) 385*64kB (UME) 174*128kB (UME) 64*256kB (UME) 46*512kB (UM) 23*1024kB (UM) 12*2048kB (UM) 0*4096kB = 212296kB [ 730.029398][T15753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.033717][T15753] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 730.036709][T15753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.039736][T15753] Node 1 hugepages_total=6 hugepages_free=4 hugepages_surp=3 hugepages_size=2048kB [ 730.043220][T15753] 24876 total pagecache pages [ 730.044804][T15753] 1423 pages in swap cache [ 730.046310][T15753] Free swap = 108420kB [ 730.047698][T15753] Total swap = 124996kB [ 730.049202][T15753] 524155 pages RAM [ 730.050778][T15753] 0 pages HighMem/MovableOnly [ 730.052334][T15753] 211532 pages reserved [ 730.053718][T15753] 0 pages cma reserved [ 730.588762][T15764] binder: 15762:15764 ioctl c0186405 800028c0 returned -22 [ 731.042922][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 731.885889][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 731.895591][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 731.899290][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 731.906328][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 731.921861][T15775] 9pnet_virtio: no channels available for device syz [ 734.266283][T15797] syzkaller0: entered promiscuous mode [ 734.270006][T15797] syzkaller0: entered allmulticast mode [ 734.783580][ T24] libceph: connect (1)[c::]:6789 error -99 [ 734.788714][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 734.796694][T15800] ceph: No mds server is up or the cluster is laggy [ 734.800724][ T24] libceph: connect (1)[c::]:6789 error -99 [ 734.806499][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 735.588107][T15817] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 735.609887][T15817] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 735.612695][T15817] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 735.617080][T15817] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 735.625301][T15817] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 735.649570][T15817] pci 0000:00:01.0: Adding to iommu group 1 [ 735.673653][T15817] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 735.676108][T15817] pci 0000:00:01.0: vgaarb: bridge control possible [ 735.678179][T15817] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 735.697671][T15817] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 735.701045][T15817] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 735.704553][T15817] pci 0000:00:04.0: PCI bridge to [bus 01] [ 735.707497][T15817] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 735.712366][T15817] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 735.717993][T15817] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 735.733677][T15817] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 735.781332][T15817] [drm] Found bochs VGA, ID 0xb0c5. [ 735.787382][T15817] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 735.857516][T15817] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 736.100674][T15817] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 736.660565][T15834] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2364'. [ 736.664128][T15834] openvswitch: netlink: Flow actions attr not present in new flow. [ 736.879668][T15839] syzkaller0: entered promiscuous mode [ 736.881720][T15839] syzkaller0: entered allmulticast mode [ 737.099171][T15840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.106019][T15840] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 737.114110][T15840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.117229][T15840] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 737.130956][T15840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 737.132938][T15840] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 740.137521][T15862] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 740.139913][T15862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.146608][T15862] vhci_hcd vhci_hcd.0: Device attached [ 740.430670][T14947] usb 44-1: SetAddress Request (27) to port 0 [ 740.433364][T14947] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 740.804273][T15863] vhci_hcd: connection reset by peer [ 740.810736][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 740.812585][ T5823] vhci_hcd vhci_hcd.3: release socket [ 740.820069][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 741.633671][ T24] libceph: connect (1)[c::]:6789 error -99 [ 741.640058][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 741.664944][T15878] ceph: No mds server is up or the cluster is laggy [ 741.900072][ T24] libceph: connect (1)[c::]:6789 error -99 [ 741.903447][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 742.785294][ T42] audit: type=1800 audit(1785755588.808:1415): pid=15873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2372" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 742.807501][T15890] syzkaller0: entered promiscuous mode [ 742.809385][T15890] syzkaller0: entered allmulticast mode [ 742.843448][T15873] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 743.581802][T15903] program syz.2.2380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.774871][T15903] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 743.836669][T15903] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 743.840731][T15903] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 743.844094][T15903] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 743.847816][T15903] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 743.865208][T15903] pci 0000:00:01.0: Adding to iommu group 1 [ 743.881510][T15903] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 743.884012][ T42] audit: type=1800 audit(1785755589.868:1416): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2379" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 743.884371][T15903] pci 0000:00:01.0: vgaarb: bridge control possible [ 743.893587][T15903] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 743.950373][T15903] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 743.953532][T15903] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 743.957008][T15903] pci 0000:00:04.0: PCI bridge to [bus 01] [ 743.960327][T15903] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 743.965254][T15903] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 743.970373][T15903] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 743.978523][T15903] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 743.993232][T15903] [drm] Found bochs VGA, ID 0xb0c5. [ 743.995482][T15903] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 744.028954][T15903] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 744.091034][T15903] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 744.107392][T15908] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 744.114738][T15908] fuse: Bad value for 'fd' [ 744.122602][T15908] bridge_slave_0: default FDB implementation only supports local addresses [ 745.501080][T15928] syzkaller0: entered promiscuous mode [ 745.505139][T15928] syzkaller0: entered allmulticast mode [ 745.510326][T14947] usb 44-1: device descriptor read/8, error -110 [ 745.673997][T15930] syzkaller0: entered promiscuous mode [ 745.675834][T15930] syzkaller0: entered allmulticast mode [ 745.901844][T14947] usb usb44-port1: attempt power cycle [ 746.062179][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 746.109139][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 746.221038][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 746.475713][T14947] usb usb44-port1: unable to enumerate USB device [ 746.793350][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.216695][T15955] openvswitch: netlink: Duplicate key (type 6). [ 748.312218][T15971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2396'. [ 748.394130][T15971] team0 (unregistering): Port device team_slave_0 removed [ 748.416752][T15971] team0 (unregistering): Port device 12žÿ removed [ 749.418266][T15986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2400'. [ 749.616703][T15993] loop5: detected capacity change from 0 to 7 [ 749.621069][ C2] blk_print_req_error: 11 callbacks suppressed [ 749.621080][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.626746][ C2] buffer_io_error: 10 callbacks suppressed [ 749.626759][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.632288][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.635373][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.638205][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.641238][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.643904][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.646971][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.649617][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.652967][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.659612][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.663059][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.667021][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.670663][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.673674][T15993] ldm_validate_partition_table(): Disk read failed. [ 749.676714][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.680680][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.684668][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.688534][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.691951][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 749.695533][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 749.698320][T15993] Dev loop5: unable to read RDB block 0 [ 749.701228][T15993] loop5: unable to read partition table [ 749.703779][T15993] loop5: partition table beyond EOD, truncated [ 749.706430][T15993] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 749.803902][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.822094][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.902317][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.911369][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.929665][T15991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 749.937758][T15991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 749.940678][T15998] ptrace attach of ""[15999] was attempted by "/syz-executor exec"[15998] [ 749.951458][T15991] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 750.054645][ T42] audit: type=1800 audit(1785755596.078:1417): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2409" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 750.374788][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 750.384971][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 750.391502][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 750.398043][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 750.407991][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 750.567357][T16008] syzkaller0: entered promiscuous mode [ 750.569669][T16008] syzkaller0: entered allmulticast mode [ 751.645244][T16028] syzkaller0: entered promiscuous mode [ 751.651467][T16028] syzkaller0: entered allmulticast mode [ 752.758729][T16038] bond5 (unregistering): Released all slaves [ 753.355225][T16058] __nla_validate_parse: 5 callbacks suppressed [ 753.355364][T16058] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2416'. [ 753.360391][T16058] openvswitch: netlink: Flow actions attr not present in new flow. [ 755.366867][T16080] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 755.369200][T16080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 755.396508][T16080] vhci_hcd vhci_hcd.0: Device attached [ 756.076833][T14947] usb 40-1: SetAddress Request (18) to port 0 [ 756.079602][T14947] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 756.100769][T16091] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 756.102875][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.106453][T16091] vhci_hcd vhci_hcd.0: Device attached [ 756.580130][T16091] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 756.746743][ T5816] usb 38-1: SetAddress Request (34) to port 0 [ 756.760550][ T5816] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 756.801384][T16081] vhci_hcd: