last executing test programs: 2m56.506667366s ago: executing program 3 (id=581): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2m56.506370369s ago: executing program 1 (id=582): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xd, 0xfff1}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000100)=""/226, 0xe2}], 0x1, 0x9, 0x22) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) r5 = openat$pfkey(0xffffff9c, &(0x7f00000008c0), 0x10540, 0x0) connect$inet(r5, &(0x7f0000000900)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000000cce0182f2dd22103483c9559b8bdf33b84c85db0da14d9e8c0de5db36a2346c72c788968411add747e45810491bc1bff6c283744d7c53f6e2d996fd02b46992001662877c464b930f4052f686114f4897f3045590dd68be29a03a8cbf93526f117f7a902fd547264c0f89d0a684010d6a673f54d59900b83190de337a998e3d1b4a05fadfe8c2db650b804f5dc181adb393ef2bcb8e2a581d6cf2795bb929a19050167a6e1e84dd8531a0baa5e5cca52e700c7ab95fc90c500fd3e4f1", @ANYRES32, @ANYBLOB="c100000000000000000000005c87000000000000", @ANYBLOB="84abe181507012e34f2df92d9e22de727379046a7cef4352393d80e81a81ce90d846ef672d25c4b67f2126227cda2a577849b07ab92504abbac8f8277610bc16b8e8bbed862f83171a71140ef92742bdc5d0c7e3d2d3877634480b65b0ba69de744a25af04f6bc8e208814fe857bc1192a036cb3d3ab0fa4b69201f3dba3e69cf53f4a69d525592d523b3518073a224e61814ef8b9dadfe74822f3f28a675050eb4b742d14f895283d622fea65497e966322fbd5750c6d748735710441dc2eefaa7b8617b6b9a332d7ebffbf34d10f662e44fb03c365a86aa8369600d12b34d61dbc46228dce12dd923f41699c27f4d89d6496edb3a6be1994ff7c71", @ANYRESDEC=r5, @ANYBLOB="03000000030000000400"/28], 0x50) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000780)={r6, 0x10000, {0x0, 0x0, 0x0, 0xd8ce, 0x7, 0x0, 0x4, 0x9, 0x1, "258e648589fd5f9b3f8c803b1b9aa257383b1285c877b1992b2d54b9a9c94c03739ed6db40c541d347a38bf2f52f269509fba270551f7c13127c0220018e2b14", "55ed4e69e6dec6179dafe161b905feef1ab64343b2ee7e42ef952c7664aafe9de97dc7b35b6554dd84c1058c4bd07728d170b4061fc6d60fbeda9f95c693810a", "66a977ca9eabbd1be04014bdf5bce28752bc8ef12c004752ff9ea7db6d4c14cd", [0x2, 0x80000000]}}) socket$inet6_tcp(0xa, 0x1, 0x0) 2m56.457431571s ago: executing program 3 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x40) 2m56.406437663s ago: executing program 1 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa5", 0xce) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x140, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa0}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24b7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000042}, 0x98) 2m56.406074706s ago: executing program 3 (id=585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x7, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0x883b, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 2m55.876031394s ago: executing program 3 (id=591): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b4000000000063510800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, 0x0, r9, &(0x7f0000000980)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x10, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2m55.797418043s ago: executing program 0 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91", 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x204) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f00000000c0), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 2m45.017531392s ago: executing program 1 (id=593): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000000000000000041aa3c8d70944cf75dc48b194a86ef1f839bb10636e07865868a66239bf315e208a54896574a8a658464c825310468c7e534fb6b344f0b88239d601953b36677d23b933727758a56bbfcdfe4e31bb672311b6449e2d1b27febdae78613fc9e9a45b9a437450bb7512fc22f2b6810503d1eabe12b4fa0575d732ae05a23e0ece53cd140cdda89b0704aaf63a7a113ff7c4260bc5cde4183699f8e35c4026d264b9170ae3bebc99fa45a495e1fb49594ff8d21286006e515ee6c896fac8ac49281cf64eaed2a5d90d7477a7992e5c53e9237a5fb6038efaf2f43125bfbcc10a1fc0bf292c3ece09016e2418db1eda552391159d8668d075074ee984d86394ef014800e1537658dfaedfdae7968ae9792e84ed5f5498db97c888fc86e784edf161312e2f0bf68f8910b5a0692c8864294a22b22fc5a9b0745a94ffd18f1", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) pipe(&(0x7f0000000080)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x107, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754ce31d40d4038caa306ee486f4f651edfff757fc3124b573a316c8183de6194ffde82251403cd85689ba3447ee3c5615f0b7f882e5e2fdf6060f84efb"}, 0x107, 0x1) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x7ec8e000) 2m45.017058231s ago: executing program 1 (id=594): clock_settime(0x100000000000017, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) r0 = socket$netlink(0x10, 0x3, 0xc) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000140)={r2, &(0x7f0000000980)=')\x00\x12F\xdfR\xc4\xdb\x81\xe3\xc9\xc4\x1a\x7f9a2 \xfe\x9e\xc1W\x02\xce+\xa6\xdf\x91\xe0\x9d\x9dDE23-/\xbd}#\xbeRYE\x87\xbeM\x9b\xa1\xa5\xcf\xa6~\xeb\x13\xdcm\x81\xe7o\x93\xf6\xf8\x86\xcb\xc8N\xa5\xe4\xaba\x00\xe6g\x8er{\b\x8d\a\xfd\x15s\xef\r\x95\x1f\xfe\xf3\xad2\x91\x86\xb2g\xc1uh\x0f\xd8/\aQ\xb9\xdd\xe8\'|\xc4\xfa^\xe9\xf2^(\x92\x14~\x1e\x84\x817\xa2\xae&W\x19v\xeffR\xbe\xfdf\x99\xeeHS|H4N\xb4\x7f\b(\x1c\xee\x17P\x93\xb7\x02\xd5\xba\x8f\x9c\xfaJS\xcd\x02\x1a/\x1a|6\xa9\xc80\x1c\r\x88\x17V\x80\xe3x\xdb\xd4E\xd5\x96\x04_\xfc^\x80\x87J\x1a\x91\x0eZ', 0x402, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x161a, 0x200, 0xe9f, 0x9}}, 0x5d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) ioctl$BLKRRPART(r3, 0x125f, 0x0) pipe2(&(0x7f0000000000), 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, 0x0, &(0x7f0000000180)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r10, &(0x7f0000000a80)=""/188, 0xba) write$tun(r10, 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000005c0)={0xc, &(0x7f0000000300)={0x40, 0x7, 0xdf, {0xdf, 0x11, "2111209ada0d7339286ec391855f842366fcb8c5dd195a6a4fe90acbc6e48cdf5ff0bc4305fccd5b2eafdac022cbe748c9b9d5b7a23558895c924ff63526c87254107651cadce73d25bb772dd766e2d93062b70b9d5b4aaf46293b1ea0892472d6bfebdfb443bc9ccffdd59a339d5aec1ebda2bb65eddac6e3be415c7015b937c1201a43c9c38ea48513e5b3aad9c0c97eca364906559c337a9daa891af633de124152f5a582854ff92ae4e831a058f2d5437a9985e261743fe7a25e4ef23d37a08edd3e854bed33a3eb67dcbfce8aeca50e94541b229b10372aa18a0b"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x0, 0x14, 0x88, "9f76a5e21191220c7563b7c0b5c30626705e706ccc3e218731d5423025460bcba177fc8bd0448d10d4549cc2d690bca620fd51d5eb14dd0e95ada040c06f362c6f6cfaff298b297185bc97300fcc21f9f7603d1195278b71eb7c44da278572a5e23adf8229c021e5097195d09559cfad106b3ef32dad0696f192baa2be3b311e9e7ebc272bbb3563"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)=ANY=[@ANYRESOCT], &(0x7f0000000b40)=ANY=[@ANYBLOB="208202000000a059f11631e163afb5c5b6d2634d2012185392304ad44846e4b91048c5ab222517bef0e4f2827b6b69a34b78f1e79335cee2decdabcd2d8bbf3f242535f67f70dc9f53a4fbe38d42466ae881d67fa05a5e67d48e4b88cf61aa69767caa8b2721d0bf76b4f7dbcad6b777808ad770fe"], &(0x7f0000000880)={0x20, 0x83, 0x1, '{'}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "a48ce73d"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "24ad79"}}) close(r10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m45.016576822s ago: executing program 0 (id=595): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000340)={'binder1\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x9, 0xa, 0x7, 0x8, 0x8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x7, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc6, &(0x7f0000000480)=""/198, 0x40f00, 0x53, '\x00', r2, @sock_ops, r0, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x7b4a199c, 0xffff}, 0x10, r3, r1, 0x1, &(0x7f00000006c0)=[r0, r1, r1, r1, r0, r1], &(0x7f0000000700)=[{0x0, 0x3, 0xd, 0x6}], 0x10, 0x4}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f00000102c0)="fc", 0x1}], 0x2) truncate(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2m45.015455496s ago: executing program 3 (id=596): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x34) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000004c0)=""/226, &(0x7f00000000c0)=""/85, &(0x7f00000001c0)=""/88}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003600)) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) 2m45.014777486s ago: executing program 0 (id=597): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x220002) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m44.983328893s ago: executing program 2 (id=598): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x5}, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fd749b7c5f46386bdf253d00000008005d000100000008005d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0xf1e3f000) ftruncate(r4, 0xc17a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x2ac257408d4d5c71, @fd_index, 0x9, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x400}}}) ioprio_set$pid(0x3, 0x0, 0x0) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x7c1c, 0xe) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2m44.983014246s ago: executing program 0 (id=599): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807feff000500000000000000050009000d000000", 0x24) (fail_nth: 3) 2m44.982966579s ago: executing program 0 (id=600): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0x90000915, 0x200000000005) 2m44.981630172s ago: executing program 0 (id=601): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='mem\n', 0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="ed070000", @ANYRES16=r4, @ANYBLOB="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"/2034], 0x7f8}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r8, r8, 0x0, 0x40008) 2m44.981338593s ago: executing program 1 (id=602): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000020000e501000a0008000300", @ANYRES32=r4], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2002600}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000b603e37f7a790d86f8bd3de8e50b2ad7745b45ccde211ac904a914078b113bc60923640872106aca869a9168db9a0506b0052aa53452e361d8135a797922428a14454ece2222f5ec201c94255580607e5c2982930170dbe61ef142004e031733c0a20c42efe82bdc18743de97e016d39", @ANYRES16=r3, @ANYBLOB="000326bd7000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x94}) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, 0x0, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRES16=r6, @ANYRES8=r5], 0x2ec}}, 0x4c050) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5900fa00", @ANYRES16=r14, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES64=r9, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c657230000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x2f00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r16 = dup(r12) openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/cpu_byteorder', 0x1, 0x81) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f00000006c0)) syz_ublk_setup_queues(r16, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x10, 0xfffffffe, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x3e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m44.980496302s ago: executing program 2 (id=603): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x1, r1, 0x0, 0x20000000, &(0x7f00000003c0)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="050000002183371d22f71d4a33d307000000000000000000fc63b69cd2afd028e00a8e391056ca63347cba7db017a909c3572b8a3ace2ae86aa1929f7a25ded4ff88b8b24cc6b8a3c7c9c2c840d8e006", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000002440)=ANY=[@ANYRESOCT=r2], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000004000de18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000f7ffffff01000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000001000000000000551c00"/28], 0x50) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r8], 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000022c0)={'gre0\x00', &(0x7f0000002200)={'gre0\x00', 0x0, 0x8000, 0x10, 0x8, 0x6b193ae0, {{0x26, 0x4, 0x0, 0x2e, 0x98, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x56, 0x2, [{0x5, 0x11, "06b6ec0aae0ccac6875a2954c25e3a"}, {0x1, 0x5, "9f851e"}, {0x3, 0xe, "9dfd1517bbd71022865e7c7e"}, {0x7, 0x2}, {0x0, 0xb, "da0b4c3660377bbbc8"}, {0x5, 0xa, "703f0ff093865cc1"}, {0x5, 0x8, "741c346463dc"}, {0x7, 0xd, "ce04f2109ac52316a9b796"}]}, @timestamp_addr={0x44, 0x2c, 0x93, 0x1, 0x2, [{@loopback, 0x7}, {@broadcast, 0x839}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@multicast2, 0x6}]}]}}}}}) wait4(r2, &(0x7f0000000140), 0x2, &(0x7f0000002300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100f6ffffff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 2m44.980379869s ago: executing program 3 (id=604): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)={0x0, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x7, "3d03e1f771a66c"}]}, 0x18) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0xea}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() r2 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x408240) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 2m44.554523528s ago: executing program 1 (id=605): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b4000000000063510800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, 0x0, r9, &(0x7f0000000980)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x10, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2m44.39882134s ago: executing program 2 (id=606): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x9, 0xa, 0x7, 0x8, 0x8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x7, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc6, &(0x7f0000000480)=""/198, 0x40f00, 0x53, '\x00', r2, @sock_ops, r0, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x7b4a199c, 0xffff}, 0x10, r3, r1, 0x1, &(0x7f00000006c0)=[r0, r1, r1, r1, r0, r1], &(0x7f0000000700)=[{0x0, 0x3, 0xd, 0x6}], 0x10, 0x4}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f00000102c0)="fc", 0x1}], 0x2) truncate(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2m44.297447763s ago: executing program 2 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x18) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mysys/bus/usb/devices/2-0:1.0/usb2-port2/disable\x00', 0x0, 0x0) read(r0, &(0x7f0000001500), 0x10) (fail_nth: 4) 2m44.117175914s ago: executing program 2 (id=608): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x18) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='ext4\x00', 0x304004c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mysys/bus/usb/devices/2-0:1.0/usb2-port2/disable\x00', 0x0, 0x31) read(r1, &(0x7f0000001500), 0x10) 2m23.759532473s ago: executing program 2 (id=609): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x220002) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m23.674487962s ago: executing program 32 (id=601): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='mem\n', 0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="ed070000", @ANYRES16=r4, @ANYBLOB="010028bd70000000000001000000c8070880a404008074040980d0000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200640101010500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff01000000000000000000000000000105000300010000001c000080060001000200000008000200ac1414bb0500030002000000b8000080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030003000000060001000a00000014000200fe80000000000000000000000000003c0500030003000000060001000200000008000200ac1e00010500030001000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414aa05000300010000004c000080060001000a0000001400020000000000000000000000ffffac1414bb0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000580000800600010002000000080002000a01010005000300000000000600010002000000080002000a0101020500030002000000060001000a0000001400020000000000000000000000ffffac1414aa050003000200000000010080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200e00000020500030001000000060001000a00000014000200fe80000000000000000000000000001f0500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000200000008000200ac1414aa050003000100000000010080060001000a00000014000200fe8000000000000000000000000000430500030002000000060001000a00000014000200fc0000000000000000000000000000060500030000000000060001000200000008000200640101000500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030003000000060001000a0000001400020000000000000000000000ffff000000000500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200e00000010500030002000000060001000a00000014000200fe880000000000000000000000000101050003000300000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500f9ff00004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675cd4020080240001000000000000000000000000000000000000000000000000000000000000000000200004000a0000090000000700000000000000000000000000000000030000008c02098028000080060001000a00000014000200fe8000000000000000000000000000bb050003000100000028000080060001000a00000014000200fe88000000000000000000000000000105000300000000001c000080060001000200000008000200ac1e00010500030000000000040000801c0000800600010002000000080002007f0000010500030002000000940000800600010002000000080002000a0101020500030002000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000200000008000200e0000002050003000100000064000080060001000200000008000200ffffffff0500030007000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe880000000000000000000000000001050003000300000094000080060001000200000008000200e00000020500030001000000060001000a00000014000200fe80000000000000000000000000002d05000300000000000600010002000000080002000a0101010500030000000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000070000080060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060006004e2100001400020077673000"/2034], 0x7f8}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r8, r8, 0x0, 0x40008) 2m23.657649212s ago: executing program 33 (id=605): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b4000000000063510800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, 0x0, r9, &(0x7f0000000980)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x10, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2m23.631480068s ago: executing program 34 (id=609): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x220002) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m23.583482245s ago: executing program 35 (id=604): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)={0x0, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x7, "3d03e1f771a66c"}]}, 0x18) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0xea}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() r2 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x408240) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 1m39.325786297s ago: executing program 6 (id=715): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 2) 1m39.325542923s ago: executing program 6 (id=716): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000340)={'binder1\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x9, 0xa, 0x7, 0x8, 0x8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x7, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc6, &(0x7f0000000480)=""/198, 0x40f00, 0x53, '\x00', r2, @sock_ops, r0, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r1, 0x1, &(0x7f00000006c0)=[r0, r1, r1, r1, r0, r1], &(0x7f0000000700)=[{0x0, 0x3, 0xd, 0x6}], 0x10, 0x4}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f00000102c0)="fc", 0x1}], 0x2) truncate(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1m39.226683683s ago: executing program 6 (id=717): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 1m39.045320282s ago: executing program 6 (id=718): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1m39.040089125s ago: executing program 6 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) (fail_nth: 2) 1m38.883663845s ago: executing program 6 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x56}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x6000, @fd_index=0x4, 0xfffffffeffffffff, 0x0, 0x0, 0x12, 0x0, {0x1}}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c99c4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c08806f746d6f64653d30303030303030303030303030303030303034303030302c7573657e00000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0xff, 0x4}, 0xfd}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r12, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r12, 0x21, &(0x7f0000000440)={0x0, 0xbb02, 0x1040, 0x1, 0x218}, 0x1) sendmmsg(r10, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r10, &(0x7f00000004c0)={0x1d, r11, 0x0, {0x1, 0xf0}, 0xff}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r11, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa04, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket$inet6(0xa, 0x3, 0x2) 1m23.812838184s ago: executing program 36 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x56}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x6000, @fd_index=0x4, 0xfffffffeffffffff, 0x0, 0x0, 0x12, 0x0, {0x1}}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c99c4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c08806f746d6f64653d30303030303030303030303030303030303034303030302c7573657e00000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0xff, 0x4}, 0xfd}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r12, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r12, 0x21, &(0x7f0000000440)={0x0, 0xbb02, 0x1040, 0x1, 0x218}, 0x1) sendmmsg(r10, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r10, &(0x7f00000004c0)={0x1d, r11, 0x0, {0x1, 0xf0}, 0xff}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r11, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa04, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket$inet6(0xa, 0x3, 0x2) 55.038528344s ago: executing program 4 (id=959): socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x88000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f00000323c0)=""/102333, 0x18fbd, 0x10000) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) 53.814460254s ago: executing program 4 (id=969): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0xffffffffffffffff, 0x0, 0x36ae, 0x800000000000005, 0x7fff, 0x3, 0x400000000, 0x0, 0xfffffffffffffffd], 0x80a0005, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f00000000c0)='./mysys/bus/pci/rescan\x00', &(0x7f0000000080)='configfs\x00', 0x1000010, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)="1db3", 0x2) 53.665410352s ago: executing program 4 (id=970): clock_settime(0x100000000000017, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) r0 = socket$netlink(0x10, 0x3, 0xc) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000140)={r2, &(0x7f0000000980)=')\x00\x12F\xdfR\xc4\xdb\x81\xe3\xc9\xc4\x1a\x7f9a2 \xfe\x9e\xc1W\x02\xce+\xa6\xdf\x91\xe0\x9d\x9dDE23-/\xbd}#\xbeRYE\x87\xbeM\x9b\xa1\xa5\xcf\xa6~\xeb\x13\xdcm\x81\xe7o\x93\xf6\xf8\x86\xcb\xc8N\xa5\xe4\xaba\x00\xe6g\x8er{\b\x8d\a\xfd\x15s\xef\r\x95\x1f\xfe\xf3\xad2\x91\x86\xb2g\xc1uh\x0f\xd8/\aQ\xb9\xdd\xe8\'|\xc4\xfa^\xe9\xf2^(\x92\x14~\x1e\x84\x817\xa2\xae&W\x19v\xeffR\xbe\xfdf\x99\xeeHS|H4N\xb4\x7f\b(\x1c\xee\x17P\x93\xb7\x02\xd5\xba\x8f\x9c\xfaJS\xcd\x02\x1a/\x1a|6\xa9\xc80\x1c\r\x88\x17V\x80\xe3x\xdb\xd4E\xd5\x96\x04_\xfc^\x80\x87J\x1a\x91\x0eZ', 