last executing test programs: 32m11.935533379s ago: executing program 32 (id=64): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) 31m29.460432248s ago: executing program 33 (id=381): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 31m24.728536395s ago: executing program 34 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 17m23.559850195s ago: executing program 5 (id=4216): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r1, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r5 = dup(r4) read(r5, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r5, &(0x7f0000008180)={0x2020}, 0xfffffdfc) r6 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xf2d3}) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 17m21.24417368s ago: executing program 5 (id=4219): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) unshare(0x22020600) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000080) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000001005400000009"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17m18.310193269s ago: executing program 5 (id=4226): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b7000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r2, 0x1) 17m16.128167608s ago: executing program 5 (id=4232): socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) socket$packet(0x11, 0x3, 0x300) 17m14.164063478s ago: executing program 0 (id=4234): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 17m11.497035241s ago: executing program 5 (id=4236): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) poll(0x0, 0x0, 0x7f) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x8c}}, 0x4800) 17m9.963791669s ago: executing program 5 (id=4238): rename(&(0x7f0000002a80)='.\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 17m9.895193733s ago: executing program 0 (id=4239): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x400d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0x100300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17m6.598854708s ago: executing program 0 (id=4240): socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) socket$packet(0x11, 0x3, 0x300) 17m2.994923703s ago: executing program 0 (id=4247): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) poll(0x0, 0x0, 0x7f) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x8c}}, 0x4800) 17m1.741627412s ago: executing program 0 (id=4248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) setgroups(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 17m1.391261723s ago: executing program 0 (id=4250): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) 16m51.961784891s ago: executing program 35 (id=4238): rename(&(0x7f0000002a80)='.\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 16m44.965174549s ago: executing program 36 (id=4250): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) 16m20.915358895s ago: executing program 1 (id=4278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x16, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/42, 0x36}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 16m18.899172869s ago: executing program 1 (id=4280): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x77a, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x3, 0x304}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000000080)) 16m16.015348791s ago: executing program 1 (id=4286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m15.660667216s ago: executing program 1 (id=4287): socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, 0x0, 0x0) r5 = syz_ublk_add_dev(r3, r4, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r7, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 16m9.956579767s ago: executing program 1 (id=4294): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x32}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) 16m8.290727422s ago: executing program 1 (id=4297): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x400d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0x100300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15m52.129280924s ago: executing program 37 (id=4297): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x400d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0x100300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15m44.785001828s ago: executing program 8 (id=4324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pread64(r0, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="080001000300000008001d00", @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0ca243000200", @ANYBLOB='\b', @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001400)={0x0, 0x2, 0x1, [0x8, 0xa, 0x8, 0xfc, 0xe], [0x9, 0x9, 0x2, 0x6d3f, 0xa596, 0x3, 0x1, 0x25eb, 0x2, 0xa, 0x5, 0xb2e, 0xfffffffffffffff8, 0x3, 0xddae, 0x7, 0x9, 0x9, 0x5d, 0xaa0, 0x6, 0x400, 0x7ff, 0xf, 0x4, 0x101, 0x8, 0x9, 0x101, 0x6, 0x3, 0x7fff, 0x1a2, 0x3, 0x4, 0x80000001, 0x401, 0x7, 0x1, 0x800, 0x20000000, 0xbbcf, 0x0, 0x40000000, 0x5, 0x8001, 0x5, 0xf2, 0x9, 0x0, 0x482, 0x7, 0x8, 0xe, 0x6, 0x3a4, 0x0, 0x2, 0x69, 0x80000000, 0x7, 0x10001, 0x5, 0x5, 0xe7, 0x3, 0x7fffffff, 0xe, 0x2, 0xd, 0x100000000, 0x5, 0x1000, 0xc7ae09b, 0xf6, 0x5, 0x0, 0x2, 0x3, 0x81, 0x3, 0x8, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x8, 0x94, 0x5, 0x4, 0x13d, 0x2000000000000000, 0x6000000, 0x7, 0x4, 0x8, 0x8, 0x749, 0x4000000000000000, 0x7ff, 0x0, 0x0, 0x3, 0x69, 0x5, 0xc3, 0x100, 0xfffffffffffffffc, 0x800000000, 0x1000, 0x209, 0xfffffffffffffffc, 0x4, 0x4, 0xd952, 0x7, 0x991, 0x8001, 0x4, 0x7e6]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10004, 0x80) 15m33.11159461s ago: executing program 8 (id=4332): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 15m32.472198609s ago: executing program 8 (id=4333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb", 0x41, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 15m28.604768472s ago: executing program 8 (id=4342): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) poll(0x0, 0x0, 0x7f) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x8c}}, 0x4800) 15m26.150000684s ago: executing program 8 (id=4346): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) syz_io_uring_setup(0x7729, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x10}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x4, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xb00) 15m24.193660423s ago: executing program 8 (id=4352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffffff, 0x0, 0x2b) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002f0009002abd700d000100000400000024001180e796bd6dd42541affac6ff415af85ab494e09d498fc6a0b37591cf2e41cf25f9"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 15m8.059128615s ago: executing program 38 (id=4352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffffff, 0x0, 0x2b) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002f0009002abd700d000100000400000024001180e796bd6dd42541affac6ff415af85ab494e09d498fc6a0b37591cf2e41cf25f9"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 12m58.5718357s ago: executing program 7 (id=4658): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x10}, 0xc) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 12m55.601883607s ago: executing program 7 (id=4665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 12m55.434872673s ago: executing program 7 (id=4666): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e960ca1c758b83498283eb4e2618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f0"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_fuse_handle_req(r0, &(0x7f0000006200)="3e51056d145e3e0b01fb5ce04d51284abe5b7b573434410cd45f0fb98b6ff676878cd2953781ca7146543f92c27f794a8815a79fb6ab28316c54d4de8accaa142e5986c7f830b83426818e5a187d1663bf76b1251f22102b417695167f0f7da1e1d405fce255ef834143fca129b52a29e6851410de6bbf1fd6ddbd65c0748d973371a5963895045e52c88ca90df9b6b70e153be92d6389e6ad4af0f9af04d7e2ff0beea069f3d7b628a01e750b727b7f57be1d9ebb16a4c15b4e026e58bb685ea7b9e5cfd936714b83c31585b3f9c41e02ce0fe4ff5f66c8ebcee1af58bc09a027b8af0dee2771b74a5c37215cc4c06c9cdf2e6393f4b844c637520239c1b15a2a027feeb287e145615d12929f49f1f7fb07165a313b1c25d17961206300c9698099aa9a6d18c149e4bb3a3ae13511957eb771f62967a9793e71a0ea8d2992ee5155675a0b1d148668d0c134ce1b798b7cabcb76c82b2ee304f0ff819a22a9c319b05ef573411f9d2d112b28ba8c5d3169dd62251e0054c38c0d0d5136d53fbd550f05d69bf1bf7b7e928e2bb46cdfeb5ccd8f5fdfbf890f0988d02bf418aa96f45e3c63d4ba42e7d23064da743806180a7e8f1d85e7eec79f48de8da3e20f3e9e6797f1cf10a76b7ec7018c99dc141a92fa3db84e202b33020f42adaf8d5b9ad0c67872e2a697d6eb1e6af24846d618afdc9a166fd9f1005500056e262e413a4b479e3ba6f5439bca8b3cce3d7899bcde2c69c16773338e85128fed7087631939c62a64cba87c2fabeb55be7a5587b42eaeb0c6782b543dc6e06610699f8f7af7397b5a19713adffbae2a244e3047881071cb1769581c4b75b6b8dd8219e0d4073630df60d04cd3c26c671f95089229b54df3fc3dcab798b003e4be3c7399f0be7a08b864b1c3d33dd69622f9d58cebe6867c5aab7a7b8c2592c1e7b27b640fa490f410ee39d807256c4846dc1938cca720a0b2f9ea3a5164731239df701b5c088ebfd21a2710a3f1c92e64a2b4c07afdbd3e74ae35d11bf916fb73312f14a91ef04d0645f82d25eab91e58e999babe23b774c262dc559baecd1e76e0e9afcaef65053a34e4e5647cd458c48cc4e958de0da2ed3e144eff042832f5b40d52cf2d2ab02cd6ec262d52a4155efd5587c27f01b1f8457b0138394b130d6e8843ae25e6f80dfe9a8819fd337c463ecc3384333b00b2ac1cabfb9056d82ca43de2ce6955d32929fbf7663d6db1c0f3dc4b1bf12c08a94181334c9d2ced01c92f75abebfe31ae3677aceda945819c30329d019a38b879584e3eec662c28ec8954e1aaff6cef4d1be0499706b00f6cb328438f3e8895e4106fd4fab0e986f8a5d18d79eb444eb1de22a4c6ae96ddf09b4e65241d6cb3ded36eeb9cb1fe1b6439e271158a0394d9656eb04fad8742afdf111b7077ae502cc6cf0737aebae51370932faf1c601b487da4c328cc12a792afe702ba487f838a2123ab84ad5a62fca69b0288c075ff71fee580cdc605b4cbd1c827e4ca6be2ff4c0220293c9551c4eb58ef5889f874939edc51ec57a43e5b5345a0f38bbffd68e7f09bdd1a03a2a27580067ecbd277a6a8f0b87587cc2516a53df9c1fbd3163a9d5d897c79cd5a224856f684e11b90d451bdb0de38f2eb675651e3a45a9bc5a9da8bb473cd0f55eb3cbfad953a1592d2eb932e3a9b9051771cd0ddf11bcb8458a5382cbf4dbe8d918593fd4bc66f67f5b45c43976717081c0038fb42c6df418b7c95ba55ca93551a64353e239e2524188f964228724720143ac6ce589c065d4054e1fbd5e26f6ef42a4421bf016bbe3e669ed62ca4f601c12ca960d7cfbc131533b8f6289cdf4c8703ca430a4808519db232c79d4ddbbe05b067160045feeaaea6d00179e4c279e6fbe57246d5187128f77a280ae222ed3b5ea516130ffdbbd670f478ffb9751a1e45030f905990fa324ccc5417b272c72e665ed8e58c6ebfb5bbf6efbc9db9c2d923f70d27ebabffed27c48adc208e2b5877cf1975869314d64f52f5ea2a4bff5af09aff098a52a8c44462a5b2a6495694b76f44e0d13ac83fee968fbe9173bdf5b4ff9f4646eef5ae539c9e692cff7e816ed0aeef77ce18a876e8a9e0c35419d14b76e3e741f88e78032882639a4b30854c0136d85b579f7d67ce83a8559b33aa691c70cec58b5379209d790185f1db211d6ed36047964fceae3a9886152beea693ba224c1b1e6ef237d87fa4bf79cfe8d568ef6076fce7250c9dce789c6840f8e8227da003dad8501d561faf00267158f81656e9f4254537f7feb1d6c5c76d5ece8d5433732a46387a331844126008ca0647bd580fdc1a1c55f8510271156e6dca68e7985b8cdfbe9b3bc4b6c2528593a14bdc65ffceab4cf047edc672725316b06727a36efa26b3b3a13e4c8e68a6539f908d8ac988bb90b4df40bfb548eccb14beee0fb248e1702fa60b168bb68a6233aec09a195d29920bdd1918368721c7d86455900a08a2696627c7e1d2afbc6f222f1a3d8207a26904b79b5073f0366c45fa9671eeed2a8b1095081e39a612507b460e8b9a49e3f9b14d5cc6bf138360b51bb99acfaf8c042bf1d1ff9e1e47efde8ffce92b5daaea87f12d49381493331d148b8d869b1477bb4fc541c0bd7d7bbeb67a1aa7611a2c31182c021e6f1b9b9c19d65855b364abd5cd2b56ccc6899a072f6524f0873f79f1705cb8235fe74e1c969fde301a1ed5e1692c97453a868e9cb5a8783b3880791491b1f104f6a2c71951d02160adb1bcc77a37a029d197a72ba1f7c2a987ec57ae21e61ac4ba075c09f6f3327c77532aeda47a7d72fd9c671f63a9d04d8fad5941d5ac46194b505796ba39a661df9896f2dadb231edff2bc5c11f22cd209ac0a2239a5902bcbe6cca96a4299c984eedb89da67acb62c1921a0549a92f69cc74f1b8d557a8ff7379650b688c63e95f131640a3169e85802edd4d19553b7f09365c2763ee1bad5ad120a54c795689ae03554ece7e526197b453ef81bddf367e6972e8540a5fbda3bcaaa19b2f3f991390a707a1eeea48112e56e534181bb6d1d542a7b81425e79765270151b32f347bd7484aac8024886876a1d9532071e28024053816c076f9657ddae4cb5ceea943097d0fe86d7363ceea178f016988ebe7c3f11fbee61e6624bcac370b458cb738e33140730c335e00f00ae0b6808a1ea41bc1186ff065d3098d82bd526fb55e131f8361a687bf1663c97445c2cacfa788f00be9549d64ad29294faa9a05bd325a83d97ac022d4bbb80c50c691f8a869599adc9998db08d265cc02db6df501c58d07510b5a7b3a3220315af68ed0fe7056d5686f415390c51be2ab4b6a444102612c280fff9458323da65ae5ac8b7cbd5dfdacbc5dbd50fb12a114e5c31c1ef43e32da6ba1f8a89f48c882671d9c5765a4654c40a4acd7ba9ad03b66ef260c8aa4cad5113a7deed4901677fb94e30c52665d10012316317bf42d62f5f55ef859ae7b9bb6d28cd229cc87009b06a25ea86304a6d2853393be112bbcdcfbddd2129c6aba435eb76a16053bc277c941340d709d7851b68923e022f2c964de99923c0bf22253e1d4541e4bf358dd34e6134d65a468ae70b6c72942d55e8147e8c5aab34577af53572a7e179be35f26c49e2bf7c575e7ec7c7e7521889bb009b9b01d9bf8751441700ae2a8d7b23d7862de0cab2124abcfcc0fef37999cfe90f4eef809c5f3162183418fe0e1b3ba6e3764ebc3135fb268f251169f083cff0f4923cbab069b53371910129d3ca65e8ee285eb692febbfb35af82c18add3faf37185a688baa5ef57332267e9682d54cc2a9505b100e248ff461b49a5c0cbc464eb7caa65cb9bee7f8577d920581ce4a3c48576c32163efb1324a85d667389bba364b62390a0c58b17f8bb4ec7800f0f50784a3f7df02726784aef17b2c3d242ae885afd4c8d824d1db019c56c4cc1c85408c2260113a491458cdb99c26d8143a238f5646d2a4410bf41a86035a646ffad0d4ad7eb455269571cd4f3ac3d2fe94b37bd70f3915f8f42fda7f753c69524083d854395d00d514b74304702b9514ad2dc0e12c3e82cb338ed273b8abef6fb9509c67e805bf47a386306ab9309c4db01b69bf7f9c8e2fe53dbe1912ffcedee7b7a27d6687a0243e3ffb85ee9008045390b802e2ca3b462aed8d185d63a462cbf1f1ec8be129f732f7f84e4a84a387990d2d0621e900e1ed577858eff0a6785fe1a8caa81277f99bc0809a7a454dd000c2c8c3a99d8d15d869c1835e68ce463811abefd7755ab0f5892a268517eee026f192397edcf03ce046594f17f327d207274afc0ce4ca0b4b134705b9c9cab16b8daa2a9dfbc80cd5f6729a409cb1dec698cbe26afda53974afb23ba1c037503dccf361182907b3edff87d28b0d3bac4fd8b0ec64878acc72280ffd723e9137ebd2cfd4566bb0f2a968c59f07c908ca0ab06b269584dd0381faa82549173d37487f0b5fbd6fb512aece0447f69c8fb3025e476184e5847a9c63b2ef91aeafc888a7d54e75ebabe1943922946d90dd707731ad533407760b023adcc4b1ea523557bae9fba28ef74b7a8487e9200e4f11befde8e01981ab79e43e6e17612cffb5c173bd53d13375bf02abe31dc71093dcc286ae21f3955d3060c085ea313253b1c7bdc834aa8d64b1f427e1038ea27cab0abbf7533a6115ff730b900f0fd3c79ccd83d1b0b7a8d34980b2ec776dc6ae7e85f0f46d5c01db894f108c58f179387c1501fb04fc774666a90054aea3a2c12c67b270eb402aab6f488cf1030ec8216684c58885a54cbc6ca783b466c23e5b268877f52fe580a4d54b772251b5dfed42fd8a16b20949d5e9079c70bb7fad7728081d2c7a0402865a847c1d3f1bd99b24767e2556aaaade88aa76d3381c0af0f05c50fc1eab86b0b098e74d92cff2b57aae4822c991b6d2a989e4ae8570a15a0b95f422d20161d69ac1baef4119bc4c0f3d28bd688ca7a190a7924781072ffbe77d73f123db7157a3fefe21c1adcf24f76d8a9980ec2edb781dfde8d34dd5952fb3b99a4415c474a7a9fc663b88322a05a827b2294c4b42f356fb64700fa65c277e764e79c32f926f0a014d66ccaba6bf314ec4ae0ad917b3e31093eac1cfbf609dc0f1d28a47284befc326d9c68292e81e09ebefb830578ba591cc0906269a389ddfb1857a7f57f78ffe897e208cffc6a422a2932bbd9d8acbce1162ee77bea3dbc97c81bfbe734a88b9c8228ba6fda4f4fb8e34a30bb6644a0c4e983c4775dafd276a99ee256750a0aa644576ad42ecd31c35527a5c796a295e76456bd8ccb03b197eb84e6eba54943209e79cadd8a27a9143d031b6747568d5f2e5eda97f4e5d749a424e11224df46a71e93fb6f8848f42b2671f8752fbed11929f628b4f9c290addcd985229edb2eac2aacd900afcea9da54cd31d0fff2c31d59639d753e9039117dbaae7b52721b502c5acff6c1d9b3bda1fad38ee951afd2f147760787935ef70b8335809888468fad51d2581871e55f59c5ffef91c73d0d6b57c332dad94155d2640de2fda9745a0cbeccdb367bc6f80692e5db8e8ba6c75f744defb75b7a89ffe950736dc9b582702dc26e3c3a5d6ce78f906152c5aed687bd54cd3556765e6ce5f4e6afef13b1f5d506dae0a9085bd1fe69a921ed465013683c1d3cb64d84c1ae32f21c4e14bb02c15491bba4a51cb78021457b1e114fd898513d5e0bf970b47d2b80108f176050ebf78dde5cc82cb34ed2c99ccb4d7928df430a754e58b616dedc037ebd32aa4528217f5ede44bd46f746b0bb3d25170334c179b90e10d6fb6aea9b7d1aa1b72ff4285d68111c0f9a4735c886cb9794619f598d6d9818c6fb58104ecdd934ccedcd3ac57e5f3cf606ce71ed027767d4c38aaa2453530a8aa1b60c496a318ea1c6ee7a638d5d5563ea97193c176d47bb5a07238e531ee0ad94398b0bcc2ea07d33292eb8e3cc47c469ad7bcbb29ed3f32e8c29b878194a7a958c0215204ef71b72efe6834e15f43559efeb6ca1090cd441573fa963bda420b379f4e92121d6dd331b3838887fe076b67c870b9fd82f2beaea3c3fce783c6d38b36856ee07bb937793082b8cadc3ddbae53992c5b05401e41563543db0d372cb96a548d4a67292d093b371d7a711addebba573a514a4960102b4ec830f7530422de3ebf9ff5ec491ce124ca163234dd916d231f10a7acf150a8c1c423f5bc0347b5959a7cd73b6275c0fe1d562c33f37f3ce3f0c9ef35dc2158234880f0d19d08cf110c8312492809c8b59f2fc2e5f57d3870b3c2e4ee7056363b9f4c76ed31d99136baf33be8c1529fee46807db82a868c7755d7c0091c4a931b64c41c353489e2e1354f92d804400e4422a5d79a43f947b94dc5e5b62733522c05d8f6bc79a66d2e916156319930e3276252ab5abb298540800c8e83551800bf0940208e06006f0f4d4555aa059ac5979792ce423fdc814ba1c9cdd4250cc603e81020b2fc3afcbe881d96249d7eaf043fd450ca5713440c6361af785fa0db1f027252bd25b10aec2c2bad0a75855947091282c2db164735f0a0a4e365de20c70579bd4d8cb0597e2c1096bcaba0d976a790b6c0f0e0745f624f5479b956a67842f2d19d91d14f64dfc3f493885e495e012cccc5410163cac4eee4828c74216456803d229c9416e0526dde67edc2dc0cbca10d7091b53619a3746c71f2b6fb66c7d81cdd6dbb8b7944f9148ed5ffe6faf168938c921ba8b308bbbcdf10bef25379534e81b5a4cdee6c56a002151ed99af1db3f3565fb3a3e95675d1bd20b69d869405d84ae43ea421b014451c5f8039eebcdcc7718ddbd2a293a849892d8364d193c4a67aafffdd340913b85032374fae537638651fae1b6df28daea3a017945401a265bf1e651e61e70cf82ba03346396f089be14fe21b4e9af2e5ba91959463e8cd9564e019bb6267c59ec5ca650e981e1b798fbd04975d93150b50e01e61d41b4d7d37a5b34f1a9c9787182f48dc3f2b41dbf795c3889c62a1d54a3b3ad018f087fd0e82f40235abacb2d9f6d98eb8a98b50ac409c73600fa0acfb88684a020b25d00b8475ac0968aafdef7b3a508ccf40c005c9a9f8c43342ef0a03e133f7be24a2085512ca5461af4e4e8d97491834c49440eee1581a1414510584b5a78d768c8611ef731e521d1402e7e61f9b058d6f8880b3abb4019db1a60ac5903786307f301010bbef269cc1298d8911c58e2f0c68e50e2b93ba9365762b8554f8ad3ebf3ed2ccf198328255a641b1d38db97eb74d185773e7922ad0424aacac23da3c77e8fce83fd7f0a3f5933e66ea0f0e8fcdf0922df4d4d7fe4508ef922aa4909b0500000089ed1936f55ee23ad0615f1927f2ee6ce67a8534941c8225e03803645714360743854a5632492ea0d0aa62401cb4ae72f6530c40f9e310bb024ae6547d641cb2d87e356a7b6b670920d2c40d7735de13ca6bd1feaf469259e2bf80b9e81ade19bff7f4037d7b74ee98c245c48a79b31f91bf180000d81591a4ddb11b07ee5d825de67ef8fa922e334580719e4d95a164500d5699e5342d569d8b18875b4563396b400393e59f0509353f4d0f684951cb9ceb7be269b2357daf495bc31727c232ec1158249386c8191e03166032159e856fdbeea75413c7f74f5a22bf56013156fc9598a76feca2cbe59bdfb704e975d7bae26b98ec7fc0c2cbbca2d235479f920a29ddebb6953b26e2d9f706d38f6beb5af6dfa6e499fff9ce2462017fe611538a4862922dbfbdb56b1aa80cff39633c2392203d3cecdbc33433932fd68194c82d58bbd2dfbfad76c99b6802cd0c21204a35114a75cb4b856af4ed118bafda9263e4076886c775db3521ebc294dfb0a2a25c5996d9c7b7afbfb0b2cdc199fba721c76bc5f583ceee1f5d863d6cb32ff9f6bdf61ea5f61b967e488c976e591a16105a750196d4af68a7295b5948600f0d312f744682f0a3e73c2cfe72b1719f6496f04d2b30b840ccc6c77d1f575716a48a07266d76990b7dc0ac7aa2e7430411a4c2f903aa3bfae69355e79147d7b5dd0bfd324a4d7ab232026bcb5fe714fa30c7e07e2cc17a08d18759ebaf3a1b55cb25c5bc4261e21a8f1e8f18b745a55b5c838c79354d254bd38788a3194f973e843b1d7232d5786b69d9465620f4fb21a3f1143516d07a52c6d243c3601f69ae899c055700dbce52d81a5936924e094aab0e636b07a958061ce7ca0e1503791cc10ce9199c8409ed5613398642d6cbe7f428ecb28bdf0768875a21f1cf81700cf2fa2e0764a8053ed13906b103a2886607782b27728a0dff3b68435504cc4d6de481e2592547292e922828e343732638871eb732f1c1f7df3ba981f088eb64903024af33f7034549e4a978e2840eb5da738b08ff21ffa4cc50fe324ac83888a7551ffa5bde37