connection reset by peer [ 756.816312][T15782] vhci_hcd vhci_hcd.1: stop threads [ 756.818615][T15782] vhci_hcd vhci_hcd.1: release socket [ 756.823711][T15782] vhci_hcd vhci_hcd.1: disconnect device [ 756.943115][T16092] vhci_hcd: connection reset by peer [ 756.945830][T15782] vhci_hcd vhci_hcd.0: stop threads [ 756.947598][T15782] vhci_hcd vhci_hcd.0: release socket [ 756.950643][T15782] vhci_hcd vhci_hcd.0: disconnect device [ 759.251013][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 759.412514][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.416069][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 759.421230][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.425025][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 759.429411][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 759.435570][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.438298][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.441631][ T29] usb 6-1: Product: syz [ 759.442977][ T29] usb 6-1: Manufacturer: syz [ 759.451236][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 759.453802][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 759.456731][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 759.458649][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 759.740415][ T42] audit: type=1326 audit(1785755605.768:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.762158][ T42] audit: type=1326 audit(1785755605.768:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.783702][ T42] audit: type=1326 audit(1785755605.768:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.798894][ T42] audit: type=1326 audit(1785755605.768:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.808145][ T42] audit: type=1326 audit(1785755605.768:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.818845][ T42] audit: type=1326 audit(1785755605.768:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.827084][ T42] audit: type=1326 audit(1785755605.768:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.836078][ T42] audit: type=1326 audit(1785755605.768:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.852519][ T42] audit: type=1326 audit(1785755605.768:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 759.862602][ T42] audit: type=1326 audit(1785755605.768:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.2434" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.246968][T16128] futex_wake_op: syz.1.2429 tries to shift op by 144; fix this program [ 761.006990][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.010627][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.013762][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.019672][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.024906][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.042045][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.069604][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.080221][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.084610][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.087908][T16142] random: crng reseeded on system resumption [ 761.088714][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 761.190306][T14947] usb 40-1: device descriptor read/8, error -110 [ 761.581532][T14947] usb usb40-port1: attempt power cycle [ 761.829951][ T5816] usb 38-1: device descriptor read/8, error -110 [ 761.988545][ T5824] usb 6-1: USB disconnect, device number 19 [ 762.147890][T14947] usb usb40-port1: unable to enumerate USB device [ 762.220993][ T5816] usb usb38-port1: attempt power cycle [ 762.782279][ T5816] usb usb38-port1: unable to enumerate USB device [ 763.213414][T16175] binder: 16167:16175 ioctl 4c0a 0 returned -22 [ 763.454609][T16173] UDC core: g1: couldn't find an available UDC or it's busy [ 763.624572][T16178] lo speed is unknown, defaulting to 1000 [ 763.644827][T16180] ip6t_rpfilter: unknown options [ 764.516563][ T149] libceph: connect (1)[c::]:6789 error -101 [ 764.519245][ T149] libceph: mon0 (1)[c::]:6789 connect error [ 764.564871][T16199] ceph: No mds server is up or the cluster is laggy [ 768.151791][T16253] __nla_validate_parse: 4 callbacks suppressed [ 768.151870][T16253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2458'. [ 768.400690][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 768.400716][ T42] audit: type=1326 audit(1785755614.398:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.1.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 768.418388][ T42] audit: type=1326 audit(1785755614.398:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.1.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 768.425331][ T42] audit: type=1326 audit(1785755614.398:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.1.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 768.432474][ T42] audit: type=1326 audit(1785755614.438:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.1.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 768.835817][T16264] msr: Write to unrecognized MSR 0x1a0 by syz.3.2461 (pid: 16264), tainting CPU_OUT_OF_SPEC. [ 768.843590][T16264] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 769.851590][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 770.448364][T16276] nbd0: detected capacity change from 0 to 63 [ 770.600686][T16285] netlink: 'syz.2.2465': attribute type 11 has an invalid length. [ 770.804112][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.831574][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.897678][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.904997][T16286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 770.908929][T16286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.915391][T16286] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 771.089905][T16291] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 771.273151][T16291] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 771.293968][T16291] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 771.308167][T16291] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.325172][T16291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.874240][ T34] usb 6-1: USB disconnect, device number 20 [ 774.026338][ T65] block nbd0: Receive control failed (result -104) [ 774.243962][T16329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 774.407262][T16332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.421013][T16332] geneve2: left promiscuous mode [ 774.423677][T16332] sit1: left promiscuous mode [ 774.425463][T14947] lo speed is unknown, defaulting to 1000 [ 774.430562][T14947] syz0: Port: 1 Link DOWN [ 774.450917][T15782] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 47149 - 0 [ 774.456576][T15782] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 47149 - 0 [ 774.463684][T15782] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 47149 - 0 [ 774.466852][T15782] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 47149 - 0 [ 776.850347][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2482'. [ 777.369688][T16370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2483'. [ 781.955732][T16430] Invalid ELF header magic: != ELF [ 781.963044][T16430] overlayfs: overlapping lowerdir path [ 782.200810][T16420] xt_connbytes: Forcing CT accounting to be enabled [ 782.201091][T16420] Cannot find del_set index 0 as target [ 782.507091][T16444] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2502'. [ 782.522221][T16444] bond0 (unregistering): left promiscuous mode [ 782.524631][T16444] : left promiscuous mode [ 782.526520][T16444] bond_slave_1: left promiscuous mode [ 782.529929][T16444] bond0 (unregistering): (slave 30): Releasing backup interface [ 782.534881][T16444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.538458][T16444] bond0 (unregistering): Released all slaves [ 786.065453][ T42] audit: type=1800 audit(1785755632.088:1448): pid=16491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2512" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 786.248466][T16505] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2513'. [ 786.251643][T16505] openvswitch: netlink: Flow actions attr not present in new flow. [ 787.104676][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2519'. [ 789.830667][ T5920] IPVS: ip_vs_send_async error -101 [ 791.328062][ T42] audit: type=1800 audit(1785755637.348:1449): pid=16580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2529" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 791.554238][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 791.868241][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2532'. [ 792.526306][T16565] Set syz1 is full, maxelem 65536 reached [ 792.841173][ T42] audit: type=1326 audit(1785755638.858:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.853146][ T42] audit: type=1326 audit(1785755638.878:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.873914][ T42] audit: type=1326 audit(1785755638.878:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.890157][ T42] audit: type=1326 audit(1785755638.878:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.905375][ T42] audit: type=1326 audit(1785755638.878:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.913012][ T42] audit: type=1326 audit(1785755638.888:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.926389][ T42] audit: type=1326 audit(1785755638.888:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.939582][ T42] audit: type=1326 audit(1785755638.888:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.947020][ T42] audit: type=1326 audit(1785755638.908:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 792.980032][T16602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.991985][T16602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.013739][T16602] bond5: left promiscuous mode [ 795.743019][T16629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2542'. [ 796.473333][T16651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2544'. [ 796.574152][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 796.574192][ T42] audit: type=1800 audit(1785755642.588:1483): pid=16649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2541" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 799.020832][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 800.576932][ T35] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 30 seconds [ 800.600552][T16691] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 800.610496][T16691] binder: 16689:16691 ioctl 4018620d 80000100 returned -1 [ 800.767769][T16696] binder: 16694:16696 ioctl 4c0a 0 returned -22 [ 800.783104][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 801.820878][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2557'. [ 802.789120][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2560'. [ 803.460984][T16741] nbd1: detected capacity change from 0 to 63 [ 804.571595][ T65] block nbd1: Receive control failed (result -104) [ 805.510959][ T149] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 808.230897][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.588879][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 823.589639][T16786] netlink: 'syz.0.2564': attribute type 11 has an invalid length. [ 823.631745][T16786] bond2: option ad_actor_sys_prio: invalid value (0) [ 823.633933][T16786] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 823.637291][T16786] bond2 (unregistering): Released all slaves [ 823.727404][T16793] can: request_module (can-proto-3) failed. [ 825.302409][T16829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2569'. [ 825.417177][T16805] lo speed is unknown, defaulting to 1000 [ 826.360117][T16840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 826.362259][T16840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 826.380570][T16840] vhci_hcd vhci_hcd.0: Device attached [ 826.561278][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 826.620090][ T29] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 826.931391][T16841] vhci_hcd: connection reset by peer [ 826.931640][ T5823] vhci_hcd vhci_hcd.2: stop threads [ 826.931658][ T5823] vhci_hcd vhci_hcd.2: release socket [ 826.931759][ T5823] vhci_hcd vhci_hcd.2: disconnect device [ 827.105663][ T24] libceph: connect (1)[c::]:6789 error -99 [ 827.111284][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 827.116574][ T24] libceph: connect (1)[c::]:6789 error -99 [ 827.119068][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 827.152314][T16852] ceph: No mds server is up or the cluster is laggy [ 829.344449][T16885] netlink: 'syz.1.2580': attribute type 1 has an invalid length. [ 829.412974][T16891] 9p: Bad value for 'rfdno' [ 829.558668][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.647977][ T6035] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 60 seconds [ 831.696876][T16921] program syz.2.