0x402, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x161a, 0x200, 0xe9f, 0x9}}, 0x5d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) ioctl$BLKRRPART(r3, 0x125f, 0x0) pipe2(&(0x7f0000000000), 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, 0x0, &(0x7f0000000180)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r10, &(0x7f0000000a80)=""/188, 0xba) write$tun(r10, 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000005c0)={0xc, &(0x7f0000000300)={0x40, 0x7, 0xdf, {0xdf, 0x11, "2111209ada0d7339286ec391855f842366fcb8c5dd195a6a4fe90acbc6e48cdf5ff0bc4305fccd5b2eafdac022cbe748c9b9d5b7a23558895c924ff63526c87254107651cadce73d25bb772dd766e2d93062b70b9d5b4aaf46293b1ea0892472d6bfebdfb443bc9ccffdd59a339d5aec1ebda2bb65eddac6e3be415c7015b937c1201a43c9c38ea48513e5b3aad9c0c97eca364906559c337a9daa891af633de124152f5a582854ff92ae4e831a058f2d5437a9985e261743fe7a25e4ef23d37a08edd3e854bed33a3eb67dcbfce8aeca50e94541b229b10372aa18a0b"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x0, 0x14, 0x88, "9f76a5e21191220c7563b7c0b5c30626705e706ccc3e218731d5423025460bcba177fc8bd0448d10d4549cc2d690bca620fd51d5eb14dd0e95ada040c06f362c6f6cfaff298b297185bc97300fcc21f9f7603d1195278b71eb7c44da278572a5e23adf8229c021e5097195d09559cfad106b3ef32dad0696f192baa2be3b311e9e7ebc272bbb3563"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)=ANY=[@ANYRESOCT], &(0x7f0000000b40)=ANY=[@ANYBLOB="208202000000a059f11631e163afb5c5b6d2634d2012185392304ad44846e4b91048c5ab222517bef0e4f2827b6b69a34b78f1e79335cee2decdabcd2d8bbf3f242535f67f70dc9f53a4fbe38d42466ae881d67fa05a5e67d48e4b88cf61aa69767caa8b2721d0bf76b4f7dbcad6b777808ad770fe"], &(0x7f0000000880)={0x20, 0x83, 0x1, '{'}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "a48ce73d"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "24ad79"}}) close(r10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.216190689s ago: executing program 4 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e47c00000800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) read$FUSE(r2, &(0x7f0000000b80)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) setsockopt$sock_attach_bpf(r4, 0x6a, 0x6e, 0x0, 0x0) setsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000000340)="f8ceca15be32584bc5773950a1a3fd0237b14c52a1a34cc502ffe7d6dc3ebe1403b7e0d50cd96e43f8090b446c9bf06f606b252c41ef998a9ca253dd743dde25378b2a85ab7193e87ea5e391786b6167a976811274cbeb9d33c3d1c18fa31d6b536832f1774943153881839d32d6d3781fe34b6452e5f0f5adb52eaed05502e1db5ba8a4cae9845b3d425bc4e34994e2933314d0b881c7405beb358f786107e9a87be4", 0xa3) sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000031c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0xe, 0xd, 0x1, 0x0, "239eff2ed521654b1c6c"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0xd4, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x46ca}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xc154}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x10001}]}, @NFT_MSG_DELTABLE={0x120, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0xfe, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) 51.10489357s ago: executing program 4 (id=983): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x1) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000500)=""/146) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='source', &(0x7f00000002c0)="4bc0e7041e7ce2", 0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0xfffffffe, 0x800000, 0x0, 0x4, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x90000915, 0x200000000005) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x734a, 0x8, 0x10080002, 0x83}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0x1fa}}], 0x1, &(0x7f0000000180)={0x2e, 0x50, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 50.656602411s ago: executing program 4 (id=985): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x1) 50.368259635s ago: executing program 37 (id=985): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x1) 8.025758409s ago: executing program 5 (id=1157): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x100, 0x401}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r4, 0xaeb, 0x1) getdents64(r4, 0x0, 0x4f) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2f4, r11, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x1d8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x110, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xde, 0x2, '400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^{.!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40}, 0x4048086) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r13 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.406836318s ago: executing program 5 (id=1167): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.963819099s ago: executing program 9 (id=1168): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x51}, 0x2c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) (fail_nth: 4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xd8}}, 0x0) 4.746328209s ago: executing program 9 (id=1169): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000340)={'binder1\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x9, 0xa, 0x7, 0x8, 0x8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x7, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc6, &(0x7f0000000480)=""/198, 0x40f00, 0x53, '\x00', r2, @sock_ops, r0, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x7b4a199c, 0xffff}, 0x10, r3, r1, 0x1, &(0x7f00000006c0)=[r0, r1, r1, r1, r0, r1], &(0x7f0000000700)=[{0x0, 0x3, 0xd, 0x6}], 0x10, 0x4}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000", 0x4}, {&(0x7f00000102c0)="fc", 0x1}], 0x2) truncate(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 4.636746179s ago: executing program 9 (id=1170): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) 4.285316781s ago: executing program 8 (id=1173): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x4) openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x1000, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0xefff30b1, '\x00', r0, r1, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000054c0)=[{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000440)="ac87c1d2ed5798e5097638150b190db88b07900b8247cd8775d76d825b36ec3a8a369908555b6400ad33c38ddf9ee7e95c505e13740636bdef65bcec90aa8e24fe7ba88008c4ca6ef2cbef", 0x4b}, {&(0x7f0000000540)="22cb90c602d63bbdc43b6ffadf13b53403476dbb27ea36c90af2b0127c49b07f008f38c5119fde4814d010260883bd1ef5262c39db291445b02933e7ebe8ce93ee404f302f70c57e304f1f14801af88aa3bb897cf276", 0x56}, {&(0x7f0000004000)="89903d19fa87bcd04a6e26309daaa03432b5bb3a7237d352fd7ab3b47b4c521abe5ec6d9ad0e872822759a0994fab8212f7a319caa7f8299aa8ccf209249e8a7c56a8146c85b7b2601ddadaa349f2b0823220fddf64ed411aa214a840a45c9", 0x5f}], 0x3, &(0x7f0000005040)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4008090}], 0x1, 0x40) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9463, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xfffffffe}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.176084838s ago: executing program 8 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x1000, 0xb28, 0x6}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005900)=@delchain={0x4ab8, 0x65, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0x8}, {0xf, 0xfff2}, {0x0, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8a53}]}}, @filter_kind_options=@f_u32={{0x8}, {0x818, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}, @TCA_U32_ACT={0x7f8, 0x7, [@m_xt={0x5c, 0xe, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2a}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x6, 0x6, 'S5'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x394, 0x4, 0x0, 0x0, {{0xa}, {0x290, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x110, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x130, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xe5fcdb617847f349}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x9da2cd66e672919c}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xdc, 0x6, "c235175b774d29e1c42b52e1c8d3d0fd4500e5c259345d1aa87c0ad04750c4e5e37c1e9d2929932a35acb2032a7956f6aaf6f56f930d91991c3cb29b27e8f97e5f2912739421e31fb9c7795fad198152d64948ed0e5501a01f5e04baec967d3f24f855ca8dbc7479f27f7178f2d6dc8793043a3a289cd8525bdacc7016c82472de9d8639ef1baaa361015fbeea3fa1cfe76438809838501157f237197b5892a3f10ba7bcf410aa5a29be71adaacfcac21c12b1ee589a2338fe7c6c22e65f5a938baa3f89bd1be7976cef7c33667852ca809e0a1812931c4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x140, 0x14, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf6, 0x6, {0x2, 'security\x00', 0x2, 0x1, "d5fe9be3104e50a7c79496ebbff3f9cd3883a8b69e667d293dc8466c1208521d6c2590414bdb22435ff2b1d8ae3ab7bb60a837654b3b0956c57de7c734f92f0a994e5ee01cd1c0be83353cfb325cc16446eaad833ab09033218be0213be0160449c2642488a6e5f2061f9f5aa1c15b14a7187494295ab62f6b3ef58f4d8587824b0dea4811ec52b63075daa20c22a958586be321843e03f0dabaa3510aec3e3fd0318073bda75be3bcf9332568590c771b995e927a7f006350e856270b2c4d7290bb79f94ee9a749dae8774d"}}]}, {0x1d, 0x6, "86a4ed8f91e4e6351f03835afd37395ee9645aec6d471f8cd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xb4, 0xd, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x5, 0x3, 0x10000}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0xf3}]}, {0x34, 0x6, "5142afadca680803e1a66ba204d463a7bf06d30906bf228f1b77aaf878cae8db71d4812fffb3f81c98a9b3b9c2b1f2eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x11c, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x8, 0x1, 0x7, 0xff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x398f, 0x4, 0x2, 0x8000, 0xe}}]}, {0x9e, 0x6, "238cc1bc0bdb169ac7494e7dfd4b871273e54528dc3fb15ecc840d408ec2e146d6bb8ada667adce4771c57874189fe138b6b2651b5f515b65ac9a227a5051fd1ab3e1e5f711a07128176d0c0c0baf34af77e2e9a89c4cf81f02f95e528a06239a7072d95929d0233ec3fb900e5f035687d89094601f17f507fbe94a6fc05986ca5f50c1020eed9329df2761ee73a98d1a284570aa99f30bba59c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x90, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2095, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d56, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x25bc, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x7, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff1d66, 0xffff, 0x0, 0x400, 0xe8f}}]}, {0xf, 0x6, "f9a2cf084cc1f627ae2344"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x64, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x0, 0x6}, @remote, @remote, 0xffffffff}}]}, {0x11, 0x6, "8c346d9f73d4ffa8536053653b"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x9, 0x87, 0x6, 0x3a}, {0x8000, 0x9, 0x3f, 0x1c9}, {0x5, 0x9, 0x4, 0x3}, {0x8001, 0x6, 0x75, 0x7}, {0x4, 0x8, 0x31, 0x7}, {0x9, 0xf, 0x8, 0xa}, {0x6, 0x2, 0x7, 0xfffffffc}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x5, 0xf7}}, @filter_kind_options=@f_fw={{0x7}, {0x41d4, 0x2, [@TCA_FW_ACT={0x41d0, 0x4, [@m_skbedit={0x1078, 0x2, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x3, 0x4, 0x0, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xe8, 0x20, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x4, 0xf, 0x200, 0x6}, 0x1}}]}, {0x58, 0x6, "17545c286145031e0317501a5c497e55aadbbbbf2327b558d5db1baf85472700d990b1c7fd130528a3df239665eca0f24e84a9bc78a79d509968e41b85f04cfffcd9c24f8d59969db33e5c0ad808c1a6345665de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf8, 0xb, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffff836}]}, {0xbd, 0x6, "0efb43bd0dcf375d4532aef33782b861af48a8f9c257ae9e39150431e4ed7952916397b9c8c3308f2d29377a9654ca04f036b9135dfbf833d360f0d07facdab741a9e5c504bdb6ff9d2412bfd74ba6476a98c6a485aa139bdb6b8b92e2353849b3491e7e8581a4eec37e3e06cff9daa301933ec3a3880cb1ecf4f48d7f7270599192329086c29cdf32fa1e79f3f2195f7497605f7b3213394e008c7771c2e144226b0ec32cb20ce32acc3d5c6fd8e437f2b8a478602018e297"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x120, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xf5, 0x6, "9d82bbcdb4f4b70268a29fe59bb3b75377c08a4f84649ea432a42dc78196ee883fb1d142412b855ebf9ab5e089a88075becc6f1ce01f21b4145b5d104bc42bb4bd05fae59f85e84a2ac4372902c64a3e8ffb01250e0970f3a1f64991e9d666c2643c0faf6280776283cca9a58ad93b9267e4190cbb47eadab6ed8d5cc29d1892e7b9f9f1208abff925d129675c33b091bfbd48f6d9aef272f777c795aebbb39b95bdb87e743db3b26ca647cd4e76e41efc15dfc969fa82486ece6e0088d4cfa72ab2f20b014c395b852bb1a57aa7543778877cd66dfaec6f7840ef35a07619e81d38a530fcbbeff9a607d836d725ef2b30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x118, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xf6, 0x4, 0xc, 0x6}}]}, {0xcc, 0x6, "bb1af7e6c50b586bf58b27b109efa52887d1bf7c89190ef9169f798ac7619017ce7185dabba84417ddbe029fe41924cf33746cf5942e6b9a06850a54d2823554be93b745d14b1cbea467dfed2634d15aaaea881f49c13a8f7a9b2d5792ecc4efbab57bc93a9fc2f1a4527ed657a178a05273b71c984f728ab84c8f38e73c89a3a6297aa5d585142aa407b8b3d1f24e2cab57e1cf7f8a3f2b7f0554a70de617da01942dc361ee7aefebb049c732a8a96fdfd48462f6da69ed992137aa6e864fa66237c651529e7e1d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x2bc8, 0x19, 0x0, 0x0, {{0xa}, {0x2b54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x7, 0x1, 0x4, 0x80000000, 0xd}, 0x8, 0x9, [{0x6, 0x9, 0x0, 0xffff8000, 0x0, 0xe2}, {0xa, 0x10, 0x2, 0x6, 0xfffffff8, 0xe6}, {0x466, 0x4, 0x8, 0x4da, 0x80000000, 0x4}, {0x8, 0xe, 0xe5, 0x8, 0x69, 0x4}, {0x0, 0x4, 0x0, 0x7, 0x80000000}, {0x1, 0xffffffff, 0x8, 0x2, 0xb, 0xb3}]}, [{0x0, 0x0, 0x9, 0x2, 0xc}, {0xffff, 0x7, 0x2, 0x1, 0xfd3, 0x5}, {0x3, 0x3, 0x80000001, 0x5f22, 0xfffffff9, 0x7}, {0x81, 0x5, 0x50, 0x8000, 0x1, 0xe38b}, {0x4, 0x5, 0x7, 0x5, 0x2, 0x9}, {0xfffffffb, 0x6, 0x47, 0x761dc15, 0x4, 0x3ff}, {0x4, 0x2, 0xf, 0x0, 0x8}, {0x5, 0x6, 0x9, 0x2, 0xffffffff, 0xcd}, {0x3, 0x8001, 0xf318, 0x7, 0x3, 0xa}, {0x3, 0x1, 0x2, 0x8, 0xf, 0x95}, {0x80000000, 0x2, 0x9, 0x1, 0x4, 0x7}, {0x6, 0x7, 0xa662, 0xffffff01, 0x5, 0xcb1}, {0x40b0, 0x1, 0xfffffffb, 0xb, 0x5, 0x4e2}, {0x0, 0x3, 0x0, 0x1, 0x2, 0xdc}, {0x7, 0x9, 0x8000, 0x76, 0x200, 0x1}, {0x100, 0x10000, 0xec, 0x2, 0xb5, 0x8}, {0x3ff, 0xd55, 0x78, 0x1, 0x80000000, 0x8000}, {0x5, 0x50000000, 0x0, 0x8a, 0x10, 0x4}, {0x4, 0x6, 0x0, 0xb2, 0x3, 0x2}, {0x8, 0xb1c, 0x4, 0x4, 0x8b, 0x3}, {0x8, 0x40, 0x778, 0x10001, 0x4, 0x9}, {0x0, 0x80000000, 0x8, 0x6, 0xffff, 0x5350000}, {0x9c, 0x33, 0x2b30, 0x2, 0x200, 0x4}, {0x5, 0x9, 0xc8, 0xfffffff9, 0x9, 0x9}, {0x0, 0x0, 0x6, 0xfffffff8, 0x2, 0x8000}, {0x400, 0x0, 0xfffffffd, 0x7fffffff, 0x49, 0x4}, {0x3, 0x1, 0x401, 0x40c3, 0x5, 0x2}, {0x6, 0x75, 0x100, 0x1f, 0x3, 0x8}, {0xff, 0x3ff, 0xdb4c, 0x7, 0x9, 0x9}, {0x9, 0x3, 0x2, 0x4d4, 0x4, 0x80000001}, {0x0, 0xfffffff5, 0x4, 0x111, 0x40, 0x4}, {0x3, 0x2, 0x4, 0xfffffc01, 0x8001, 0x4}, {0x2, 0xff, 0x3ff, 0xeb2, 0x7ff, 0x1000}, {0x2, 0xca0, 0x8, 0x8, 0xfffffffd, 0xe8ac}, {0x7, 0x9, 0x1, 0x7, 0x0, 0x8}, {0xfffffffb, 0x4, 0x8, 0x0, 0x5, 0x9}, {0x81, 0x80000001, 0x8, 0x0, 0x1, 0x6}, {0xf, 0x1, 0x7ff, 0x800, 0x1, 0x6}, {0x1, 0x0, 0x0, 0x90, 0x1, 0x3}, {0x8, 0x1, 0xc, 0x80000001, 0x4, 0x8}, {0x81, 0x8, 0x8, 0x7f, 0x3fbc, 0x235}, {0x800, 0x6, 0x6, 0x2, 0x10000, 0xfe1}, {0x4, 0xe, 0x8, 0x1, 0x0, 0x1}, {0x8000, 0x8, 0x7, 0x200, 0x200, 0x8e3}, {0x2, 0x80000000, 0x4, 0x200, 0xb80d, 0x6}, {0x8, 0x9, 0x77f, 0x5, 0x3ff, 0x9}, {0x10001, 0x3, 0x8, 0xd99, 0x2, 0x7fff}, {0x9, 0x2, 0x1, 0x74, 0x7fffffff, 0x8b5}, {0xdbc, 0x4, 0x6, 0x10001, 0x5, 0x2}, {0x7fff, 0x8, 0xffffffff, 0xf621, 0x7, 0x2}, {0xcd, 0x5, 0x4, 0x200, 0x8e, 0x6}, {0x4, 0x2, 0x4, 0xfffffffc, 0x1, 0x9}, {0x2, 0x6, 0xc, 0xffffffff, 0x5, 0x7}, {0x3, 0x1, 0xff, 0x1000, 0xf, 0x6}, {0x60000000, 0xc6, 0x8000, 0x5, 0xaa, 0x1}, {0x7ff, 0x8, 0x2, 0x7fff, 0xfffffff5, 0x4}, {0x9, 0xfffffff9, 0x5, 0x1ff, 0x1, 0x5}, {0x3, 0x975e, 0x10, 0x5, 0x9fe, 0xfb}, {0x9, 0x200, 0xc20, 0x3, 0xab8, 0x9}, {0x8, 0x5, 0xf, 0x5, 0x8, 0x6}, {0x3ff, 0x8, 0x5, 0x3, 0xf037}, {0x2, 0x1, 0x6, 0xbc, 0xfff, 0x2}, {0x0, 0x5, 0x4b, 0xb, 0x2, 0x7ff8000}, {0x4, 0x7fff, 0x1, 0x7fc, 0xffffff80, 0x1}, {0x58, 0x4, 0x8, 0xa177, 0x6d, 0xbd0}, {0xd, 0x9acb, 0x0, 0x9, 0x3, 0x9}, {0x1775, 0x5, 0x7, 0x0, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x101, 0x8, 0xbb}, {0x3080, 0xfffffff9, 0x8, 0x8, 0x2, 0x8000}, {0x2, 0x84b, 0x1, 0xd72, 0x4, 0xa}, {0x3, 0xc2, 0x6, 0x500d, 0x1, 0xab66}, {0x9, 0xa966, 0x5, 0x5, 0xffff0001, 0xd0}, {0x5, 0x1, 0x2, 0xd, 0xffffffff, 0x10}, {0x9, 0x73d9, 0x2, 0x9, 0x800, 0x7}, {0x100, 0x4, 0x8, 0x3, 0x7fb, 0x3}, {0x2, 0x2, 0x5457, 0x7, 0x100, 0x1}, {0xd, 0x1, 0x80000001, 0x800, 0xffff27f8, 0xe1b}, {0x7, 0x2, 0x9, 0x7, 0x6, 0x5a}, {0x9, 0x1, 0x5, 0xf, 0x8, 0xe}, {0x47f, 0x10000, 0x6, 0x5, 0x0, 0x5}, {0x400, 0x6, 0x8, 0xfffffffa, 0x80, 0xf6}, {0xe, 0x80000000, 0x1c5, 0xfffffff9, 0xfff, 0x5}, {0x6, 0x3, 0x5, 0x2, 0xb6, 0x5}, {0x8cd4, 0x9, 0x3, 0x5, 0x2, 0x4}, {0xfffffff8, 0x80, 0x7, 0x1840, 0x40, 0x8}, {0x71adec00, 0x7fffffff, 0x2, 0x5, 0x5, 0x7}, {0x101, 0x8, 0x10001, 0x4, 0x0, 0x5}, {0x3, 0xfffff800, 0x4, 0x4fd, 0x80, 0x7}, {0x8, 0x1, 0x2, 0x7, 0x6, 0x2}, {0x75, 0x5e5, 0x7fffffff, 0xc, 0x1, 0x6}, {0x6bc7614f, 0x10000, 0x2, 0xa4e7, 0x2, 0x2}, {0x0, 0xf, 0x80000000, 0xbca, 0x5, 0xe}, {0x3, 0x400, 0x5, 0x1000, 0x4, 0x1000}, {0x4, 0x348, 0x10, 0x2, 0x9, 0x7}, {0xffffffff, 0x3, 0x7, 0xffff, 0x3, 0x33ea6a77}, {0x7, 0x7, 0x10001, 0x401, 0xf, 0xfffffffd}, {0xff, 0x1845, 0x0, 0x80000000, 0x8968, 0x3}, {0x6, 0x0, 0x9, 0x10001, 0x7f, 0x3}, {0xfffffffd, 0xec7d, 0x3, 0x288, 0x1, 0x2}, {0x2, 0x0, 0xfffffff8, 0x4, 0x5, 0x10}, {0x800, 0x0, 0x9, 0x2, 0x40, 0x2}, {0x24, 0x9, 0x2, 0x76, 0x2, 0x92ad}, {0x401, 0xabe, 0x9, 0x1, 0x4, 0x800}, {0x2, 0x9, 0x81, 0x5, 0x101, 0x6}, {0x1, 0x9, 0x200, 0x7, 0x6, 0x921}, {0x2, 0x80, 0x9, 0x3, 0x1, 0x9}, {0x955f, 0x2, 0x9, 0x1000, 0x2, 0xb4}, {0x2, 0x4, 0xfffffffd, 0x63ee, 0x6, 0x7}, {0x9, 0x7fffffff, 0x0, 0xe, 0x1, 0x7}, {0x78, 0x91, 0x5, 0x9, 0x1, 0x2}, {0x2, 0x5, 0x9f2, 0xffff5da1, 0xc, 0x6420}, {0x3, 0xa0000000, 0xff7d, 0x3, 0x4, 0x5}, {0x3, 0x5, 0x7, 0x2, 0x10000, 0x2}, {0x10, 0x4, 0x6, 0xab, 0x1, 0x40}, {0x3e9, 0x5, 0x1, 0x3, 0xff, 0xa}, {0x1c000000, 0x0, 0x3ff, 0x8000, 0x9, 0x5}, {0x7, 0x101, 0x1, 0x6, 0x0, 0x1}, {0x8, 0x81, 0xfffffe00, 0x1, 0x5, 0x26000000}, {0x800, 0x6, 0x7, 0x9, 0x8, 0x7fff}, {0xe12, 0x0, 0x4, 0x1, 0x9, 0x6}, {0x0, 0x200, 0xa, 0x10, 0x5, 0x5}, {0x7, 0x800, 0x2, 0x9, 0xbde, 0x5}, {0x401, 0x7, 0x5, 0x5, 0xffff, 0xf5ad}, {0x5, 0x2, 0x8, 0x7fffffff, 0x72}, {0x8, 0x1000, 0x1, 0x800, 0xfffffffc, 0x7fff}, {0x0, 0xfd0, 0x2, 0x7, 0x3, 0x3}, {0xfffffffc, 0xffff, 0x100, 0x8, 0x1, 0x5}, {0x3ff, 0x0, 0x9, 0xee9, 0x4afe, 0x3}], [{0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x4}, {0x3}, {}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5835981303db0d, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x6}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x6}, {0x2}, {0x1, 0x1}, {}, {0x3, 0xa70c2bc759e05ab2}, {0x2, 0x1}, {0x5}, {0x3}, {0x5}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4}, {0x81ecae64ec35d6d1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0xab3f3bdeac98d1ef}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x2}, {}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x468cc976, 0x8, 0x0, 0xfffff756}, 0x7, 0xae}, [{0xff, 0xffffff83, 0x3, 0xffff, 0x6, 0x4}, {0xec, 0x7, 0x530, 0x0, 0x5, 0x8}, {0x2, 0xffffffff, 0xb2000000, 0x6, 0x2, 0x8}, {0x6, 0x2c, 0x9, 0x2, 0x2446, 0x3}, {0x10000, 0x4, 0x9, 0x5, 0xfb6, 0x4}, {0x0, 0x101, 0x6, 0xfffffff9, 0x600000, 0x5}, {0x674f, 0x401, 0x5, 0x8, 0x0, 0x1}, {0x1ff, 0x8, 0x1ff, 0xc38, 0x4, 0x1000}, {0x7fffffff, 0x5, 0x6, 0x8e, 0x8000, 0x1}, {0x3, 0xf2, 0x2, 0x3, 0x88, 0xf}, {0x4, 0x7, 0x7ff, 0x9, 0x6, 0x7ff}, {0x7, 0x5, 0x8, 0x5, 0x8, 0x9}, {0x3, 0x4, 0x7, 0x1000, 0x3, 0x3}, {0x1, 0xfffffff8, 0xfffffc01, 0x0, 0x7ff, 0x40}, {0xfffff903, 0x7, 0x200, 0x3, 0x10, 0xfffffe00}, {0x0, 0x4, 0x8, 0x1, 0x3, 0xfffffff7}, {0x1126190e, 0x8000, 0x8, 0x5, 0x7, 0xd27}, {0x101, 0x9, 0x924, 0x9, 0x7f, 0x5}, {0x10, 0x7, 0x37, 0x0, 0x2, 0x2}, {0x6, 0x6, 0x6, 0xfffffff8, 0x10, 0xcfb}, {0x6, 0x8, 0x7f, 0x9baf, 0x3, 0x25c3b262}, {0xfffff1ba, 0x6a54, 0x4, 0x2, 0x1, 0x5}, {0x4, 0x93, 0xfffffffa, 0x1, 0x3, 0x20c}, {0x5, 0x10, 0x8001, 0x4, 0x8}, {0x5, 0x0, 0x7ff, 0xa9, 0xc2ea, 0xef49}, {0x1, 0x1, 0x2, 0x836, 0x2, 0x9}, {0xfffffff9, 0x7, 0x7, 0xe213, 0xffffffaa, 0x10001}, {0x5, 0x3, 0x9, 0xf, 0xffffff91, 0x8}, {0x0, 0xfffffff9, 0xfffffffc, 0xffffbaf0, 0x87a0, 0x2}, {0x101, 0xb4, 0x2, 0xd, 0x5, 0x8}, {0xfcc4, 0x0, 0x0, 0x9, 0xffffffff, 0x6}, {0x112f9db2, 0x7ff, 0x8, 0x5, 0xb88}, {0x10001, 0xfffffffd, 0x5, 0x1, 0xfcad, 0xa}, {0x1, 0x1, 0x7, 0xdfd, 0x9, 0x5}, {0x0, 0xb4, 0x5, 0x67, 0x2b, 0x9}, {0x2, 0x7fff, 0x9, 0x2, 0x7fff}, {0x9, 0x5, 0x9, 0x6, 0x5, 0x86}, {0x8, 0xfffffc01, 0x879, 0x6, 0x7ab, 0x9}, {0x37, 0x36f, 0xffffffe8, 0x4, 0x7ffffffe, 0x1}, {0x6, 0x7ff, 0x8, 0x3, 0x8d, 0x400e}, {0x4, 0xfffffff7, 0x3ff, 0x8, 0x4aa0, 0x3}, {0x3781bfe0, 0x2, 0x1, 0x0, 0x2e, 0x2}, {0x0, 0x200, 0x5, 0xce, 0x7, 0x2}, {0xf43b, 0x5, 0x4, 0xdc, 0xfffffffa, 0x5}, {0xaade, 0x0, 0x6, 0xffffffc0, 0x5, 0xad}, {0x2, 0x3, 0x400, 0x5, 0x64, 0x9}, {0x2, 0x2, 0x9, 0x7, 0xc, 0x7}, {0x0, 0x87, 0x868, 0x708, 0x88d, 0x7f}, {0x3, 0x51a2, 0x0, 0x2000, 0x4, 0x3}, {0x9, 0x4, 0x73, 0x1, 0x2, 0x4}, {0x8, 0xac0b, 0x7, 0x8, 0x8001, 0x3}, {0x0, 0x9e, 0x8, 0x5, 0x30}, {0x10000, 0x81, 0x6, 0x0, 0x0, 0x51}, {0x6, 0x1, 0x9, 0x5, 0x1ff, 0x4}, {0x6, 0x4, 0x2, 0xb805, 0x7f, 0x2}, {0x1, 0x101, 0x0, 0xffff, 0x3ee4, 0x1}, {0x1, 0x3, 0x0, 0xff, 0x8, 0x80000001}, {0x5af279ec, 0x7, 0x2, 0x7f, 0x0, 0x7}, {0x4, 0xb0, 0xfff, 0xffffaf65, 0x4, 0x1}, {0x0, 0x2, 0x8, 0x0, 0x400000, 0xffff}, {0xfffffff8, 0x3, 0x366, 0xc8, 0x1, 0x5c5a}, {0x0, 0x8, 0x7, 0x10000, 0x1000, 0x9}, {0x7, 0x7fffffff, 0xfffffff7, 0x8, 0x3, 0x200}, {0x3, 0xd, 0x7, 0x3, 0x7fffffff, 0x3}, {0x81a, 0x5, 0x3, 0x0, 0x1, 0x9}, {0x4, 0x0, 0x8, 0x9, 0xfffffff3}, {0xf5d, 0x7, 0x1, 0x3, 0x0, 0x7ff}, {0x10000, 0x534, 0x1, 0x7, 0x9, 0x5}, {0x80, 0x4, 0x3a, 0x9, 0x3, 0x200}, {0xd, 0x1, 0x80000000, 0x5, 0x3, 0xed28}, {0xe, 0xa, 0x9, 0x6, 0x6, 0x4}, {0x3, 0x2, 0x8, 0x1, 0x1, 0x7}, {0x7, 0x8, 0x7f, 0x0, 0x2, 0xfe000000}, {0x9, 0x7f, 0x101, 0x6, 0x2, 0x6895}, {0x10, 0x80000001, 0x59, 0x7a48, 0x4, 0x10000}, {0x3, 0x4, 0x8, 0x42, 0x6}, {0xffffff90, 0x3, 0xd02f, 0x8, 0x4, 0xf}, {0x3, 0x0, 0x8, 0x6, 0x4, 0x3}, {0x8001, 0x400, 0x10001, 0x9, 0x8, 0x5}, {0x100, 0x7, 0x10, 0x100, 0x69b9, 0x10000}, {0x50000000, 0x5, 0xf694, 0xfffffffd, 0x240, 0xf6eb}, {0x1, 0x5, 0x1, 0x6, 0x8001, 0x2}, {0x6, 0x0, 0x0, 0x3, 0x4, 0x2}, {0x2, 0x55, 0x9, 0x100, 0x6, 0x7}, {0xffff8e93, 0x200, 0x7, 0x400, 0x3, 0x40}, {0xfff, 0xfffffff7, 0xb, 0x8001, 0x37e7, 0x2}, {0x8, 0x6, 0x0, 0xffff, 0x0, 0x1757}, {0xfffffff3, 0x6, 0x1, 0xf000000, 0x1, 0x10000}, {0xeeb, 0x100, 0x1, 0x7fffffff, 0x1400, 0x9}, {0x5, 0x7f3, 0x6, 0x10001, 0xe21f361e, 0x840f}, {0x0, 0x6, 0x0, 0x7, 0x3, 0x446}, {0x5, 0xffff, 0xc84, 0x1, 0xf2, 0x15}, {0xfffff800, 0x9, 0x5, 0x2, 0x80000000, 0x8}, {0x8, 0x200, 0x3, 0x401, 0x3, 0x1}, {0xfffffff7, 0xfffffffc, 0x8, 0x8, 0x9, 0xd5a8}, {0xec1c, 0x9, 0x7, 0x95a, 0x8, 0xb}, {0x5, 0xffffffd9, 0x4, 0xf6, 0x6, 0x7}, {0x8, 0x9, 0x80000000, 0x7, 0x400, 0x1}, {0x80000001, 0x5, 0x90d, 0x8, 0xffffffff, 0x3}, {0xe, 0x4, 0xf, 0x401, 0x4, 0x5}, {0x9, 0x9, 0x4, 0x800, 0xfffffffc, 0x1}, {0x5, 0x4, 0x80, 0x1, 0x8, 0x7e5d}, {0x78b, 0x2823, 0x2, 0x40, 0x5, 0x7}, {0x9eb, 