d8919772abdc42d7ab10201e0e9018e95283e772507b34a939e0971c42c3e8def7f7b71ae21d02d7fd4d42dd7ee950c929fb399335f04acde32bcb387134cd48151d9a2da947f91b80ee3a19d3c4e21f77435104b9fd5a096ad3db865cac2295903d1d827515f9a7bffbb9b27af00e9516f434b112600a22b9f5a4a2ed0a50a0a851d54149cb8efb15cda7096e7c465c41be5970bc45857b39e40b86482aee77bbca9cbbed51c75016383a4ab500e624567c086da2087e0fc3a9b03d8a759d3ed6926a305654e1b3a7e0d0c9894adfecbd0463b413ea782324c91c2b5ebd0bb978a69fec5b4eb122e60bb1f88f74287ad13469422fb64e383dafd0318127a5171a3b4b988ac9b921539fb8b094fbf2b3e74138c1cd0424a3e7b9424f925412098c39bf1371c32ca5489d76876a6df3a01ec3be7f9801755aeda1d84a03eb60e9d5a7bbe60dd7d78dd1f5cf8d3175de0942fcb0ef153b8fd0d15efa384c1d115cd1aa46bdd019e46f049b9abc04886e9c9e62c4776d245015fd8a207e6fbd52f0b0a613c363c9a6af7e1678311c225875eb7cd95de4631b263a9908c47ba151bfc8ab989fc6dc3a819cddd61fbb5efb69ca819de07e4d7031fea0d53fa1b6dbb5762e9762a33556885a6fb714a8911ef544f27a343e6b585bd068ecb9e225cfe8da13189d3a55c0430a18f109dde99d12210000c1dd2ad0222ed806e000f41d2eb9a36d6ff43358d79e4427fb59f4b1b21756a38eee8e96078e38209a09ba431be1796960a511784b1db6be698284160ae8c8e34104faae913679c225bb617038e9036d36611c0f2a34602ce04a24eb05b626a5ee30d6105f352714cae810acb69ada6e5bcc58123be1f17d08c8640764dfb91d973904c21d4f9bb8dc7fed676594567da69470fb4e6340679f68c0877cecea3948b4139689db494eea65e96b6d9285aa82a5dd7f9c1575b3dc895dc0c90219af519d21e5a555786332ccdef48ba6e80312f678f5302cb8534f2faf4cf2aaabe0a9c2ae57107dff11a51ef931c7471a33c300cc676d2877715b35298210a73384d4e3c0d1fa28169e3933cc6158ddbebbee12a57be75a6823bce0e71974abc110107873421c804f82b170f63287458186fae3d0420180ffffaae5e9a6001f452e7c4b1d349c143ae11c268d3e8fb088b43e90b61c959de771519ae3dc426d52459cedaf544dd90492ae08ef3c064002bf2fb7eaf763ffedd8a9c6dbc493f7d39c3c60f0fbf9f423410f5ddb6e949e9fcd8e5a65aa0bbbc623224a728d852952d515a80acbe9ef3b8a6b8ac9a95c23a7d047208ba1687eaad6805f43f3ad694275bfbe34ae50fa0fad00f99ab9927449d7806a8291e941ef3467bb3b7a92ee6a5f7036468df3bb4c36c20c81a0fc98bd6fa973685ed526f6302dc7776f1d44207817271bf3a207313bedfc87e84abb40d34bb01d426ed7fe355a982e352bd97a9f3a3b83d679872fa7c572bc9c8fa24223b445cffb9d8b37632b428feb777abfb6c5663b2b12a7d419e4d0b4d2801437e369d20b613fb50543bf06c3a0608fb149926961d84b6ea3c87146b71295e5dbc239cf4586f3910100eba3b9a1545ce490aebe4ef1869c2088e16309f6a60d6034414dd93c19b0b38cc39473e5565d81e1d18908f7e0847debde84baab768896893632b834004a1c1bd49076ce6083c896011d31ebd6909375bf910cfa8d88d79e4118d1708f427718766401ff994b91e010852d9fe085f9ccb45422a10fe86b11f4e03294f03323ec9f8393fd8ce6d20623bd0af2391f75e1951732e401a3eea31df5a6b70817ba0dc44abc50eb646b91706c95c397e63a3102388cbadb13dc8c95b231b30231da7ed7ebe5629ddf799c9ddc822474573391ad83b692cda95389192f4f0d52c57ab4980cc629a3058a55543f778b671b7e1f4b9f5c38e54832b39160a8585f2bbd56f6eb3aad1262074313b271e1d641e6d6e2df747e018cd9e69dca6dcb090a16ec3bdd7f5f8176515392cfb251d30396df12c07287a59d94c8f6cf85c160fc18c9ce3376e687050e05dccb24c3cc7c0f6242f84dec1595eac4683c3b9a559ff2612414fe3214ca64b283877552d3969d3918203a762f385ba6a81c1627e2a8cb61be80b9feab1b842bbe8e77682cf02134b71a27ae5e7371e3f5f540d90ae04d4418ae6252a3f6b217c4ba075f044ec4343becfcf2fd7f04871ba2ed3eb31fa846734dc3db40246f4f689d8b5914bb4804aa2c5e4ec0730570cccaa4f993929b5409c5aad1856fb084c5062cd6f69c80ba87e3bce46c11dc898baed7a6c192f4f8be86dbdf0f5ed0625b56d365f5efceff7aaa3109a9afed3fa73ff500cd4dbba68ca845afaa1434aeff819a219d8a1e4ecfa4b08bc1c12b569752d576f233924729a429d360f00c389068153dd3f6e1f38b0803bc6d7a970f05c76fdd6520d8f3f3f1b79cde9c310a4c4a9f4491fbad53956661d86e2d7b173f471ce93829f31f1be9a9436d0fbcd99286a1d1d2593061ebf4b37133ab65a147921eed378c73e9cab938599935030459b5864dd4986925e359c633c23339292f3b1f085f9e9a56144c712992de05fd54d0f710dfc3081457682df5703058923c07201f57a0a21a0bcde96941f9927b5162e2d7de95358af827bb50898d876b928a51e927e100ec4cf75052a703f816bb8de764609da6d18553390c931290aae033cb92143b2a51ea600ccee9224c8a1c29636a5801df6929433a1358fd9d4dde4e8fede6173fb65a95ce54904b167f960edd3d917052dee785dd0f1c92a49d9839c17569914dd8dfc6b5151e74beabc276a9451f4cf7bbd26770b829b782cfd4ba15a94ea8e8e83015c5e34ebf810de7f199efecce0905df8d714fe102d8b3a9184701cdeb22ff9462db3a7741b0426d6b56eb6946eeb6e218a54dee83f96c40944fdcedc6f98d39e28cdafe27e5bdb1a58df29efcd8b2764fc3a162ed85ad1a6bf7d9b8aa25c6951167d911f55c1621b36f4d0f78d55934337b48dcb2dd8870923cedb82bda4d395a795f473ba54c2699e95638eb153cd848ea4dd2ab8b14b9a8cb9b8409e41a1e482f79310262f9476c8ce04d5d40d47d49aecd42ef931955c02300", 0x2000, &(0x7f0000000140)={&(0x7f0000000680)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x2, 0xffffffff880a0100, 0xff9c, 0xfffe, 0x10004, 0x5, 0x0, 0x0, 0x10, 0x92}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m53.420493177s ago: executing program 7 (id=4669): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x32}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 12m52.16497576s ago: executing program 7 (id=4672): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000280)={&(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x2}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000001180)={0xd271, 0x7, 0x8, 0x4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4101, 0xffffffffffffffd6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x5dfbd751, 0x401) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x1, 0x8, 0x6, {{0x19, 0x4, 0x1, 0x29, 0x64, 0x67, 0x0, 0x10, 0x29, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0xfb, [@remote]}, @end, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x8, [{@local, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x7c, [@local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x58, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x58}}, 0x48013) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000060030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) 12m51.931240117s ago: executing program 7 (id=4673): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff9500000000009fdf000000000000b8868f205b67b504774a9fe38764fe6ea651cfb49faa6aad18307dad8e2de7e74613d07676e348f2d3c9ba05c4c1c0817fb3adf827bc4eea0816083aec7fdb991ff6ac7a56491a6abb3b38d216a0c8a56c59dc72"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 12m35.579999022s ago: executing program 39 (id=4673): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff9500000000009fdf000000000000b8868f205b67b504774a9fe38764fe6ea651cfb49faa6aad18307dad8e2de7e74613d07676e348f2d3c9ba05c4c1c0817fb3adf827bc4eea0816083aec7fdb991ff6ac7a56491a6abb3b38d216a0c8a56c59dc72"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 8m55.920704105s ago: executing program 3 (id=5370): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x32}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8m54.926844902s ago: executing program 3 (id=5373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r5, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x6dcb, &(0x7f0000000080)={0x0, 0x3eeb, 0x200, 0xfeffffff, 0x211, 0x0, r2}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) 8m53.92168635s ago: executing program 3 (id=5375): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/101, 0x65) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110b800009500000000000064"], &(0x7f0000000000)='GPL\x00'}, 0x94) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f00000001c0)={0x8, 0x4, 0x9, 0x3, 0x1, 0x1, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4085}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB=' \x00'], 0x38, 0xc}}], 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r4, &(0x7f0000004380), 0x34000, 0x0) 8m52.882079345s ago: executing program 3 (id=5378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@access_client}]}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1\x00'}) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r6, &(0x7f0000002000)='`', 0x88020) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') ioctl$KDADDIO(r2, 0x4b34, 0x1) pread64(r9, &(0x7f0000000300)=""/4092, 0xffc, 0x4) ioctl$TCSETS(r8, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 8m51.593797895s ago: executing program 3 (id=5380): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') read$FUSE(r5, &(0x7f00000066c0)={0x2020}, 0x2020) bind$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000001780)={@local, @empty}, 0x8) r7 = dup3(r4, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x400c6313, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x7fd8}], 0x20}, 0x40040) 8m50.331602621s ago: executing program 3 (id=5383): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2d, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 8m50.329530156s ago: executing program 40 (id=5383): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2d, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 12.673175763s ago: executing program 9 (id=6499): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0xe) 9.221506323s ago: executing program 2 (id=6505): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000007d00000085000000a000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.929636331s ago: executing program 9 (id=6507): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0xe) 8.095740369s ago: executing program 2 (id=6510): socket(0x2, 0x5, 0x0) openat$proc_mixer(0xffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0xa2000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x4000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d", @ANYRES64=0x0], &(0x7f00000000c0)='GPL\x00', 0xffffffff}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r4, 0x4b48, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r6, &(0x7f0000000700)=""/115, 0x73, 0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec02010902"], 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x13, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4b}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf71}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) ioctl$XFS_IOC_GETVERSION(r7, 0x80047601, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r2, 0x2, 0x0, @val=@tcx}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 7.871040905s ago: executing program 6 (id=6512): open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) truncate(0x0, 0x7) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42402, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000107, 0x0, 0x3}]}) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000002c0)={{0xffffffffffffffff, 0xfffffffe}, {0xfffffffffffffe29, 0x5}, 0xfffffe29, 0x6}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xeeef6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r4 = creat(&(0x7f0000001fc0)='./file0\x00', 0xa8) sync_file_range(r4, 0xf, 0xfffffe01, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000080)="5aee41dea43e63", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.853949157s ago: executing program 6 (id=6513): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0xe) 7.462874755s ago: executing program 4 (id=6514): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$video(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) 5.433139166s ago: executing program 9 (id=6515): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) r5 = fsmount(r3, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) fchdir(r5) ioprio_set$pid(0x3, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c86173ed800000800000d042abd700000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800800088000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x7, 0x9, 0x1, 0x0, 0x0, [{{r10}, 0x8}]}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) 5.432660727s ago: executing program 4 (id=6516): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0xe) 4.859242261s ago: executing program 2 (id=6517): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "9ef7b4ce16dd42f63568c45e3e2238a22a30d7ba9ddbaa64f366ca37bd673a231bcd1a3c4309a39feaf8e789082ecdedfab4deaf2c53126f569203ba06250c1c", 0x24}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r5, &(0x7f00000036c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.827538066s ago: executing program 6 (id=6518): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000035000701feffffff00000000017c00000c00018008000600", @ANYRES32=0x0, @ANYBLOB="100002800a005a00626f6e8e"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x20008000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a38d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRES8, @ANYRES32], 0xffffffffffffff9a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4.262149666s ago: executing program 9 (id=6519): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="2c7eaeaa6f83f16cbc705ce90148ec63f879d3923bd7351eb631605e0825bff9d782a5cece5a435cf96b579afc6372a6518f67e30907667132e9b362e8ae359a6b3788b76c454c1f40f735159421bf995d196da0717230e52dc0b98369cc743ce0ea6014f272c6444d9939b296263a6e962122ee94c57a5a2cf01b02cd4e4b2bdba3c75bbfaedc2b2d710d03848dc7cbf26d25fffede8955147e1605089f397e9a570ec62ff90ee154287fca5aac1b94388082b0638b38d6646a38", @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010000", 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a30302c0037dee519afbc84d6cd05a87055c81362d1cc3b7a657a04da5548b2f086d25d2d4e3c25614b5a1818c6a0a23fcb8fe41dfdef4c0d58c2ef76866785cb87f98f1ec16dbb83d47a513b6a6b6e772c6a3cfbf1ff6bd40ccae5df"]) 4.261392603s ago: executing program 6 (id=6520): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0x7, 0x1, 0x100}}) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffe5f, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r9, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=0x0], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x64ba2875a9503670}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {0x3, 0x10}, {0x4, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 3.819666729s ago: executing program 4 (id=6521): open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) truncate(0x0, 0x7) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42402, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000107, 0x0, 0x3}]}) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000002c0)={{0xffffffffffffffff, 0xfffffffe}, {0xfffffffffffffe29, 0x5}, 0xfffffe29, 0x6}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xeeef6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r4 = creat(&(0x7f0000001fc0)='./file0\x00', 0xa8) sync_file_range(r4, 0xf, 0xfffffe01, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000080)="5aee41dea43e63", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.803312826s ago: executing program 4 (id=6522): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0xe) 3.602014723s ago: executing program 9 (id=6523): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$video(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) 3.596178634s ago: executing program 2 (id=6531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x55, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040085}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r3, 0x8800000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000400)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3.389075175s ago: executing program 6 (id=6524): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0xe) 1.59138392s ago: executing program 4 (id=6525): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x202000, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="0000000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) epoll_create(0x5) socket(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r2) syz_open_pts(0xffffffffffffffff, 0x119000) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet6(r6, 0x0, 0x8880) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.449644398s ago: executing program 9 (id=6526): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r5, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.415959822s ago: executing program 2 (id=6527): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03007c0c5cc9"], 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff45, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r2, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) io_setup(0x7ff, &(0x7f0000000680)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000003780)=""/4096, 0x1000}], 0x1, 0x165, 0x2) 385.122397ms ago: executing program 4 (id=6528): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0xac) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000003, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x9, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x1, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x0, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0x4003, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc68, 0x9, 0x7, 0x3, 0x9, 0x3, 0x2, 0xfffffffa, 0x5, 0x2008000, 0x3, 0xffffffff, 0x4, 0x5, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0xfffffffe, 0x45c, 0x80, 0x3, 0x9, 0xff, 0xdef0ff4, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x4000006, 0x4, 0x8, 0x485e, 0xa89, 0x0, 0x2, 0x7, 0x7, 0x101, 0x2d5421e5, 0x7, 0x10000, 0xffffffff, 0x400000ed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x4, 0x8d, 0x1, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x8, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b17, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x7, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0x20000401, 0x1ff, 0x8000, 0x3, 0x4, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0xb, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x1, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x8) 163.127829ms ago: executing program 6 (id=6529): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) r5 = fsmount(r3, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) fchdir(r5) ioprio_set$pid(0x3, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c86173ed800000800000d042abd700000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800800088000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x7, 0x9, 0x1, 0x0, 0x0, [{{r10}, 0x8}]}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) 0s ago: executing program 2 (id=6530): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0xe) kernel console output (not intermixed with test programs): T9] usb 14-1: Manufacturer: syz [ 1570.119532][ T9] usb 14-1: SerialNumber: syz [ 1570.260892][T28390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1570.795897][T28396] atomic_op ffff8880251ea998 conn xmit_atomic 0000000000000000 [ 1570.849602][ T9] legousbtower 14-1:14.57: interrupt endpoints not found [ 1571.579732][ T9] legousbtower 14-1:14.228: get version request failed: -71 [ 1571.592511][ T9] legousbtower 14-1:14.228: probe with driver legousbtower failed with error -71 [ 1571.609327][ T9] usb 14-1: USB disconnect, device number 5 [ 1573.504344][T28438] overlayfs: failed to clone upperpath [ 1574.953492][T28448] ptrace attach of "/syz-executor exec"[28453] was attempted by "/syz-executor exec"[28448] [ 1575.521597][T15372] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 1575.712511][T15372] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1575.724415][T15372] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1575.739757][T15372] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1575.755495][T15372] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.801643][T28459] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1575.821741][T15372] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 1576.774805][T15372] usb 14-1: USB disconnect, device number 6 [ 