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.797230][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 832.565356][T16930] lo speed is unknown, defaulting to 1000 [ 833.399477][ T42] audit: type=1800 audit(1785755679.418:1484): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2590" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 833.850060][ T5909] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 30 seconds [ 834.720953][T16967] random: crng reseeded on system resumption [ 835.855999][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 837.169420][T16998] program syz.3.2597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 837.371052][T17005] binder: 17003:17005 ioctl 4c0a 0 returned -22 [ 837.453576][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 838.212347][T17017] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 838.214382][T17017] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.235225][T17017] vhci_hcd vhci_hcd.0: Device attached [ 838.600274][ T29] usb 42-1: SetAddress Request (26) to port 0 [ 838.600335][ T29] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 839.301396][T17018] vhci_hcd: connection reset by peer [ 839.303959][ T12] vhci_hcd vhci_hcd.2: stop threads [ 839.305801][ T12] vhci_hcd vhci_hcd.2: release socket [ 839.307708][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 839.589699][T17025] nbd2: detected capacity change from 0 to 63 [ 839.633834][T17035] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 841.192882][T17050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2611'. [ 841.372762][ T42] audit: type=1326 audit(1785755687.388:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.395199][ T42] audit: type=1326 audit(1785755687.388:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.423751][ T42] audit: type=1326 audit(1785755687.398:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.456019][ T42] audit: type=1326 audit(1785755687.408:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.481798][ T42] audit: type=1326 audit(1785755687.428:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.506348][ T42] audit: type=1326 audit(1785755687.428:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.540459][ T42] audit: type=1326 audit(1785755687.428:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.572261][ T42] audit: type=1326 audit(1785755687.458:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.617052][ T42] audit: type=1326 audit(1785755687.468:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 841.688572][ T42] audit: type=1326 audit(1785755687.468:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.2.2610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 842.662401][ T65] block nbd2: Receive control failed (result -104) [ 842.971190][T17039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.010019][T17086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2614'. [ 843.815167][ T29] usb 42-1: device descriptor read/8, error -110 [ 844.221285][ T29] usb usb42-port1: attempt power cycle [ 844.791601][ T29] usb usb42-port1: unable to enumerate USB device [ 845.094733][T17118] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 845.122896][T17109] nbd3: detected capacity change from 0 to 63 [ 845.882425][T17127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2624'. [ 846.082766][ T65] block nbd3: Receive control failed (result -104) [ 846.398020][T17134] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 846.400093][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 846.406923][T17134] vhci_hcd vhci_hcd.0: Device attached [ 846.670578][ T29] usb 38-1: SetAddress Request (38) to port 0 [ 846.674140][ T29] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 846.786300][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2627'. [ 847.128200][T17135] vhci_hcd: connection reset by peer [ 847.134637][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 847.136440][ T5823] vhci_hcd vhci_hcd.0: release socket [ 847.139498][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 849.307059][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2635'. [ 849.784911][T17121] udevd[17121]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 849.853799][T17181] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 849.856278][T17181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 849.867415][T17181] vhci_hcd vhci_hcd.0: Device attached [ 850.190341][ T5853] usb 44-1: SetAddress Request (31) to port 0 [ 850.192222][ T5853] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 850.561193][T17182] vhci_hcd: connection reset by peer [ 850.564996][T15782] vhci_hcd vhci_hcd.3: stop threads [ 850.567804][T15782] vhci_hcd vhci_hcd.3: release socket [ 850.570621][T15782] vhci_hcd vhci_hcd.3: disconnect device [ 850.747593][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'. [ 851.750002][ T29] usb 38-1: device descriptor read/8, error -110 [ 851.858968][T17197] program syz.1.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.191735][ T29] usb usb38-port1: attempt power cycle [ 852.237727][ T5824] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 852.762056][ T29] usb usb38-port1: unable to enumerate USB device [ 854.677358][T16291] libceph: connect (1)[c::]:6789 error -101 [ 854.679429][T16291] libceph: mon0 (1)[c::]:6789 connect error [ 854.691127][T16291] libceph: connect (1)[c::]:6789 error -101 [ 854.694674][T16291] libceph: mon0 (1)[c::]:6789 connect error [ 854.698991][T17250] ceph: No mds server is up or the cluster is laggy [ 854.960272][T16291] libceph: connect (1)[c::]:6789 error -101 [ 854.965495][T16291] libceph: mon0 (1)[c::]:6789 connect error [ 855.198241][T17248] lo speed is unknown, defaulting to 1000 [ 855.270559][ T5853] usb 44-1: device descriptor read/8, error -110 [ 855.660646][ T5853] usb usb44-port1: attempt power cycle [ 856.220713][ T5853] usb usb44-port1: unable to enumerate USB device [ 857.190345][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'. [ 858.490465][ T5824] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 860.713317][ T6035] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 90 seconds [ 862.832790][T17349] lo speed is unknown, defaulting to 1000 [ 864.164347][T14416] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 60 seconds [ 864.343990][T17385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2672'. [ 864.816950][T17390] program syz.0.2673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.494480][T17415] erspan0: entered promiscuous mode [ 868.505873][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 869.556783][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 869.556796][ T42] audit: type=1800 audit(1785755715.571:1506): pid=17424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2675" name="bus" dev="ramfs" ino=64718 res=0 errno=0 [ 869.584644][T17425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.671471][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.673998][ T5909] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 30 seconds [ 869.678083][ T5909] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 30 seconds [ 869.682813][ T5909] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 30 seconds [ 869.687051][ T5909] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 30 seconds [ 872.572703][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2693'. [ 873.072898][T17488] lo speed is unknown, defaulting to 1000 [ 875.430254][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 30 seconds [ 875.434588][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 30 seconds [ 875.439061][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 30 seconds [ 875.444585][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 30 seconds [ 875.538694][T17523] netlink: 'syz.1.2690': attribute type 2 has an invalid length. [ 877.165265][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.167936][T17539] batadv_slave_1: entered promiscuous mode [ 877.273140][T17541] UDC core: g1: couldn't find an available UDC or it's busy [ 877.505852][T17546] netlink: 'syz.2.2701': attribute type 1 has an invalid length. [ 877.593864][T17546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 877.632411][T17551] NILFS (loop1): device size too small [ 878.626590][T17564] bond8: entered promiscuous mode [ 879.091361][T17568] (syz.1.2706,17568,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 879.104937][T17568] (syz.1.2706,17568,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 880.170244][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 880.517601][ T42] audit: type=1800 audit(1785755725.536:1507): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2704" name="bus" dev="ramfs" ino=65033 res=0 errno=0 [ 880.936396][T17591] netlink: 'syz.0.2719': attribute type 3 has an invalid length. [ 881.201000][T17595] netlink: 'syz.3.2711': attribute type 11 has an invalid length. [ 881.797042][T17592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.100469][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.720601][T17665] tmpfs: Unknown parameter 'grpquota/cluster/mycluster/node/mynode/ipv4_address' [ 885.748538][T17667] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 886.122782][T17664] bond6 (unregistering): Released all slaves [ 886.534285][T17673] netlink: 'syz.2.2726': attribute type 11 has an invalid length. [ 886.564294][T17673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.568017][T17673] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 886.604294][T17673] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 886.606657][T17673] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 886.659539][T17675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 887.810221][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2731'. [ 888.048679][T17693] netlink: 'syz.0.2728': attribute type 1 has an invalid length. [ 888.088993][T17693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.805190][T17704] gretap0: entered promiscuous mode [ 889.183011][T17708] netlink: 'syz.0.2740': attribute type 2 has an invalid length. [ 889.531720][T17696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.957921][ T35] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 120 seconds [ 891.683043][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2741'. [ 891.709373][T17736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2739'. [ 892.385007][T17745] bond4 (unregistering): Released all slaves [ 893.172428][T14686] Bluetooth: hci4: Frame reassembly failed (-84) [ 893.185466][T14686] Bluetooth: hci4: Frame reassembly failed (-90) [ 893.215676][ T42] audit: type=1804 audit(1785755738.236:1508): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2745" name="/newroot/694/bus/bus" dev="overlay" ino=3785 res=1 errno=0 [ 894.768165][ T5909] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 90 seconds [ 895.154510][T17774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.187935][T17774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.197754][T13086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 895.777898][T17786] binder: 17780:17786 ioctl c0306201 80000080 returned -22 [ 897.043122][T17788] netlink: 'syz.2.2753': attribute type 2 has an invalid length. [ 898.037164][T17799] lo speed is unknown, defaulting to 1000 [ 898.480285][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2756'. [ 899.756277][ T5909] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 60 seconds [ 899.831145][ T5909] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 60 seconds [ 899.836108][ T5909] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 60 seconds [ 899.843299][ T5909] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 60 seconds [ 900.750828][T17834] lo speed is unknown, defaulting to 1000 [ 902.687199][T17834] Set syz1 is full, maxelem 65536 reached [ 904.026584][T17870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2770'. [ 904.205547][T17873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 904.207682][T17873] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 904.212646][T17873] vhci_hcd vhci_hcd.0: Device attached [ 904.236092][T17873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2772'. [ 904.246592][T17873] netlink: 'syz.3.2772': attribute type 12 has an invalid length. [ 904.442243][ T42] audit: type=1800 audit(1785755749.446:1509): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2765" name="bus" dev="ramfs" ino=70980 res=0 errno=0 [ 904.520949][ T5824] usb 44-1: SetAddress Request (35) to port 0 [ 904.524028][ T5824] usb 44-1: new SuperSpeed USB device number 35 using vhci_hcd [ 905.060881][T17874] vhci_hcd: connection reset by peer [ 905.062908][ T5798] vhci_hcd vhci_hcd.3: stop threads [ 905.065338][ T5798] vhci_hcd vhci_hcd.3: release socket [ 905.068790][ T5798] vhci_hcd vhci_hcd.3: disconnect device [ 905.252622][T17886] bond9 (unregistering): Released all slaves [ 905.518139][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 60 seconds [ 905.523782][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 60 seconds [ 905.531725][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 60 seconds [ 905.536098][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 60 seconds [ 905.982574][T17901] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 906.073880][T17901] gretap0: entered promiscuous mode [ 906.238716][T17911] random: crng reseeded on system resumption [ 906.784740][T17901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.792047][T17901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.837952][T17901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.843833][T17901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.851183][T17901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 906.855706][T17901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 906.868287][T17901] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 906.893326][T17914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2780'. [ 906.896417][T17909] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 906.899735][T17909] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 907.550818][T17928] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 907.553512][T17928] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.557471][T17928] vhci_hcd vhci_hcd.0: Device attached [ 907.850627][T13963] usb 40-1: SetAddress Request (22) to port 0 [ 907.853237][T13963] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 908.163479][T17929] vhci_hcd: connection reset by peer [ 908.166736][T17740] vhci_hcd vhci_hcd.1: stop threads [ 908.168583][T17740] vhci_hcd vhci_hcd.1: release socket [ 908.170567][T17740] vhci_hcd vhci_hcd.1: disconnect device [ 908.698384][T17943] netlink: 'syz.2.2785': attribute type 11 has an invalid length. [ 908.943062][T17937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.589959][ T5824] usb 44-1: device descriptor read/8, error -110 [ 910.081193][ T5824] usb usb44-port1: attempt power cycle [ 910.081509][T17953] bond6 (unregistering): Released all slaves [ 911.610676][ T5824] usb usb44-port1: unable to enumerate USB device [ 912.406780][T18009] netlink: 'syz.2.2791': attribute type 1 has an invalid length. [ 912.473056][T18009] 8021q: adding VLAN 0 to HW filter on device bond9 [ 912.950428][T13963] usb 40-1: device descriptor read/8, error -110 [ 913.186602][T18021] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 913.190696][T18021] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2796'. [ 913.340865][T13963] usb usb40-port1: attempt power cycle [ 913.509231][T18020] lo speed is unknown, defaulting to 1000 [ 913.736480][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 913.900612][T13963] usb usb40-port1: unable to enumerate USB device [ 914.161485][T18048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'. [ 914.454558][T18039] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 915.438637][T18076] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 915.928721][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2811'. [ 916.479476][T18089] bond4 (unregistering): Released all slaves [ 917.596424][T18115] bond6 (unregistering): Released all slaves [ 918.087266][T18123] bond10: entered promiscuous mode [ 918.922741][T18140] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 918.954910][T18140] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 918.967367][T18140] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 918.971593][T18140] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 918.982526][T18140] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 919.004539][T18140] pci 0000:00:01.0: Adding to iommu group 1 [ 919.017643][T18140] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 919.020775][T18140] pci 0000:00:01.0: vgaarb: bridge control possible [ 919.023247][T18140] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 919.056751][T18140] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 919.059454][T18140] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 919.063529][T18140] pci 0000:00:04.0: PCI bridge to [bus 01] [ 919.066430][T18140] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 919.072200][T18140] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 919.077029][T18140] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 919.090771][T18140] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 919.106675][T18140] [drm] Found bochs VGA, ID 0xb0c5. [ 919.108983][T18140] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 919.133041][T18140] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 919.182594][T18140] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 919.933600][T18144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 920.703093][T18163] netlink: 'syz.1.2819': attribute type 11 has an invalid length. [ 920.775265][T18163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.961811][T18163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.969327][T18163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 920.972873][T18163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.977987][T18163] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 920.991394][ T5893] lo speed is unknown, defaulting to 1000 [ 920.995479][ T5893] syz0: Port: 1 Link ACTIVE [ 921.011023][T18165] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 921.013512][T18165] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 921.018118][T18160] lo speed is unknown, defaulting to 1000 [ 921.511799][ T6035] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 150 seconds [ 921.901603][T18169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.568360][T18164] Set syz1 is full, maxelem 65536 reached [ 923.108247][T14683] Bluetooth: hci4: Frame reassembly failed (-90) [ 923.139521][ T42] audit: type=1804 audit(1785755768.156:1510): pid=18192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2826" name="/newroot/721/bus/bus" dev="overlay" ino=3874 res=1 errno=0 [ 923.448954][T18199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 923.451040][T18199] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 923.454794][T18199] vhci_hcd vhci_hcd.0: Device attached [ 923.720325][T13963] usb 38-1: SetAddress Request (42) to port 0 [ 923.722899][T13963] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 923.995058][T18200] vhci_hcd: connection reset by peer [ 924.000529][T17944] vhci_hcd vhci_hcd.0: stop threads [ 924.002414][T17944] vhci_hcd vhci_hcd.0: release socket [ 924.004418][T17944] vhci_hcd vhci_hcd.0: disconnect device [ 924.268496][T18209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 924.545588][T18207] hid-generic 0003:0627:0001.0006: pid 18207 passed too short report [ 925.120270][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 925.127492][T13086] Bluetooth: hci4: command 0x1003 tx timeout [ 925.355735][T14416] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 120 seconds [ 925.827953][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 926.575029][T18231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.273007][T18275] netlink: 'syz.3.2838': attribute type 2 has an invalid length. [ 928.286309][T18286] bond6 (unregistering): Released all slaves [ 928.326029][T18294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2841'. [ 928.387093][T18283] lo speed is unknown, defaulting to 1000 [ 928.789958][T13963] usb 38-1: device descriptor read/8, error -110 [ 928.871194][T18303] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 928.874626][T18303] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 928.877798][T18303] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 928.881521][T18303] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 928.932738][ T42] audit: type=1326 audit(1785755773.946:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 928.951189][ T42] audit: type=1326 audit(1785755773.946:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 928.996869][ T42] audit: type=1326 audit(1785755773.956:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.050946][ T42] audit: type=1326 audit(1785755773.956:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069558][ T42] audit: type=1326 audit(1785755773.956:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069598][ T42] audit: type=1326 audit(1785755773.956:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069624][ T42] audit: type=1326 audit(1785755773.956:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069646][ T42] audit: type=1326 audit(1785755773.956:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069668][ T42] audit: type=1326 audit(1785755773.956:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.069689][ T42] audit: type=1326 audit(1785755773.966:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.1.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 929.181614][T13963] usb usb38-port1: attempt power cycle [ 929.337455][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 929.348142][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2845'. [ 929.371563][T18313] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 929.393945][T18313] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 929.774760][T13963] usb usb38-port1: unable to enumerate USB device [ 930.081039][T18315] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 930.099702][T18315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 930.102620][T18315] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 930.105044][T18315] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 930.108137][T18315] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 930.124773][T18315] pci 0000:00:01.0: Adding to iommu group 1 [ 930.130445][T18315] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 930.132585][T18315] pci 0000:00:01.0: vgaarb: bridge control possible [ 930.134672][T18315] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 930.148605][T18315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 930.155557][T18315] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 930.159645][T18315] pci 0000:00:04.0: PCI bridge to [bus 01] [ 930.164739][T18315] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 930.181447][T18315] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 930.188933][T18315] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 930.202008][T18315] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 930.221179][T18315] [drm] Found bochs VGA, ID 0xb0c5. [ 930.223419][T18315] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 930.252507][T18315] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 930.369164][T18315] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 930.480332][ T5909] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 90 seconds [ 930.485193][ T5909] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 90 seconds [ 930.489288][ T5909] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 90 seconds [ 930.493945][ T5909] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 90 seconds [ 931.238274][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.071304][T18357] bond6 (unregistering): Released all slaves [ 933.336736][T18367] pim6reg: entered allmulticast mode [ 933.419711][T18365] pim6reg: left allmulticast mode [ 933.821670][T18368] netlink: 'syz.1.2855': attribute type 2 has an invalid length. [ 933.892832][T18371] uhci_hcd 0000:00:1d.0: remove, state 4 [ 934.032363][T18371] usb usb1: USB disconnect, device number 1 [ 934.327746][T18371] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 934.475234][ T42] kauditd_printk_skb: 192 callbacks suppressed [ 934.475265][ T42] audit: type=1326 audit(1785755779.496:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.3.2859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 934.497935][ T42] audit: type=1326 audit(1785755779.506:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.3.2859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 934.606543][ T42] audit: type=1326 audit(1785755779.626:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.3.2859" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 934.866498][T18374] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 934.878992][T18374] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 934.882021][T18374] uhci_hcd 0000:00:1d.0: detected 2 ports [ 934.884377][T18374] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 934.893571][T18374] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 934.896581][T18374] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 934.899089][T18374] usb usb1: Product: UHCI Host Controller [ 934.901700][T18374] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 934.903992][T18374] usb usb1: SerialNumber: 0000:00:1d.0 [ 934.943013][T18374] hub 1-0:1.0: USB hub found [ 934.952116][T18374] hub 1-0:1.0: 2 ports detected [ 935.631734][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 90 seconds [ 935.636766][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 90 seconds [ 935.640962][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 90 seconds [ 935.645643][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 90 seconds [ 937.528669][T18412] netlink: 'syz.1.2865': attribute type 1 has an invalid length. [ 937.687364][T18412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 938.416667][T18435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 938.418859][T18435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.449407][T18435] vhci_hcd vhci_hcd.0: Device attached [ 938.500899][T18438] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 938.585838][T18409] lo speed is unknown, defaulting to 1000 [ 938.732396][T14947] usb 38-1: SetAddress Request (46) to port 0 [ 938.735285][T14947] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 939.186126][T18436] vhci_hcd: connection reset by peer [ 939.188164][T15782] vhci_hcd vhci_hcd.0: stop threads [ 939.191700][T15782] vhci_hcd vhci_hcd.0: release socket [ 939.194028][T15782] vhci_hcd vhci_hcd.0: disconnect device [ 940.247147][ T42] audit: type=1800 audit(1785755785.266:1716): pid=18457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2873" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 941.188816][T18468] netlink: zone id is out of range [ 941.191148][T18468] netlink: zone id is out of range [ 941.193101][T18468] netlink: zone id is out of range [ 941.233402][T18468] input: syz0 as /devices/virtual/input/input27 [ 941.375290][T18475] 9p: Bad value for 'wfdno' [ 942.302562][T18476] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 942.344860][T14946] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 942.375993][T18476] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 942.397067][T18476] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 942.397585][T14695] Bluetooth: hci4: Frame reassembly failed (-84) [ 942.410710][T18476] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 942.434377][T18476] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 942.477373][T18476] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 42179 usecs [ 942.530386][T14946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 942.537296][T14946] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 942.540468][T14946] usb 6-1: can't read configurations, error -71 [ 942.544927][T18476] pci 0000:00:01.0: Adding to iommu group 1 [ 942.567713][T18476] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 942.569939][T18476] pci 0000:00:01.0: vgaarb: bridge control possible [ 942.572066][T18476] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 942.586743][ T42] audit: type=1804 audit(1785755787.606:1717): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2876" name="/newroot/707/bus/bus" dev="overlay" ino=3836 res=1 errno=0 [ 942.596451][T18476] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 942.636331][T18476] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 942.644896][T18476] pci 0000:00:04.0: PCI bridge to [bus 01] [ 942.646836][T18476] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 942.657343][T18476] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 942.664000][T18476] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 942.704025][T18476] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 942.742950][T18476] [drm] Found bochs VGA, ID 0xb0c5. [ 942.744714][T18485] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 942.753493][T18476] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 942.784370][T18476] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 942.933196][T18476] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 943.225803][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 943.239845][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.242290][T18496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.270854][T18496] batman_adv: batadv0: Removing interface: macvlan2 [ 943.500371][T18498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 943.502508][T18498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.521250][T18498] vhci_hcd vhci_hcd.0: Device attached [ 943.651682][T18498] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 943.800529][ T5853] usb 42-1: SetAddress Request (30) to port 0 [ 943.802551][ T5853] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 943.839347][T14947] usb 38-1: device descriptor read/8, error -110 [ 944.070887][ T5920] IPVS: ip_vs_send_async error -101 [ 944.234033][T14947] usb usb38-port1: attempt power cycle [ 944.400064][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 944.911789][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 944.931608][T14947] usb usb38-port1: unable to enumerate USB device [ 945.080527][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 945.201432][ T29] usb 6-1: config 0 has no interfaces? [ 945.205339][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 945.208381][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 945.214518][ T29] usb 6-1: Product: syz [ 945.216166][ T29] usb 6-1: Manufacturer: syz [ 945.224706][ T29] usb 6-1: SerialNumber: syz [ 945.259314][ T29] usb 6-1: config 0 descriptor?? [ 945.482020][T18530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2887'. [ 945.513652][T18501] vhci_hcd: connection reset by peer [ 945.520353][T17944] vhci_hcd vhci_hcd.2: stop threads [ 945.522650][T17944] vhci_hcd vhci_hcd.2: release socket [ 945.524786][T17944] vhci_hcd vhci_hcd.2: disconnect device [ 945.804839][T18538] uhci_hcd 0000:00:1d.0: remove, state 4 [ 945.808199][T18538] usb usb1: USB disconnect, device number 1 [ 946.014143][T18538] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 946.377328][T18539] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 946.519734][T18539] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 946.523446][T18539] uhci_hcd 0000:00:1d.0: detected 2 ports [ 946.525965][T18539] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 946.555154][T18539] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 946.625725][T18539] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 946.628960][T18539] usb usb1: Product: UHCI Host Controller [ 946.639303][T18539] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 946.661124][T18539] usb usb1: SerialNumber: 0000:00:1d.0 [ 946.944098][ T41] usb 6-1: USB disconnect, device number 23 [ 947.176798][T18539] hub 1-0:1.0: USB hub found [ 947.179354][T18539] hub 1-0:1.0: 2 ports detected [ 947.403287][T18557] tmpfs: Unknown parameter 'nr_blhcks' [ 947.455274][ T42] audit: type=1800 audit(1785755792.476:1718): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2899" name="file0" dev="overlay" ino=3995 res=0 errno=0 [ 947.474588][T18549] lo speed is unknown, defaulting to 1000 [ 948.238546][ T5920] IPVS: ip_vs_send_async error -101 [ 948.878120][T18567] lo speed is unknown, defaulting to 1000 [ 948.880265][ T5853] usb 42-1: device descriptor read/8, error -110 [ 949.302380][ T5853] usb usb42-port1: attempt power cycle [ 949.817117][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 949.834861][T18586] netlink: 'syz.1.2897': attribute type 11 has an invalid length. [ 949.846481][T18586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2897'. [ 949.880890][ T5853] usb usb42-port1: unable to enumerate USB device [ 949.918353][T18588] pim6reg: left allmulticast mode [ 950.268282][T18595] uhci_hcd 0000:00:1d.0: remove, state 4 [ 950.271181][T18595] usb usb1: USB disconnect, device number 1 [ 950.308437][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2909'. [ 950.430154][T18595] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 950.719193][T18599] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 950.731644][T18599] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 950.734877][T18599] uhci_hcd 0000:00:1d.0: detected 2 ports [ 950.737768][T18599] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 950.752889][T18599] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 950.755847][T18599] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 950.758741][T18599] usb usb1: Product: UHCI Host Controller [ 950.761013][T18599] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 950.763209][T18599] usb usb1: SerialNumber: 0000:00:1d.0 [ 950.815012][T18599] hub 1-0:1.0: USB hub found [ 950.820237][T18599] hub 1-0:1.0: 2 ports detected [ 952.464402][T18364] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 180 seconds [ 953.242433][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 954.471883][T18633] lo speed is unknown, defaulting to 1000 [ 954.571987][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 954.614633][T18660] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 954.651858][T18660] kvm: pic: level sensitive irq not supported [ 954.661421][T18660] kvm: pic: non byte read [ 955.192960][T18671] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 955.213897][T18671] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 955.216669][T18671] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 955.219132][T18671] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 955.223158][T18671] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 955.235026][T18671] pci 0000:00:01.0: Adding to iommu group 1 [ 955.240442][T18671] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 955.242798][T18671] pci 0000:00:01.0: vgaarb: bridge control possible [ 955.244862][T18671] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 955.253805][T18671] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 955.256462][T18671] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 955.259421][T18671] pci 0000:00:04.0: PCI bridge to [bus 01] [ 955.263823][T18671] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 955.267388][T18671] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 955.271118][T18671] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 955.276810][T18671] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 955.286954][T18671] [drm] Found bochs VGA, ID 0xb0c5. [ 955.288596][T18671] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 955.296200][T18671] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 