0x80000001, 0x2, 0x101, 0x2, 0x8}, {0x3, 0x5, 0x1000, 0x6d, 0x4, 0xfffffff9}, {0x7, 0x10, 0x3, 0x6, 0x2, 0x10}, {0xcb, 0x9, 0x9, 0x6, 0xf072, 0x4d13c839}, {0x5, 0x1, 0x967, 0x7, 0x60, 0x1}, {0x8, 0x7, 0x10000, 0x8000, 0x7, 0x81}, {0x0, 0x0, 0x4, 0x10000, 0x3, 0x7fffffff}, {0x5, 0x1, 0x6, 0x8000, 0x400, 0x7cc}, {0x200, 0x9, 0x9, 0x3, 0x5, 0x8}, {0x4, 0x3, 0x3, 0x6, 0xdf, 0x4}, {0x4, 0x6, 0x3, 0xd7f, 0x0, 0x8}, {0x7ff, 0x0, 0x6, 0x3, 0x2, 0xfffffffa}, {0x6, 0xf, 0x57cb, 0x7fff, 0x9, 0x3}, {0x542, 0x5, 0x9, 0xa, 0x9, 0x40}, {0x3, 0x101, 0x4, 0x400, 0xd, 0x2}, {0xb0, 0x3, 0x9, 0x5, 0x1, 0x7}, {0xbb1c, 0xf884, 0x10000, 0x6, 0x200, 0xb5a}, {0x200, 0x0, 0x401, 0x1, 0x0, 0xffffffff}, {0x2, 0x5, 0x5, 0xfffffffa, 0xde8b, 0x7}, {0x5, 0xffffffff, 0x80, 0xc, 0x5, 0xc5}, {0x9, 0x10, 0x0, 0x200, 0x8, 0x8000}, {0x100, 0x4, 0x6, 0xfffffff8, 0x1000, 0x7fff}, {0x1e16, 0xfffffffe, 0x7, 0x9, 0x8b4b, 0x7}, {0x2, 0x7fff, 0x2, 0x5, 0x9, 0x6}, {0x2, 0x7, 0x3, 0x401, 0x3}], [{0x5, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x468, 0x9, 0x20000009, 0x101, 0x3}, 0x6e, 0x3, [{0x9b6, 0x9, 0x1ff, 0x0, 0x1, 0xa}, {0x1, 0x7, 0x0, 0x5, 0x100, 0x2}, {0x4, 0x8, 0x2, 0x6, 0x6f9e, 0x70e}, {0xab, 0x1000, 0x2, 0x1, 0x5, 0x400}]}, [{0x5, 0x1000, 0x9, 0x0, 0xffff8001, 0x4}, {0x9, 0x8, 0x4, 0x9, 0x9, 0x955}, {0x29, 0x80, 0x3ff, 0x2db3, 0x7, 0x1ff}, {0xfffffff7, 0x8, 0x9, 0x5, 0x4, 0x9}, {0x4, 0xf9, 0x8, 0x6473d4f2, 0x4, 0x1}, {0x4, 0x68e5, 0x1009, 0x6, 0x3}, {0x8, 0x2, 0x839, 0xde6, 0x3, 0x5}, {0x2ccd, 0x80000000, 0x5, 0xffffffff, 0xffff0, 0xb3}, {0x9, 0x5, 0xe, 0x5, 0x6, 0x3}, {0x8164, 0x8a8, 0x6, 0x1ff, 0x8, 0xc3}, {0xff, 0x4, 0x6, 0x0, 0x0, 0x4}, {0xf, 0x1, 0xffff8000, 0x8, 0x101, 0x2}, {0x8001, 0x3, 0x90, 0x7, 0xffff, 0x8}, {0xcaf, 0xdcb2, 0x4, 0x2, 0x6, 0x8}, {0x6, 0xf, 0x7e5b, 0x9, 0xd9, 0x200}, {0x9, 0x6, 0x3, 0x9, 0x0, 0x6}, {0x5, 0x3, 0x2, 0x5, 0x7ff, 0xa99c}, {0x2, 0x1f, 0xc, 0x85, 0x81fd}, {0x1ff, 0xffffffff, 0x7, 0x5, 0x1, 0x3}, {0x5, 0xd6, 0xa, 0x6, 0xf824, 0x4}, {0x8000, 0x9bb, 0xf14, 0x0, 0x7, 0x6}, {0x9, 0x100, 0x80, 0xfffffffe, 0x2, 0x3}, {0x8, 0x8000, 0xba, 0x40a4, 0x7, 0x2}, {0xb, 0xfffffffb, 0x80000001, 0x64, 0x2, 0x1}, {0xfffffffd, 0x5, 0x5, 0x3, 0x6a0, 0xe1}, {0x9, 0x81, 0x10, 0x0, 0x0, 0xffffffff}, {0xcb51, 0x8, 0x4, 0x5, 0x4000000, 0x9dfa}, {0x2, 0xfff, 0xfff, 0x1, 0xfffffffa, 0x97a2}, {0x10, 0x6, 0x2, 0x800, 0x8, 0x3}, {0x8, 0x1ff, 0x8000, 0x8001, 0xffffff36, 0x9}, {0x0, 0x6, 0x200, 0x9, 0x0, 0x4}, {0x1ff, 0x5, 0x8, 0x8, 0x200, 0x7fff}, {0x29, 0xfffffff0, 0x1, 0x2, 0x401, 0xfffffffa}, {0x7fffffff, 0x6, 0xbb, 0x7, 0x87b, 0x2}, {0x7, 0x2, 0x7, 0x9933, 0x7, 0x4}, {0x9, 0x4, 0x9, 0xff, 0xd9, 0x2f4}, {0x10, 0xfffffe01, 0xc, 0x80, 0x200, 0x9}, {0x0, 0x3, 0x1, 0x6, 0xea, 0xed8}, {0x8, 0x1, 0x8000, 0x532, 0x8, 0x21a8}, {0x1, 0x1, 0x7, 0x0, 0x9, 0x6}, {0x2, 0x8, 0x3, 0x4, 0x7, 0x738f2d5d}, {0x7, 0x3, 0xa4, 0x4, 0xc00000, 0xfffff62b}, {0x1449, 0xcb9, 0x3, 0x8, 0x1, 0x400}, {0x6, 0xfffffffa, 0x5, 0x8, 0x7, 0x2e4}, {0x5, 0x96d8, 0x32, 0x1, 0x2, 0x4}, {0xa34, 0x42f8c525, 0x4, 0x1, 0x6, 0x7}, {0x7, 0x7, 0x7, 0xd4, 0x4, 0x1}, {0x59, 0xff, 0x2, 0x2, 0x3, 0x1}, {0x4, 0x8, 0x40, 0x4, 0x1, 0x800}, {0x6, 0xa0000, 0xfffffffb, 0xfffffffa, 0x3, 0x8}, {0x7425, 0xc, 0x7fff, 0x6, 0x7, 0x8}, {0x8f1a, 0x81, 0x10000, 0x400, 0x8a, 0x6}, {0x1, 0x3, 0x80, 0x0, 0x7, 0x1}, {0x7fffffff, 0x1, 0x1, 0x6, 0x7fffffff, 0x4}, {0xffff, 0x100, 0x4, 0x0, 0x2b5, 0x4}, {0x10000, 0x101, 0x0, 0x7, 0xb, 0x7}, {0x3, 0x1318, 0x0, 0xec, 0xfffffc00, 0x1}, {0xfffffff3, 0x8, 0x3, 0x8, 0x8, 0x2}, {0x200, 0xfffffff8, 0x1000, 0x1, 0x8}, {0xfffffff1, 0x3, 0x6, 0x144, 0x3, 0x3}, {0x20000000, 0x8001, 0x1, 0x9, 0x86bf, 0x6}, {0x4, 0x4, 0x1, 0x7, 0x1000, 0x6}, {0xfffffffe, 0xfff, 0x10001, 0x9, 0x7, 0x101}, {0x88, 0x9, 0x9, 0x100, 0x10000, 0x3}, {0x0, 0x7, 0x1, 0x6d, 0x2, 0x4}, {0x7fffffff, 0x51, 0x2, 0x200, 0xff, 0x8}, {0x1, 0x3, 0xfff, 0x240000, 0xdb, 0xff2}, {0x3, 0x400, 0xd, 0x6905, 0xb, 0x4}, {0xffff, 0x0, 0x5, 0xa7, 0x1, 0x9}, {0x3, 0x2, 0x8, 0x2, 0x2, 0x6901015c}, {0x6, 0x9, 0xfffffff7, 0x3, 0x8, 0x2}, {0xd0c5387, 0x3866, 0xf8, 0x8, 0x1, 0x1ffc00}, {0x3, 0x2, 0x5, 0x101, 0x6, 0x2}, {0x3, 0x3727df6f, 0x5, 0x18, 0x7ff, 0x7}, {0xabd, 0x713, 0x0, 0x4, 0x9, 0xb2}, {0x8, 0x3, 0x1, 0x1, 0x5, 0x7}, {0x9, 0x95, 0x200, 0x0, 0x8, 0x5}, {0x4, 0x5, 0x4cb8, 0x9, 0x9, 0x1ff}, {0x5, 0xaec2, 0xfade, 0x6, 0x7}, {0x8, 0xfffffff8, 0x7, 0x8, 0x8, 0x6}, {0x10, 0x1ff, 0x1, 0xc, 0x0, 0x6}, {0x800, 0x400, 0x9, 0x2, 0x5, 0x9}, {0x8, 0xd, 0x2, 0xffff, 0x7ff, 0x8}, {0xb, 0x1, 0xfffffffe, 0x8001, 0x3ff, 0x3}, {0x1, 0x3, 0xffffffff, 0x3, 0x7f, 0x3}, {0x3, 0x0, 0x0, 0x310, 0x866, 0x80000001}, {0x7, 0x4, 0x6, 0x9, 0xe884, 0x7}, {0x3d, 0x3, 0x4, 0xfe, 0x8}, {0xfffffffb, 0xffffffff, 0x3, 0xd63, 0x4, 0x56}, {0x1, 0x53, 0x1, 0x7, 0xfffffffc, 0x2}, {0x8, 0x4, 0xfffffff7, 0x9, 0x4, 0xf}, {0x1, 0x80000000, 0x0, 0x2, 0xfffffffb, 0xcf21}, {0x7, 0xb, 0x3, 0x7, 0x4, 0x5}, {0x10000, 0xd, 0x401, 0x4, 0x7, 0x7}, {0xfffffff0, 0x6, 0x7, 0x101, 0x1, 0x5}, {0x0, 0x7, 0xa, 0xff, 0x2, 0x17}, {0xd2, 0x5, 0x3, 0xb8, 0x3b5, 0x1}, {0x8, 0xe, 0xcd, 0x7, 0x9, 0x2e8e5c71}, {0x3d, 0x2, 0xc0000000, 0xb2d, 0x4, 0x5}, {0x7, 0x5, 0x7, 0x0, 0x837f, 0xe}, {0x7, 0x80, 0x3, 0x2, 0x6, 0x4}, {0xf2, 0x80000001, 0x62d6, 0x7, 0x0, 0x7fff}, {0x7, 0x3, 0xf0, 0x4, 0x80000001, 0x8}, {0x9, 0x9, 0xb, 0x8, 0x10, 0x758}, {0x7, 0xff, 0x0, 0x2, 0x401, 0x4}, {0x5, 0x8, 0x31f, 0x80, 0x2, 0x9}, {0x8000, 0x2, 0xef57, 0x9, 0x80, 0x9}, {0x7, 0xffffff00, 0x7, 0x3, 0x26, 0x6}, {0x7, 0xc6, 0x6e2b, 0x1ff, 0x5, 0x2}, {0x64a, 0x7ff, 0xb5c, 0xfc, 0x0, 0x105}, {0x7, 0x3, 0xfffff001, 0xc, 0x4, 0x2}, {0xfff, 0x5, 0x8, 0x1, 0x5, 0x5515b09c}, {0x5, 0x3, 0x2, 0x6, 0x100, 0x3ff}, {0x3, 0x1, 0x1, 0x1ff, 0x57a5, 0x3}, {0x6ca7783b, 0x2c2, 0x10001, 0x8, 0x1000, 0xff}, {0x1, 0x1, 0x5, 0x8000, 0x8000, 0x2c}, {0x7f, 0x5f, 0x26, 0xb, 0x2, 0x2}, {0x9, 0xff, 0xfffffff9, 0x0, 0x1, 0xc}, {0x4, 0x4, 0x21c00000, 0x1000, 0x68d8, 0xffffffff}, {0x0, 0x8, 0xd, 0x8, 0x8, 0x8}, {0x2, 0x7, 0x1, 0x8d8, 0xa4e, 0x10000}, {0xfffffffc, 0x20b, 0x7, 0x1, 0x7, 0x80000000}, {0xa, 0x800, 0xf, 0x1, 0x9, 0x9}, {0x2, 0xb36b, 0x8, 0xffffffff, 0xb8, 0x6}, {0x0, 0x1, 0x100000, 0x5, 0x4, 0x539}, {0x401, 0x16d5, 0xd, 0x80000000, 0x27, 0x3}, {0x0, 0x1, 0x6, 0x0, 0x3, 0xf}, {0xfffffffd, 0x7f, 0x6, 0x9, 0x6, 0x1}], [{0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0xf4da0755b915dd59}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1}, {0xf09e24d8efef5dc4}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x1, 0xc1744f650cdfddfa}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {0x3}, {0x6}, {0x5}, {0x5}, {0x6}, {0x2, 0x1}]}}]}, {0x4c, 0x6, "e39a0a06c3600bbcb3a0453cb44b68b915f0ff4f5ca4e0cfc76a0c3fbc4aa70d9554487dad80943e12fa87b01ce4cbfff60e5c68b4db213176576b761285abed9e6702d414399ea2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xe0, 0xf, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x7ff, 0x7, 0x3, 0x1}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x982d, 0xfe7, 0x8, 0x5, 0x880a}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x393a}]}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffc}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xf}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x101, 0x5, 0x10000006, 0x7, 0xfffffff7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7e22aad07d165452}}}}, @m_ct={0x94, 0x8, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x10000, 0x5, 0x80000000, 0x1c00000}}]}, {0x52, 0x6, "48314e634ea56c4849c880b8581f7b79ec9c809cde832bf53c14a49bd787d240c793dd493956bb8a5f4418e9efaeca3d662752ee44aa67b7cfecdcf842dda3f1e4274a7832e1fe884d7dfc7dfefc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x43, 0xb3}}]}, 0x4ab8}}, 0x44080) sendmsg$nl_route_sched(r4, 0x0, 0xc010) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) syz_emit_ethernet(0x5e, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) 3.326805491s ago: executing program 8 (id=1175): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa5", 0xce) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0xe4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x60}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10000042}, 0x98) 2.946557925s ago: executing program 5 (id=1177): munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000b11f3ac7c5d1e71d00000008000300", @ANYRES32=r3], 0x30}}, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x8068fcc7c2ae86ff, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 2.866556381s ago: executing program 5 (id=1178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r1, 0x303, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8800) (fail_nth: 3) 2.866239109s ago: executing program 5 (id=1179): mkdirat(0xffffffffffffff9c, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x800) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000500)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@bar={{}, {0x2}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x4, {0x0, 0x6}, "c77223871868f1cb"}, {0x0, 0xc, {0x0, 0x2}, "700af98d9816f514"}, {0x0, 0x1, {0x5, 0x5}, "5e5ae707fd3587dc"}, {0x0, 0xe, {0xc, 0xa}, "c79c1d30e07a4705"}]}}, 0x42) socket(0x2a, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000173000/0x4000)=nil, 0x4000}, 0x3, 0x2}) close(r1) 2.28313713s ago: executing program 7 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='\n', 0x1) (fail_nth: 4) 2.04588922s ago: executing program 7 (id=1183): munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000b11f3ac7c5d1e71d00000008000300", @ANYRES32=r3], 0x30}}, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x8068fcc7c2ae86ff, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 2.018464789s ago: executing program 7 (id=1184): socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x101642, 0x4) r1 = openat(r0, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x1bc) write(r1, &(0x7f0000000240)='add 2-1', 0x7) close(r1) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2-1\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='2-1', 0x3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='3', 0x1) 1.836976833s ago: executing program 7 (id=1185): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) 1.830110836s ago: executing program 8 (id=1186): munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000b11f3ac7c5d1e71d00000008000300", @ANYRES32=r3], 0x30}}, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x8068fcc7c2ae86ff, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 1.801810417s ago: executing program 5 (id=1187): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) 1.746648332s ago: executing program 8 (id=1188): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000028847000000000000000000aaae929d6300112e6e4b89803ff831cd9eb7629306e8bfe465daf0f342b5896807efeada99a42d88c4c1fad1eacae80c53b01a2f2ff9e07c5f35cf99ae606a0e2f03b943ff97aadfe5fa9e5fc10e9970e84db39a865868dc7a7b3e05185e4028d00c31c7bf8bbccc7dff4eb4a6ccd0d945d5dddc1c"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 806.978457ms ago: executing program 8 (id=1189): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) (fail_nth: 4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) 626.814026ms ago: executing program 9 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000140), 0x284700, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)={0x1168, 0x5e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x114c, 0x1, 0x0, 0x1, [@nested={0x1146, 0x2, 0x0, 0x1, [@nested={0x23, 0x64, 0x0, 0x1, [@generic="37da3ae44df5de99f1f2f231543c044e5a4c453e4cb20ecbe56363ebe0dd53"]}, @nested={0x1024, 0x9b, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@nested={0x4, 0x5e}, @nested={0x4, 0x14e}, @nested={0x4, 0xcc}, @typed={0x8, 0xe6, 0x0, 0x0, @uid=r11}]}, @generic="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", @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}, @typed={0xc, 0xde, 0x0, 0x0, @u64=0x3}, @generic="e8f726c9f5cd9243f1c0b7543f7859821fd8aa2f1eb3e6f76d088cfb27246d1cc04ddb200bb3498812c79dd00d9283e06e2e819291ca5a86df7333fcb72fe76574bacd833ca98ecf94cc7ce796757aeea1f1e6ffe35ce622fe1393e569fc27c72b054ae3e0e3b76b098eab505191c7a0fed0522ad4769ec3962b4f22396d1ce7fd0ae0ac0a02fd464eca591e348ed36814e1b1261ecec0ba1159cddafccdb066edd4ba1b8b7a16c2563314926d77b092151bf16ddf700364bdf19970d2458c996508b70bf9abab6c28372e7ac7677a166116c86632f16b1ed725581af6589ba34bd4497b1d15", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@remote}]}]}]}, 0x1168}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) write$P9_RSTATu(r9, &(0x7f0000004380)={0x6b, 0x7d, 0x2, {{0x0, 0x56, 0xe, 0xfffffffd, {0x40, 0x1, 0x3}, 0x800000, 0x1, 0xc4b, 0x7, 0xb, 'syzkaller0\x00', 0x6, '\xbb\xbb\xbb\xbb\xbb\xbb', 0xb, 'syzkaller0\x00', 0x7, '!\\:(-$('}, 0x0, '', r11, r12, r13}}, 0x6b) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x96, 0x1, 0x8, 0x200}, {0x3, 0x8, 0x1, 0xb}, {0xff, 0x4, 0x4, 0x9}, {0x3bf, 0x4, 0x92, 0xa32}, {0x5f03, 0xd8, 0x2, 0x9}, {0xfffe, 0x6, 0x3, 0x6}, {0x3ff, 0x9, 0x3, 0x101}, {0xd67, 0x3, 0xfa, 0xfb}, {0x3, 0x6, 0x4, 0xab1}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) 476.705182ms ago: executing program 9 (id=1191): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x100, 0x401}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r4, 0xaeb, 0x1) getdents64(r4, 0x0, 0x4f) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2f4, r11, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x1d8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x110, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xde, 0x2, '400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^{.!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40}, 0x4048086) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r13 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 219.437162ms ago: executing program 7 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) epoll_create1(0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) creat(0x0, 0x175) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) (async) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 0s ago: executing program 7 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000040)) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002c00)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x25dbdbfe, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4008004) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) getpid() symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb1\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) openat$mice(0xffffff9c, &(0x7f0000000000), 0x1) getuid() sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000020801f2ffff04000007a5f348fedcd3f868220bd372d5a10d0400048004000480140004806b0edc00001ce6cd595f7110120487080009408000000108000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xe814}, 0x40) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.167602][ T9656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.167612][ T9656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.167636][ T9656] [ 246.292743][ T5751] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 246.300509][ T5751] Bluetooth: hci4: Injecting HCI hardware error event [ 246.316620][ T5751] Bluetooth: hci4: hardware error 0x00 [ 246.758188][ T9663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.879'. [ 246.787962][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.7.877'. [ 246.795363][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.7.877'. [ 247.337215][ T9677] FAULT_INJECTION: forcing a failure. [ 247.337215][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.342724][ T9677] CPU: 3 UID: 0 PID: 9677 Comm: syz.5.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.342753][ T9677] Tainted: [L]=SOFTLOCKUP [ 247.342759][ T9677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.342769][ T9677] Call Trace: [ 247.342775][ T9677] [ 247.342781][ T9677] dump_stack_lvl+0x100/0x190 [ 247.342806][ T9677] should_fail_ex.cold+0x5/0xa [ 247.342825][ T9677] _copy_from_iter+0x1f4/0x1690 [ 247.342853][ T9677] ? __asan_memset+0x23/0x50 [ 247.342873][ T9677] ? __pfx__copy_from_iter+0x10/0x10 [ 247.342896][ T9677] ? __pfx___alloc_skb+0x10/0x10 [ 247.342929][ T9677] netlink_sendmsg+0x808/0xda0 [ 247.342954][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.342976][ T9677] ? apparmor_socket_sendmsg+0x15b/0x270 [ 247.343001][ T9677] ____sys_sendmsg+0xa4d/0xbe0 [ 247.343017][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.343039][ T9677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.343068][ T9677] ___sys_sendmsg+0x190/0x1e0 [ 247.343089][ T9677] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.343120][ T9677] ? find_held_lock+0x2b/0x80 [ 247.343159][ T9677] __sys_sendmsg+0x160/0x210 [ 247.343184][ T9677] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.343215][ T9677] ? __pfx_ksys_write+0x10/0x10 [ 247.343239][ T9677] __do_fast_syscall_32+0xe7/0x970 [ 247.343262][ T9677] ? lockdep_hardirqs_on+0x78/0x100 [ 247.343285][ T9677] do_fast_syscall_32+0x32/0x70 [ 247.343309][ T9677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.343331][ T9677] RIP: 0023:0xf708efec [ 247.343349][ T9677] Code: Unable to access opcode bytes at 0xf708efc2. [ 247.343357][ T9677] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 247.343376][ T9677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 247.343388][ T9677] RDX: 000000000000c044 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.343398][ T9677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.343407][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.343417][ T9677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.343442][ T9677] [ 247.912155][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.884'. [ 247.920498][ T9705] netlink: 'syz.7.884': attribute type 10 has an invalid length. [ 247.924389][ T9705] netlink: 40 bytes leftover after parsing attributes in process `syz.7.884'. [ 248.139717][ T9716] syz.4.885 (9716): drop_caches: 2 [ 248.168062][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.888'. [ 248.219571][ T9723] input: syz0 as /devices/virtual/input/input14 [ 248.227918][ T9723] FAULT_INJECTION: forcing a failure. [ 248.227918][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.227940][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.7.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.227956][ T9723] Tainted: [L]=SOFTLOCKUP [ 248.227960][ T9723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.227967][ T9723] Call Trace: [ 248.227971][ T9723] [ 248.227975][ T9723] dump_stack_lvl+0x100/0x190 [ 248.227991][ T9723] should_fail_ex.cold+0x5/0xa [ 248.228004][ T9723] _copy_from_user+0x2e/0xd0 [ 248.228022][ T9723] ucma_write+0x128/0x330 [ 248.228041][ T9723] ? __pfx_ucma_write+0x10/0x10 [ 248.228059][ T9723] ? bpf_lsm_file_permission+0x9/0x10 [ 248.228070][ T9723] ? security_file_permission+0x76/0x210 [ 248.228087][ T9723] ? rw_verify_area+0xce/0x6d0 [ 248.228105][ T9723] vfs_write+0x2aa/0x1050 [ 248.228115][ T9723] ? __pfx_ucma_write+0x10/0x10 [ 248.228133][ T9723] ? __pfx_vfs_write+0x10/0x10 [ 248.228142][ T9723] ? find_held_lock+0x2b/0x80 [ 248.228156][ T9723] ? __fget_files+0x215/0x3d0 [ 248.228166][ T9723] ? __fget_files+0x215/0x3d0 [ 248.228178][ T9723] ? __fget_files+0x21f/0x3d0 [ 248.228192][ T9723] ksys_write+0x1f8/0x250 [ 248.228201][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 248.228211][ T9723] ? ksys_write+0x1ac/0x250 [ 248.228220][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 248.228233][ T9723] __do_fast_syscall_32+0xe7/0x970 [ 248.228247][ T9723] ? lockdep_hardirqs_on+0x78/0x100 [ 248.228261][ T9723] do_fast_syscall_32+0x32/0x70 [ 248.228275][ T9723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.228290][ T9723] RIP: 0023:0xf7f78fec [ 248.228303][ T9723] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 248.228308][ T9723] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 248.228319][ T9723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 248.228326][ T9723] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.228332][ T9723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.228339][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.228345][ T9723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.228359][ T9723] [ 248.451732][ T5850] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 248.604426][ T5850] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 248.606851][ T5850] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 248.614034][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.619774][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.625429][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.631529][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.637692][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 248.642233][ T5850] usb 9-1: config 168 interface 0 has no altsetting 0 [ 248.645200][ T5850] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 248.648009][ T5850] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 248.651551][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.652254][ T5751] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 248.655031][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.660685][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.664532][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.667990][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 248.672332][ T5850] usb 9-1: config 168 interface 0 has no altsetting 0 [ 248.675507][ T5850] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 248.677994][ T5850] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 248.682906][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.687166][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.691823][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.696201][ T5850] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.700539][ T5850] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 248.705707][ T5850] usb 9-1: config 168 interface 0 has no altsetting 0 [ 248.710567][ T5850] usb 9-1: string descriptor 0 read error: -22 [ 248.713230][ T5850] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 248.716739][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.726184][ T5850] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.046007][ T9] usb 9-1: USB disconnect, device number 4 [ 249.053042][ T9743] fuse: Bad value for 'fd' [ 249.331724][ T5850] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 249.493804][ T5850] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.499196][ T5850] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 249.506824][ T5850] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.511120][ T5850] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.515172][ T5850] usb 12-1: Product: syz [ 249.516949][ T5850] usb 12-1: Manufacturer: syz [ 249.518860][ T5850] usb 12-1: SerialNumber: syz [ 249.529773][ T5850] cdc_mbim 12-1:1.0: skipping garbage [ 249.640222][ T9760] FAULT_INJECTION: forcing a failure. [ 249.640222][ T9760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.646551][ T9760] CPU: 3 UID: 0 PID: 9760 Comm: syz.5.