1579.235172][T28514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5618'. [ 1582.959688][T28549] atomic_op ffff88802ab31998 conn xmit_atomic 0000000000000000 [ 1588.783478][T28617] ptrace attach of ""[28618] was attempted by "/syz-executor exec"[28617] [ 1588.838403][ T42] audit: type=1800 audit(1782890757.504:54083): pid=28617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5647" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 1589.889643][ T9] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1590.054537][ T9] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1590.064164][ T9] usb 9-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.083623][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1590.090427][ T9] usb 9-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1590.101690][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.114930][ T9] usb 9-1: config 0 descriptor?? [ 1590.123689][T28628] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1590.623853][ T64] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1590.629865][ T9] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 1590.646638][ T9] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 1590.666251][ T9] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 1590.680571][ T9] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 1590.688422][ T9] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 1590.701504][ T9] a4tech 0003:09DA:022B.0005: unbalanced collection at end of report description [ 1590.819774][ T9] a4tech 0003:09DA:022B.0005: parse failed [ 1590.832871][ T9] a4tech 0003:09DA:022B.0005: probe with driver a4tech failed with error -22 [ 1591.179470][T28651] Invalid source name [ 1591.180904][T28651] UBIFS error (pid: 28651): cannot open "./file0", error -22 [ 1592.607587][T19001] usb 9-1: USB disconnect, device number 5 [ 1593.134712][T28657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1593.156532][T28657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1594.365182][T28668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5657'. [ 1595.476574][ T1044] libceph: connect (1)[c::]:6789 error -101 [ 1595.479713][ T1044] libceph: mon0 (1)[c::]:6789 connect error [ 1595.482828][T28661] ceph: No mds server is up or the cluster is laggy [ 1596.221401][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.228456][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.391551][T28698] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1598.268766][T28715] serio: Serial port ptm0 [ 1598.581092][T28712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1599.825232][T28730] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5671'. [ 1602.784964][T28773] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5681'. [ 1602.969247][T28776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1602.971711][T28776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1602.982563][T28776] vhci_hcd vhci_hcd.0: Device attached [ 1603.361032][ T1044] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1604.336097][T28777] vhci_hcd: connection reset by peer [ 1604.341505][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1604.343609][ T12] vhci_hcd vhci_hcd.4: release socket [ 1604.350881][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1604.778213][T28797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1604.781033][T28797] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.790995][T28797] vhci_hcd vhci_hcd.0: Device attached [ 1605.106723][T22116] usb 42-1: SetAddress Request (14) to port 0 [ 1605.119160][T22116] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1605.536185][T28808] binder: 28807:28808 ioctl c0306201 0 returned -14 [ 1605.563049][T28798] vhci_hcd: connection reset by peer [ 1605.571709][T26611] vhci_hcd vhci_hcd.2: stop threads [ 1605.571743][T26611] vhci_hcd vhci_hcd.2: release socket [ 1605.572843][T26611] vhci_hcd vhci_hcd.2: disconnect device [ 1608.953796][T19001] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 1609.117455][T19001] usb 14-1: Using ep0 maxpacket: 16 [ 1609.245158][T19001] usb 14-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1609.250565][T19001] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.259706][T19001] usb 14-1: config 0 descriptor?? [ 1609.265582][ T1044] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1609.265718][T19001] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1609.417171][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5696'. [ 1609.437870][T28863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5696'. [ 1609.820555][T19001] gspca_sonixj: reg_w1 err -110 [ 1609.820621][T19001] sonixj 14-1:0.0: probe with driver sonixj failed with error -110 [ 1609.935840][ T5843] usb 14-1: USB disconnect, device number 7 [ 1610.589924][T22116] usb 42-1: device descriptor read/8, error -110 [ 1611.026554][T22116] usb usb42-port1: attempt power cycle [ 1612.257986][T28892] bond0: (slave 30): Releasing backup interface [ 1612.378617][T22116] usb usb42-port1: unable to enumerate USB device [ 1613.070467][T28892] bond0: (slave bond_slave_1): Releasing backup interface [ 1613.159553][T28892] team0: Port device team_slave_0 removed [ 1613.224724][T28892] team0: Port device team_slave_1 removed [ 1613.241857][T28892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.270555][T28892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.309509][T28892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.322457][T28892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.392248][T28892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1614.199453][T28913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1614.202620][T28913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1614.206102][T28913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1616.044719][T28928] ./bus: Can't lookup blockdev [ 1616.398883][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 1616.398961][T21960] Bluetooth: hci1: command 0x0406 tx timeout [ 1616.400867][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 1617.155799][T28943] serio: Serial port ptm0 [ 1617.446217][T28945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1618.426425][T28961] binder: 28960:28961 ioctl c0306201 0 returned -14 [ 1621.600077][T29018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.045680][T29021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1622.048958][T29021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1622.052793][T29021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1624.301688][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 1624.304512][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 1624.307182][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 1625.540743][T29046] binder: 29043:29046 ioctl c0306201 0 returned -14 [ 1626.008914][T29063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.028842][T29063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5730'. [ 1626.666226][T27984] udevd[27984]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1627.177101][T29097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1627.180332][T29097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1627.183958][T29097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1627.229638][ T42] audit: type=1326 audit(1782890792.927:54084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.229705][ T42] audit: type=1326 audit(1782890792.927:54085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.229752][ T42] audit: type=1326 audit(1782890792.927:54086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.229797][ T42] audit: type=1326 audit(1782890792.936:54087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.233759][ T42] audit: type=1326 audit(1782890792.936:54088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.279950][ T42] audit: type=1326 audit(1782890792.936:54089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.285790][ T42] audit: type=1326 audit(1782890792.982:54091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.288516][ T42] audit: type=1326 audit(1782890792.982:54092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.288757][ T42] audit: type=1326 audit(1782890792.982:54093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.289338][ T42] audit: type=1326 audit(1782890792.973:54090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29093 comm="syz.9.5735" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5fec code=0x7ffc0000 [ 1627.333011][T29105] overlayfs: failed to clone upperpath [ 1627.415461][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1629.510473][T25885] Bluetooth: hci2: command 0x0406 tx timeout [ 1629.510581][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 1629.513928][T25885] Bluetooth: hci1: command 0x0406 tx timeout [ 1631.397670][T29149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1633.053057][T29169] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1633.062755][T29169] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1635.198330][T29186] netlink: 'syz.6.5758': attribute type 10 has an invalid length. [ 1635.312342][T29191] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1635.315027][T29191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1635.318980][T29191] vhci_hcd vhci_hcd.0: Device attached [ 1635.410156][T29194] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1636.079564][T22116] usb 46-1: SetAddress Request (2) to port 0 [ 1636.099035][T22116] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1636.314281][T29192] vhci_hcd: connection reset by peer [ 1636.319287][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1636.323782][ T12] vhci_hcd vhci_hcd.4: release socket [ 1636.327696][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1640.640755][T29246] 9pnet_virtio: no channels available for device syz [ 1641.531820][T22117] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 1641.629675][T22116] usb 46-1: device descriptor read/8, error -110 [ 1641.723243][T22117] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 1641.738181][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.746466][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.754794][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.781759][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.788111][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.797429][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.829220][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.848358][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.853293][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.867938][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.874492][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.884582][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.893574][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.898824][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.908022][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.918182][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.922693][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.935504][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.940470][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.948185][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.948357][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.952453][T22117] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1641.953072][T22117] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1641.953193][T22117] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1641.977002][T22117] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1641.990938][T22117] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1641.991161][T22117] usb 14-1: Product: syz [ 1641.991176][T22117] usb 14-1: Manufacturer: syz [ 1641.991190][T22117] usb 14-1: SerialNumber: syz [ 1642.029860][T22117] usb 14-1: config 0 descriptor?? [ 1642.077964][T22116] usb usb46-port1: attempt power cycle [ 1642.122065][T22117] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 1642.650075][T15372] usb 14-1: USB disconnect, device number 8 [ 1642.655262][T15372] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 1642.722845][T29251] batman_adv: batadv0: Interface deactivated: gretap1 [ 1642.729897][ T846] syz2: Port: 1 Link DOWN [ 1642.729924][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.736589][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.739934][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.743367][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.757411][T22116] usb usb46-port1: unable to enumerate USB device [ 1646.016695][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.028581][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.959921][T29339] overlay: ./file1 is not a directory [ 1648.999891][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5794'. [ 1649.027622][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5794'. [ 1649.567548][T29359] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5797'. [ 1652.578377][T29377] fuse: Bad value for 'fd' [ 1653.225355][T29364] debugfs: '1ùà^!`lü1&›b¯Þ0xUÐÏ”ÎÜr$åG—•µ' already exists in 'ieee80211' [ 1653.343212][T29391] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1653.346128][T29391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1653.363927][T29391] vhci_hcd vhci_hcd.0: Device attached [ 1653.908350][T22116] usb 56-1: SetAddress Request (6) to port 0 [ 1653.910671][T22116] usb 56-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1653.930462][T29392] vhci_hcd: connection closed [ 1653.933596][T26454] vhci_hcd vhci_hcd.9: stop threads [ 1653.938571][T26454] vhci_hcd vhci_hcd.9: release socket [ 1653.942331][T26454] vhci_hcd vhci_hcd.9: disconnect device [ 1653.947174][T22116] usb 56-1: enqueue for inactive port 0 [ 1653.948810][T29403] ubi16: detaching mtd0 [ 1653.965346][T29403] ubi16: mtd0 is detached [ 1654.445949][T22116] usb usb56-port1: attempt power cycle [ 1655.057417][ T42] kauditd_printk_skb: 145 callbacks suppressed [ 1655.057440][ T42] audit: type=1326 audit(1782890818.605:54239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.064667][T22116] usb usb56-port1: unable to enumerate USB device [ 1655.134944][ T42] audit: type=1326 audit(1782890818.605:54240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135002][ T42] audit: type=1326 audit(1782890818.615:54241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135040][ T42] audit: type=1326 audit(1782890818.624:54242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135079][ T42] audit: type=1326 audit(1782890818.624:54243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135116][ T42] audit: type=1326 audit(1782890818.624:54244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135158][ T42] audit: type=1326 audit(1782890818.624:54245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135204][ T42] audit: type=1326 audit(1782890818.633:54246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135241][ T42] audit: type=1326 audit(1782890818.633:54247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1655.135342][ T42] audit: type=1326 audit(1782890818.633:54248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29412 comm="syz.2.5810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1657.043170][T29437] netlink: 'syz.4.5812': attribute type 1 has an invalid length. [ 1657.542949][T29437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1658.989587][T29454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.075701][T29465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.094788][T29454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1660.770074][T29464] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1661.904837][T29495] loop5: detected capacity change from 0 to 7 [ 1661.926654][T29495] Dev loop5: unable to read RDB block 7 [ 1661.929933][T29495] loop5: unable to read partition table [ 1661.932507][T29495] loop5: partition table beyond EOD, truncated [ 1661.935107][T29495] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1663.437639][T29514] ptrace attach of ""[29516] was attempted by "/syz-executor exec"[29514] [ 1663.504072][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 1663.504093][ T42] audit: type=1800 audit(1782890826.402:54366): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5831" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1663.633640][T29515] bond20 (unregistering): Released all slaves [ 1664.637334][ T42] audit: type=1326 audit(1782890827.445:54367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.679493][ T42] audit: type=1326 audit(1782890827.445:54368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.701617][ T42] audit: type=1326 audit(1782890827.445:54369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.721613][ T42] audit: type=1326 audit(1782890827.445:54370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.737721][ T42] audit: type=1326 audit(1782890827.445:54371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.737755][ T42] audit: type=1326 audit(1782890827.445:54372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.737778][ T42] audit: type=1326 audit(1782890827.445:54373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.737800][ T42] audit: type=1326 audit(1782890827.445:54374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1664.737822][ T42] audit: type=1326 audit(1782890827.445:54375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29524 comm="syz.4.5835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 1666.017006][T21960] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1669.699727][T29596] netlink: 'syz.4.5851': attribute type 10 has an invalid length. [ 1669.838233][T29596] team0: Device veth0_vlan failed to register rx_handler [ 1670.750212][T21960] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1670.756574][T21960] Bluetooth: hci1: Injecting HCI hardware error event [ 1670.767752][T21960] Bluetooth: hci1: hardware error 0x00 [ 1670.889143][T29601] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1670.893771][T29601] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1670.897895][T29601] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1673.015431][T21960] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1675.964932][T29630] pim6reg: entered allmulticast mode [ 1676.504613][T29631] pim6reg: left allmulticast mode [ 1676.987162][T29646] Invalid argument reading file caps for ./file0 [ 1678.710926][T29662] bridge2: entered promiscuous mode [ 1678.716064][T29662] bridge2: entered allmulticast mode [ 1679.391196][T29666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1682.233198][T29692] FAT-fs (nullb0): bogus number of reserved sectors [ 1682.236068][T29692] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1683.739414][T29703] could not allocate digest TFM handle md5 [ 1683.780773][T29691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1683.929070][T29710] netlink: 'syz.9.5872': attribute type 10 has an invalid length. [ 1683.934228][T29710] veth0_vlan: left promiscuous mode [ 1683.938071][T29710] team0: Device veth0_vlan failed to register rx_handler [ 