955.334102][T18671] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 955.442402][T18682] xt_time: unknown flags 0xf4 [ 955.501733][T18680] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 955.503794][T18680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.604616][T18680] vhci_hcd vhci_hcd.0: Device attached [ 955.620266][T18688] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 955.824759][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 955.870224][ T5853] usb 42-1: SetAddress Request (34) to port 0 [ 955.872511][ T5853] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 955.876312][ T5909] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 150 seconds [ 956.019867][ T41] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 956.116915][T18685] vhci_hcd: connection reset by peer [ 956.119598][T15782] vhci_hcd vhci_hcd.2: stop threads [ 956.122390][T15782] vhci_hcd vhci_hcd.2: release socket [ 956.124270][T15782] vhci_hcd vhci_hcd.2: disconnect device [ 956.182280][ T41] usb 6-1: config 0 has no interfaces? [ 956.188684][ T41] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 956.194035][ T41] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 956.197772][ T41] usb 6-1: Product: syz [ 956.200310][ T41] usb 6-1: Manufacturer: syz [ 956.202404][ T41] usb 6-1: SerialNumber: syz [ 956.212335][ T41] usb 6-1: config 0 descriptor?? [ 956.507927][ T41] usb 6-1: USB disconnect, device number 24 [ 956.671193][T18701] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 956.673296][T18701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 956.678093][T18701] vhci_hcd vhci_hcd.0: Device attached [ 956.732592][T18701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2918'. [ 956.738882][T18701] netlink: 'syz.2.2918': attribute type 12 has an invalid length. [ 957.109647][T18702] vhci_hcd: connection closed [ 957.111029][ T5823] vhci_hcd vhci_hcd.2: stop threads [ 957.117637][ T5823] vhci_hcd vhci_hcd.2: release socket [ 957.128181][ T5823] vhci_hcd vhci_hcd.2: disconnect device [ 958.683223][T18726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2921'. [ 958.937831][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2923'. [ 959.891720][T18723] lo speed is unknown, defaulting to 1000 [ 960.289173][T17121] block nbd64: NBD_DISCONNECT [ 960.468907][T18759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 960.470991][T18759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 960.475525][T18759] vhci_hcd vhci_hcd.0: Device attached [ 960.477736][T17778] udevd[17778]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 960.542076][T18770] ipt_rpfilter: unknown options [ 960.560861][T14416] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 120 seconds [ 960.564654][T14416] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 120 seconds [ 960.572881][T14416] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 120 seconds [ 960.582903][T14416] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 120 seconds [ 960.685027][T18773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'. [ 960.741427][T13963] usb 44-1: SetAddress Request (39) to port 0 [ 960.744205][T13963] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 960.950495][ T5853] usb 42-1: device descriptor read/8, error -110 [ 960.985544][T18759] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 961.155169][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 961.352642][ T5853] usb usb42-port1: attempt power cycle [ 961.355546][T18766] vhci_hcd: connection reset by peer [ 961.357412][ T12] vhci_hcd vhci_hcd.3: stop threads [ 961.359137][ T12] vhci_hcd vhci_hcd.3: release socket [ 961.364300][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 961.820536][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 961.920946][ T5853] usb usb42-port1: unable to enumerate USB device [ 962.081565][T18789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2932'. [ 962.546061][T18792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 963.292933][T18810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 963.295729][T18810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 963.328484][T18810] vhci_hcd vhci_hcd.0: Device attached [ 963.811989][ T5853] usb 42-1: SetAddress Request (38) to port 0 [ 963.812326][ T5853] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 964.963361][T18811] vhci_hcd: connection reset by peer [ 964.965373][T18820] vhci_hcd vhci_hcd.2: stop threads [ 964.967063][T18820] vhci_hcd vhci_hcd.2: release socket [ 964.969004][T18820] vhci_hcd vhci_hcd.2: disconnect device [ 965.553328][T18822] input: syz0 as /devices/virtual/input/input28 [ 965.673523][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 120 seconds [ 965.676930][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 120 seconds [ 965.680645][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 120 seconds [ 965.684552][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 120 seconds [ 965.898282][T13963] usb 44-1: device descriptor read/8, error -110 [ 966.985447][T13963] usb usb44-port1: attempt power cycle [ 967.488085][T18838] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 967.836659][T18838] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 967.840586][T18838] overlayfs: failed to look up (tracing) for ino (-66) [ 968.220376][T13963] usb usb44-port1: unable to enumerate USB device [ 968.524406][T18850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 968.527230][T18850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 968.542076][T18850] vhci_hcd vhci_hcd.0: Device attached [ 968.604075][T18850] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 968.820150][T13963] usb 40-1: SetAddress Request (26) to port 0 [ 968.822782][T13963] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 968.871370][ T5853] usb 42-1: device descriptor read/8, error -110 [ 969.267762][ T5853] usb usb42-port1: attempt power cycle [ 969.861690][ T5853] usb usb42-port1: unable to enumerate USB device [ 970.083233][T18851] vhci_hcd: connection reset by peer [ 970.087205][T17944] vhci_hcd vhci_hcd.1: stop threads [ 970.089488][T17944] vhci_hcd vhci_hcd.1: release socket [ 970.092009][T17944] vhci_hcd vhci_hcd.1: disconnect device [ 971.497479][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2955'. [ 971.518988][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2955'. [ 973.094532][T18916] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 973.548303][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2962'. [ 973.666093][T18929] comedi comedi3: comedi_config --init_data is deprecated [ 973.910522][T13963] usb 40-1: device descriptor read/8, error -110 [ 973.916249][T18916] lo speed is unknown, defaulting to 1000 [ 974.320604][T13963] usb usb40-port1: attempt power cycle [ 975.295803][T13963] usb usb40-port1: unable to enumerate USB device [ 976.508218][T18971] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 976.510371][ T42] audit: type=1326 audit(1785755821.526:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.544312][ T42] audit: type=1326 audit(1785755821.556:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.557240][ T42] audit: type=1326 audit(1785755821.576:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.576586][ T42] audit: type=1326 audit(1785755821.586:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.598440][ T42] audit: type=1326 audit(1785755821.586:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.611701][ T42] audit: type=1326 audit(1785755821.596:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.634244][ T42] audit: type=1326 audit(1785755821.606:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.744336][ T42] audit: type=1326 audit(1785755821.616:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.765724][ T42] audit: type=1326 audit(1785755821.646:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 976.806532][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'. [ 976.810340][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'. [ 976.812757][ T42] audit: type=1326 audit(1785755821.666:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.0.2971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 978.078252][T18992] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 978.087013][T18992] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2974'. [ 978.324551][T19003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 981.673880][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2984'. [ 981.787778][T19033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2984'. [ 982.526808][T19044] lo speed is unknown, defaulting to 1000 [ 982.889588][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 982.950924][ T6035] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 210 seconds [ 983.273335][T19060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2988'. [ 983.888937][T19074] bond7 (unregistering): Released all slaves [ 984.650097][T19101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 984.717339][T19080] syz.2.2995 (19080) used greatest stack depth: 18816 bytes left [ 984.889193][T19120] netlink: 'syz.3.2998': attribute type 64 has an invalid length. [ 984.902639][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 985.007010][T19120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 986.041521][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3001'. [ 986.151524][ T5909] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 180 seconds [ 986.566712][T19121] lo speed is unknown, defaulting to 1000 [ 988.299392][T19155] dlm: no local IP address has been set [ 988.302406][T19155] dlm: cannot start dlm midcomms -107 [ 988.846438][T19161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3008'. [ 990.441856][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3012'. [ 990.640321][ T5909] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 150 seconds [ 990.645260][ T5909] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 150 seconds [ 990.649019][ T5909] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 150 seconds [ 990.653350][ T5909] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 150 seconds [ 991.021557][ T5154] udevd[5154]: worker [16295] /devices/virtual/block/nbd1 timeout; kill it [ 991.029354][ T5154] udevd[5154]: seq 21500 '/devices/virtual/block/nbd1' killed [ 991.045945][ T5154] udevd[5154]: worker [15585] /devices/virtual/block/nbd0 timeout; kill it [ 991.071070][ T5154] udevd[5154]: seq 21171 '/devices/virtual/block/nbd0' killed [ 991.082936][ T5154] udevd[5154]: worker [15542] /devices/virtual/block/nbd2 is taking a long time [ 991.095344][ T5154] udevd[5154]: worker [15551] /devices/virtual/block/nbd3 is taking a long time [ 991.797070][T19187] uhci_hcd 0000:00:1d.0: remove, state 4 [ 991.799287][T19187] usb usb1: USB disconnect, device number 1 [ 991.808786][T19187] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 991.883271][T19187] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 991.886378][T19187] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 991.889118][T19187] uhci_hcd 0000:00:1d.0: detected 2 ports [ 991.891269][T19187] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 991.894774][T19187] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 991.897694][T19187] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 991.900293][T19187] usb usb1: Product: UHCI Host Controller [ 991.902287][T19187] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 991.904334][T19187] usb usb1: SerialNumber: 0000:00:1d.0 [ 991.908899][T19187] hub 1-0:1.0: USB hub found [ 991.913070][T19187] hub 1-0:1.0: 2 ports detected [ 992.562981][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.079724][T19208] netlink: 'syz.3.3021': attribute type 2 has an invalid length. [ 993.142860][T19211] random: crng reseeded on system resumption [ 994.179295][T19225] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 994.181390][T19225] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 994.185200][T19225] vhci_hcd vhci_hcd.0: Device attached [ 994.590802][ T29] usb 38-1: SetAddress Request (50) to port 0 [ 994.593171][ T29] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 995.164425][T19226] vhci_hcd: connection reset by peer [ 