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.646589][ T9760] Tainted: [L]=SOFTLOCKUP [ 249.646595][ T9760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.646605][ T9760] Call Trace: [ 249.646611][ T9760] [ 249.646618][ T9760] dump_stack_lvl+0x100/0x190 [ 249.646643][ T9760] should_fail_ex.cold+0x5/0xa [ 249.646664][ T9760] _copy_to_user+0x32/0xd0 [ 249.646687][ T9760] simple_read_from_buffer+0xcb/0x170 [ 249.646717][ T9760] proc_fail_nth_read+0x1af/0x230 [ 249.646739][ T9760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.646763][ T9760] ? rw_verify_area+0xce/0x6d0 [ 249.646788][ T9760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.646806][ T9760] vfs_read+0x1e4/0xb40 [ 249.646835][ T9760] ? __pfx_vfs_read+0x10/0x10 [ 249.646857][ T9760] ? find_held_lock+0x2b/0x80 [ 249.646879][ T9760] ? __fget_files+0x215/0x3d0 [ 249.646897][ T9760] ? __fget_files+0x21f/0x3d0 [ 249.646922][ T9760] ksys_read+0x12a/0x250 [ 249.646937][ T9760] ? __pfx_ksys_read+0x10/0x10 [ 249.646961][ T9760] do_int80_emulation+0x14b/0x720 [ 249.646987][ T9760] asm_int80_emulation+0x1a/0x20 [ 249.647005][ T9760] RIP: 0023:0xf71c72eb [ 249.647019][ T9760] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 249.647033][ T9760] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 249.647050][ T9760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0 [ 249.647060][ T9760] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 249.647068][ T9760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.647077][ T9760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.647088][ T9760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.647112][ T9760] [ 249.737388][ T9741] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 249.741802][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 249.771655][ T9762] netlink: 'syz.5.900': attribute type 1 has an invalid length. [ 249.801891][ T9762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.806825][ T9762] FAULT_INJECTION: forcing a failure. [ 249.806825][ T9762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.812478][ T9762] CPU: 2 UID: 0 PID: 9762 Comm: syz.5.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.812497][ T9762] Tainted: [L]=SOFTLOCKUP [ 249.812501][ T9762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.812508][ T9762] Call Trace: [ 249.812513][ T9762] [ 249.812518][ T9762] dump_stack_lvl+0x100/0x190 [ 249.812538][ T9762] should_fail_ex.cold+0x5/0xa [ 249.812552][ T9762] _copy_from_iter+0x1f4/0x1690 [ 249.812580][ T9762] ? __asan_memset+0x23/0x50 [ 249.812598][ T9762] ? __pfx__copy_from_iter+0x10/0x10 [ 249.812622][ T9762] ? __pfx___alloc_skb+0x10/0x10 [ 249.812653][ T9762] netlink_sendmsg+0x808/0xda0 [ 249.812675][ T9762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.812695][ T9762] ? apparmor_socket_sendmsg+0x15b/0x270 [ 249.812716][ T9762] ____sys_sendmsg+0xa4d/0xbe0 [ 249.812732][ T9762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.812752][ T9762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.812778][ T9762] ___sys_sendmsg+0x190/0x1e0 [ 249.812797][ T9762] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.812827][ T9762] ? find_held_lock+0x2b/0x80 [ 249.812862][ T9762] __sys_sendmsg+0x160/0x210 [ 249.812885][ T9762] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.812913][ T9762] ? __pfx_ksys_write+0x10/0x10 [ 249.812944][ T9762] __do_fast_syscall_32+0xe7/0x970 [ 249.812964][ T9762] ? lockdep_hardirqs_on+0x78/0x100 [ 249.812984][ T9762] do_fast_syscall_32+0x32/0x70 [ 249.813003][ T9762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.813018][ T9762] RIP: 0023:0xf708efec [ 249.813032][ T9762] Code: Unable to access opcode bytes at 0xf708efc2. [ 249.813037][ T9762] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 249.813048][ T9762] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 249.813055][ T9762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.813062][ T9762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.813068][ T9762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.813074][ T9762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.813088][ T9762] [ 249.911435][ T9] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 249.931857][ T9] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 249.940186][ T9] usb 13-1: config 0 interface 0 has no altsetting 0 [ 249.942358][ T9765] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 249.956782][ T9] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 249.966510][ T9] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 249.975530][ T9765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.976398][ T9] usb 13-1: Product: syz [ 249.984945][ T9] usb 13-1: Manufacturer: syz [ 249.990022][ T9] usb 13-1: SerialNumber: syz [ 250.007830][ T9765] bond1: (slave ip6erspan0): making interface the new active one [ 250.013752][ T9765] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 250.118903][ T9] usb 13-1: config 0 descriptor?? [ 250.218639][ T9] hub 13-1:0.0: bad descriptor, ignoring hub [ 250.227600][ T9] hub 13-1:0.0: probe with driver hub failed with error -5 [ 250.276728][ T9] usb 13-1: selecting invalid altsetting 0 [ 250.389995][ T9787] netlink: 64 bytes leftover after parsing attributes in process `syz.4.905'. [ 250.400877][ T9741] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 250.403487][ T5850] cdc_mbim 12-1:1.0: setting tx_max = 16384 [ 250.409513][ T5850] cdc_mbim 12-1:1.0: cdc-wdm0: USB WDM device [ 250.423114][ T5850] wwan wwan0: port wwan0mbim0 attached [ 250.451275][ T5850] cdc_mbim 12-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 56:b8:f5:11:3a:db [ 250.512793][ T9787] syzkaller0: entered promiscuous mode [ 250.514954][ T9787] syzkaller0: entered allmulticast mode [ 250.521372][ T9787] overlayfs: upper fs does not support file handles, falling back to index=off. [ 250.595143][ T8112] ffs_data_put(): freeing [ 250.605657][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.616053][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.618899][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.621737][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.634313][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.637101][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.639901][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.642722][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.645489][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.648226][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.650927][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.653754][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.656721][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.659514][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.662344][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.665168][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.667975][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.670825][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.673777][ C3] cdc_mbim 12-1:1.0: nonzero urb status received: -71 [ 250.676615][ C3] cdc_mbim 12-1:1.0: wdm_int_callback - 0 bytes [ 250.707898][ T9741] libceph: resolve '400' (ret=-3): failed [ 250.712555][ T40] usb 12-1: USB disconnect, device number 6 [ 250.715178][ T40] cdc_mbim 12-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 250.927334][ T40] wwan wwan0: port wwan0mbim0 disconnected [ 251.057581][ T9] usb 13-1: USB disconnect, device number 2 [ 251.428699][ T9813] program syz.5.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.481565][ T9813] e1000e 0000:00:02.0 eth1: removed PHC [ 251.895425][ T9813] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 252.375344][ T9826] gre0: entered promiscuous mode [ 252.386879][ T9826] gre0: entered allmulticast mode [ 252.935008][ T5751] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 252.953907][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.8.915'. [ 253.071966][ T9846] lo speed is unknown, defaulting to 1000 [ 254.104916][ T9887] FAULT_INJECTION: forcing a failure. [ 254.104916][ T9887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.109623][ T9887] CPU: 3 UID: 0 PID: 9887 Comm: syz.4.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.109650][ T9887] Tainted: [L]=SOFTLOCKUP [ 254.109658][ T9887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.109668][ T9887] Call Trace: [ 254.109674][ T9887] [ 254.109681][ T9887] dump_stack_lvl+0x100/0x190 [ 254.109702][ T9887] should_fail_ex.cold+0x5/0xa [ 254.109715][ T9887] _copy_from_iter+0x1f4/0x1690 [ 254.109735][ T9887] ? __asan_memset+0x23/0x50 [ 254.109748][ T9887] ? __pfx__copy_from_iter+0x10/0x10 [ 254.109765][ T9887] ? __pfx___alloc_skb+0x10/0x10 [ 254.109785][ T9887] netlink_sendmsg+0x808/0xda0 [ 254.109800][ T9887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.109819][ T9887] ? apparmor_socket_sendmsg+0x15b/0x270 [ 254.109834][ T9887] ____sys_sendmsg+0xa4d/0xbe0 [ 254.109844][ T9887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.109856][ T9887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.109873][ T9887] ___sys_sendmsg+0x190/0x1e0 [ 254.109885][ T9887] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.109903][ T9887] ? find_held_lock+0x2b/0x80 [ 254.109926][ T9887] __sys_sendmsg+0x160/0x210 [ 254.109941][ T9887] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.109960][ T9887] ? __pfx_ksys_write+0x10/0x10 [ 254.109973][ T9887] __do_fast_syscall_32+0xe7/0x970 [ 254.109988][ T9887] ? lockdep_hardirqs_on+0x78/0x100 [ 254.110001][ T9887] do_fast_syscall_32+0x32/0x70 [ 254.110016][ T9887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.110030][ T9887] RIP: 0023:0xf703efec [ 254.110043][ T9887] Code: Unable to access opcode bytes at 0xf703efc2. [ 254.110048][ T9887] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 254.110060][ T9887] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 254.110067][ T9887] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.110073][ T9887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.110080][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.110086][ T9887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.110100][ T9887] [ 254.220237][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 254.431731][ T8299] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 254.571775][ T8299] usb 13-1: device descriptor read/64, error -71 [ 254.701756][ T5850] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 254.822014][ T8299] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 254.890793][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 254.895748][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 254.909225][ T5850] usb 9-1: unable to get BOS descriptor or descriptor too short [ 254.913080][ T5850] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 254.915412][ T5850] usb 9-1: can't read configurations, error -71 [ 254.961786][ T8299] usb 13-1: device descriptor read/64, error -71 [ 255.074459][ T8299] usb usb13-port1: attempt power cycle [ 255.139605][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 255.293563][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.295640][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.501764][ T8299] usb 13-1: new low-speed USB device number 5 using dummy_hcd [ 256.242468][ T8299] usb 13-1: device descriptor read/8, error -71 [ 256.481874][ T8299] usb 13-1: new low-speed USB device number 6 using dummy_hcd [ 256.502655][ T8299] usb 13-1: device descriptor read/8, error -71 [ 256.612796][ T8299] usb usb13-port1: unable to enumerate USB device [ 256.699718][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 256.854148][ T9953] create_pit_timer: 7 callbacks suppressed [ 256.854159][ T9953] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 256.969009][ T9959] netlink: 'syz.7.942': attribute type 1 has an invalid length. [ 256.972125][ T5751] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 256.976056][ T5751] Bluetooth: hci0: Injecting HCI hardware error event [ 256.983292][ T9959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.991789][ T5751] Bluetooth: hci0: hardware error 0x00 [ 257.051882][ T9959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.054343][ T9959] bond1: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 257.058867][ T9959] bond1: (slave ip6gre0): Error -95 calling set_mac_address [ 257.081072][ T9959] : renamed from dummy0 (while UP) [ 257.164645][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.170994][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.237427][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.411564][ T9973] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 257.414797][ T9973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.457211][ T9974] program syz.5.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.477058][ T9975] random: crng reseeded on system resumption [ 257.759832][ T9979] syz.4.949 (9979): drop_caches: 2 [ 258.536414][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.8.952'. [ 258.690429][T10005] Failed to get privilege flags for destination (handle=0x2:0x0) [ 258.736189][T10001] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 258.768444][T10001] syzkaller0: entered promiscuous mode [ 258.770263][T10001] syzkaller0: entered allmulticast mode [ 258.820763][T10001] tipc: Started in network mode [ 258.823084][T10001] tipc: Node identity ce7e1fd25552, cluster identity 4711 [ 258.826751][T10001] tipc: Enabled bearer , priority 0 [ 258.843630][T10001] tipc: Resetting bearer [ 258.915097][T10000] tipc: Resetting bearer [ 258.941266][T10000] tipc: Disabling bearer [ 259.053625][ T5751] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 259.345464][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.348795][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.356587][T10032] Cannot find set identified by id 2 to match [ 259.369724][T10026] fuse: Bad value for 'fd' [ 259.425418][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.435581][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.547867][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 259.552290][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 259.573553][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 259.578042][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 259.834359][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 259.836368][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 259.904788][ T5820] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.907724][ T5820] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.911028][ T5820] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.914612][ T5820] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.955899][T10032] ceph: No mds server is up or the cluster is laggy [ 260.105794][T10049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.509352][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.972'. [ 260.519803][T10057] syz.4.970 (10057): drop_caches: 2 [ 260.829965][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.832508][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.874773][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.879643][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.909145][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.974'. [ 260.911805][ T6065] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 260.951912][ T5850] lo speed is unknown, defaulting to 1000 [ 260.953747][ T5850] syz1: Port: 1 Link DOWN [ 260.956755][ T5850] lo speed is unknown, defaulting to 1000 [ 260.956859][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.962521][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.969117][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.972209][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.133026][ T6065] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 261.136025][ T6065] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.140575][ T6065] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.148385][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 261.153876][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 261.158982][ T6065] usb 9-1: config 168 interface 0 has no altsetting 0 [ 261.164640][ T6065] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 261.171851][ T6065] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.181934][ T6065] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.191462][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 261.216898][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 261.562969][ T6065] usb 9-1: config 168 interface 0 has no altsetting 0 [ 261.578791][ T5853] libceph: connect (1)[c::]:6789 error -99 [ 261.581168][ T6065] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 261.581296][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 261.584623][ T6065] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.590215][ T6065] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.594772][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 261.598436][ T6065] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 261.602492][ T6065] usb 9-1: config 168 interface 0 has no altsetting 0 [ 261.612753][ T6065] usb 9-1: string descriptor 0 read error: -22 [ 261.619952][ T6065] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.626299][ T6065] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.640115][ T6065] adutux 9-1:168.0: interrupt endpoints not found [ 261.654337][ T5850] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 261.803821][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.808613][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.813712][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.818150][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.823501][ T5850] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.827241][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.832596][ T5850] usb 10-1: config 0 descriptor?? [ 261.837680][T10075] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.844388][ T5853] libceph: connect (1)[c::]:6789 error -99 [ 261.846361][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 261.848986][ T6065] usb 9-1: USB disconnect, device number 7 [ 261.862538][T10074] ceph: No mds server is up or the cluster is laggy [ 261.998389][T10092] CUSE: unknown device info "" [ 262.000791][T10092] CUSE: unknown device info "Ö" [ 262.003615][T10092] CUSE: unknown device info "" [ 262.005418][T10092] CUSE: unknown device info "" [ 262.006976][T10092] CUSE: unknown device info "" [ 262.008520][T10092] CUSE: unknown device info "" [ 262.009970][T10092] CUSE: unknown device info "ðÿÿÿ" [ 262.012005][T10092] CUSE: unknown device info "" [ 262.013544][T10092] CUSE: unknown device info "" [ 262.015050][T10092] CUSE: unknown device info "" [ 262.016585][T10092] CUSE: unknown device info "" [ 262.018064][T10092] CUSE: unknown device info "r" [ 262.019558][T10092] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 262.021750][T10092] CUSE: unknown device info "ÿÿÿÿ" [ 262.023891][T10092] CUSE: unknown device info "" [ 262.025907][T10092] CUSE: unknown device info "€" [ 262.027710][T10092] CUSE: DEVNAME unspecified [ 262.107841][ T41] audit: type=1800 audit(1784951088.114:1130): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.979" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 262.139945][T10095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.250279][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.251891][ T5850] hid_parser_main: 28 callbacks suppressed [ 262.251910][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.259435][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.262585][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.264991][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.268302][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.271572][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.275197][ T5850] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 262.289107][ T5850] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 262.559480][ T41] audit: type=1326 audit(1784951088.564:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.568521][ T41] audit: type=1326 audit(1784951088.564:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.585953][ T41] audit: type=1326 audit(1784951088.574:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.595651][ T41] audit: type=1326 audit(1784951088.574:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.604804][ T41] audit: type=1326 audit(1784951088.574:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.613610][ T41] audit: type=1326 audit(1784951088.584:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.620695][ T41] audit: type=1326 audit(1784951088.584:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.636296][ T41] audit: type=1326 audit(1784951088.584:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 262.648424][ T41] audit: type=1326 audit(1784951088.584:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.5.976" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 263.638297][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.644372][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.648067][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.655409][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.665745][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.782290][ T29] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 263.921895][ T29] usb 10-1: device descriptor read/64, error -32 [ 263.942155][T10115] lo speed is unknown, defaulting to 1000 [ 264.171697][ T29] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 264.219163][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.223376][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.225888][T10115] bridge_slave_0: entered allmulticast mode [ 264.229138][T10115] bridge_slave_0: entered promiscuous mode [ 264.234254][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.237373][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.240180][T10115] bridge_slave_1: entered allmulticast mode [ 264.243277][T10115] bridge_slave_1: entered promiscuous mode [ 264.264453][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.268974][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.288627][T10115] team0: Port device team_slave_0 added [ 264.293475][T10115] team0: Port device team_slave_1 added [ 264.312369][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.314951][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.321781][ T29] usb 10-1: device descriptor read/64, error -32 [ 264.323083][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.324105][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.324115][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.324130][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.344915][T10115] hsr_slave_0: entered promiscuous mode [ 264.350262][T10115] hsr_slave_1: entered promiscuous mode [ 264.352670][T10115] debugfs: 'hsr0' already exists in 'hsr' [ 264.354359][T10115] Cannot create hsr debugfs directory [ 264.459726][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.988'. [ 264.469297][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.988'. [ 