1686.658803][T29735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1689.055217][T22116] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1689.231870][T22116] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1689.256350][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.256403][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.256428][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.257406][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.257444][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.257468][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.258425][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.258462][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.258488][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.259483][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.259517][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.259542][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.260648][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.260693][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.260723][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.267543][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.267588][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.267612][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.268579][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.268616][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.268638][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.269695][T22116] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1689.269731][T22116] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1689.269755][T22116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1689.279430][T22116] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1689.279458][T22116] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1689.279477][T22116] usb 9-1: Product: syz [ 1689.279491][T22116] usb 9-1: Manufacturer: syz [ 1689.279504][T22116] usb 9-1: SerialNumber: syz [ 1689.282004][T22116] usb 9-1: config 0 descriptor?? [ 1689.341267][T22116] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1690.007741][ T9] usb 9-1: USB disconnect, device number 6 [ 1690.034716][ T9] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1690.523448][T26454] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.529522][T26454] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.562593][T26454] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.566042][T26454] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.606805][T29781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1691.609438][T29781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1691.612503][T29781] vhci_hcd vhci_hcd.0: Device attached [ 1691.747549][T29781] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1691.894805][T27688] usb 42-1: SetAddress Request (18) to port 0 [ 1691.897656][T27688] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1692.841208][T29783] vhci_hcd: connection reset by peer [ 1692.847401][T26454] vhci_hcd vhci_hcd.2: stop threads [ 1692.849316][T26454] vhci_hcd vhci_hcd.2: release socket [ 1692.851205][T26454] vhci_hcd vhci_hcd.2: disconnect device [ 1693.385362][T29800] loop5: detected capacity change from 0 to 7 [ 1693.440416][T29800] Dev loop5: unable to read RDB block 7 [ 1693.442305][T29800] loop5: unable to read partition table [ 1693.445107][T29800] loop5: partition table beyond EOD, truncated [ 1693.447532][T29800] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1694.001408][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1694.528375][T29809] ./bus: Can't lookup blockdev [ 1695.397275][T29815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1697.384459][ T846] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1697.385365][T27688] usb 42-1: device descriptor read/8, error -110 [ 1697.566090][ T846] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1697.568894][ T846] usb 9-1: config 0 has no interface number 0 [ 1697.571396][ T846] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.577400][ T846] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.581513][ T846] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1697.584699][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.590500][ T846] usb 9-1: config 0 descriptor?? [ 1697.817077][T27688] usb usb42-port1: attempt power cycle [ 1698.393086][ T846] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.1/0003:04D9:A055.0006/input/input21 [ 1698.973215][T27688] usb usb42-port1: unable to enumerate USB device [ 1699.176480][ T846] holtek_kbd 0003:04D9:A055.0006: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 1699.203635][ T846] usb 9-1: USB disconnect, device number 7 [ 1699.415080][T29840] fido_id[29840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 1703.106212][T27688] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 1703.175612][T29882] ./bus: Can't lookup blockdev [ 1703.437473][T27688] usb 14-1: Using ep0 maxpacket: 8 [ 1703.546889][T27688] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 1703.599282][T29890] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5916'. [ 1703.602739][T29890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5916'. [ 1703.607252][T29890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5916'. [ 1703.639785][T27688] usb 14-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 1704.197584][T27688] usb 14-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1704.445617][T27688] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.451824][T27688] usb 14-1: Product: syz [ 1704.453288][T27688] usb 14-1: Manufacturer: syz [ 1704.459656][T27688] usb 14-1: SerialNumber: syz [ 1704.928354][T29870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.938719][T29870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.593962][T27688] usb 14-1: Audio class v2/v3 interfaces need an interface association [ 1705.688060][T27688] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1705.702812][T27688] snd-usb-us122l 14-1:1.1: usb_set_interface error [ 1705.705445][T27688] snd-usb-us122l 14-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1705.731258][T27688] usb 14-1: USB disconnect, device number 9 [ 1705.763504][T27984] udevd[27984]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1705.796642][T29880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1708.084880][T29936] trusted_key: encrypted_key: master key parameter '' is invalid [ 1708.098542][T29936] sch_tbf: burst 19872 is lower than device lo mtu (65525) ! [ 1708.336680][T29938] FAT-fs (nullb0): bogus number of reserved sectors [ 1708.343278][T29938] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1709.356841][T29937] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1709.882698][T29953] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1709.882769][T29953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1709.883020][T29953] vhci_hcd vhci_hcd.0: Device attached [ 1709.979354][ T8229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.979383][ T8229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.250149][T27688] usb 56-1: SetAddress Request (10) to port 0 [ 1710.290420][T27688] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1710.677658][T29953] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1711.099714][T29969] fuse: fd is not a fuse device [ 1712.408851][T29976] ptrace attach of ""[29974] was attempted by "/syz-executor exec"[29976] [ 1712.513672][T29954] vhci_hcd: connection reset by peer [ 1712.521956][ T42] kauditd_printk_skb: 253 callbacks suppressed [ 1712.521972][ T42] audit: type=1800 audit(1782890871.624:54629): pid=29976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5933" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1712.526426][ T12] vhci_hcd vhci_hcd.9: stop threads [ 1712.638209][ T12] vhci_hcd vhci_hcd.9: release socket [ 1712.640265][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 1713.286628][T29980] kvm: kvm [29979]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1713.291873][T29980] kvm: kvm [29979]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1713.297039][T29980] kvm: kvm [29979]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1713.303907][T29980] kvm: kvm [29979]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1716.377237][T27688] usb 56-1: device descriptor read/8, error -110 [ 1716.492552][T30019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1718.609911][T30024] binder: 30023:30024 ioctl c0306201 800004c0 returned -14 [ 1718.632181][T27688] usb usb56-port1: attempt power cycle [ 1719.304904][T30030] /dev/sr0: Can't open blockdev [ 1719.348684][T27688] usb usb56-port1: unable to enumerate USB device [ 1719.861535][T30035] ptrace attach of ""[30042] was attempted by "/syz-executor exec"[30035] [ 1719.891333][T27688] IPVS: starting estimator thread 0... [ 1719.942576][T30041] binder: BINDER_SET_CONTEXT_MGR already set [ 1719.944967][ T42] audit: type=1800 audit(1782890878.479:54630): pid=30035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5946" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 1719.951867][T30041] binder: 30036:30041 ioctl 4018620d 80000100 returned -16 [ 1720.029799][T30043] IPVS: using max 46 ests per chain, 110400 per kthread [ 1720.474989][T30051] fuse: fd is not a fuse device [ 1722.812549][T30069] ./bus: Can't lookup blockdev [ 1723.706142][T30076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5958'. [ 1724.103637][T30080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1728.590627][T30106] netlink: 'syz.4.5966': attribute type 4 has an invalid length. [ 1728.832757][T30107] ptrace attach of ""[30108] was attempted by "/syz-executor exec"[30107] [ 1729.164803][ T42] audit: type=1800 audit(1782890886.987:54631): pid=30105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5963" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1730.997269][T30123] binder: 30117:30123 ioctl c00c620f 800003c0 returned -22 [ 1732.068279][T30142] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5972'. [ 1732.072453][T30142] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5972'. [ 1732.341295][ T846] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 1732.506268][ T846] usb 14-1: config index 0 descriptor too short (expected 28277, got 36) [ 1732.510504][ T846] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.520259][ T846] usb 14-1: config 0 has no interfaces? [ 1732.529311][ T846] usb 14-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1732.539384][ T846] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.587960][ T846] usb 14-1: config 0 descriptor?? [ 1733.549528][T30161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5976'. [ 1734.124552][T30168] ptrace attach of ""[30169] was attempted by "/syz-executor exec"[30168] [ 1734.232057][ T42] audit: type=1800 audit(1782890891.665:54632): pid=30168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5979" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1735.270714][ T846] usb 14-1: string descriptor 0 read error: -71 [ 1735.285973][ T846] usb 14-1: USB disconnect, device number 10 [ 1739.379605][T30204] gretap0: left promiscuous mode [ 1739.419298][T30204] 8021q: adding VLAN 0 to HW filter on device .` [ 1739.426046][T30204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.433609][T30204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.614809][T30204] veth1_macvtap: left promiscuous mode [ 1739.618127][T30204] veth0_macvtap: left promiscuous mode [ 1739.621574][T30204] veth0_macvtap: entered promiscuous mode [ 1739.624789][T30204] veth1_macvtap: entered promiscuous mode [ 1739.644570][T30204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1739.648508][T30204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1739.653141][T30204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1739.658930][T30204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1739.664107][T30204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1739.671118][T30204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1739.677296][T30204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1739.682808][T30204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1739.686758][T30204] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1739.691673][T30204] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1739.700961][T30204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.704639][T30204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1739.713895][T30204] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1739.719132][T30204] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1739.726513][T30204] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1739.738515][T30176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.760872][T30204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1739.765807][T30204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1739.772261][T30204] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1739.778782][T30204] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1739.783759][T30204] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1739.787912][T30204] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1739.792251][T30204] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1739.797890][T30204] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1739.801722][T30204] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1739.806538][T30204] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1739.810403][T30204] gretap0: entered promiscuous mode [ 1741.969806][T30204] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1742.033663][T30204] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1742.154050][T30216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1743.273178][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.280338][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.285071][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.300030][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.699422][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.714966][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.722338][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.734265][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.750630][T30230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1743.975553][T30221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5991'. [ 1747.723026][T30262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.280868][T30264] ptrace attach of ""[30265] was attempted by "/syz-executor exec"[30264] [ 1748.447535][ T42] audit: type=1800 audit(1782890904.786:54633): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5997" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 1753.123659][T30289] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1755.538195][T30285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6002'. [ 1755.710001][T30297] /dev/sr0: Can't open blockdev [ 1755.872347][T30299] bond2 (unregistering): Released all slaves [ 1758.666754][T30334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1759.194626][T30326] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1759.196790][T30326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1759.199629][T30326] vhci_hcd vhci_hcd.0: Device attached [ 1759.210250][T27580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.218745][T27580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.261719][T30326] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1759.489784][T22117] usb 46-1: SetAddress Request (6) to port 0 [ 1759.491858][T22117] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1759.633361][T30335] vhci_hcd: connection reset by peer [ 1759.636179][T17642] vhci_hcd vhci_hcd.4: stop threads [ 1759.638900][T17642] vhci_hcd vhci_hcd.4: release socket [ 1759.642662][T17642] vhci_hcd vhci_hcd.4: disconnect device [ 1759.823412][T30341] trusted_key: encrypted_key: master key parameter '' is invalid [ 1760.586867][T30357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6017'. [ 1760.726437][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1762.085827][ T42] audit: type=1800 audit(1782890917.362:54634): pid=30362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6018" name="bus" dev="ramfs" ino=118311 res=0 errno=0 [ 1762.557176][T22116] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1762.581726][T30375] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1763.378330][T22116] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1763.391298][T22116] usb 9-1: config 0 has no interface number 0 [ 1763.393355][T22116] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1763.399384][T22116] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1763.406053][T22116] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1763.425610][T22116] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1763.429069][T22116] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1763.431858][T22116] usb 9-1: Product: syz [ 1763.520488][T22116] usb 9-1: SerialNumber: syz [ 1763.524070][T22116] usb 9-1: config 0 descriptor?? [ 1763.528827][T22116] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1763.541317][T22116] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input22 [ 1764.290678][T30364] veth0_to_bridge: mtu less than device minimum [ 1764.300157][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1764.300260][T22932] usb 9-1: USB disconnect, device number 8 [ 1764.303147][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1764.321135][T22932] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1764.599522][T30383] binder: 30380:30383 ioctl c00c620f 800003c0 returned -22 [ 1764.732077][T30385] ptrace attach of ""[30386] was attempted by "/syz-executor exec"[30385] [ 1764.880604][ T42] audit: type=1800 audit(1782890919.946:54635): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6025" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 [ 1765.117976][T22117] usb 46-1: device descriptor read/8, error -110 [ 1765.495597][T30391] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1765.498345][T30391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1765.541480][T30391] vhci_hcd vhci_hcd.0: Device attached [ 1765.553632][T22117] usb usb46-port1: attempt power cycle [ 1765.706667][T30391] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1765.993597][T22116] usb 42-1: SetAddress Request (22) to port 0 [ 1766.024327][T22116] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1766.404886][T22117] usb usb46-port1: unable to enumerate USB device [ 1767.124929][T30412] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1767.133538][T30412] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1767.143414][T30412] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1767.812386][T30392] vhci_hcd: connection reset by peer [ 1767.818814][T26454] vhci_hcd vhci_hcd.2: stop threads [ 1767.820628][T26454] vhci_hcd vhci_hcd.2: release socket [ 1767.822559][T26454] vhci_hcd vhci_hcd.2: disconnect device [ 1768.079992][T30412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1768.149846][ T42] audit: type=1800 audit(1782890922.963:54636): pid=30413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6030" name="bus" dev="ramfs" ino=118369 res=0 errno=0 [ 1769.366844][T30419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.411254][T30438] input: syz0 as /devices/virtual/input/input23 [ 1771.530754][T30445] netlink: 'syz.9.6038': attribute type 1 has an invalid length. [ 1771.607117][T22116] usb 42-1: device descriptor read/8, error -110 [ 1771.648344][T30445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1772.065976][T22116] usb usb42-port1: attempt power cycle [ 1773.633879][T22116] usb usb42-port1: unable to enumerate USB device [ 