995.168070][ T5798] vhci_hcd vhci_hcd.0: stop threads [ 995.171522][ T5798] vhci_hcd vhci_hcd.0: release socket [ 995.175422][ T5798] vhci_hcd vhci_hcd.0: disconnect device [ 995.514587][T19244] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 995.517393][T19244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 995.521824][T19244] vhci_hcd vhci_hcd.0: Device attached [ 995.760068][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 150 seconds [ 995.764712][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 150 seconds [ 995.769262][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 150 seconds [ 995.775024][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 150 seconds [ 995.852576][ T5853] usb 42-1: SetAddress Request (42) to port 0 [ 995.857663][ T5853] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 995.919476][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3028'. [ 996.093074][T19245] vhci_hcd: connection reset by peer [ 996.096594][T18820] vhci_hcd vhci_hcd.2: stop threads [ 996.099160][T18820] vhci_hcd vhci_hcd.2: release socket [ 996.102452][T18820] vhci_hcd vhci_hcd.2: disconnect device [ 997.847322][T19273] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 998.994604][T19279] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 999.018015][T19279] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 999.022020][T19279] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 999.024959][T19279] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 999.028489][T19279] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 999.046053][T19279] pci 0000:00:01.0: Adding to iommu group 1 [ 999.062882][T19279] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 999.065572][T19279] pci 0000:00:01.0: vgaarb: bridge control possible [ 999.068041][T19279] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 999.097353][T19279] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 999.103193][T19279] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 999.108517][T19279] pci 0000:00:04.0: PCI bridge to [bus 01] [ 999.111715][T19279] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 999.117486][T19279] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 999.124981][T19279] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 999.139667][T19279] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 999.158572][T19279] [drm] Found bochs VGA, ID 0xb0c5. [ 999.163294][T19279] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 999.170880][T19279] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 999.507992][T19298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3039'. [ 999.670452][ T29] usb 38-1: device descriptor read/8, error -110 [ 1000.061270][ T29] usb usb38-port1: attempt power cycle [ 1000.630821][ T29] usb usb38-port1: unable to enumerate USB device [ 1000.950465][ T5853] usb 42-1: device descriptor read/8, error -110 [ 1001.341668][ T5853] usb usb42-port1: attempt power cycle [ 1001.667838][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1001.921989][ T5853] usb usb42-port1: unable to enumerate USB device [ 1002.026313][T13086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.034068][T13086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.037495][T13086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.044207][T13086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.045706][T19322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1002.049821][T13086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.061620][ T5760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.065743][ T5760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.068756][ T5760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.072608][ T5760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.075841][ T5760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.225800][T19329] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1002.426124][T19321] lo speed is unknown, defaulting to 1000 [ 1003.677111][T19321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.682823][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.685222][T19321] bridge_slave_0: entered allmulticast mode [ 1003.688774][T19321] bridge_slave_0: entered promiscuous mode [ 1003.692543][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.697108][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.701707][T19321] bridge_slave_1: entered allmulticast mode [ 1003.704785][T19321] bridge_slave_1: entered promiscuous mode [ 1003.758608][T19321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.775922][T19321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.836805][T19321] team0: Port device team_slave_0 added [ 1003.842131][T19321] team0: Port device team_slave_1 added [ 1004.044136][T19321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.050490][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.070333][ T5824] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1004.073991][T19321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.091974][T19321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.100951][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.118925][T19321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.149942][ T5760] Bluetooth: hci4: command tx timeout [ 1004.176073][T19321] hsr_slave_0: entered promiscuous mode [ 1004.179151][T19321] hsr_slave_1: entered promiscuous mode [ 1004.183506][T19321] debugfs: 'hsr0' already exists in 'hsr' [ 1004.185534][T19321] Cannot create hsr debugfs directory [ 1004.359575][T19321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.364015][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.366839][T19321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.374715][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.377517][T19321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1004.391862][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.400595][T19321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1004.416086][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.445020][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.448128][T19321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.451367][T19321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.454367][T19321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.512859][T19321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.534336][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.558961][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.592205][T19321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.603834][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 1004.604969][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.609923][T11414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.622069][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.625105][T11414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.210263][T19321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.464789][T19321] veth0_vlan: entered promiscuous mode [ 1005.474298][T19321] veth1_vlan: entered promiscuous mode [ 1005.505051][T19321] veth0_macvtap: entered promiscuous mode [ 1005.512217][T19321] veth1_macvtap: entered promiscuous mode [ 1005.533729][T19321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.543998][T19321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.584949][T14695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.588299][T14695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.621980][T18421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.628790][T18421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.642190][T17944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.646917][T17944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.670971][T17944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.679668][T17944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.754782][T19406] random: crng reseeded on system resumption [ 1006.230673][ T5760] Bluetooth: hci4: command tx timeout [ 1008.310013][T13086] Bluetooth: hci4: command tx timeout [ 1008.774982][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1008.803598][T19441] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 1009.812685][T19451] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3066'. [ 1009.816823][T19451] openvswitch: netlink: Message has 512 unknown bytes. [ 1010.080624][ T5920] IPVS: ip_vs_send_async error -101 [ 1010.389961][ T5760] Bluetooth: hci4: command 0x0419 tx timeout [ 1010.461318][T19452] lo speed is unknown, defaulting to 1000 [ 1010.916828][T19461] random: crng reseeded on system resumption [ 1010.964040][T19463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1010.981035][T19464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1012.104467][T19472] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1012.469930][T13086] Bluetooth: hci4: command 0x0419 tx timeout [ 1013.033060][T18364] block nbd0: Possible stuck request ffff888027630000: control (read@0,4096B). Runtime 240 seconds [ 1013.681361][T19494] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1014.647004][T13086] Bluetooth: hci4: command 0x0419 tx timeout [ 1015.078236][T19516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1015.080561][T19516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1015.085905][T19516] vhci_hcd vhci_hcd.0: Device attached [ 1015.360079][ T5853] usb 38-1: SetAddress Request (54) to port 0 [ 1015.370677][ T5853] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1015.400869][T19516] rdma_rxe: rxe_newlink: failed to add wg2 [ 1015.575353][T19517] vhci_hcd: connection reset by peer [ 1015.578190][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 1015.581100][ T5823] vhci_hcd vhci_hcd.0: release socket [ 1015.583559][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 1016.192776][T19523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1016.361444][T19525] uhci_hcd 0000:00:1d.0: remove, state 4 [ 1016.364033][T19525] usb usb1: USB disconnect, device number 1 [ 1016.445009][T19525] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 1017.006035][T19528] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 1017.031073][T19528] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 1017.036558][T19528] uhci_hcd 0000:00:1d.0: detected 2 ports [ 1017.042818][T19528] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 1017.078638][T19528] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 1017.083449][T19528] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1017.087112][T19528] usb usb1: Product: UHCI Host Controller [ 1017.090388][T19528] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 1017.093368][T19528] usb usb1: SerialNumber: 0000:00:1d.0 [ 1017.158909][ T5909] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,4096B). Runtime 210 seconds [ 1017.260569][T19528] hub 1-0:1.0: USB hub found [ 1017.265340][T19528] hub 1-0:1.0: 2 ports detected [ 1017.652969][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'. [ 1020.003042][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1020.563157][ T5853] usb 38-1: device descriptor read/8, error -110 [ 1020.806761][ T5909] block nbd2: Possible stuck request ffff8880276e5080: control (read@0,1024B). Runtime 180 seconds [ 1020.812172][ T5909] block nbd2: Possible stuck request ffff8880276e5240: control (read@1024,1024B). Runtime 180 seconds [ 1020.817602][ T5909] block nbd2: Possible stuck request ffff8880276e5400: control (read@2048,1024B). Runtime 180 seconds [ 1020.897008][ T5909] block nbd2: Possible stuck request ffff8880276e55c0: control (read@3072,1024B). Runtime 180 seconds [ 1021.121280][ T5853] usb usb38-port1: attempt power cycle [ 1021.455052][T19576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.576435][T19575] /dev/nullb0: Can't open blockdev [ 1021.712790][T19580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3092'. [ 1021.739884][T19580] team0 (unregistering): Port device team_slave_0 removed [ 1021.749415][T19580] team0 (unregistering): Port device team_slave_1 removed [ 1021.794820][ T5853] usb usb38-port1: unable to enumerate USB device [ 1021.937255][T19584] /dev/nullb0: Can't open blockdev [ 