264.485646][T10115] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 264.490931][T10115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.494275][T10115] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 264.498481][T10115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.503196][T10115] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.507975][T10115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.511256][T10115] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.515660][T10115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.545853][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.549006][T10115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.552180][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.555041][T10115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.603265][ T29] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 264.614269][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.629171][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.632216][ T29] usb 10-1: device descriptor read/8, error -32 [ 264.636176][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.644272][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.653105][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.656079][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.667269][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.670725][ T9595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.086560][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.360753][T10165] netlink: 9 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.364974][T10167] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.383646][T10166] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.387651][T10167] 0ªî{X¹¦: renamed from gretap0 [ 265.392228][T10167] 0ªî{X¹¦: entered allmulticast mode [ 265.396722][T10167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.404499][T10167] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.408082][T10165] 0ªî{X¹¦: entered promiscuous mode [ 265.410220][T10165] 0ªî{X¹¦: left allmulticast mode [ 265.414974][T10165] netlink: 9 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.418648][T10166] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 265.422572][T10166] 1ªî{X¹¦: left promiscuous mode [ 265.426579][T10166] 1ªî{X¹¦: entered allmulticast mode [ 265.442283][T10166] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.466833][T10166] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.466853][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.475625][T10167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.482703][T10167] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.487439][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.501826][T10167] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.507591][T10167] netlink: 5 bytes leftover after parsing attributes in process `syz.7.990'. [ 265.510571][T10165] 1ªî{X¹¦: entered promiscuous mode [ 265.513724][T10165] 1ªî{X¹¦: left allmulticast mode [ 265.520106][T10166] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 265.527661][ T6065] usb 10-1: USB disconnect, device number 3 [ 265.547468][T10166] 0ªî{X¹¦: left promiscuous mode [ 265.555706][T10166] 0ªî{X¹¦: entered allmulticast mode [ 265.564081][T10166] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.584197][T10166] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.594284][T10166] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.602304][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.613603][T10167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.642386][T10165] 0ªî{X¹¦: entered promiscuous mode [ 265.644246][T10165] 0ªî{X¹¦: left allmulticast mode [ 265.654151][T10166] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 265.657400][T10166] 1ªî{X¹¦: left promiscuous mode [ 265.659202][T10166] 1ªî{X¹¦: entered allmulticast mode [ 265.662822][T10166] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.668082][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.671492][T10167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.677196][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.680537][T10167] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.686974][T10165] 1ªî{X¹¦: entered promiscuous mode [ 265.688749][T10165] 1ªî{X¹¦: left allmulticast mode [ 265.693765][T10166] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 265.696825][T10166] 0ªî{X¹¦: left promiscuous mode [ 265.698888][T10166] 0ªî{X¹¦: entered allmulticast mode [ 265.701539][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.708073][ T5746] Bluetooth: hci1: command tx timeout [ 265.717197][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.720570][T10165] 0ªî{X¹¦: entered promiscuous mode [ 265.722702][T10165] 0ªî{X¹¦: left allmulticast mode [ 265.729209][T10166] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 265.733094][T10166] 1ªî{X¹¦: left promiscuous mode [ 265.735057][T10166] 1ªî{X¹¦: entered allmulticast mode [ 265.739467][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.742786][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.746174][T10165] 1ªî{X¹¦: entered promiscuous mode [ 265.748121][T10165] 1ªî{X¹¦: left allmulticast mode [ 265.753512][T10115] veth0_vlan: entered promiscuous mode [ 265.756051][T10166] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 265.771404][T10166] 0ªî{X¹¦: left promiscuous mode [ 265.773590][T10166] 0ªî{X¹¦: entered allmulticast mode [ 265.804127][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.870206][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.876032][T10165] 0ªî{X¹¦: entered promiscuous mode [ 265.878151][T10165] 0ªî{X¹¦: left allmulticast mode [ 265.882495][T10166] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 265.947216][T10166] 1ªî{X¹¦: left promiscuous mode [ 265.948972][T10166] 1ªî{X¹¦: entered allmulticast mode [ 265.952839][T10167] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 265.976668][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 266.010384][T10165] 1ªî{X¹¦: entered promiscuous mode [ 266.012276][T10165] 1ªî{X¹¦: left allmulticast mode [ 266.020015][T10166] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 266.045735][T10166] 0ªî{X¹¦: left promiscuous mode [ 266.047479][T10166] 0ªî{X¹¦: entered allmulticast mode [ 266.050378][T10167] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 266.259863][T10165] 1ªî{X¹¦: entered promiscuous mode [ 266.261566][T10165] 1ªî{X¹¦: left allmulticast mode [ 266.266620][T10115] veth1_vlan: entered promiscuous mode [ 266.276379][T10166] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 266.279828][T10166] 0ªî{X¹¦: left promiscuous mode [ 266.282115][T10166] 0ªî{X¹¦: entered allmulticast mode [ 266.330117][T10115] veth0_macvtap: entered promiscuous mode [ 266.341209][T10115] veth1_macvtap: entered promiscuous mode [ 266.358729][T10172] FAULT_INJECTION: forcing a failure. [ 266.358729][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.370367][T10172] CPU: 3 UID: 0 PID: 10172 Comm: syz.8.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.370411][T10172] Tainted: [L]=SOFTLOCKUP [ 266.370418][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.370429][T10172] Call Trace: [ 266.370436][T10172] [ 266.370443][T10172] dump_stack_lvl+0x100/0x190 [ 266.370468][T10172] should_fail_ex.cold+0x5/0xa [ 266.370489][T10172] strncpy_from_user+0x3b/0x2d0 [ 266.370517][T10172] do_getname+0x78/0x390 [ 266.370543][T10172] __ia32_sys_symlinkat+0x8a/0xe0 [ 266.370565][T10172] __do_fast_syscall_32+0xe7/0x970 [ 266.370587][T10172] ? lockdep_hardirqs_on+0x78/0x100 [ 266.370610][T10172] do_fast_syscall_32+0x32/0x70 [ 266.370635][T10172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.370659][T10172] RIP: 0023:0xf700efec [ 266.370679][T10172] Code: Unable to access opcode bytes at 0xf700efc2. [ 266.370687][T10172] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 266.370706][T10172] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 00000000ffffff9c [ 266.370717][T10172] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.370727][T10172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.370737][T10172] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 266.370748][T10172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.370777][T10172] [ 266.443183][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.453643][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.567053][ T5793] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.575067][ T5793] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.608280][ T5793] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.615929][ T5793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.684337][ T9596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.691086][ T9596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.707249][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.709888][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.716212][ T8207] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 266.841359][T10183] ALSA: mixer_oss: invalid OSS volume 'u' [ 266.871722][ T8207] usb 12-1: Using ep0 maxpacket: 8 [ 266.876125][ T8207] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.881109][ T8207] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.884734][ T8207] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.888730][ T8207] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.894455][ T8207] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.897664][ T8207] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.204588][ T8207] usb 12-1: GET_CAPABILITIES returned 0 [ 267.475011][T10174] loop5: detected capacity change from 0 to 7 [ 267.560672][T10174] Dev loop5: unable to read RDB block 7 [ 267.563293][T10174] loop5: unable to read partition table [ 267.567279][T10174] loop5: partition table beyond EOD, truncated [ 267.570180][T10174] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 267.618148][ T8207] usbtmc 12-1:16.0: can't read capabilities [ 267.782261][ T5746] Bluetooth: hci1: command tx timeout [ 267.834258][ T8207] usb 12-1: USB disconnect, device number 7 [ 268.035199][T10205] program syz.8.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.050603][T10205] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 268.061886][T10205] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 268.064331][T10205] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 268.067131][T10205] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 268.071209][T10205] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 268.124047][T10205] pci 0000:00:01.0: Adding to iommu group 1 [ 268.159258][T10205] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 268.161395][T10205] pci 0000:00:01.0: vgaarb: bridge control possible [ 268.163407][T10205] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 268.169313][T10205] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 268.180808][T10205] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 268.183142][T10205] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 268.185640][T10205] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 268.187617][T10205] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 268.190336][T10205] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 268.193100][T10205] pci 0000:00:02.0: enabling Extended Tags [ 268.231976][T10205] pci 0000:00:02.0: Adding to iommu group 2 [ 268.255527][T10205] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 268.259083][T10205] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 268.262451][T10205] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 268.265923][T10205] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 268.269278][T10205] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 268.272806][T10205] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 268.276273][T10205] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 268.281372][T10205] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 268.302833][T10205] [drm] Found bochs VGA, ID 0xb0c5. [ 268.305206][T10205] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 268.410306][T10209] program syz.9.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.667829][T10205] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 268.755572][T10205] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 268.879968][T10205] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 268.995074][T10205] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 269.008560][T10224] FAULT_INJECTION: forcing a failure. [ 269.008560][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 269.014636][T10224] CPU: 2 UID: 0 PID: 10224 Comm: syz.7.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.014666][T10224] Tainted: [L]=SOFTLOCKUP [ 269.014673][T10224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.014684][T10224] Call Trace: [ 269.014732][T10224] [ 269.014741][T10224] dump_stack_lvl+0x100/0x190 [ 269.014811][T10224] should_fail_ex.cold+0x5/0xa [ 269.014833][T10224] should_failslab+0xc2/0x120 [ 269.014859][T10224] kmem_cache_alloc_noprof+0x91/0x6a0 [ 269.014884][T10224] ? trace_kmem_cache_alloc+0xdd/0x100 [ 269.014910][T10224] ? security_file_alloc+0x34/0x2c0 [ 269.014964][T10224] security_file_alloc+0x34/0x2c0 [ 269.014989][T10224] init_file+0x95/0x480 [ 269.015013][T10224] alloc_empty_file+0x79/0x1c0 [ 269.015037][T10224] path_openat+0xe7/0x4280 [ 269.015055][T10224] ? kasan_save_track+0x14/0x30 [ 269.015077][T10224] ? __kasan_slab_alloc+0x89/0x90 [ 269.015099][T10224] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 269.015118][T10224] ? do_getname+0x35/0x390 [ 269.015141][T10224] ? do_sys_openat2+0xc7/0x1e0 [ 269.015164][T10224] ? __ia32_compat_sys_openat+0x12d/0x210 [ 269.015189][T10224] ? __do_fast_syscall_32+0xe7/0x970 [ 269.015251][T10224] ? __pfx_path_openat+0x10/0x10 [ 269.015279][T10224] do_file_open+0x20e/0x430 [ 269.015298][T10224] ? __lock_acquire+0x49f/0x1a40 [ 269.015327][T10224] ? __pfx_do_file_open+0x10/0x10 [ 269.015363][T10224] ? _raw_spin_unlock+0x28/0x50 [ 269.015380][T10224] ? alloc_fd+0x471/0x7a0 [ 269.015405][T10224] do_sys_openat2+0x10f/0x1e0 [ 269.015430][T10224] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.015457][T10224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.015485][T10224] __ia32_compat_sys_openat+0x12d/0x210 [ 269.015509][T10224] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 269.015534][T10224] ? fput+0x79/0x100 [ 269.015555][T10224] ? ksys_write+0x1ac/0x250 [ 269.015573][T10224] ? __pfx_ksys_write+0x10/0x10 [ 269.015596][T10224] __do_fast_syscall_32+0xe7/0x970 [ 269.015618][T10224] ? lockdep_hardirqs_on+0x78/0x100 [ 269.015642][T10224] do_fast_syscall_32+0x32/0x70 [ 269.015665][T10224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.015689][T10224] RIP: 0023:0xf7f78fec [ 269.015712][T10224] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 269.015758][T10224] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 269.015778][T10224] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000900 [ 269.015790][T10224] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 269.015801][T10224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.015812][T10224] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 269.015823][T10224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.015846][T10224] [ 269.181439][T10205] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 269.185080][T10205] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 269.188433][T10205] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 269.321305][T10209] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 269.328602][T10209] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 269.333162][T10209] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 269.339021][T10209] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 269.342160][T10209] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 269.362294][T10209] pci 0000:00:01.0: Adding to iommu group 1 [ 269.380126][T10209] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 269.382232][T10209] pci 0000:00:01.0: vgaarb: bridge control possible [ 269.384203][T10209] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 269.453561][T10209] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 269.470118][T10209] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 269.480756][T10209] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 269.556505][T10209] [drm] Found bochs VGA, ID 0xb0c5. [ 269.558349][T10209] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 269.578893][T10209] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 269.621146][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.684188][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.739252][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 269.742667][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.852038][ T5746] Bluetooth: hci1: command tx timeout [ 269.910373][T10269] program syz.9.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.958773][T10269] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 269.969464][T10269] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 269.972271][T10269] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 269.975146][T10269] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 269.978456][T10269] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 270.028352][T10269] pci 0000:00:01.0: Adding to iommu group 1 [ 270.050443][T10269] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 270.052581][T10269] pci 0000:00:01.0: vgaarb: bridge control possible [ 270.054595][T10269] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 270.065814][T10269] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 270.069058][T10269] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 270.077673][T10269] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 270.114213][T10269] [drm] Found bochs VGA, ID 0xb0c5. [ 270.115960][T10269] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 270.190814][T10269] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 270.751499][T10269] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 270.961909][ T6065] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 271.365876][T10321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.531961][ T6065] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 271.706748][ T6065] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.714994][ T6065] usb 14-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 271.728206][ T6065] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.732583][ T6065] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.746960][ T6065] usb 14-1: Product: syz [ 271.748428][ T6065] usb 14-1: Manufacturer: syz [ 271.752400][ T6065] usb 14-1: SerialNumber: syz [ 271.764807][ T6065] cdc_mbim 14-1:1.0: skipping garbage [ 271.932340][ T5746] Bluetooth: hci1: command tx timeout [ 272.029513][T10332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 272.557417][T10364] syz.7.1026 (10364): drop_caches: 2 [ 272.676016][T10363] overlayfs: missing 'lowerdir' [ 272.692132][T10332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 272.695023][ T6065] cdc_mbim 14-1:1.0: setting tx_max = 16384 [ 272.732168][ T6065] cdc_mbim 14-1:1.0: cdc-wdm0: USB WDM device [ 272.746921][ T6065] wwan wwan0: port wwan0mbim0 attached [ 272.882462][ T29] usb 12-1: new low-speed USB device number 8 using dummy_hcd [ 272.922008][ T6065] cdc_mbim 14-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 92:22:a4:76:85:92 [ 272.960851][ T6065] usb 14-1: USB disconnect, device number 2 [ 272.963974][ T6065] cdc_mbim 14-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 273.022523][ T29] usb 12-1: device descriptor read/64, error -71 [ 273.123283][ T6065] wwan wwan0: port wwan0mbim0 disconnected [ 273.272920][ T29] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 273.401932][ T29] usb 12-1: device descriptor read/64, error -71 [ 273.488674][T10281] syz.5.1014 (10281) used greatest stack depth: 17952 bytes left [ 273.521962][ T29] usb usb12-port1: attempt power cycle [ 273.871717][ T29] usb 12-1: new low-speed USB device number 10 using dummy_hcd [ 273.902560][ T29] usb 12-1: device descriptor read/8, error -71 [ 274.009934][T10437] fuse: Bad value for 'fd' [ 274.028812][T10438] syz.5.1033 (10438): drop_caches: 2 [ 274.158285][ T29] usb 12-1: new low-speed USB device number 11 using dummy_hcd [ 274.204480][ T29] usb 12-1: device descriptor read/8, error -71 [ 274.318707][ T29] usb usb12-port1: unable to enumerate USB device [ 274.748171][T10458] syz.8.1034 (10458): drop_caches: 2 [ 275.093907][ T8278] usb 13-1: new low-speed USB device number 7 using dummy_hcd [ 275.129549][T10469] fuse: Bad value for 'user_id' [ 275.131418][T10469] fuse: Bad value for 'user_id' [ 275.140941][T10469] netlink: 'syz.9.1036': attribute type 10 has an invalid length. [ 275.161775][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.179533][T10469] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 275.200736][T10469] overlayfs: conflicting lowerdir path [ 275.252909][ T8278] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 275.256761][ T8278] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 275.271733][ T8278] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.275068][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 275.278331][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 275.286723][ T8278] usb 13-1: config 168 interface 0 has no altsetting 0 [ 275.289819][ T8278] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 275.292386][ T8278] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 275.295705][ T8278] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.298849][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 275.302212][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 275.306297][ T8278] usb 13-1: config 168 interface 0 has no altsetting 0 [ 275.309250][ T8278] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 275.311731][ T8278] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 275.315131][ T8278] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.318379][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 275.321703][ T8278] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 275.325652][ T8278] usb 13-1: config 168 interface 0 has no altsetting 0 [ 275.330033][ T8278] usb 13-1: string descriptor 0 read error: -22 [ 275.332122][ T8278] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 275.334996][ T8278] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.341853][ T8278] adutux 13-1:168.0: interrupt endpoints not found [ 275.603587][ T8278] usb 13-1: USB disconnect, device number 7 [ 275.754427][T10504] program syz.9.