1773.699242][T30466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1779.240138][ T42] audit: type=1800 audit(1782890933.196:54637): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6042" name="bus" dev="ramfs" ino=118511 res=0 errno=0 [ 1783.116180][T29260] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1784.398566][T30519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1785.088651][T29260] usb 9-1: device not accepting address 9, error -71 [ 1785.218711][T22932] usb 14-1: new full-speed USB device number 11 using dummy_hcd [ 1785.390694][T22932] usb 14-1: config 0 has an invalid interface number: 8 but max is 0 [ 1785.401664][T22932] usb 14-1: config 0 has no interface number 0 [ 1785.412965][T22932] usb 14-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1785.428474][T22932] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1785.446645][T22932] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1785.460574][T22932] usb 14-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1785.471665][T22932] usb 14-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1785.478281][T22932] usb 14-1: Product: syz [ 1785.483562][T22932] usb 14-1: SerialNumber: syz [ 1785.493258][T22932] usb 14-1: config 0 descriptor?? [ 1785.517302][T22932] cm109 14-1:0.8: invalid payload size 0, expected 4 [ 1785.533987][T22932] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.8/input/input24 [ 1785.852114][T30530] veth0_to_bridge: mtu less than device minimum [ 1788.218283][ C2] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1788.218457][T22117] usb 14-1: USB disconnect, device number 11 [ 1788.221100][ C2] cm109 14-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1788.272460][T22117] cm109 14-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1789.445116][T30563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1789.447685][T30563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1789.462383][T30563] vhci_hcd vhci_hcd.0: Device attached [ 1789.507690][T30563] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1789.760084][T27688] usb 46-1: SetAddress Request (10) to port 0 [ 1789.775035][T27688] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1790.098022][T30564] vhci_hcd: connection reset by peer [ 1790.100078][T26454] vhci_hcd vhci_hcd.4: stop threads [ 1790.102149][T26454] vhci_hcd vhci_hcd.4: release socket [ 1790.109423][T26454] vhci_hcd vhci_hcd.4: disconnect device [ 1790.219202][T30568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6066'. [ 1795.350302][T30625] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6078'. [ 1795.386134][T30617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1795.695087][T27688] usb 46-1: device descriptor read/8, error -110 [ 1796.143635][T27688] usb usb46-port1: attempt power cycle [ 1796.778930][T27688] usb usb46-port1: unable to enumerate USB device [ 1796.807082][T30640] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1796.810239][T30640] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1796.850383][T30640] vhci_hcd vhci_hcd.0: Device attached [ 1797.003958][T30645] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1797.324538][T27688] usb 42-1: SetAddress Request (26) to port 0 [ 1797.327384][T27688] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1797.409610][T30644] vhci_hcd: connection reset by peer [ 1797.413408][T17642] vhci_hcd vhci_hcd.2: stop threads [ 1797.416100][T17642] vhci_hcd vhci_hcd.2: release socket [ 1797.418734][T17642] vhci_hcd vhci_hcd.2: disconnect device [ 1798.958241][T30683] siw: device registration error -23 [ 1800.862439][T30693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1801.299202][T30704] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1802.808314][T27688] usb 42-1: device descriptor read/8, error -110 [ 1803.190926][T30715] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1803.193067][T30715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1803.207244][T30715] vhci_hcd vhci_hcd.0: Device attached [ 1803.222863][T30715] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1803.372582][T27688] usb usb42-port1: attempt power cycle [ 1803.376382][ T6664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.376406][ T6664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.586103][T30716] vhci_hcd: connection closed [ 1803.586656][T17365] vhci_hcd vhci_hcd.9: stop threads [ 1803.586687][T17365] vhci_hcd vhci_hcd.9: release socket [ 1803.586746][T17365] vhci_hcd vhci_hcd.9: disconnect device [ 1803.599714][T22117] usb 56-1: enqueue for inactive port 0 [ 1804.011672][T27688] usb usb42-port1: unable to enumerate USB device [ 1804.153172][T22117] usb usb56-port1: attempt power cycle [ 1804.396983][T30737] netlink: 'syz.4.6100': attribute type 2 has an invalid length. [ 1804.442061][T27688] Process accounting resumed [ 1804.855703][T22117] usb usb56-port1: unable to enumerate USB device [ 1806.082893][T30750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6104'. [ 1808.078177][T30765] No control pipe specified [ 1808.525681][T30777] input: syz0 as /devices/virtual/input/input25 [ 1809.646001][T30771] binder: 30770:30771 ioctl c00c620f 800003c0 returned -22 [ 1811.928569][T30788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1811.931291][T30788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1811.934355][T30788] vhci_hcd vhci_hcd.0: Device attached [ 1811.968539][T30792] vhci_hcd: connection closed [ 1811.970283][ T5821] vhci_hcd vhci_hcd.2: stop threads [ 1811.974239][ T5821] vhci_hcd vhci_hcd.2: release socket [ 1811.981841][ T5821] vhci_hcd vhci_hcd.2: disconnect device [ 1812.034777][T30794] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1812.037574][T30794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1812.051078][T30794] vhci_hcd vhci_hcd.0: Device attached [ 1812.110918][T30794] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1812.358447][T27688] usb 46-1: SetAddress Request (14) to port 0 [ 1812.361014][T27688] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1812.474170][T30795] vhci_hcd: connection reset by peer [ 1812.481575][ T5821] vhci_hcd vhci_hcd.4: stop threads [ 1812.483525][ T5821] vhci_hcd vhci_hcd.4: release socket [ 1812.485860][ T5821] vhci_hcd vhci_hcd.4: disconnect device [ 1813.351802][T30810] overlayfs: failed to clone upperpath [ 1814.434369][T30808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6116'. [ 1815.670123][T30828] netlink: 'syz.6.6119': attribute type 1 has an invalid length. [ 1815.697079][T30828] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1816.634709][T30841] input: syz0 as /devices/virtual/input/input26 [ 1817.894746][T27688] usb 46-1: device descriptor read/8, error -110 [ 1818.328973][T27688] usb usb46-port1: attempt power cycle [ 1818.615828][T30857] fuse: Bad value for 'user_id' [ 1818.618558][T30857] fuse: Bad value for 'user_id' [ 1818.825833][T30862] siw: device registration error -23 [ 1819.233371][T30869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1819.235570][T30869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1819.274759][T30869] vhci_hcd vhci_hcd.0: Device attached [ 1819.380199][T30869] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1819.434598][T27688] usb 46-1: SetAddress Request (17) to port 0 [ 1819.436810][T27688] usb 46-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1820.060676][T30870] vhci_hcd: connection reset by peer [ 1820.063372][ T7945] vhci_hcd vhci_hcd.4: stop threads [ 1820.065848][ T7945] vhci_hcd vhci_hcd.4: release socket [ 1820.068402][ T7945] vhci_hcd vhci_hcd.4: disconnect device [ 1821.904762][T22117] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 1822.067049][T22117] usb 14-1: Using ep0 maxpacket: 16 [ 1822.097757][T22117] usb 14-1: config 5 has an invalid interface number: 249 but max is 2 [ 1822.100800][T22117] usb 14-1: config 5 has an invalid interface number: 4 but max is 2 [ 1822.103912][T22117] usb 14-1: config 5 has an invalid interface association descriptor of length 5, skipping [ 1822.107085][T22117] usb 14-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1822.110132][T22117] usb 14-1: config 5 has an invalid descriptor of length 47, skipping remainder of the config [ 1822.115098][T22117] usb 14-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 1822.118189][T22117] usb 14-1: config 5 has no interface number 0 [ 1822.120124][T22117] usb 14-1: config 5 has no interface number 1 [ 1822.122528][T22117] usb 14-1: config 5 interface 249 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1822.126654][T22117] usb 14-1: config 5 interface 4 altsetting 105 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1822.130660][T22117] usb 14-1: config 5 interface 4 altsetting 105 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1822.136523][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0xA, skipping [ 1822.140331][T22117] usb 14-1: config 5 interface 4 altsetting 105 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1822.144388][T22117] usb 14-1: config 5 interface 4 altsetting 105 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 1822.147558][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0xA, skipping [ 1822.150909][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0x3, skipping [ 1822.154976][T22117] usb 14-1: config 5 interface 4 altsetting 105 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1822.159492][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0xA, skipping [ 1822.163055][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0xA, skipping [ 1822.167264][T22117] usb 14-1: config 5 interface 4 altsetting 105 has a duplicate endpoint with address 0xE, skipping [ 1822.170752][T22117] usb 14-1: config 5 interface 4 altsetting 105 has 12 endpoint descriptors, different from the interface descriptor's value: 8 [ 1822.177623][T22117] usb 14-1: config 5 interface 249 has no altsetting 0 [ 1822.179996][T22117] usb 14-1: config 5 interface 4 has no altsetting 0 [ 1822.184240][T22117] usb 14-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=4c.3e [ 1822.188835][T22117] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.192484][T22117] usb 14-1: Product: syz [ 1822.194381][T22117] usb 14-1: Manufacturer: syz [ 1822.196372][T22117] usb 14-1: SerialNumber: syz [ 1823.124021][T30893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1824.884623][T30904] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1824.927315][T27688] usb 46-1: device descriptor read/8, error -110 [ 1825.192081][T27688] usb usb46-port1: unable to enumerate USB device [ 1825.235881][T22117] uvcvideo 14-1:5.249: probe with driver uvcvideo failed with error -22 [ 1825.282725][T22117] usb 14-1: USB disconnect, device number 12 [ 1826.819693][T30918] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6140'. [ 1827.209464][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1829.303018][T30943] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1829.347727][T30943] cramfs: wrong magic [ 1829.361774][T30944] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6145'. [ 1830.511764][T30954] No control pipe specified [ 1831.896253][T30978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1831.899619][T30978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1831.915683][T30978] vhci_hcd vhci_hcd.0: Device attached [ 1832.002732][T30978] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1832.233544][T22117] usb 42-1: SetAddress Request (30) to port 0 [ 1832.235908][T22117] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1832.246328][T22932] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1832.406393][T22932] usb 9-1: Using ep0 maxpacket: 16 [ 1832.417858][T22932] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1832.421205][T22932] usb 9-1: config 0 has no interface number 0 [ 1832.425243][T22932] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1832.428275][T22932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.431580][T22932] usb 9-1: Product: syz [ 1832.433865][T22932] usb 9-1: Manufacturer: syz [ 1832.435030][T30979] vhci_hcd: connection reset by peer [ 1832.435812][T22932] usb 9-1: SerialNumber: syz [ 1832.439184][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1832.442365][T30756] vhci_hcd vhci_hcd.2: release socket [ 1832.444729][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1832.445105][T22932] usb 9-1: config 0 descriptor?? [ 1833.224249][T22339] Process accounting resumed [ 1833.302440][T30994] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1833.305211][T30994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1833.310455][T30994] vhci_hcd vhci_hcd.0: Device attached [ 1833.379411][T30994] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1833.983360][T30995] vhci_hcd: connection closed [ 1833.989778][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1833.995094][T30756] vhci_hcd vhci_hcd.2: release socket [ 1833.997491][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1836.761206][T22932] hub 9-1:0.132: bad descriptor, ignoring hub [ 1836.769201][T22932] hub 9-1:0.132: probe with driver hub failed with error -5 [ 1836.792580][T22932] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input27 [ 1837.520675][T31029] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1839.393735][T22117] usb 42-1: device descriptor read/8, error -110 [ 1839.442978][T31028] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1839.446300][T31028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1839.483877][T31028] vhci_hcd vhci_hcd.0: Device attached [ 1839.502857][T31042] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1839.505454][T31042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1839.525506][T31046] loop6: detected capacity change from 0 to 2640 [ 1839.531065][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.533422][T31042] vhci_hcd vhci_hcd.0: Device attached [ 1839.536196][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.542238][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.546372][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.552432][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.561350][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.568022][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.576952][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.595437][T31047] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1839.596917][T31048] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1839.603875][T31046] ldm_validate_partition_table(): Disk read failed. [ 1839.608498][T31048] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1839.614824][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.618388][T31048] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1839.621590][T31046] Buffer I/O error on dev loop6, logical block 0, async page read [ 1839.627479][T31048] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1839.632893][T31046] Dev loop6: unable to read RDB block 0 [ 1839.636171][T31048] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1839.644382][T31046] loop6: unable to read partition table [ 1839.650893][T31048] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1839.655201][T31046] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1839.666294][T31048] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1839.670090][T31048] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1839.689163][T22117] usb 42-1: SetAddress Request (31) to port 0 [ 1839.711997][T22117] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 1839.797567][T27688] usb 56-1: SetAddress Request (18) to port 0 [ 1839.802450][T27688] usb 56-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1839.809281][T31040] vhci_hcd: connection closed [ 1839.809929][T26454] vhci_hcd vhci_hcd.9: stop threads [ 1839.817546][T26454] vhci_hcd vhci_hcd.9: release socket [ 1839.822272][T26454] vhci_hcd vhci_hcd.9: disconnect device [ 1839.961476][T31043] vhci_hcd: connection reset by peer [ 1839.964352][T26454] vhci_hcd vhci_hcd.2: stop threads [ 1839.966154][T26454] vhci_hcd vhci_hcd.2: release socket [ 1839.975588][T26454] vhci_hcd vhci_hcd.2: disconnect device [ 1840.678967][T22932] usb 9-1: USB disconnect, device number 11 [ 1840.763142][T31059] Invalid ELF header type: 3 != 1 [ 1841.521664][ T42] audit: type=1326 audit(1782890990.643:54638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31066 comm="syz.6.6172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1841.550855][ T42] audit: type=1326 audit(1782890990.643:54639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31066 comm="syz.6.6172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1841.577665][T31073] netlink: 'syz.9.6169': attribute type 1 has an invalid length. [ 1841.691544][T31073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1842.201715][T31083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1842.204353][T31083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1842.227648][T31083] vhci_hcd vhci_hcd.0: Device attached [ 1842.833479][T31084] vhci_hcd: connection closed [ 1842.837029][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1842.841125][T30756] vhci_hcd vhci_hcd.2: release socket [ 1842.843935][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1845.313429][T22117] usb 42-1: device descriptor read/8, error -110 [ 1845.316789][T27688] usb 56-1: device descriptor read/8, error -110 [ 1845.378317][T31108] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1845.380913][T31108] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1845.391344][T31108] vhci_hcd vhci_hcd.0: Device attached [ 1845.600174][T22117] usb usb42-port1: attempt power cycle [ 1845.646462][T31108] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1846.031306][ T1044] usb 46-1: SetAddress Request (18) to port 0 [ 1846.039388][T27688] usb usb56-port1: attempt power cycle [ 1846.044899][ T1044] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1846.585902][T22117] usb usb42-port1: unable to enumerate USB device [ 1846.702952][T31109] vhci_hcd: connection reset by peer [ 1846.732406][T17365] vhci_hcd vhci_hcd.4: stop threads [ 1846.735634][T17365] vhci_hcd vhci_hcd.4: release socket [ 1846.738412][T17365] vhci_hcd vhci_hcd.4: disconnect device [ 1846.822499][T31126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1846.825174][T31126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1846.837086][T31127] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1846.860373][T31126] vhci_hcd vhci_hcd.0: Device attached [ 1846.908025][T27688] usb usb56-port1: unable to enumerate USB device [ 1847.167218][T31107] usb 42-1: SetAddress Request (34) to port 0 [ 1847.169582][T31107] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1847.204429][T31128] vhci_hcd: connection reset by peer [ 1847.207242][T17642] vhci_hcd vhci_hcd.2: stop threads [ 1847.210223][T17642] vhci_hcd vhci_hcd.2: release socket [ 1847.213744][T17642] vhci_hcd vhci_hcd.2: disconnect device [ 1847.767451][T31141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1849.073242][T31152] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1849.100071][T31152] cramfs: wrong magic [ 1849.112700][T31152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1849.475951][T21960] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 1849.514011][T31156] netlink: 'syz.6.6188': attribute type 1 has an invalid length. [ 1849.538278][T31161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6189'. [ 1849.591167][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6188'. [ 