1022.350074][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1022.355316][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1024.287918][T19611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3098'. [ 1024.291780][T19612] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1024.293796][T19612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1024.297246][T19612] vhci_hcd vhci_hcd.0: Device attached [ 1024.536748][ T60] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1025.579303][T19627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3102'. [ 1025.958255][T19613] vhci_hcd: connection reset by peer [ 1025.967521][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1025.970269][ T12] vhci_hcd vhci_hcd.0: release socket [ 1025.974371][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1026.520047][ T5909] block nbd3: Possible stuck request ffff888027740000: control (read@0,1024B). Runtime 180 seconds [ 1026.524748][ T5909] block nbd3: Possible stuck request ffff8880277401c0: control (read@1024,1024B). Runtime 180 seconds [ 1026.529302][ T5909] block nbd3: Possible stuck request ffff888027740380: control (read@2048,1024B). Runtime 180 seconds [ 1026.534983][ T5909] block nbd3: Possible stuck request ffff888027740540: control (read@3072,1024B). Runtime 180 seconds [ 1026.969399][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3104'. [ 1027.005136][T19635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1028.045302][T19655] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1028.838274][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'. [ 1028.919968][T19655] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1028.923633][T19655] openvswitch: netlink: Message has 512 unknown bytes. [ 1029.094850][T19655] lo speed is unknown, defaulting to 1000 [ 1030.140071][ T60] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1031.419319][T19691] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 1031.629356][T19695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1032.505867][T19698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1033.198874][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3120'. [ 1035.067377][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 1035.067404][ T42] audit: type=1326 audit(1785755879.084:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.079455][ T42] audit: type=1326 audit(1785755879.094:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.106082][ T42] audit: type=1326 audit(1785755879.104:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.129366][ T42] audit: type=1326 audit(1785755879.114:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.150237][ T42] audit: type=1326 audit(1785755879.114:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.159296][ T42] audit: type=1326 audit(1785755879.114:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.159336][ T42] audit: type=1326 audit(1785755879.114:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.159370][ T42] audit: type=1326 audit(1785755879.114:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.159407][ T42] audit: type=1326 audit(1785755879.114:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.159453][ T42] audit: type=1326 audit(1785755879.114:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19727 comm="syz.0.3125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 1035.766750][T19741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1035.986252][T19744] BUG: unable to handle page fault for address: fffffffffffffc10 [ 1035.986269][T19744] #PF: supervisor read access in kernel mode [ 1035.986280][T19744] #PF: error_code(0x0000) - not-present page [ 1035.986290][T19744] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 1035.986336][T19744] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 1035.986356][T19744] CPU: 1 UID: 0 PID: 19744 Comm: syz.3.3128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.986385][T19744] Tainted: [L]=SOFTLOCKUP [ 1035.986393][T19744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1035.986406][T19744] RIP: 0010:strnlen+0x4b/0x80 [ 1035.986524][T19744] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 1035.986541][T19744] RSP: 0018:ffffc9000408f110 EFLAGS: 00010246 [ 1035.986557][T19744] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1035.986568][T19744] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1035.986579][T19744] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1035.986590][T19744] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1035.986600][T19744] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1035.986610][T19744] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f54bdb40 [ 1035.986640][T19744] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1035.986660][T19744] CR2: fffffffffffffc10 CR3: 000000004ff76000 CR4: 0000000000352ef0 [ 1035.986671][T19744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1035.986681][T19744] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1035.986693][T19744] Call Trace: [ 1035.986697][T19744] [ 1035.986703][T19744] ? look_up_lock_class+0x55/0x120 [ 1035.986731][T19744] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 1035.986761][T19744] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 1035.986791][T19744] ? __pfx___might_resched+0x10/0x10 [ 1035.986858][T19744] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 1035.986876][T19744] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 1035.986895][T19744] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 1035.986917][T19744] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 1035.986941][T19744] ? __pfx_down_write+0x10/0x10 [ 1035.986962][T19744] tcf_block_get_ext+0x7ed/0x1950 [ 1035.986983][T19744] tcf_block_get+0xa8/0x100 [ 1035.987000][T19744] ? __pfx_tcf_block_get+0x10/0x10 [ 1035.987017][T19744] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1035.987037][T19744] ? lockdep_init_map_type+0x5c/0x250 [ 1035.987054][T19744] ? __pfx_multiq_init+0x10/0x10 [ 1035.987073][T19744] multiq_init+0x70/0x2b0 [ 1035.987089][T19744] ? __pfx_multiq_init+0x10/0x10 [ 1035.987107][T19744] qdisc_create+0x47b/0x1060 [ 1035.987124][T19744] tc_modify_qdisc+0xdcf/0x2120 [ 1035.987147][T19744] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1035.987181][T19744] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1035.987203][T19744] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1035.987227][T19744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1035.987256][T19744] ? ref_tracker_free+0x37e/0x6c0 [ 1035.987333][T19744] netlink_rcv_skb+0x159/0x420 [ 1035.987355][T19744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1035.987380][T19744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.987405][T19744] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1035.987427][T19744] netlink_unicast+0x585/0x850 [ 1035.987447][T19744] ? __pfx_netlink_unicast+0x10/0x10 [ 1035.987463][T19744] netlink_sendmsg+0x8b0/0xda0 [ 1035.987484][T19744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.987504][T19744] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1035.987527][T19744] ____sys_sendmsg+0xa4d/0xbe0 [ 1035.987542][T19744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.987559][T19744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.987581][T19744] ___sys_sendmsg+0x190/0x1e0 [ 1035.987601][T19744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1035.987620][T19744] ? futex_wait+0x11e/0x370 [ 1035.987643][T19744] ? find_held_lock+0x2b/0x80 [ 1035.987675][T19744] __sys_sendmsg+0x160/0x210 [ 1035.987699][T19744] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.987723][T19744] __do_fast_syscall_32+0xe7/0x970 [ 1035.987766][T19744] do_fast_syscall_32+0x32/0x70 [ 1035.987789][T19744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.987825][T19744] RIP: 0023:0xf70cefec [ 1035.987843][T19744] Code: Unable to access opcode bytes at 0xf70cefc2. [ 1035.987851][T19744] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1035.987870][T19744] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800012c0 [ 1035.987880][T19744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.987888][T19744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.987899][T19744] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1035.987910][T19744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.987928][T19744] [ 1035.987943][T19744] Modules linked in: [ 1035.987955][T19744] CR2: fffffffffffffc10 [ 1035.987964][T19744] ---[ end trace 0000000000000000 ]--- [ 1035.987970][T19744] RIP: 0010:strnlen+0x4b/0x80 [ 1035.987998][T19744] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 1035.988016][T19744] RSP: 0018:ffffc9000408f110 EFLAGS: 00010246 [ 1035.988031][T19744] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1035.988044][T19744] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1035.988052][T19744] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1035.988064][T19744] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1035.988076][T19744] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1035.988090][T19744] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f54bdb40 [ 1035.988123][T19744] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1035.988134][T19744] CR2: 00000000f70cf000 CR3: 000000004ff76000 CR4: 0000000000352ef0 [ 1035.988143][T19744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1035.988153][T19744] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1035.988168][T19744] Kernel panic - not syncing: Fatal exception [ 1035.988916][T19744] Kernel Offset: disabled VM DIAGNOSIS: 11:13:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffffffff8e891480 RSI=ffffffff81adb60b RDI=ffffffff94692e00 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff28d25c0 R10=ffffffff94692e07 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800012c0 CR3=0000000066e57000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09df5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc9000408e978 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6f7219 R15=ffffffff85a09d90 RIP=ffffffff85a09e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70cf000 CR3=000000004ff76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffff888029602540 RSI=ffffffff81adb60b RDI=ffffffff94692e00 RBP=0000000000000000 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff28d25c0 R10=ffffffff94692e07 R11=ffffc90000538ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=0000000055f02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 465cffffffff820c 418dffffffff820c 4875ffffffff820c 444bffffffff820c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58d2ffffffff820c 49cbffffffff820c 4bcbffffffff820c 440dffffffff820c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7cdffffffff820c 48e2ffffffff820c 570fffffffff820c 5c1fffffffff820c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67b4ffffffff820c 673fffffffff820c 69a5ffffffff820c 613affffffff820c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c3dffffffff820c 6dbcffffffff820c 6c28ffffffff820c 6a80ffffffff820c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65ecffffffff820c 6a98ffffffff820c 6552ffffffff820c 6009ffffffff820c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 484dffffffff820c 4052ffffffff820b a055ffffffff81ad 4db1ffffffff820b ZMM24=f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d f474ef8df474ef8d ZMM25=1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed 1491e8ed1491e8ed ZMM26=47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef 47c20bef47c20bef ZMM27=879c7981879c7981 879c7981879c7981 879c7981879c7981 879c7981879c7981 879c7981879c7981 879c7981879c7981 879c7981879c7981 879c7981879c7981 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1b4100001b410000 1b4100001b410000 1b4100001b410000 1b4100001b410000 1b4100001b410000 1b4100001b410000 1b4100001b410000 1b4100001b410000 info registers vcpu 3 CPU#3 RAX=0000000080010101 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffff88801c7f2540 RSI=ffffffff81adb60b RDI=ffffffff94692e00 RBP=0000000000000000 RSP=ffffc900005e8598 R8 =0000000000000001 R9 =fffffbfff28d25c0 R10=ffffffff94692e07 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d8a50 CR3=0000000055f02000 CR4=00350ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000