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.187114][T10504] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 276.191705][ T40] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 276.207397][T10504] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 276.216032][T10504] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 276.219948][T10504] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 276.222963][T10504] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 276.235236][T10504] pci 0000:00:01.0: Adding to iommu group 1 [ 276.240615][T10504] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 276.242749][T10504] pci 0000:00:01.0: vgaarb: bridge control possible [ 276.244708][T10504] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 276.258314][T10504] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 276.260966][T10504] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 276.264648][T10504] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 276.272358][T10504] [drm] Found bochs VGA, ID 0xb0c5. [ 276.273990][T10504] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 276.304021][T10504] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 276.341551][T10504] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 276.353531][ T40] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.358302][ T40] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 276.365278][ T40] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.369283][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.372540][ T40] usb 10-1: Product: syz [ 276.388311][ T40] usb 10-1: Manufacturer: syz [ 276.390393][ T40] usb 10-1: SerialNumber: syz [ 276.408225][ T40] cdc_mbim 10-1:1.0: skipping garbage [ 276.545380][T10533] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 276.605103][T10537] fuse: Bad value for 'fd' [ 276.616064][T10488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 276.642141][T10538] program syz.9.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.850706][T10541] syz.8.1045 (10541): drop_caches: 2 [ 277.174135][ T8207] usb 13-1: new low-speed USB device number 8 using dummy_hcd [ 277.243263][T10538] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 277.252549][T10538] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 277.255144][T10538] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 277.257886][T10538] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 277.261311][T10538] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 277.279678][T10488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 277.286911][ T40] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 277.293017][ T40] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 277.303859][ T8207] usb 13-1: device descriptor read/64, error -71 [ 277.319841][ T40] wwan wwan0: port wwan0mbim0 attached [ 277.339047][ T40] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 4e:30:d1:12:0d:db [ 277.395356][T10538] pci 0000:00:01.0: Adding to iommu group 1 [ 277.415118][T10538] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 277.417260][T10538] pci 0000:00:01.0: vgaarb: bridge control possible [ 277.417274][T10538] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 277.432744][T10538] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 277.436252][T10538] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 277.452377][T10538] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 277.492637][ C2] wdm_int_callback: 153 callbacks suppressed [ 277.492663][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.497461][ C2] wdm_int_callback: 153 callbacks suppressed [ 277.497479][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.503460][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.506171][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.508873][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.511547][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.514259][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.516902][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.519597][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.522198][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.532210][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.535065][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.536833][T10538] [drm] Found bochs VGA, ID 0xb0c5. [ 277.538065][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.541714][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.542526][T10538] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 277.544275][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.549225][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.552448][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.555202][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.558076][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 277.560866][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 277.585891][ T40] usb 10-1: USB disconnect, device number 4 [ 277.589983][ T40] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 277.621799][ T8207] usb 13-1: new low-speed USB device number 9 using dummy_hcd [ 277.719073][T10538] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 277.823175][ T8207] usb 13-1: device descriptor read/64, error -71 [ 277.953667][ T8207] usb usb13-port1: attempt power cycle [ 277.998550][T10538] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 278.162611][ T40] wwan wwan0: port wwan0mbim0 disconnected [ 278.219106][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.277190][T10611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.294742][ T8207] usb 13-1: new low-speed USB device number 10 using dummy_hcd [ 278.334701][T10611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.342220][ T8207] usb 13-1: device descriptor read/8, error -71 [ 278.536304][T10625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.597463][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.601768][ T8207] usb 13-1: new low-speed USB device number 11 using dummy_hcd [ 278.708895][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.122033][ T8207] usb 13-1: device descriptor read/8, error -71 [ 279.401694][ T8207] usb usb13-port1: unable to enumerate USB device [ 280.261913][ T8299] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 280.437170][ T8299] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.447127][ T8299] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 280.473849][ T8299] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.486584][ T8299] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.498844][ T8299] usb 12-1: Product: syz [ 280.504936][ T8299] usb 12-1: Manufacturer: syz [ 280.508240][ T8299] usb 12-1: SerialNumber: syz [ 280.704636][ T8299] cdc_mbim 12-1:1.0: skipping garbage [ 280.874835][T10669] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 280.956265][T10689] FAULT_INJECTION: forcing a failure. [ 280.956265][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 280.965221][T10689] CPU: 3 UID: 0 PID: 10689 Comm: syz.8.1061 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.965251][T10689] Tainted: [L]=SOFTLOCKUP [ 280.965258][T10689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.965268][T10689] Call Trace: [ 280.965275][T10689] [ 280.965283][T10689] dump_stack_lvl+0x100/0x190 [ 280.965371][T10689] should_fail_ex.cold+0x5/0xa [ 280.965393][T10689] should_failslab+0xc2/0x120 [ 280.965421][T10689] __kmalloc_noprof+0xfc/0x820 [ 280.965445][T10689] ? sk_prot_alloc+0x10b/0x2a0 [ 280.965501][T10689] sk_prot_alloc+0x10b/0x2a0 [ 280.965531][T10689] sk_alloc+0x36/0xe80 [ 280.965554][T10689] bpf_prog_test_run_skb+0x4db/0x3540 [ 280.965582][T10689] ? find_held_lock+0x2b/0x80 [ 280.965621][T10689] ? __fget_files+0x181/0x3d0 [ 280.965645][T10689] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 280.965668][T10689] ? fput+0x79/0x100 [ 280.965691][T10689] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 280.965709][T10689] __sys_bpf+0x2a12/0x4e80 [ 280.965743][T10689] ? __pfx___sys_bpf+0x10/0x10 [ 280.965765][T10689] ? find_held_lock+0x2b/0x80 [ 280.965783][T10689] ? get_pid_task+0xfc/0x250 [ 280.965807][T10689] ? get_pid_task+0xfc/0x250 [ 280.965834][T10689] ? proc_fail_nth_write+0x9f/0x220 [ 280.965884][T10689] ? find_held_lock+0x2b/0x80 [ 280.965911][T10689] ? rcu_read_lock_any_held+0x6a/0xa0 [ 280.965936][T10689] ? find_held_lock+0x2b/0x80 [ 280.965957][T10689] ? ksys_write+0x190/0x250 [ 280.965972][T10689] ? ksys_write+0x190/0x250 [ 280.966026][T10689] ? fput+0x79/0x100 [ 280.966053][T10689] ? __ia32_sys_bpf+0xcc/0x170 [ 280.966087][T10689] __ia32_sys_bpf+0xcc/0x170 [ 280.966107][T10689] ? __do_fast_syscall_32+0x98/0x970 [ 280.966129][T10689] __do_fast_syscall_32+0xe7/0x970 [ 280.966152][T10689] ? lockdep_hardirqs_on+0x78/0x100 [ 280.966174][T10689] do_fast_syscall_32+0x32/0x70 [ 280.966198][T10689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.966222][T10689] RIP: 0023:0xf700efec [ 280.966243][T10689] Code: Unable to access opcode bytes at 0xf700efc2. [ 280.966251][T10689] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 280.966267][T10689] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 280.966280][T10689] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.966291][T10689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.966301][T10689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.966311][T10689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.966335][T10689] [ 281.023555][T10690] syz.5.1062 (10690): drop_caches: 2 [ 281.333656][ T5853] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 281.481789][ T5853] usb 10-1: device descriptor read/64, error -71 [ 281.501662][ T5829] usb 13-1: new full-speed USB device number 12 using dummy_hcd [ 281.535336][T10669] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 281.538111][ T8299] cdc_mbim 12-1:1.0: setting tx_max = 16384 [ 281.540903][ T8299] cdc_mbim 12-1:1.0: cdc-wdm0: USB WDM device [ 281.546338][ T8299] wwan wwan0: port wwan0mbim0 attached [ 281.555103][ T8299] cdc_mbim 12-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, fe:54:ac:28:8a:ec [ 281.743878][ T5853] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 281.743913][ T6065] usb 12-1: USB disconnect, device number 12 [ 281.753984][ T6065] cdc_mbim 12-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 281.893963][ T6065] wwan wwan0: port wwan0mbim0 disconnected [ 281.903896][ T5853] usb 10-1: device descriptor read/64, error -71 [ 282.012581][ T5853] usb usb10-port1: attempt power cycle [ 282.351694][ T5853] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 282.374621][ T5853] usb 10-1: device descriptor read/8, error -71 [ 282.621752][ T5853] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 282.643166][ T5853] usb 10-1: device descriptor read/8, error -71 [ 282.679743][T10793] netlink: 'syz.7.1070': attribute type 10 has an invalid length. [ 282.689286][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.694191][T10793] team0: Port device netdevsim1 added [ 282.697283][T10793] netlink: 'syz.7.1070': attribute type 10 has an invalid length. [ 282.707280][T10793] team0: Port device netdevsim1 removed [ 282.714252][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.720401][T10793] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 282.752642][ T5853] usb usb10-port1: unable to enumerate USB device [ 283.947277][T10809] FAULT_INJECTION: forcing a failure. [ 283.947277][T10809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.951427][T10809] CPU: 3 UID: 0 PID: 10809 Comm: syz.5.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.951458][T10809] Tainted: [L]=SOFTLOCKUP [ 283.951462][T10809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.951469][T10809] Call Trace: [ 283.951474][T10809] [ 283.951479][T10809] dump_stack_lvl+0x100/0x190 [ 283.951495][T10809] should_fail_ex.cold+0x5/0xa [ 283.951508][T10809] _copy_from_user+0x2e/0xd0 [ 283.951526][T10809] get_compat_msghdr+0xb3/0x480 [ 283.951544][T10809] ? __pfx_get_compat_msghdr+0x10/0x10 [ 283.951563][T10809] ? __lock_acquire+0x49f/0x1a40 [ 283.951593][T10809] ___sys_recvmsg+0x193/0x1a0 [ 283.951609][T10809] ? __pfx____sys_recvmsg+0x10/0x10 [ 283.951632][T10809] do_recvmmsg+0x54d/0x740 [ 283.951645][T10809] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.951658][T10809] ? trace_sched_exit_tp+0x120/0x160 [ 283.951674][T10809] ? __schedule+0x126e/0x6730 [ 283.951690][T10809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.951706][T10809] __sys_recvmmsg+0x21f/0x270 [ 283.951727][T10809] ? __pfx___sys_recvmmsg+0x10/0x10 [ 283.951744][T10809] ? exit_to_user_mode_loop+0x166/0x6f0 [ 283.951758][T10809] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 283.951776][T10809] ? __do_fast_syscall_32+0x98/0x970 [ 283.951790][T10809] ? lockdep_hardirqs_on+0x78/0x100 [ 283.951803][T10809] __do_fast_syscall_32+0xe7/0x970 [ 283.951817][T10809] ? lockdep_hardirqs_on+0x78/0x100 [ 283.951830][T10809] do_fast_syscall_32+0x32/0x70 [ 283.951845][T10809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.951860][T10809] RIP: 0023:0xf708efec [ 283.951872][T10809] Code: Unable to access opcode bytes at 0xf708efc2. [ 283.951878][T10809] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 283.951890][T10809] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001140 [ 283.951897][T10809] RDX: 0000000000000700 RSI: 0000000000000002 RDI: 0000000000000000 [ 283.951904][T10809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.951910][T10809] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.951926][T10809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.951940][T10809] [ 284.357036][ T5829] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 284.359289][ T5829] usb 13-1: can't read configurations, error -71 [ 284.409675][T10816] netlink: 'syz.7.1072': attribute type 4 has an invalid length. [ 284.433544][T10816] netlink: 'syz.7.1072': attribute type 4 has an invalid length. [ 284.460338][ T6065] lo speed is unknown, defaulting to 1000 [ 284.462499][ T6065] syz1: Port: 1 Link ACTIVE [ 284.464252][ T6065] lo speed is unknown, defaulting to 1000 [ 284.656648][T10819] __nla_validate_parse: 38 callbacks suppressed [ 284.656806][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1074'. [ 284.868514][T10827] vlan0: entered promiscuous mode [ 285.351774][ T3264] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 285.501751][ T3264] usb 14-1: Using ep0 maxpacket: 8 [ 285.505662][ T3264] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.511685][ T3264] usb 14-1: config 0 has no interfaces? [ 285.521163][ T3264] usb 14-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 285.526395][ T3264] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.531279][ T3264] usb 14-1: Product: syz [ 285.533306][ T3264] usb 14-1: Manufacturer: syz [ 285.535748][ T3264] usb 14-1: SerialNumber: syz [ 285.543946][ T3264] usb 14-1: config 0 descriptor?? [ 285.875835][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1078'. [ 286.169134][ T5853] usb 14-1: USB disconnect, device number 3 [ 287.044205][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1084'. [ 288.927934][T10902] batadv0: entered promiscuous mode [ 289.006256][ T5746] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 289.984013][T10919] e1000e 0000:00:02.0 eth1: removed PHC [ 290.383798][T10919] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 290.748900][T10921] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 290.776329][T10921] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 290.788480][T10921] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 290.797130][T10921] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 290.804630][T10921] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 290.818749][T10921] pci 0000:00:01.0: Adding to iommu group 1 [ 290.836840][T10959] fuse: Bad value for 'fd' [ 290.844238][T10921] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 290.846899][T10921] pci 0000:00:01.0: vgaarb: bridge control possible [ 290.849390][T10921] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 290.872426][T10921] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 290.906231][T10921] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 290.915764][T10921] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 290.922416][T10921] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 290.931447][T10921] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 290.942630][T10921] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 290.945534][T10921] pci 0000:00:02.0: enabling Extended Tags [ 290.997252][T10921] pci 0000:00:02.0: Adding to iommu group 2 [ 291.039344][T10921] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 291.043653][T10921] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 291.046577][T10921] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 291.049789][T10921] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 291.060004][T10921] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 291.064701][T10921] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 291.069466][T10921] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 291.073048][T10921] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 291.090883][T10921] [drm] Found bochs VGA, ID 0xb0c5. [ 291.095100][T10921] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 291.101442][T10921] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 291.248977][ T5793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.311331][T10921] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 291.513012][ T5793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.604633][T10997] program syz.9.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.627642][T10921] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 291.671930][T11001] fuse: Unknown parameter 'grou00000000000000000000' [ 291.698028][ T5793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.773406][T10921] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 291.777559][T10921] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 291.780592][T10921] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 291.945963][ T5793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.013626][T11017] gadgetfs: bound to dummy_udc driver [ 292.138440][T11023] syz.5.1098 (11023): drop_caches: 2 [ 292.195393][T10997] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 292.206208][T10997] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 292.208700][T10997] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 292.211720][T10997] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 292.215642][T10997] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 292.289801][T10997] pci 0000:00:01.0: Adding to iommu group 1 [ 292.335201][T10997] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 292.337330][T10997] pci 0000:00:01.0: vgaarb: bridge control possible [ 292.339330][T10997] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 292.421912][ T5829] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 292.448412][T10997] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 292.451384][T10997] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 292.459990][T10997] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 292.482623][T10997] [drm] Found bochs VGA, ID 0xb0c5. [ 292.484469][T10997] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 292.530371][T10997] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 292.532633][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 292.562756][ T5829] usb 10-1: device descriptor read/64, error -71 [ 292.840624][ T5829] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 292.959921][T10997] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 292.972413][ T5793] bridge_slave_1: left allmulticast mode [ 292.976256][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.990129][ T5793] bridge_slave_0: left allmulticast mode [ 292.992581][ T5793] bridge_slave_0: left promiscuous mode [ 292.994439][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.023485][ T5829] usb 10-1: device descriptor read/64, error -71 [ 293.052170][ T5746] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 293.057157][ T5746] Bluetooth: hci1: Injecting HCI hardware error event [ 293.061198][ T5746] Bluetooth: hci1: hardware error 0x00 [ 293.160921][ T5829] usb usb10-port1: attempt power cycle [ 293.349158][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 293.623388][ T5829] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 293.654740][ T5829] usb 10-1: device descriptor read/8, error -71 [ 293.744337][T11080] e1000e 0000:00:02.0 eth1: removed PHC [ 293.853136][T11100] netlink: 'syz.8.1104': attribute type 11 has an invalid length. [ 293.855793][T11100] netlink: 4320 bytes leftover after parsing attributes in process `syz.8.1104'. [ 293.891801][ T5829] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 293.897178][T11102] fuse: Unknown parameter 'grou00000000000000000000' [ 293.912481][ T5829] usb 10-1: device descriptor read/8, error -71 [ 294.022200][ T5829] usb usb10-port1: unable to enumerate USB device [ 294.068689][T11094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.131317][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.151576][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 294.166680][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 294.221492][ T29] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 294.228242][ T5793] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 294.236724][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.361329][ T5793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.369028][ T5793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.372763][ T5793] bond0 (unregistering): Released all slaves [ 294.378758][ T5793] bond1 (unregistering): Released all slaves [ 294.527276][T11080] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 294.777849][T11081] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 294.794883][T11081] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 294.822832][T11081] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 294.831505][T11081] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 294.837270][T11081] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 294.854104][T11081] pci 0000:00:01.0: Adding to iommu group 1 [ 294.864356][T11081] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 294.867014][T11081] pci 0000:00:01.0: vgaarb: bridge control possible [ 294.869156][T11081] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 294.883102][T11081] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 294.899693][T11081] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 294.922437][T11081] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 294.926302][T11081] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 294.928430][T11081] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 294.930602][T11081] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 294.939336][T11081] pci 0000:00:02.0: enabling Extended Tags [ 295.000143][T11081] pci 0000:00:02.0: Adding to iommu group 2 [ 295.036003][T11081] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 295.038937][T11081] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 295.043492][T11081] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 295.049579][T11081] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 295.055995][T11081] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 295.064967][T11081] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 