1849.614669][T31156] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1850.053216][T31169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1850.056129][T31169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1850.138890][T31169] vhci_hcd vhci_hcd.0: Device attached [ 1850.156054][ T42] audit: type=1326 audit(1782890998.624:54640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.170833][ T42] audit: type=1326 audit(1782890998.643:54641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.180941][ T42] audit: type=1326 audit(1782890998.643:54642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.190229][ T42] audit: type=1326 audit(1782890998.643:54643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.203267][ T42] audit: type=1326 audit(1782890998.680:54644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.214696][ T42] audit: type=1326 audit(1782890998.689:54645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.371788][T31179] netlink: 'syz.2.6191': attribute type 1 has an invalid length. [ 1850.578267][ T42] audit: type=1326 audit(1782890999.012:54646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.588585][ T42] audit: type=1326 audit(1782890999.030:54647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31170 comm="syz.2.6191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1850.738324][T31151] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6187'. [ 1851.061248][T31179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1852.621460][T31195] xt_socket: unknown flags 0xe4 [ 1852.875591][T31107] usb 42-1: device descriptor read/8, error -110 [ 1852.918764][T31172] vhci_hcd: connection reset by peer [ 1852.926687][T17642] vhci_hcd vhci_hcd.4: stop threads [ 1852.929493][T17642] vhci_hcd vhci_hcd.4: release socket [ 1852.954410][ T1044] usb 46-1: device descriptor read/8, error -110 [ 1852.966779][T17642] vhci_hcd vhci_hcd.4: disconnect device [ 1852.981024][T31192] qnx4: unable to read the superblock [ 1853.323650][T31107] usb usb42-port1: attempt power cycle [ 1853.423353][ T1044] usb usb46-port1: attempt power cycle [ 1854.135730][T31107] usb usb42-port1: unable to enumerate USB device [ 1854.229969][ T1044] usb usb46-port1: unable to enumerate USB device [ 1856.087646][T31225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1856.818542][T31228] netlink: 'syz.4.6202': attribute type 1 has an invalid length. [ 1856.860433][T31228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1857.717081][T31243] netlink: 'syz.4.6203': attribute type 1 has an invalid length. [ 1857.741917][T31243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1857.990846][T31247] netlink: 'syz.9.6212': attribute type 1 has an invalid length. [ 1858.032533][T31247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1858.628250][T22339] Process accounting resumed [ 1859.725596][T31270] syz_tun: entered allmulticast mode [ 1859.733080][T31269] syz_tun: left allmulticast mode [ 1860.082673][T31277] Invalid ELF header type: 3 != 1 [ 1860.697814][T31282] fuse: fd is not a fuse device [ 1864.833985][T31308] team_slave_1: Caught tx_queue_len zero misconfig [ 1864.859107][T31308] vlan0: entered allmulticast mode [ 1864.860831][T31308] bond0: entered allmulticast mode [ 1864.868183][T31308] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6219'. [ 1864.877769][T31308] .` (unregistering): Released all slaves [ 1866.721329][T31328] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1866.725806][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1866.729681][T31328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1867.386190][T31331] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1867.388601][T31331] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1867.392113][T31331] vhci_hcd vhci_hcd.0: Device attached [ 1867.398888][T31332] vhci_hcd: connection closed [ 1867.399193][ T7945] vhci_hcd vhci_hcd.9: stop threads [ 1867.402847][ T7945] vhci_hcd vhci_hcd.9: release socket [ 1867.404538][ T7945] vhci_hcd vhci_hcd.9: disconnect device [ 1868.909785][T31349] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1868.913399][T31349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1868.916874][T31349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1869.739536][ T42] audit: type=1326 audit(1782891016.700:54648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31337 comm="syz.9.6225" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 1870.733850][T31363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1874.291252][T31377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1875.148624][T31381] syz.9.6233: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 1875.157729][T31381] CPU: 1 UID: 0 PID: 31381 Comm: syz.9.6233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1875.157764][T31381] Tainted: [L]=SOFTLOCKUP [ 1875.157769][T31381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1875.157777][T31381] Call Trace: [ 1875.157784][T31381] [ 1875.157790][T31381] dump_stack_lvl+0x100/0x190 [ 1875.157974][T31381] warn_alloc.cold+0x94/0xa8 [ 1875.157989][T31381] ? __pfx_warn_alloc+0x10/0x10 [ 1875.158027][T31381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1875.158130][T31381] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1875.158149][T31381] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1875.158168][T31381] ? __lock_acquire+0x49f/0x1a40 [ 1875.158215][T31381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1875.158232][T31381] ? find_held_lock+0x2b/0x80 [ 1875.158249][T31381] ? __free_frozen_pages+0x747/0x1090 [ 1875.158269][T31381] ? __free_frozen_pages+0x747/0x1090 [ 1875.158289][T31381] ? do_raw_spin_unlock+0x145/0x1e0 [ 1875.158304][T31381] ? _raw_spin_unlock+0x28/0x50 [ 1875.158324][T31381] ? irqentry_exit+0x24d/0xa00 [ 1875.158354][T31381] __folio_alloc_noprof+0x13/0x260 [ 1875.158369][T31381] alloc_migration_target+0x1d7/0x6d0 [ 1875.158391][T31381] migrate_pages_batch+0x5dc/0x45c0 [ 1875.158413][T31381] ? __pfx_alloc_migration_target+0x10/0x10 [ 1875.158435][T31381] ? migrate_pages_sync+0x12c/0x880 [ 1875.158460][T31381] ? migrate_pages_sync+0x588/0x880 [ 1875.158479][T31381] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1875.158502][T31381] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1875.158521][T31381] ? register_lock_class+0x40/0x560 [ 1875.158535][T31381] ? __lock_acquire+0x49f/0x1a40 [ 1875.158546][T31381] ? __css_rstat_updated+0x1ce/0x5a0 [ 1875.158568][T31381] migrate_pages+0x1950/0x2850 [ 1875.158603][T31381] ? __lock_acquire+0x49f/0x1a40 [ 1875.158616][T31381] ? __pfx_alloc_migration_target+0x10/0x10 [ 1875.158638][T31381] ? __pfx_migrate_pages+0x10/0x10 [ 1875.158668][T31381] ? __lock_acquire+0x49f/0x1a40 [ 1875.158681][T31381] ? mtree_load+0x32d/0xa90 [ 1875.158697][T31381] move_pages_and_store_status+0xf1/0x230 [ 1875.158722][T31381] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1875.158752][T31381] kernel_move_pages+0xc89/0x14a0 [ 1875.158777][T31381] ? __pfx_kernel_move_pages+0x10/0x10 [ 1875.158801][T31381] ? xfd_validate_state+0x129/0x190 [ 1875.158822][T31381] __ia32_sys_move_pages+0xdd/0x1b0 [ 1875.158843][T31381] ? __do_fast_syscall_32+0x98/0x970 [ 1875.158856][T31381] ? lockdep_hardirqs_on+0x78/0x100 [ 1875.158880][T31381] __do_fast_syscall_32+0xe7/0x970 [ 1875.158896][T31381] do_fast_syscall_32+0x32/0x70 [ 1875.158910][T31381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1875.158928][T31381] RIP: 0023:0xf7fd5fec [ 1875.158945][T31381] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 1875.158974][T31381] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1875.158987][T31381] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1875.158995][T31381] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1875.159002][T31381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1875.159010][T31381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1875.159018][T31381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1875.159033][T31381] [ 1875.271570][T31381] Mem-Info: [ 1875.344875][T31381] active_anon:10756 inactive_anon:233 isolated_anon:42 [ 1875.344875][T31381] active_file:7852 inactive_file:14744 isolated_file:0 [ 1875.344875][T31381] unevictable:3786 dirty:478 writeback:0 [ 1875.344875][T31381] slab_reclaimable:7046 slab_unreclaimable:70666 [ 1875.344875][T31381] mapped:26080 shmem:8839 pagetables:2026 [ 1875.344875][T31381] sec_pagetables:338 bounce:0 [ 1875.344875][T31381] kernel_misc_reclaimable:0 [ 1875.344875][T31381] free:45625 free_pcp:5483 free_cma:0 [ 1875.361557][T31381] Node 0 active_anon:12kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7860kB pagetables:1460kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1875.373097][T31381] Node 1 active_anon:43312kB inactive_anon:908kB active_file:31408kB inactive_file:58976kB unevictable:11608kB isolated(anon):168kB isolated(file):0kB mapped:104292kB dirty:1912kB writeback:0kB shmem:31820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8536kB pagetables:6644kB sec_pagetables:244kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1875.393689][T31381] Node 0 DMA free:2576kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.403962][T31381] lowmem_reserve[]: 0 283 283 283 283 [ 1875.406576][T31381] Node 0 DMA32 free:41252kB boost:29380kB min:42440kB low:45704kB high:48968kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:1816kB present:1032196kB managed:290676kB mlocked:0kB bounce:0kB free_pcp:1412kB local_pcp:0kB free_cma:0kB [ 1875.419670][T31381] lowmem_reserve[]: 0 0 0 0 0 [ 1875.421543][T31381] Node 1 DMA32 free:136964kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1780KB active_anon:44128kB inactive_anon:916kB active_file:31408kB inactive_file:58976kB unevictable:11608kB writepending:1944kB zspages:4064kB present:1048432kB managed:948212kB mlocked:8072kB bounce:0kB free_pcp:20664kB local_pcp:576kB free_cma:0kB [ 1875.435695][T31381] lowmem_reserve[]: 0 0 0 0 0 [ 1875.437442][T31381] Node 0 DMA: 42*4kB (UM) 17*8kB (UM) 6*16kB (UM) 10*32kB (UM) 5*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2576kB [ 1875.445455][T31381] Node 0 DMA32: 1353*4kB (UME) 470*8kB (UME) 193*16kB (UM) 346*32kB (UME) 82*64kB (UME) 37*128kB (UME) 5*256kB (UM) 1*512kB (M) 4*1024kB (M) 1*2048kB (U) 0*4096kB = 41252kB [ 1875.455062][T31381] Node 1 DMA32: 1090*4kB (UMEH) 1035*8kB (UMEH) 815*16kB (UMEH) 573*32kB (UMEH) 275*64kB (UMEH) 146*128kB (UMH) 74*256kB (UMEH) 42*512kB (UME) 15*1024kB (UME) 0*2048kB 0*4096kB = 136112kB [ 1875.475470][T31381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.482530][T31381] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.486027][T31381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.493014][T31381] Node 1 hugepages_total=7 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1875.499869][T31381] 33240 total pagecache pages [ 1875.504167][T31381] 1807 pages in swap cache [ 1875.524345][T31381] Free swap = 71496kB [ 1875.530190][T31381] Total swap = 124996kB [ 1875.531999][T31381] 524155 pages RAM [ 1875.533605][T31381] 0 pages HighMem/MovableOnly [ 1875.535521][T31381] 210593 pages reserved [ 1875.537209][T31381] 0 pages cma reserved [ 1878.215570][T31418] overlayfs: missing 'lowerdir' [ 1878.580012][T22932] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1890.641176][ T42] audit: type=1326 audit(1782891035.984:54649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31486 comm="syz.4.6255" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32fec code=0x0 [ 1891.270866][T31512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1891.273631][T31512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1891.286223][T31512] vhci_hcd vhci_hcd.0: Device attached [ 1891.580434][ T5822] usb 42-1: SetAddress Request (38) to port 0 [ 1891.583748][ T5822] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1892.069880][T31513] vhci_hcd: connection reset by peer [ 1892.072687][T26454] vhci_hcd vhci_hcd.2: stop threads [ 1892.074472][T26454] vhci_hcd vhci_hcd.2: release socket [ 1892.077112][T26454] vhci_hcd vhci_hcd.2: disconnect device [ 1892.271378][T31521] vlan0: entered allmulticast mode [ 1892.273947][T31521] bond0: entered allmulticast mode [ 1892.283837][T31521] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6258'. [ 1892.293785][T31521] bond0 (unregistering): Released all slaves [ 1893.773089][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1896.578675][T31548] netlink: 'syz.6.6267': attribute type 2 has an invalid length. [ 1896.582749][T31548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6267'. [ 1896.612325][T31548] : entered promiscuous mode [ 1897.065840][ T5822] usb 42-1: device descriptor read/8, error -110 [ 1897.357387][T29260] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 1897.521140][T29260] usb 14-1: Using ep0 maxpacket: 8 [ 1897.525130][T29260] usb 14-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.529481][T29260] usb 14-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1897.533551][T29260] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1897.537026][T29260] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.581160][ T5822] usb usb42-port1: attempt power cycle [ 1897.801539][T31573] Unknown status report in ack skb [ 1898.296839][ T5822] usb usb42-port1: unable to enumerate USB device [ 1898.381323][T22339] usb 14-1: USB disconnect, device number 13 [ 1898.559396][T31584] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1898.563152][ T846] IPVS: starting estimator thread 0... [ 1898.657531][T31592] IPVS: using max 47 ests per chain, 112800 per kthread [ 1899.376511][T31595] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6276'. [ 1899.851588][T31612] netlink: 'syz.4.6280': attribute type 2 has an invalid length. [ 1899.855390][T31612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6280'. [ 1900.264636][T31612] : entered promiscuous mode [ 1900.956672][T31629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1900.959831][T31629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1900.964470][T31629] vhci_hcd vhci_hcd.0: Device attached [ 1901.259363][ T5822] usb 46-1: SetAddress Request (22) to port 0 [ 1901.272835][ T5822] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1901.630364][T31630] vhci_hcd: connection reset by peer [ 1901.634710][T17642] vhci_hcd vhci_hcd.4: stop threads [ 1901.637061][T17642] vhci_hcd vhci_hcd.4: release socket [ 1901.640629][T17642] vhci_hcd vhci_hcd.4: disconnect device [ 1901.939388][T31647] Bluetooth: MGMT ver 1.23 [ 1904.091566][T31668] netlink: 'syz.9.6294': attribute type 2 has an invalid length. [ 1904.094233][T31668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6294'. [ 1904.253708][T31668] : entered promiscuous mode [ 1905.317386][T31681] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1905.320034][T31681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1905.470742][T31681] vhci_hcd vhci_hcd.0: Device attached [ 1905.572010][T31681] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1905.850729][T31107] usb 42-1: SetAddress Request (42) to port 0 [ 1905.852861][T31107] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1906.311132][T31684] vhci_hcd: connection reset by peer [ 1906.314062][ T7945] vhci_hcd vhci_hcd.2: stop threads [ 1906.316559][ T7945] vhci_hcd vhci_hcd.2: release socket [ 1906.319141][ T7945] vhci_hcd vhci_hcd.2: disconnect device [ 1906.948486][ T5822] usb 46-1: device descriptor read/8, error -110 [ 1908.002126][ T5822] usb usb46-port1: attempt power cycle [ 1908.194753][T31467] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1908.368417][T31467] usb 9-1: Using ep0 maxpacket: 8 [ 1908.377763][T31467] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1908.385632][T31467] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1908.395189][T31467] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1908.403544][T31467] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1908.407434][T31467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.411097][T31467] usb 9-1: Product: ê¨ç˜´ì§›ë¹°î¨¶î쪤㜶嫈跷í·ã¿€çŠŒæ´¤ê¥©í›ç ³ã¿’弙墓꯮æŒäš¨ï‘¥ë³áœŒìž£ã«¡ì”•á¤»ã¯±ê¯·å†æ„焸⾚ᙇ령nj図篿쑷훽ບ䋕榶㿊ᢱ쟣䈯ì‹è²“㙻㾲ë§â€¯ê©“ꗺ簬ꔗ梑￿蛗㺅Ûퟆ䙾ç±æ‘©í—€æ´‹ÜŒê¨Ÿã†ªãŸ’뚽튅ïˆá¶ªà°Ÿ/浯㒾è®äµ¼è£§é«‡á£•å³“匩ⷮ긢 [ 1908.424877][T31467] usb 9-1: Manufacturer: 軕耨田ã…Íæº…î•²ç¥›ìŽ‹î¯ˆâ¯°áœ’ì” [ 1908.428072][T31467] usb 9-1: SerialNumber: ï“¿ [ 1908.433361][T31712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1908.671327][T31712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1908.687534][ T5822] usb usb46-port1: unable to enumerate USB device [ 1908.878459][T31467] usb 9-1: USB disconnect, device number 12 [ 1909.229124][T31726] netlink: 'syz.2.6305': attribute type 1 has an invalid length. [ 1909.896428][T31726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1910.828959][T31743] fuse: fd is not a fuse device [ 1911.446042][T31107] usb 42-1: device descriptor read/8, error -110 [ 1911.492717][T31745] fuse: fd is not a fuse device [ 1911.586800][T31754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1911.589154][T31754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1911.593603][T31754] vhci_hcd vhci_hcd.0: Device attached [ 1911.636691][T31754] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1911.728101][T31107] usb 42-1: SetAddress Request (43) to port 0 [ 1911.741222][T31107] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd [ 1912.272847][T31755] vhci_hcd: connection reset by peer [ 1912.278057][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1912.283924][ T12] vhci_hcd vhci_hcd.2: release socket [ 1912.290401][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1912.665474][T31764] netlink: 'syz.9.6315': attribute type 1 has an invalid length. [ 1912.683821][T31764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.710423][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6315'. [ 1914.215551][T31782] overlayfs: overlapping lowerdir path [ 1914.321257][T31783] overlayfs: overlapping lowerdir path [ 1918.085246][T31814] netlink: 'syz.2.6323': attribute type 2 has an invalid length. [ 1918.089136][T31814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6323'. [ 1918.109168][T31814] : entered promiscuous mode [ 1918.469253][T31107] usb 42-1: device descriptor read/8, error -110 [ 1918.588800][T31107] usb usb42-port1: attempt power cycle [ 1919.261955][T31107] usb usb42-port1: unable to enumerate USB device [ 1919.849700][T31836] netlink: 'syz.2.6329': attribute type 1 has an invalid length. [ 1919.871054][T31842] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1919.873382][T31842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1919.891093][T31842] vhci_hcd vhci_hcd.0: Device attached [ 1919.911523][T31836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1919.987547][T31841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1920.037541][T31846] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1920.267942][T31107] usb 56-1: SetAddress Request (22) to port 0 [ 1920.271346][T31107] usb 56-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1920.280727][T31849] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6334'. [ 1920.628757][T31843] vhci_hcd: connection reset by peer [ 1920.634815][ T5821] vhci_hcd vhci_hcd.9: stop threads [ 1920.637572][ T5821] vhci_hcd vhci_hcd.9: release socket [ 1920.643580][ T5821] vhci_hcd vhci_hcd.9: disconnect device [ 1920.841325][T31859] netlink: 'syz.6.6335': attribute type 1 has an invalid length. [ 1920.866647][T31859] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1926.161122][T31107] usb 56-1: device descriptor read/8, error -110 [ 1926.355831][ T5822] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 1926.559086][ T5822] usb 14-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1926.563801][ T5822] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.575466][ T5822] usb 14-1: Product: syz [ 1926.580765][ T5822] usb 14-1: Manufacturer: syz [ 1926.588905][ T5822] usb 14-1: SerialNumber: syz [ 1926.600755][ T5822] usb 14-1: config 0 descriptor?? [ 1926.672762][T31894] process '/newroot/1674/file0' started with executable stack [ 1926.724686][T31107] usb usb56-port1: attempt power cycle [ 1926.812699][T31905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1926.815230][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1926.832971][T31905] vhci_hcd vhci_hcd.0: Device attached [ 1926.883952][T31901] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1927.144566][ T5822] usb 46-1: SetAddress Request (26) to port 0 [ 1927.158345][ T5822] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1927.196137][T31906] vhci_hcd: connection closed [ 1927.198588][T17642] vhci_hcd vhci_hcd.4: stop threads [ 1927.202261][T17642] vhci_hcd vhci_hcd.4: release socket [ 1927.210167][T17642] vhci_hcd vhci_hcd.4: disconnect device [ 1927.244635][T31909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.249358][T31909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.378858][T31107] usb usb56-port1: unable to enumerate USB device [ 1927.950912][ T42] audit: type=1326 audit(1782891070.355:54650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31899 comm="syz.2.6347" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 1928.343947][T31923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6342'. [ 1928.629045][T31926] netlink: 'syz.2.6349': attribute type 2 has an invalid length. [ 1928.632821][T31926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6349'. [ 1929.966473][T31939] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1930.645565][T22339] usb 14-1: USB disconnect, device number 14 [ 1931.088889][T31959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6357'. [ 1931.092820][T31959] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6357'. [ 1931.274205][T31962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1931.584499][T31967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1931.586783][T31967] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1931.599687][T31967] vhci_hcd vhci_hcd.0: Device attached [ 1931.771790][T31967] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1931.904286][T31107] usb 42-1: SetAddress Request (46) to port 0 [ 1931.921033][T31107] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1932.688183][ T5822] usb 46-1: device descriptor read/8, error -110 [ 1932.707966][T31968] vhci_hcd: connection reset by peer [ 1932.712952][ T7945] vhci_hcd vhci_hcd.2: stop threads [ 1932.717998][ T7945] vhci_hcd vhci_hcd.2: release socket [ 1932.730107][ T7945] vhci_hcd vhci_hcd.2: disconnect device [ 1933.133547][ T5822] usb usb46-port1: attempt power cycle [ 1933.209360][T31983] netlink: 'syz.6.6361': attribute type 2 has an invalid length. [ 1933.212619][T31983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6361'. [ 1933.761947][ T5822] usb usb46-port1: unable to enumerate USB device [ 1934.098752][T32004] netlink: 'syz.4.6362': attribute type 1 has an invalid length. [ 1934.274199][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6362'. [ 1934.634154][T32004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1935.138893][T32017] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1935.186894][T32019] netlink: 'syz.2.6367': attribute type 1 has an invalid length. [ 1935.189794][T32019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6367'. [ 1936.101841][T32033] fuse: fd is not a fuse device [ 1936.222595][T32037] siw: device registration error -23 [ 1936.557970][ T42] audit: type=1800 audit(1782891078.318:54651): pid=32024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6368" name="/" dev="fuse" ino=2 res=0 errno=0 [ 1937.301579][ T42] audit: type=1326 audit(1782891079.037:54652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32040 comm="syz.4.6372" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x0 [ 1937.505260][T31107] usb 42-1: device descriptor read/8, error -110 [ 1937.946659][ T42] audit: type=1326 audit(1782891079.637:54653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.9.6374" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 1938.070126][T32050] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1938.074632][T32050] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.546860][T32050] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1938.550166][T32050] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.694591][T32050] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1938.698111][T32050] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.844494][T31107] usb usb42-port1: attempt power cycle [ 1939.084578][T32050] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1939.088539][T32050] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.167440][T17642] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1939.171353][T17642] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.198389][T17642] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1939.203439][T17642] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.215518][T17642] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1939.219801][T17642] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.238540][T17642] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1939.242524][T17642] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.752467][T32072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1939.895833][T31107] usb usb42-port1: unable to enumerate USB device [ 1942.444330][T32090] Invalid argument reading file caps for ./file0 [ 1942.895877][T32092] vivid-004: disconnect [ 1943.721706][T32098] bridge0: entered promiscuous mode [ 1943.726232][T32098] bridge0: entered allmulticast mode [ 1944.102253][T32104] RDS: rds_bind could not find a transport for ::ffff:172.20.20.48, load rds_tcp or rds_rdma? [ 1944.483300][T32106] binder: Binderfs stats mode cannot be changed during a remount [ 1944.715044][T32083] vivid-004: reconnect [ 1945.053802][ T42] audit: type=1326 audit(1782891086.188:54654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32116 comm="syz.6.6390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 1945.282984][T32123] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1946.287444][T32131] overlayfs: failed to clone lowerpath [ 1947.481263][T32139] could not allocate digest TFM handle md5 [ 1948.096893][T32151] binder: Binderfs stats mode cannot be changed during a remount [ 1951.545378][T32174] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1951.984861][T32180] overlayfs: overlapping lowerdir path [ 1952.114989][T32183] overlayfs: overlapping lowerdir path [ 1952.628851][ T42] audit: type=1326 audit(1782891093.173:54655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32187 comm="syz.9.6413" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 1958.480900][T32242] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1959.039247][T32248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1959.042348][T32248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1959.049949][T32248] vhci_hcd vhci_hcd.0: Device attached [ 1959.069098][T32248] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1959.140115][T32256] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1959.142929][T32256] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1959.152876][T32256] vhci_hcd vhci_hcd.0: Device attached [ 1959.332082][T32262] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1959.360033][T22339] usb 42-1: SetAddress Request (50) to port 0 [ 1959.367254][T22339] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1959.398219][T32263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1959.446662][ T5822] usb 56-1: SetAddress Request (26) to port 0 [ 1959.449374][ T5822] usb 56-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1959.702816][T32252] vhci_hcd: connection reset by peer [ 1959.705439][T26454] vhci_hcd vhci_hcd.2: stop threads [ 1959.708045][T26454] vhci_hcd vhci_hcd.2: release socket [ 1959.710928][T26454] vhci_hcd vhci_hcd.2: disconnect device [ 1960.012856][T32257] vhci_hcd: connection reset by peer [ 1960.015536][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1960.018616][ T13] vhci_hcd vhci_hcd.9: release socket [ 1960.023199][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 1960.348938][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1960.605006][T32272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1961.092331][T32279] overlayfs: failed to clone lowerpath [ 1961.173811][T32280] overlayfs: failed to clone lowerpath [ 1961.601071][T32287] fuse: Bad value for 'fd' [ 1961.944844][T32298] netlink: 'syz.6.6425': attribute type 4 has an invalid length. [ 1961.989056][T32297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1961.991346][T32297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1961.995252][T32297] vhci_hcd vhci_hcd.0: Device attached [ 1962.000213][T32298] netlink: 'syz.6.6425': attribute type 4 has an invalid length. [ 1962.021522][T32297] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1962.069501][ T846] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 1962.231746][ T846] usb 14-1: Using ep0 maxpacket: 8 [ 1962.238546][ T846] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.244118][ T846] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.249257][ T846] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1962.252976][ T846] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1962.258328][ T846] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.264927][ T846] usb 14-1: config 0 descriptor?? [ 1962.318615][T31467] usb 46-1: SetAddress Request (30) to port 0 [ 1962.322619][T31467] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1962.706731][T32299] vhci_hcd: connection reset by peer [ 1962.710555][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1962.713107][ T12] vhci_hcd vhci_hcd.4: release socket [ 1962.717622][ T846] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 1962.720260][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1962.725857][ T846] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 1962.728493][ T846] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 1962.731958][ T846] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 1962.734509][ T846] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 1962.737848][ T846] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1962.950847][T32295] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6431'. [ 1963.520477][ T42] audit: type=1326 audit(1782891103.221:54656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32310 comm="syz.6.6434" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 1963.636069][T32312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1963.639064][T32312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1963.804071][T32312] vhci_hcd vhci_hcd.0: Device attached [ 1963.995365][T32312] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1964.107816][ T846] usb 14-1: reset high-speed USB device number 15 using dummy_hcd [ 1964.854664][T32313] vhci_hcd: connection closed [ 1964.856941][ T5821] vhci_hcd vhci_hcd.4: stop threads [ 1964.861945][ T5821] vhci_hcd vhci_hcd.4: release socket [ 1964.864854][ T5821] vhci_hcd vhci_hcd.4: disconnect device [ 1964.867844][T22339] usb 42-1: device descriptor read/8, error -110 [ 1964.941233][ T5822] usb 56-1: device descriptor read/8, error -110 [ 1964.990578][T32324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1965.002347][T32324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6436'. [ 1965.012071][T32324] netlink: 'syz.6.6436': attribute type 1 has an invalid length. [ 1965.214335][T32336] overlayfs: missing 'lowerdir' [ 1965.332302][T22339] usb usb42-port1: attempt power cycle [ 1965.375595][ T5822] usb usb56-port1: attempt power cycle [ 1965.932730][T32341] netlink: 'syz.2.6440': attribute type 2 has an invalid length. [ 1966.045017][ T5822] usb usb56-port1: unable to enumerate USB device [ 1966.741558][T22339] usb usb42-port1: unable to enumerate USB device [ 1966.872418][T32345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1966.874839][T32345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1966.883099][T32345] vhci_hcd vhci_hcd.0: Device attached [ 1966.901565][T32345] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1966.923095][T15372] usb 14-1: USB disconnect, device number 15 [ 1967.328385][T32352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1967.330626][T32352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1967.333526][T32352] vhci_hcd vhci_hcd.0: Device attached [ 1967.391628][T32352] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1967.572786][T32362] fuse: fd is not a fuse device [ 1967.603332][T32346] vhci_hcd: connection closed [ 1967.603710][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1967.609524][ T13] vhci_hcd vhci_hcd.4: release socket [ 1967.614260][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1967.629750][T31468] usb 42-1: SetAddress Request (54) to port 0 [ 1967.637051][T31468] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1967.813879][T31467] usb 46-1: device descriptor read/8, error -110 [ 1968.068861][T32353] vhci_hcd: connection reset by peer [ 1968.073688][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1968.076473][T30756] vhci_hcd vhci_hcd.2: release socket [ 1968.079544][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1968.250968][T31467] usb usb46-port1: attempt power cycle qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 1968.887539][T31467] usb usb46-port1: unable to enumerate USB device [ 1969.519297][T32386] netlink: 'syz.4.6449': attribute type 1 has an invalid length. [ 1969.584644][T32386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1969.907835][T32390] input: syz1 as /devices/virtual/input/input29 [ 1970.069823][ T42] audit: type=1326 audit(1782891109.265:54657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.098563][ T42] audit: type=1326 audit(1782891109.274:54658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.164185][ T42] audit: type=1326 audit(1782891109.274:54659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.173607][ T42] audit: type=1326 audit(1782891109.274:54660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.183069][ T42] audit: type=1326 audit(1782891109.274:54661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.193478][ T42] audit: type=1326 audit(1782891109.274:54662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.201135][ T42] audit: type=1326 audit(1782891109.274:54663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.211007][ T42] audit: type=1326 audit(1782891109.274:54664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.220652][ T42] audit: type=1326 audit(1782891109.284:54665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1970.231155][ T42] audit: type=1326 audit(1782891109.284:54666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.2.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 1971.184749][T22932] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1972.701705][T32417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1972.701744][T32417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1972.701882][T32417] vhci_hcd vhci_hcd.0: Device attached [ 1972.715399][T32417] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1973.306119][T32418] vhci_hcd: connection reset by peer [ 1973.340549][T15372] usb 14-1: new low-speed USB device number 16 using dummy_hcd [ 1973.424707][ T13] vhci_hcd vhci_hcd.2: stop threads [ 1973.426463][ T13] vhci_hcd vhci_hcd.2: release socket [ 1973.433526][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 1973.436632][T31468] usb 42-1: device descriptor read/8, error -110 [ 1973.510340][T32440] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1973.512761][T32440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1973.515998][T15372] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1973.518158][T32440] vhci_hcd vhci_hcd.0: Device attached [ 1973.519264][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1973.525818][T15372] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1973.531535][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1973.542054][T32440] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1973.548905][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1973.556423][T15372] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1973.567401][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1973.574609][T15372] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1973.584192][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1973.589516][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1973.594418][T15372] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1973.596938][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1973.602016][T15372] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1973.606232][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1973.610186][T15372] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1973.617911][T15372] usb 14-1: string descriptor 0 read error: -22 [ 1973.620105][T15372] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1973.623766][T15372] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.635238][T15372] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1973.817272][T31107] usb 46-1: SetAddress Request (34) to port 0 [ 1973.819805][T31107] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1973.888032][T31468] usb usb42-port1: attempt power cycle [ 1973.912373][T15372] usb 14-1: USB disconnect, device number 16 [ 1974.245957][T32443] vhci_hcd: connection reset by peer [ 1974.248001][T26454] vhci_hcd vhci_hcd.4: stop threads [ 1974.249856][T26454] vhci_hcd vhci_hcd.4: release socket [ 1974.252261][T26454] vhci_hcd vhci_hcd.4: disconnect device [ 1974.705068][T31468] usb usb42-port1: unable to enumerate USB device [ 1974.749951][T32457] binder: Binderfs stats mode cannot be changed during a remount [ 1974.818439][T32459] bridge0: entered promiscuous mode [ 1974.820619][T32459] bridge0: entered allmulticast mode [ 1975.602284][T32467] overlayfs: failed to clone lowerpath [ 1975.684312][T32463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1975.686369][T32463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1975.688905][T32463] vhci_hcd vhci_hcd.0: Device attached [ 1975.700828][T32463] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1975.750549][T32467] overlayfs: failed to clone lowerpath [ 1976.006649][ T5822] usb 42-1: SetAddress Request (58) to port 0 [ 1976.009708][ T5822] usb 42-1: new SuperSpeed USB device number 58 using vhci_hcd [ 1976.394691][T32469] vhci_hcd: connection reset by peer [ 1976.397383][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1976.399210][T30756] vhci_hcd vhci_hcd.2: release socket [ 1976.401192][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1976.627025][T32481] could not allocate digest TFM handle md5 [ 1976.787620][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 1976.787636][ T42] audit: type=1326 audit(1782891115.475:54726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32478 