295.067700][T11081] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 295.074635][T11081] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 295.107384][T11081] [drm] Found bochs VGA, ID 0xb0c5. [ 295.111390][T11081] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 295.116132][T11081] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 295.422399][T11081] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 295.493407][ T5793] hsr_slave_0: left promiscuous mode [ 295.495894][ T5793] hsr_slave_1: left promiscuous mode [ 295.498387][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.501447][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.507199][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.509939][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.578183][ T5793] veth1_macvtap: left promiscuous mode [ 295.580391][ T5793] veth0_macvtap: left promiscuous mode [ 295.583383][ T5793] veth1_vlan: left promiscuous mode [ 295.585648][ T5793] veth0_vlan: left promiscuous mode [ 295.613483][ T5746] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 295.672260][T11081] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 295.991244][T11081] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 296.038810][ T5793] team0 (unregistering): Port device team_slave_1 removed [ 296.058902][ T5793] team0 (unregistering): Port device team_slave_0 removed [ 296.198183][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 296.219131][T11081] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 296.377884][T11157] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 296.434408][T11157] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 296.436703][T11157] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 296.470460][T11157] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 296.507010][T11186] fuse: Unknown parameter 'grou00000000000000000000' [ 296.513060][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 296.644081][T11157] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 296.661958][T11157] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17577 usecs [ 296.697102][T11157] pci 0000:00:01.0: Adding to iommu group 1 [ 296.727106][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16 [ 296.730283][T11157] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 296.732899][T11157] pci 0000:00:01.0: vgaarb: bridge control possible [ 296.735439][T11157] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 296.779751][T11157] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 296.827786][T11157] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 296.829849][T11157] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 296.870389][T11157] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 296.894585][T11157] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 296.894795][T11157] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 296.895149][T11157] pci 0000:00:02.0: enabling Extended Tags [ 297.010292][T11157] pci 0000:00:02.0: Adding to iommu group 2 [ 297.029137][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17 [ 297.078465][T11199] netlink: 'syz.9.1110': attribute type 10 has an invalid length. [ 297.097650][T11199] syz_tun: entered promiscuous mode [ 297.105170][T11199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 297.106528][T11157] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 297.120335][T11157] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 297.127478][T11157] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 297.133535][T11157] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 297.137892][T11157] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 297.149198][T11157] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 297.185688][T11157] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 297.221093][T11157] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 297.264502][T11157] [drm] Found bochs VGA, ID 0xb0c5. [ 297.271477][T11157] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 297.307203][T11157] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 297.471958][T11157] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 297.562874][T11157] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 297.632566][T11157] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 297.776822][T11157] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 297.785296][T11157] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 297.788218][T11157] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 298.026723][T11246] syz.7.1117 (11246): drop_caches: 2 [ 298.241741][ T8278] usb 12-1: new low-speed USB device number 13 using dummy_hcd [ 298.308209][T11267] e1000e 0000:00:02.0 eth1: removed PHC [ 298.412569][ T8278] usb 12-1: device descriptor read/64, error -71 [ 298.661261][ T8278] usb 12-1: new low-speed USB device number 14 using dummy_hcd [ 298.722759][T11271] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 298.733148][T11271] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 298.735877][T11271] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 298.739093][T11271] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 298.745388][T11271] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 298.832684][ T8278] usb 12-1: device descriptor read/64, error -71 [ 298.955355][ T8278] usb usb12-port1: attempt power cycle [ 298.980512][T11271] pci 0000:00:01.0: Adding to iommu group 1 [ 298.989144][T11271] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 298.992001][T11271] pci 0000:00:01.0: vgaarb: bridge control possible [ 298.994671][T11271] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 299.006891][T11271] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 299.020307][T11271] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 299.024773][T11271] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 299.029045][T11271] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 299.031993][T11271] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 299.035075][T11271] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 299.038297][T11271] pci 0000:00:02.0: enabling Extended Tags [ 299.056481][T11271] pci 0000:00:02.0: Adding to iommu group 2 [ 299.076064][T11271] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 299.079540][T11271] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 299.083227][T11271] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 299.086736][T11271] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 299.092686][T11271] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 299.096033][T11271] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 299.099304][T11271] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 299.104235][T11271] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 299.114187][T11271] [drm] Found bochs VGA, ID 0xb0c5. [ 299.115850][T11271] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 299.136307][T11271] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 299.195411][T11271] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 299.267797][T11271] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 299.291752][ T8278] usb 12-1: new low-speed USB device number 15 using dummy_hcd [ 299.312426][ T8278] usb 12-1: device descriptor read/8, error -71 [ 299.341536][T11271] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 299.425015][T11271] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 299.427766][T11271] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 299.430464][T11271] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 299.480446][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1122'. [ 299.483568][T11324] net_ratelimit: 15 callbacks suppressed [ 299.483578][T11324] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 299.561778][ T8278] usb 12-1: new low-speed USB device number 16 using dummy_hcd [ 299.594585][T11333] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1123'. [ 299.599543][ T8278] usb 12-1: device descriptor read/8, error -71 [ 299.722094][ T8278] usb usb12-port1: unable to enumerate USB device [ 299.740192][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 299.926305][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 299.930100][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.935903][T11353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.017287][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.032691][T11353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.232636][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 301.062314][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 301.122763][T11403] FAULT_INJECTION: forcing a failure. [ 301.122763][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.132949][T11403] CPU: 2 UID: 0 PID: 11403 Comm: syz.8.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.132971][T11403] Tainted: [L]=SOFTLOCKUP [ 301.132975][T11403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.132982][T11403] Call Trace: [ 301.132986][T11403] [ 301.132991][T11403] dump_stack_lvl+0x100/0x190 [ 301.133053][T11403] should_fail_ex.cold+0x5/0xa [ 301.133067][T11403] _copy_to_user+0x32/0xd0 [ 301.133104][T11403] simple_read_from_buffer+0xcb/0x170 [ 301.133124][T11403] proc_fail_nth_read+0x1af/0x230 [ 301.133140][T11403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.133156][T11403] ? rw_verify_area+0xce/0x6d0 [ 301.133173][T11403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.133191][T11403] vfs_read+0x1e4/0xb40 [ 301.133211][T11403] ? __pfx_vfs_read+0x10/0x10 [ 301.133228][T11403] ? find_held_lock+0x2b/0x80 [ 301.133243][T11403] ? __fget_files+0x215/0x3d0 [ 301.133256][T11403] ? __fget_files+0x21f/0x3d0 [ 301.133270][T11403] ksys_read+0x12a/0x250 [ 301.133280][T11403] ? __pfx_ksys_read+0x10/0x10 [ 301.133295][T11403] do_int80_emulation+0x14b/0x720 [ 301.133334][T11403] asm_int80_emulation+0x1a/0x20 [ 301.133346][T11403] RIP: 0023:0xf71472eb [ 301.133357][T11403] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 301.133368][T11403] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 301.133380][T11403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53fd5d0 [ 301.133387][T11403] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 301.133394][T11403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.133401][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.133407][T11403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.133421][T11403] [ 301.258952][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.271461][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.300408][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.313789][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.336982][ T9] usb 10-1: Product: syz [ 301.338834][ T9] usb 10-1: Manufacturer: syz [ 301.345555][ T9] usb 10-1: SerialNumber: syz [ 301.371306][ T9] cdc_mbim 10-1:1.0: skipping garbage [ 301.596348][T11375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 301.913722][T11422] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1136'. [ 301.941339][T11424] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 302.134964][T11445] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 302.139869][ T36] maxtcpc 0-0020: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 302.231760][ T29] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 302.264610][T11375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 302.268127][ T9] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 302.272468][ T9] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 302.284430][ T9] wwan wwan0: port wwan0mbim0 attached [ 302.296280][ T9] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 3a:82:3f:70:e7:b1 [ 302.385488][ T29] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.394424][ T29] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 302.405197][ T29] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.409951][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.417610][ T29] usb 12-1: Product: syz [ 302.419028][ T29] usb 12-1: Manufacturer: syz [ 302.424016][ T29] usb 12-1: SerialNumber: syz [ 302.432737][ T29] cdc_mbim 12-1:1.0: skipping garbage [ 302.446712][T11469] fuse: Bad value for 'fd' [ 302.461066][T11469] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 302.486284][T11375] libceph: resolve '400' (ret=-3): failed [ 302.491099][ T9] usb 10-1: USB disconnect, device number 13 [ 302.504160][ T9] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 302.622887][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 302.636010][T11429] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 303.197632][T11510] FAULT_INJECTION: forcing a failure. [ 303.197632][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.203736][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.9.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.203769][T11510] Tainted: [L]=SOFTLOCKUP [ 303.203773][T11510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.203780][T11510] Call Trace: [ 303.203785][T11510] [ 303.203789][T11510] dump_stack_lvl+0x100/0x190 [ 303.203806][T11510] should_fail_ex.cold+0x5/0xa [ 303.203819][T11510] _copy_to_user+0x32/0xd0 [ 303.203838][T11510] simple_read_from_buffer+0xcb/0x170 [ 303.203858][T11510] proc_fail_nth_read+0x1af/0x230 [ 303.203874][T11510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.203890][T11510] ? rw_verify_area+0xce/0x6d0 [ 303.203907][T11510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.203922][T11510] vfs_read+0x1e4/0xb40 [ 303.203942][T11510] ? __pfx_vfs_read+0x10/0x10 [ 303.203959][T11510] ? find_held_lock+0x2b/0x80 [ 303.203974][T11510] ? __fget_files+0x215/0x3d0 [ 303.203987][T11510] ? __fget_files+0x21f/0x3d0 [ 303.204007][T11510] ksys_read+0x12a/0x250 [ 303.204017][T11510] ? __pfx_ksys_read+0x10/0x10 [ 303.204031][T11510] do_int80_emulation+0x14b/0x720 [ 303.204048][T11510] asm_int80_emulation+0x1a/0x20 [ 303.204060][T11510] RIP: 0023:0xf71872eb [ 303.204069][T11510] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 303.204081][T11510] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 303.204093][T11510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d5d0 [ 303.204100][T11510] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 303.204107][T11510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.204113][T11510] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 303.204120][T11510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.204134][T11510] [ 303.210853][T11513] xt_cgroup: invalid path, errno=-2 [ 303.322424][T11429] libceph: resolve '400' (ret=-3): failed [ 303.329569][ T29] cdc_mbim 12-1:1.0: bind() failure [ 303.721760][ T8278] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 303.870178][T11534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.889333][T11515] xt_cgroup: invalid path, errno=-2 [ 303.916064][ T8278] usb 13-1: unable to get BOS descriptor or descriptor too short [ 303.925620][ T8278] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 303.928298][T11539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.933356][ T8278] usb 13-1: can't read configurations, error -71 [ 303.982245][T11543] uhci_hcd 0000:00:1d.0: remove, state 4 [ 303.992310][T11539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.996941][T11543] usb usb2: USB disconnect, device number 1 [ 304.065099][ T29] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 304.150050][T11543] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 304.350076][ T29] cdc_ncm 12-1:1.1: bind() failure [ 304.361547][ T29] usb 12-1: USB disconnect, device number 17 [ 304.517918][ T48] wlan1: Trigger new scan to find an IBSS to join [ 305.417971][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 305.417983][ T41] audit: type=1800 audit(1784951131.424:1142): pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1154" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 306.601749][ T3264] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 306.773389][ T3264] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.779341][ T3264] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 306.785755][ T3264] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.788671][ T3264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.801392][ T3264] usb 10-1: Product: syz [ 306.802848][ T3264] usb 10-1: Manufacturer: syz [ 306.804404][ T3264] usb 10-1: SerialNumber: syz [ 306.843177][ T3264] cdc_mbim 10-1:1.0: skipping garbage [ 306.908454][T11626] syz_tun: entered allmulticast mode [ 306.918763][T11633] bond0: (slave syz_tun): Releasing backup interface [ 306.951983][T11633] bond0: (slave batadv0): Releasing backup interface [ 306.980507][T11633] bridge_slave_0: left allmulticast mode [ 306.986202][T11633] bridge_slave_0: left promiscuous mode [ 306.990368][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.021417][T11633] bridge_slave_1: left allmulticast mode [ 307.024062][T11633] bridge_slave_1: left promiscuous mode [ 307.027133][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.060361][T11633] bond0: (slave bond_slave_0): Releasing backup interface [ 307.091269][T11604] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.097080][T11633] bond0: (slave bond_slave_1): Releasing backup interface [ 307.180772][T11633] team0: Port device team_slave_0 removed [ 307.206054][T11633] team0: Port device team_slave_1 removed [ 307.213665][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.216192][T11633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.223972][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.226323][T11633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.230688][T11633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.238763][T11635] vlan0: entered promiscuous mode [ 307.316546][T11635] team0: Port device vlan0 added [ 307.319571][T11637] tipc: Started in network mode [ 307.321539][T11637] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 307.328352][T11637] tipc: Enabled bearer , priority 0 [ 307.338394][T11626] syzkaller0: entered promiscuous mode [ 307.340812][T11626] syzkaller0: entered allmulticast mode [ 307.350982][T11625] syz_tun: left allmulticast mode [ 307.755306][T11602] libceph: resolve '400' (ret=-3): failed [ 307.760647][ T3264] cdc_mbim 10-1:1.0: bind() failure [ 307.768072][ T3264] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 307.770949][ T3264] cdc_ncm 10-1:1.1: bind() failure [ 307.781319][ T3264] usb 10-1: USB disconnect, device number 14 [ 307.881028][T11670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.897848][T11673] vlan2: entered promiscuous mode [ 307.899801][T11673] bridge0: entered promiscuous mode [ 307.937530][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.993663][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.446897][ T5850] tipc: Node number set to 11578026 [ 308.534493][ T48] wlan1: Trigger new scan to find an IBSS to join [ 308.611664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 309.012015][ T5829] IPVS: starting estimator thread 0... [ 309.013037][T11700] FAULT_INJECTION: forcing a failure. [ 309.013037][T11700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.019297][T11700] CPU: 1 UID: 0 PID: 11700 Comm: syz.9.1168 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.019316][T11700] Tainted: [L]=SOFTLOCKUP [ 309.019320][T11700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.019327][T11700] Call Trace: [ 309.019331][T11700] [ 309.019336][T11700] dump_stack_lvl+0x100/0x190 [ 309.019352][T11700] should_fail_ex.cold+0x5/0xa [ 309.019366][T11700] _copy_to_user+0x32/0xd0 [ 309.019384][T11700] simple_read_from_buffer+0xcb/0x170 [ 309.019404][T11700] proc_fail_nth_read+0x1af/0x230 [ 309.019420][T11700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.019450][T11700] ? rw_verify_area+0xce/0x6d0 [ 309.019467][T11700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.019482][T11700] vfs_read+0x1e4/0xb40 [ 309.019502][T11700] ? __pfx_vfs_read+0x10/0x10 [ 309.019518][T11700] ? find_held_lock+0x2b/0x80 [ 309.019533][T11700] ? __fget_files+0x215/0x3d0 [ 309.019546][T11700] ? __fget_files+0x21f/0x3d0 [ 309.019560][T11700] ksys_read+0x12a/0x250 [ 309.019571][T11700] ? __pfx_ksys_read+0x10/0x10 [ 309.019585][T11700] do_int80_emulation+0x14b/0x720 [ 309.019601][T11700] asm_int80_emulation+0x1a/0x20 [ 309.019612][T11700] RIP: 0023:0xf71872eb [ 309.019622][T11700] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 309.019634][T11700] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 309.019647][T11700] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f543d5d0 [ 309.019655][T11700] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 309.019661][T11700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.019668][T11700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.019675][T11700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.019689][T11700] [ 309.121910][T11702] IPVS: using max 41 ests per chain, 98400 per kthread [ 309.332359][T11717] program syz.9.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.359135][T11717] e1000e 0000:00:02.0 eth1: removed PHC [ 309.480006][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.557930][T11717] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 310.180129][T11722] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 310.194332][T11722] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 310.197775][T11722] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 310.200705][T11722] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 310.204290][T11722] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 310.207257][T11722] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 310.210575][T11722] pci 0000:00:02.0: enabling Extended Tags [ 310.224807][T11722] pci 0000:00:02.0: Adding to iommu group 2 [ 310.235094][T11722] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 310.240760][T11722] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 310.254214][T11722] pci 0000:00:1d.0: Adding to iommu group 7 [ 310.267386][T11722] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 310.270185][T11722] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 310.285161][T11722] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 310.288407][T11722] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 310.294622][T11722] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 310.297605][T11722] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 310.376309][T11722] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 310.438918][T11722] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 310.660148][T11722] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 310.768010][T11722] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 310.830833][T11722] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 58489 usecs [ 310.883414][T11722] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 310.905543][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1177'. [ 310.943331][T11722] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 310.957903][T11722] uhci_hcd 0000:00:1d.0: detected 2 ports [ 311.004901][T11722] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 311.021463][T11722] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 311.026826][T11722] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 311.033065][T11722] usb usb2: Product: UHCI Host Controller [ 311.036705][T11722] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 311.039153][T11722] usb usb2: SerialNumber: 0000:00:1d.0 [ 311.117138][T11722] hub 2-0:1.0: USB hub found [ 311.124887][T11722] hub 2-0:1.0: 2 ports detected [ 311.340990][T11819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.403261][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.460121][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.561407][T11827] FAULT_INJECTION: forcing a failure. [ 311.561407][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 311.569222][T11827] CPU: 2 UID: 0 PID: 11827 Comm: syz.7.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.569244][T11827] Tainted: [L]=SOFTLOCKUP [ 311.569249][T11827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.569256][T11827] Call Trace: [ 311.569261][T11827] [ 311.569266][T11827] dump_stack_lvl+0x100/0x190 [ 311.569284][T11827] should_fail_ex.cold+0x5/0xa [ 311.569298][T11827] should_failslab+0xc2/0x120 [ 311.569315][T11827] __kmalloc_cache_noprof+0x91/0x6c0 [ 311.569329][T11827] ? kobject_uevent_env+0x263/0x18b0 [ 311.569352][T11827] kobject_uevent_env+0x263/0x18b0 [ 311.569374][T11827] ? bus_to_subsys+0x114/0x150 [ 311.569389][T11827] device_del+0x605/0x9b0 [ 311.569407][T11827] ? __pfx_device_del+0x10/0x10 [ 311.569427][T11827] ? __pfx_afunc_unbind+0x10/0x10 [ 311.569439][T11827] device_unregister+0x1d/0xe0 [ 311.569455][T11827] device_destroy+0x99/0xe0 [ 311.569471][T11827] ? __pfx_device_destroy+0x10/0x10 [ 311.569488][T11827] ? do_raw_spin_unlock+0x145/0x1e0 [ 311.569503][T11827] sound_remove_unit+0x149/0x200 [ 311.569523][T11827] snd_unregister_oss_device+0x1ed/0x2a0 [ 311.569539][T11827] snd_mixer_oss_notify_handler+0x74e/0x990 [ 311.569558][T11827] ? __pfx_snd_mixer_oss_notify_handler+0x10/0x10 [ 311.569579][T11827] ? __pfx_afunc_unbind+0x10/0x10 [ 311.569591][T11827] snd_card_disconnect.part.0+0x291/0x5b0 [ 311.569607][T11827] ? __pfx_afunc_unbind+0x10/0x10 [ 311.569620][T11827] snd_card_free_when_closed+0x1f/0x40 [ 311.569633][T11827] g_audio_cleanup+0x99/0x190 [ 311.569647][T11827] afunc_unbind+0x15/0x90 [ 311.569660][T11827] purge_configs_funcs+0x285/0x510 [ 311.569681][T11827] configfs_composite_unbind+0xae/0x210 [ 311.569699][T11827] gadget_unbind_driver+0x20c/0x4f0 [ 311.569714][T11827] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 311.569729][T11827] device_remove+0xcb/0x180 [ 311.569746][T11827] device_release_driver_internal+0x44e/0x620 [ 311.569767][T11827] driver_detach+0xd8/0x1b0 [ 311.569785][T11827] bus_remove_driver+0x13b/0x2e0 [ 311.569802][T11827] driver_unregister+0x76/0xb0 [ 311.569820][T11827] usb_gadget_unregister_driver+0x49/0x70 [ 311.569833][T11827] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 311.569880][T11827] configfs_write_iter+0x302/0x4e0 [ 311.569896][T11827] vfs_write+0x6ac/0x1050 [ 311.569908][T11827] ? __pfx_configfs_write_iter+0x10/0x10 [ 311.569921][T11827] ? __pfx_vfs_write+0x10/0x10 [ 311.569931][T11827] ? find_held_lock+0x2b/0x80 [ 311.569956][T11827] ksys_write+0x12a/0x250 [ 311.569967][T11827] ? __pfx_ksys_write+0x10/0x10 [ 311.569978][T11827] ? ksys_write+0x1ac/0x250 [ 311.569988][T11827] ? __pfx_ksys_write+0x10/0x10 [ 311.570003][T11827] __do_fast_syscall_32+0xe7/0x970 [ 311.570017][T11827] ? lockdep_hardirqs_on+0x78/0x100 [ 311.570033][T11827] do_fast_syscall_32+0x32/0x70 [ 311.570048][T11827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.570064][T11827] RIP: 0023:0xf7f78fec [ 311.570079][T11827] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 311.570084][T11827] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 311.570096][T11827] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 311.570104][T11827] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.570111][T11827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.570118][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.570125][T11827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.570140][T11827] [ 311.722768][T11827] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 311.786068][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1183'. [ 312.054587][T11854] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1186'. [ 312.088035][T11857] program syz.7.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.202521][T11865] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 312.217755][T11865] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 312.220727][T11865] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 312.223877][T11865] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 312.226388][T11865] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 312.229316][T11865] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 312.232484][T11865] pci 0000:00:02.0: enabling Extended Tags [ 312.437512][T11865] pci 0000:00:02.0: Adding to iommu group 2 [ 312.481373][T11865] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 312.484485][T11865] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 312.487323][T11865] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 312.490171][T11865] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 312.493050][T11865] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 312.697115][T11874] program syz.5.1187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.759833][T11865] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 313.086521][T11865] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 313.222820][T11887] syzkaller0: entered promiscuous mode [ 313.225020][T11887] syzkaller0: entered allmulticast mode [ 313.471408][T11865] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 313.478243][T11865] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 313.486594][T11865] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 313.500707][T11874] e1000e 0000:00:02.0 eth1: removed PHC [ 313.624015][ T5829] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 313.709670][T11875] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 313.721522][T11875] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 313.725098][T11875] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 313.727786][T11875] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 313.729720][T11875] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 313.735788][T11875] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 313.738151][T11875] pci 0000:00:02.0: enabling Extended Tags [ 313.777365][T11875] pci 0000:00:02.0: Adding to iommu group 2 [ 313.787904][T11875] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 313.790725][T11875] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 313.793404][T11875] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 313.794016][ T5829] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.796545][T11875] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 313.803088][T11875] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 313.806374][ T5829] usb 14-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 313.816817][ T5829] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.820318][ T5829] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.824210][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1193'. [ 313.826076][ T5829] usb 14-1: Product: syz [ 313.831303][ T5829] usb 14-1: Manufacturer: syz [ 313.836282][ T5829] usb 14-1: SerialNumber: syz [ 313.860497][ T5829] cdc_mbim 14-1:1.0: skipping garbage [ 313.902643][T11875] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 313.969765][T11875] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 314.010327][T11986] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 314.015788][T11986] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 314.018109][T11986] ================================================================== [ 314.020433][T11986] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 314.022719][T11986] Read of size 8 at addr ffff88802861b8f0 by task syz.7.1193/11986 [ 314.026841][T11986] [ 314.027909][T11986] CPU: 0 UID: 0 PID: 11986 Comm: syz.7.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.027928][T11986] Tainted: [L]=SOFTLOCKUP [ 314.027933][T11986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.027940][T11986] Call Trace: [ 314.027945][T11986] [ 314.027950][T11986] dump_stack_lvl+0x100/0x190 [ 314.027965][T11986] print_report+0x13d/0x4b0 [ 314.027983][T11986] ? __virt_addr_valid+0x239/0x430 [ 314.027998][T11986] ? dummy_free_request+0x8a/0x90 [ 314.028015][T11986] kasan_report+0xdf/0x1c0 [ 314.028031][T11986] ? dummy_free_request+0x8a/0x90 [ 314.028056][T11986] dummy_free_request+0x8a/0x90 [ 314.028074][T11986] uvc_function_bind+0x181a/0x1939 [ 314.028088][T11986] ? __pfx_uvc_function_bind+0x10/0x10 [ 314.028101][T11986] usb_add_function+0x219/0x890 [ 314.028119][T11986] configfs_composite_bind+0xd83/0x1960 [ 314.028140][T11986] gadget_bind_driver+0x28c/0xbf0 [ 314.028152][T11986] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 314.028169][T11986] ? __pfx_gadget_bind_driver+0x10/0x10 [ 314.028181][T11986] really_probe+0x241/0xa60 [ 314.028197][T11986] __driver_probe_device+0x20e/0x450 [ 314.028211][T11986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.028228][T11986] driver_probe_device+0x4a/0x140 [ 314.028242][T11986] __driver_attach+0x21f/0x5b0 [ 314.028257][T11986] ? __pfx___driver_attach+0x10/0x10 [ 314.028271][T11986] bus_for_each_dev+0x13e/0x1d0 [ 314.028283][T11986] ? __pfx_bus_for_each_dev+0x10/0x10 [ 314.028295][T11986] ? bus_add_driver+0x2b5/0x5b0 [ 314.028309][T11986] bus_add_driver+0x305/0x5b0 [ 314.028322][T11986] driver_register+0x1e2/0x360 [ 314.028339][T11986] usb_gadget_register_driver_owner+0x132/0x210 [ 314.028351][T11986] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 314.028367][T11986] configfs_write_iter+0x302/0x4e0 [ 314.028379][T11986] vfs_write+0x6ac/0x1050 [ 314.028389][T11986] ? __pfx_configfs_write_iter+0x10/0x10 [ 314.028400][T11986] ? __pfx_vfs_write+0x10/0x10 [ 314.028409][T11986] ? find_held_lock+0x2b/0x80 [ 314.028427][T11986] ksys_write+0x12a/0x250 [ 314.028436][T11986] ? __pfx_ksys_write+0x10/0x10 [ 314.028447][T11986] __do_fast_syscall_32+0xe7/0x970 [ 314.028462][T11986] do_fast_syscall_32+0x32/0x70 [ 314.028476][T11986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.028490][T11986] RIP: 0023:0xf7f78fec [ 314.028504][T11986] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 314.028510][T11986] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 314.028522][T11986] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 314.028529][T11986] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 314.028535][T11986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.028542][T11986] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.028551][T11986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.028563][T11986] [ 314.028568][T11986] [ 314.094907][T11875] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 314.096468][T11986] Allocated by task 9247: [ 314.096480][T11986] kasan_save_stack+0x30/0x50 [ 314.096498][T11986] kasan_save_track+0x14/0x30 [ 314.096512][T11986] __kasan_kmalloc+0xaa/0xb0 [ 314.096526][T11986] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 314.100813][T11875] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 314.102606][T11986] __hw_addr_create+0x57/0x220 [ 314.102629][T11986] __hw_addr_add_ex+0x32b/0x650 [ 314.102646][T11986] dev_addr_init+0x161/0x250 [ 314.102657][T11986] alloc_netdev_mqs+0x363/0x15c0 [ 314.102671][T11986] rtnl_create_link+0xc13/0xf80 [ 314.102687][T11986] veth_newlink+0x203/0xa00 [ 314.102702][T11986] rtnl_newlink+0x1499/0x2380 [ 314.102716][T11986] rtnetlink_rcv_msg+0x95e/0xe90 [ 314.102731][T11986] netlink_rcv_skb+0x159/0x420 [ 314.106209][T11875] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 314.108484][T11986] netlink_unicast+0x585/0x850 [ 314.108500][T11986] netlink_sendmsg+0x8b0/0xda0 [ 314.108510][T11986] __sys_sendto+0x48b/0x4e0 [ 314.108523][T11986] __ia32_compat_sys_socketcall+0x59a/0x770 [ 314.108545][T11986] do_int80_emulation+0x14b/0x720 [ 314.108559][T11986] asm_int80_emulation+0x1a/0x20 [ 314.158993][T11986] [ 314.159771][T11986] The buggy address belongs to the object at ffff88802861b800 [ 314.159771][T11986] which belongs to the cache kmalloc-128 of size 128 [ 314.164018][T11986] The buggy address is located 136 bytes to the right of [ 314.164018][T11986] allocated 104-byte region [ffff88802861b800, ffff88802861b868) [ 314.168618][T11986] [ 314.169383][T11986] The buggy address belongs to the physical page: [ 314.171482][T11986] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2861b [ 314.174189][T11986] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 314.176383][T11986] page_type: f5(slab) [ 314.177636][T11986] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 314.180254][T11986] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 314.183091][T11986] page dumped because: kasan: bad access detected [ 314.185340][T11986] page_owner tracks the page as allocated [ 314.187560][T11986] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5750, tgid 5750 (syz-executor), ts 66260950891, free_ts 64170543812 [ 314.196808][T11986] post_alloc_hook+0xfd/0x120 [ 314.198253][T11986] get_page_from_freelist+0xf48/0x3530 [ 314.199916][T11986] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 314.201708][T11986] new_slab+0xa2/0x650 [ 314.202970][T11986] ___slab_alloc+0x5d1/0x800 [ 314.204393][T11986] __kmalloc_flags_noprof+0x466/0x890 [ 314.206056][T11986] alloc_slab_obj_exts+0xb2/0x250 [ 314.207597][T11986] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 314.209462][T11986] kmem_cache_alloc_noprof+0x587/0x6a0 [ 314.211407][T11986] copy_fs_struct+0x49/0x340 [ 314.212867][T11986] copy_process+0x50d8/0x8030 [ 314.214359][T11986] kernel_clone+0x176/0x9d0 [ 314.215776][T11986] __do_compat_sys_ia32_clone+0xd4/0x120 [ 314.217491][T11986] __do_fast_syscall_32+0xe7/0x970 [ 314.219069][T11986] do_fast_syscall_32+0x32/0x70 [ 314.220592][T11986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.222522][T11986] page last free pid 6158 tgid 6156 stack trace: [ 314.224449][T11986] __free_frozen_pages+0x79f/0x1090 [ 314.226071][T11986] qlist_free_all+0x47/0xf0 [ 314.227467][T11986] kasan_quarantine_reduce+0x1a0/0x1f0 [ 314.229153][T11986] __kasan_slab_alloc+0x69/0x90 [ 314.230690][T11986] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 314.232515][T11986] __alloc_skb+0x140/0x710 [ 314.234211][T11986] alloc_skb_with_frags+0xdd/0x760 [ 314.235857][T11986] virtio_transport_alloc_skb+0xaaf/0x13c0 [ 314.237682][T11986] virtio_transport_send_pkt_info+0x595/0x10d0 [ 314.239607][T11986] virtio_transport_stream_dequeue+0x8fc/0xc50 [ 314.241514][T11986] __vsock_connectible_recvmsg+0x7a4/0xb80 [ 314.243334][T11986] vsock_connectible_recvmsg+0xcd/0xf0 [ 314.245006][T11986] sock_recvmsg+0x1d5/0x220 [ 314.246438][T11986] __sys_recvfrom+0x1f2/0x2f0 [ 314.247909][T11986] __ia32_compat_sys_recvfrom+0xe4/0x1c0 [ 314.249640][T11986] __do_fast_syscall_32+0xe7/0x970 [ 314.251222][T11986] [ 314.251978][T11986] Memory state around the buggy address: [ 314.253727][T11986] ffff88802861b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.256198][T11986] ffff88802861b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 314.259110][T11986] >ffff88802861b880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.261531][T11986] ^ [ 314.263911][T11986] ffff88802861b900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.266291][T11986] ffff88802861b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.268806][T11986] ================================================================== [ 314.284683][T11880] ehci-pci 0000:00:1d.7: remove, state 1 [ 314.290778][T11986] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.293026][T11986] CPU: 0 UID: 0 PID: 11986 Comm: syz.7.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.296508][T11986] Tainted: [L]=SOFTLOCKUP [ 314.298086][T11986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.301300][T11986] Call Trace: [ 314.302361][T11986] [ 314.303287][T11986] dump_stack_lvl+0x100/0x190 [ 314.304928][T11986] vpanic+0x552/0x970 [ 314.306201][T11986] ? __pfx_vpanic+0x10/0x10 [ 314.307659][T11986] ? dummy_free_request+0x8a/0x90 [ 314.309254][T11986] panic+0xd1/0xe0 [ 314.310432][T11986] ? __pfx_panic+0x10/0x10 [ 314.311833][T11986] ? dummy_free_request+0x8a/0x90 [ 314.313433][T11986] ? preempt_schedule_common+0x42/0xc0 [ 314.315313][T11986] check_panic_on_warn.cold+0x19/0x34 [ 314.316969][T11986] end_report.part.0+0x3a/0x90 [ 314.318493][T11986] kasan_report.cold+0xe/0x18 [ 314.319972][T11986] ? dummy_free_request+0x8a/0x90 [ 314.321519][T11986] dummy_free_request+0x8a/0x90 [ 314.323054][T11986] uvc_function_bind+0x181a/0x1939 [ 314.324622][T11986] ? __pfx_uvc_function_bind+0x10/0x10 [ 314.326315][T11986] usb_add_function+0x219/0x890 [ 314.327846][T11986] configfs_composite_bind+0xd83/0x1960 [ 314.329555][T11986] gadget_bind_driver+0x28c/0xbf0 [ 314.331150][T11986] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 314.332892][T11986] ? __pfx_gadget_bind_driver+0x10/0x10 [ 314.334597][T11986] really_probe+0x241/0xa60 [ 314.336242][T11986] __driver_probe_device+0x20e/0x450 [ 314.337943][T11986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.339784][T11986] driver_probe_device+0x4a/0x140 [ 314.341337][T11986] __driver_attach+0x21f/0x5b0 [ 314.342812][T11986] ? __pfx___driver_attach+0x10/0x10 [ 314.344453][T11986] bus_for_each_dev+0x13e/0x1d0 [ 314.346047][T11986] ? __pfx_bus_for_each_dev+0x10/0x10 [ 314.348028][T11986] ? bus_add_driver+0x2b5/0x5b0 [ 314.349575][T11986] bus_add_driver+0x305/0x5b0 [ 314.351067][T11986] driver_register+0x1e2/0x360 [ 314.352569][T11986] usb_gadget_register_driver_owner+0x132/0x210 [ 314.354492][T11986] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 314.356230][T11986] configfs_write_iter+0x302/0x4e0 [ 314.357806][T11986] vfs_write+0x6ac/0x1050 [ 314.359153][T11986] ? __pfx_configfs_write_iter+0x10/0x10 [ 314.360897][T11986] ? __pfx_vfs_write+0x10/0x10 [ 314.362392][T11986] ? find_held_lock+0x2b/0x80 [ 314.363890][T11986] ksys_write+0x12a/0x250 [ 314.365234][T11986] ? __pfx_ksys_write+0x10/0x10 [ 314.366752][T11986] __do_fast_syscall_32+0xe7/0x970 [ 314.368383][T11986] do_fast_syscall_32+0x32/0x70 [ 314.369938][T11986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.371893][T11986] RIP: 0023:0xf7f78fec [ 314.373174][T11986] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 314.375206][T11986] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 314.377763][T11986] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 314.380182][T11986] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 314.382605][T11986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.385013][T11986] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.387489][T11986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.389882][T11986] [ 314.391435][T11986] Kernel Offset: disabled [ 314.392829][T11986] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:45:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a10995 RDI=ffffffff9b9f01a0 RBP=ffffffff9b9f0160 RSP=ffffc90004d3f298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f021e R15=ffffffff85a10930 RIP=ffffffff85a109bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004e1bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000778ee7 RBX=ffff88801c752540 RCX=ffffffff8bb832d5 RDX=0000000000000000 RSI=ffffffff8e1a7b8e RDI=ffffffff8c400880 RBP=ffffed10038ea4a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8189f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9b1f231e9c CR3=00000000299e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88802b441700 RCX=ffffffff81e5aede RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc90003ff72b8 RBP=1ffff920007fee57 RSP=ffffc90003ff7278 R8 =0000000000000001 R9 =1ffff920007fee57 R10=ffffc90003ff72bb R11=ffff88807ffd6940 R12=dffffc0000000000 R13=000000000000812a R14=0000000000000003 R15=dffffc0000000000 RIP=ffffffff82792e91 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6cf1bc2300 ffffffff 00c00000 GS =0000 ffff888096de6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e2e09f8f40 CR3=000000004c01d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7b92889606527453 cc06c430f4b92dac 7b92889606527453 cc06c430f4b92dac 7b92889606527453 cc06c430f4b92dac 7b92889606527453 cc06c430f4b92dac ZMM18=29a2e7c072c03066 aa88aac57a2fed3d 29a2e7c072c03066 aa88aac57a2fed3d 29a2e7c072c03066 aa88aac57a2fed3d 29a2e7c072c03066 aa88aac57a2fed3d ZMM19=a90a000000000000 0000000000000004 a90a000000000000 0000000000000003 a90a000000000000 0000000000000002 a90a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02d0a008001e8803 0fffffffff020fff ffffff020fffffff ff0255800201af96 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000a0079bc0000 0000000000000000 000001ffffffffff ffffffe70855b803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01080055b00302f2 080055a003060800 5598030208005590 0303bfde08005588 ZMM24=7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d 7a2fed3d7a2fed3d ZMM25=aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 aa88aac5aa88aac5 ZMM26=72c0306672c03066 72c0306672c03066 72c0306672c03066 72c0306672c03066 72c0306672c03066 72c0306672c03066 72c0306672c03066 72c0306672c03066 ZMM27=29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 29a2e7c029a2e7c0 ZMM28=000001b0000001af 000001ae000001ad 000001ac000001ab 000001aa000001a9 000001a8000001a7 000001a6000001a5 000001a4000001a3 000001a2000001a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 a80a0000a80a0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffc900317ca000 RDX=1ffff1100aa2e2b8 RSI=ffffffff86fef54a RDI=ffff888028e40000 RBP=ffff8880551715b8 RSP=ffffc900077574b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90004ac5674 R13=0000000000000000 R14=ffffed100aa2e2b8 R15=ffff8880551715c0 RIP=ffffffff86fef571 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f34fc CR3=0000000060f03000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b5c5f4d7b8a94c4 d661170a9bb5a47f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78eb734c62ebd11e b8756147a46c4609 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8edff6678abd20e0 9ae9d65a7230caf9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b6a894b5a04c5c6 86421c618ff65486 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000be80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49f63c724ad07546 000000bf00000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01fcf4bf00000000 000000bf00800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ac46086000000bf 00000000000000bf ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000bf5387c648 536bda0e00000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4379665b7301c7f 0ed46b1f01d1b35e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f483ce3963fde4a 00e5e465704fa08c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000