comm="syz.6.6465" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 1977.415679][T32489] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1977.419097][T32489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1977.459739][T32489] vhci_hcd vhci_hcd.0: Device attached [ 1977.497036][T32489] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1977.751518][T19000] usb 56-1: SetAddress Request (30) to port 0 [ 1977.753975][T19000] usb 56-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1977.772821][T32502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1977.774963][T32502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1977.778086][T32502] vhci_hcd vhci_hcd.0: Device attached [ 1977.790879][T32502] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1978.148545][T32490] vhci_hcd: connection reset by peer [ 1978.151001][ T5821] vhci_hcd vhci_hcd.9: stop threads [ 1978.154268][ T5821] vhci_hcd vhci_hcd.9: release socket [ 1978.157065][ T5821] vhci_hcd vhci_hcd.9: disconnect device [ 1978.969862][T32511] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6471'. [ 1979.231851][T32503] vhci_hcd: connection closed [ 1979.232294][ T7945] vhci_hcd vhci_hcd.2: stop threads [ 1979.237884][ T7945] vhci_hcd vhci_hcd.2: release socket [ 1979.240559][ T7945] vhci_hcd vhci_hcd.2: disconnect device [ 1979.333824][T31107] usb 46-1: device descriptor read/8, error -110 [ 1979.756914][T31107] usb usb46-port1: attempt power cycle [ 1980.551693][T31107] usb usb46-port1: unable to enumerate USB device [ 1981.273325][T32526] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1981.276010][T32526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1981.300509][T32526] vhci_hcd vhci_hcd.0: Device attached [ 1981.448285][T32526] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1981.473589][T32529] fuse: fd is not a fuse device [ 1981.520869][ T5822] usb 42-1: device descriptor read/8, error -110 [ 1981.700486][T31107] usb 46-1: SetAddress Request (38) to port 0 [ 1981.707228][T31107] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1981.790482][T32533] netlink: 'syz.2.6473': attribute type 1 has an invalid length. [ 1981.972036][T32533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1982.011726][ T5822] usb usb42-port1: attempt power cycle [ 1982.046696][T32527] vhci_hcd: connection reset by peer [ 1982.049607][T30756] vhci_hcd vhci_hcd.4: stop threads [ 1982.052026][T30756] vhci_hcd vhci_hcd.4: release socket [ 1982.054935][T30756] vhci_hcd vhci_hcd.4: disconnect device [ 1982.289010][T32540] bridge3: entered promiscuous mode [ 1982.300040][T32540] bridge3: entered allmulticast mode [ 1982.931932][ T5822] usb usb42-port1: unable to enumerate USB device [ 1983.256752][T19000] usb 56-1: device descriptor read/8, error -110 [ 1983.702454][T19000] usb usb56-port1: attempt power cycle [ 1984.309069][T19000] usb usb56-port1: unable to enumerate USB device [ 1984.880891][T32563] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1985.048362][T32562] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1985.051542][T32562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1985.055114][T32562] vhci_hcd vhci_hcd.0: Device attached [ 1985.375607][T15372] usb 56-1: SetAddress Request (34) to port 0 [ 1985.377680][T15372] usb 56-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1985.751855][T32566] vhci_hcd: connection reset by peer [ 1985.754144][ T12] vhci_hcd vhci_hcd.9: stop threads [ 1985.756606][ T12] vhci_hcd vhci_hcd.9: release socket [ 1985.759657][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 1986.225609][T32571] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1986.387423][T32576] input: syz1 as /devices/virtual/input/input30 [ 1986.389657][T32576] input: failed to attach handler leds to device input30, error: -6 [ 1987.235026][T31107] usb 46-1: device descriptor read/8, error -110 [ 1988.866068][T32594] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1988.898288][T32592] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1988.900900][T32592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1988.906797][T32592] vhci_hcd vhci_hcd.0: Device attached [ 1989.005081][T32596] vhci_hcd: connection closed [ 1989.007612][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1989.011620][ T13] vhci_hcd vhci_hcd.9: release socket [ 1989.014811][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 1989.176218][T31107] usb usb46-port1: attempt power cycle [ 1990.048850][T31107] usb usb46-port1: unable to enumerate USB device [ 1990.877772][T15372] usb 56-1: device descriptor read/8, error -110 [ 1990.946313][T32618] netlink: 'syz.9.6489': attribute type 1 has an invalid length. [ 1991.079221][T32618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1991.311972][T15372] usb usb56-port1: attempt power cycle [ 1991.461549][T32628] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1991.463698][T32628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1991.473941][T32628] vhci_hcd vhci_hcd.0: Device attached [ 1991.611231][T32628] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1991.754026][T32406] usb 46-1: SetAddress Request (42) to port 0 [ 1991.763150][T32406] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1991.950312][T15372] usb usb56-port1: unable to enumerate USB device [ 1992.162232][T32629] vhci_hcd: connection reset by peer [ 1992.165411][ T5821] vhci_hcd vhci_hcd.4: stop threads [ 1992.168391][ T5821] vhci_hcd vhci_hcd.4: release socket [ 1992.170920][ T5821] vhci_hcd vhci_hcd.4: disconnect device [ 1992.197753][T32638] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1992.200547][T32638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1992.206409][T32638] vhci_hcd vhci_hcd.0: Device attached [ 1992.222177][T32638] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1992.566894][T31107] usb 42-1: SetAddress Request (62) to port 0 [ 1992.570295][T31107] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1992.601177][T32647] netlink: 'syz.9.6495': attribute type 4 has an invalid length. [ 1992.633141][T32647] netlink: 'syz.9.6495': attribute type 4 has an invalid length. [ 1992.849353][T32639] vhci_hcd: connection reset by peer [ 1992.858484][T30756] vhci_hcd vhci_hcd.2: stop threads [ 1992.861476][T30756] vhci_hcd vhci_hcd.2: release socket [ 1992.867062][T30756] vhci_hcd vhci_hcd.2: disconnect device [ 1995.464767][T32664] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1995.467405][T32664] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1995.472356][T32664] vhci_hcd vhci_hcd.0: Device attached [ 1995.780303][T32664] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1995.882975][ T5822] usb 56-1: SetAddress Request (38) to port 0 [ 1995.885671][ T5822] usb 56-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1996.985582][T32681] netlink: 'syz.4.6501': attribute type 1 has an invalid length. [ 1997.024667][T32681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1997.262564][T32665] vhci_hcd: connection reset by peer [ 1997.272357][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1997.274130][ T13] vhci_hcd vhci_hcd.9: release socket [ 1997.280666][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 1997.281761][T32406] usb 46-1: device descriptor read/8, error -110 [ 1997.705646][T32406] usb usb46-port1: attempt power cycle [ 1998.011155][T32690] fuse: Bad value for 'fd' [ 1998.015458][T32690] overlayfs: failed to clone upperpath [ 1998.061544][T31107] usb 42-1: device descriptor read/8, error -110 [ 1998.322613][T32406] usb usb46-port1: unable to enumerate USB device [ 1998.443487][T32698] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6506'. [ 1998.550927][T31107] usb usb42-port1: attempt power cycle [ 1998.904556][T32703] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1998.907167][T32703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1998.910394][T32703] vhci_hcd vhci_hcd.0: Device attached [ 1998.963721][T32703] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1999.038373][T32707] x_tables: duplicate underflow at hook 1 [ 1999.157909][T31107] usb usb42-port1: unable to enumerate USB device [ 1999.172844][T32707] hub 8-0:1.0: USB hub found [ 1999.185282][T32707] hub 8-0:1.0: 1 port detected [ 1999.569378][T32705] vhci_hcd: connection closed [ 1999.570366][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1999.583782][ T13] vhci_hcd vhci_hcd.9: release socket [ 1999.589897][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 2001.356238][ T5822] usb 56-1: device descriptor read/8, error -110 [ 2002.331248][T32739] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2002.334830][T32739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2002.339618][ T5822] usb usb56-port1: attempt power cycle [ 2002.342198][T32739] vhci_hcd vhci_hcd.0: Device attached [ 2002.360532][T32739] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 2002.667540][ T1044] usb 46-1: SetAddress Request (46) to port 0 [ 2002.670533][ T1044] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 2002.877738][T32748] netlink: 'syz.6.6518': attribute type 2 has an invalid length. [ 2002.963134][ T5822] usb usb56-port1: unable to enumerate USB device [ 2003.017260][T32741] vhci_hcd: connection reset by peer [ 2003.020430][T30756] vhci_hcd vhci_hcd.4: stop threads [ 2003.022876][T30756] vhci_hcd vhci_hcd.4: release socket [ 2003.027139][T30756] vhci_hcd vhci_hcd.4: disconnect device [ 2003.240969][T32753] fuse: Bad value for 'fd' [ 2003.453675][T32751] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2003.940796][T32759] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2003.943048][T32759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2003.952073][T32759] vhci_hcd vhci_hcd.0: Device attached [ 2003.994569][T32759] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 2005.209026][T32760] vhci_hcd: connection closed [ 2005.209398][ T13] vhci_hcd vhci_hcd.4: stop threads [ 2005.214335][ T13] vhci_hcd vhci_hcd.4: release socket [ 2005.216318][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 2005.439827][ T311] netlink: 'syz.2.6531': attribute type 4 has an invalid length. [ 2005.546889][ T312] netlink: 'syz.2.6531': attribute type 4 has an invalid length. [ 2006.570394][T15372] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 2006.753613][T15372] usb 14-1: Using ep0 maxpacket: 8 [ 2006.773695][T15372] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 2006.779263][T15372] usb 14-1: config 179 has no interface number 0 [ 2006.783088][T15372] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2006.787879][T15372] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2006.792866][T15372] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2006.799516][T15372] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2006.805021][T15372] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2006.813487][T15372] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2006.818070][T15372] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.847752][ T323] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2007.410289][ T320] syzkaller1: entered promiscuous mode [ 2007.419495][ T320] syzkaller1: entered allmulticast mode [ 2007.739980][ T342] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2007.742643][ T342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2007.761268][ T342] vhci_hcd vhci_hcd.0: Device attached [ 2007.780183][ T342] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 2008.064748][T22116] usb 42-1: SetAddress Request (66) to port 0 [ 2008.067368][T22116] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 2008.079217][T31466] usb 14-1: USB disconnect, device number 17 [ 2008.079364][ C3] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2008.081761][ C3] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2008.087716][ C3] ================================================================== [ 2008.090226][ C3] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 2008.093139][ C3] Read of size 4 at addr ffff88804c1a885c by task swapper/3/0 [ 2008.099153][ C3] [ 2008.100818][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2008.100849][ C3] Tainted: [L]=SOFTLOCKUP [ 2008.100857][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2008.100868][ C3] Call Trace: [ 2008.100878][ C3] [ 2008.100887][ C3] dump_stack_lvl+0x100/0x190 [ 2008.100950][ C3] print_report+0x13d/0x4b0 [ 2008.100986][ C3] ? __virt_addr_valid+0x239/0x430 [ 2008.101025][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 2008.101046][ C3] kasan_report+0xdf/0x1c0 [ 2008.101071][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 2008.101093][ C3] do_raw_spin_lock+0x23b/0x260 [ 2008.101113][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2008.101146][ C3] ? kcov_remote_stop+0x201/0x540 [ 2008.101170][ C3] ? kcov_remote_stop+0x201/0x540 [ 2008.101195][ C3] _raw_spin_lock_irqsave+0x42/0x60 [ 2008.101220][ C3] ? __wake_up+0x1c/0x60 [ 2008.101243][ C3] __wake_up+0x1c/0x60 [ 2008.101264][ C3] usb_anchor_resume_wakeups+0xc7/0xf0 [ 2008.101307][ C3] __usb_hcd_giveback_urb+0x3d6/0x610 [ 2008.101334][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 2008.101357][ C3] dummy_timer+0xda1/0x36c0 [ 2008.101386][ C3] ? find_held_lock+0x2b/0x80 [ 2008.101412][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2008.101438][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 2008.101464][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2008.101491][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 2008.101518][ C3] ? rcu_is_watching+0x12/0xc0 [ 2008.101540][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2008.101563][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 2008.101589][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 2008.101617][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 2008.101641][ C3] handle_softirqs+0x1ea/0x9b0 [ 2008.101662][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 2008.101681][ C3] ? _raw_spin_unlock+0x28/0x50 [ 2008.101704][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 2008.101726][ C3] __irq_exit_rcu+0x162/0x210 [ 2008.101744][ C3] irq_exit_rcu+0x9/0x30 [ 2008.101763][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2008.101791][ C3] [ 2008.101797][ C3] [ 2008.101802][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2008.101822][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2008.101850][ C3] Code: d6 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 57 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2008.101866][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000206 [ 2008.101881][ C3] RAX: 0000000001614403 RBX: ffff88801c3d2540 RCX: ffffffff8b9a42d5 [ 2008.101891][ C3] RDX: 0000000000000000 RSI: ffffffff8df5902e RDI: ffffffff8c1e8f80 [ 2008.101904][ C3] RBP: ffffed100387a4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 2008.101916][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 2008.101928][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 2008.101943][ C3] ? ct_kernel_exit+0x125/0x180 [ 2008.101968][ C3] default_idle+0x9/0x10 [ 2008.101987][ C3] default_idle_call+0x6c/0xb0 [ 2008.102004][ C3] do_idle+0x3a7/0x5b0 [ 2008.102026][ C3] ? __pfx_do_idle+0x10/0x10 [ 2008.102043][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 2008.102067][ C3] cpu_startup_entry+0x4f/0x60 [ 2008.102087][ C3] start_secondary+0x21d/0x2d0 [ 2008.102109][ C3] ? __pfx_start_secondary+0x10/0x10 [ 2008.102132][ C3] common_startup_64+0x13e/0x158 [ 2008.102163][ C3] [ 2008.102171][ C3] [ 2008.216470][ T1044] usb 46-1: device descriptor read/8, error -110 [ 2008.219139][ C3] Allocated by task 15372: [ 2008.219161][ C3] kasan_save_stack+0x30/0x50 [ 2008.219214][ C3] kasan_save_track+0x14/0x30 [ 2008.219232][ C3] __kasan_kmalloc+0xaa/0xb0 [ 2008.262600][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 2008.262635][ C3] xpad_probe+0x28e/0x1f60 [ 2008.262655][ C3] usb_probe_interface+0x303/0x8f0 [ 2008.262680][ C3] really_probe+0x241/0xa60 [ 2008.262741][ C3] __driver_probe_device+0x20e/0x450 [ 2008.262764][ C3] driver_probe_device+0x4a/0x140 [ 2008.262785][ C3] __device_attach_driver+0x1df/0x320 [ 2008.262805][ C3] bus_for_each_drv+0x159/0x1e0 [ 2008.262823][ C3] __device_attach+0x1e4/0x4d0 [ 2008.262842][ C3] device_initial_probe+0xaf/0xd0 [ 2008.262865][ C3] bus_probe_device+0x64/0x160 [ 2008.262883][ C3] device_add+0x121d/0x1970 [ 2008.262906][ C3] usb_set_configuration+0xd97/0x1c60 [ 2008.262926][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 2008.262944][ C3] usb_probe_device+0xef/0x400 [ 2008.262970][ C3] really_probe+0x241/0xa60 [ 2008.262989][ C3] __driver_probe_device+0x20e/0x450 [ 2008.263010][ C3] driver_probe_device+0x4a/0x140 [ 2008.263032][ C3] __device_attach_driver+0x1df/0x320 [ 2008.263052][ C3] bus_for_each_drv+0x159/0x1e0 [ 2008.263069][ C3] __device_attach+0x1e4/0x4d0 [ 2008.263087][ C3] device_initial_probe+0xaf/0xd0 [ 2008.263109][ C3] bus_probe_device+0x64/0x160 [ 2008.263128][ C3] device_add+0x121d/0x1970 [ 2008.263149][ C3] usb_new_device.cold+0x685/0x115c [ 2008.263197][ C3] hub_event+0x314d/0x4af0 [ 2008.263215][ C3] process_one_work+0xa23/0x1940 [ 2008.263239][ C3] worker_thread+0x5ef/0xe50 [ 2008.263261][ C3] kthread+0x370/0x450 [ 2008.263284][ C3] ret_from_fork+0x72b/0xd50 [ 2008.263304][ C3] ret_from_fork_asm+0x1a/0x30 [ 2008.263331][ C3] [ 2008.263337][ C3] Freed by task 31466: [ 2008.263351][ C3] kasan_save_stack+0x30/0x50 [ 2008.263373][ C3] kasan_save_track+0x14/0x30 [ 2008.263392][ C3] kasan_save_free_info+0x3b/0x70 [ 2008.263409][ C3] __kasan_slab_free+0x5f/0x80 [ 2008.263429][ C3] kfree+0x22b/0x6c0 [ 2008.263445][ C3] xpad_disconnect+0x1cf/0x530 [ 2008.263461][ C3] usb_unbind_interface+0x1dd/0x9e0 [ 2008.263483][ C3] device_remove+0x12a/0x180 [ 2008.263503][ C3] device_release_driver_internal+0x44e/0x620 [ 2008.263526][ C3] bus_remove_device+0x2bc/0x560 [ 2008.263544][ C3] device_del+0x376/0x9b0 [ 2008.263564][ C3] usb_disable_device+0x367/0x810 [ 2008.263583][ C3] usb_disconnect+0x2e2/0x9a0 [ 2008.263601][ C3] hub_event+0x1d0c/0x4af0 [ 2008.263618][ C3] process_one_work+0xa23/0x1940 [ 2008.263643][ C3] worker_thread+0x5ef/0xe50 [ 2008.263666][ C3] kthread+0x370/0x450 [ 2008.263687][ C3] ret_from_fork+0x72b/0xd50 [ 2008.263706][ C3] ret_from_fork_asm+0x1a/0x30 [ 2008.263730][ C3] [ 2008.263736][ C3] The buggy address belongs to the object at ffff88804c1a8800 [ 2008.263736][ C3] which belongs to the cache kmalloc-1k of size 1024 [ 2008.263751][ C3] The buggy address is located 92 bytes inside of [ 2008.263751][ C3] freed 1024-byte region [ffff88804c1a8800, ffff88804c1a8c00) [ 2008.263771][ C3] [ 2008.263777][ C3] The buggy address belongs to the physical page: [ 2008.263786][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c1ad000 pfn:0x4c1a8 [ 2008.263803][ C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2008.263819][ C3] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 2008.263838][ C3] page_type: f5(slab) [ 2008.263856][ C3] raw: 04fff00000000240 ffff88801b842dc0 ffffea00012c5a10 ffffea0001aef210 [ 2008.263871][ C3] raw: ffff88804c1ad000 000000080010000a 00000000f5000000 0000000000000000 [ 2008.263888][ C3] head: 04fff00000000240 ffff88801b842dc0 ffffea00012c5a10 ffffea0001aef210 [ 2008.263904][ C3] head: ffff88804c1ad000 000000080010000a 00000000f5000000 0000000000000000 [ 2008.263952][ C3] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2008.263974][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2008.263986][ C3] page dumped because: kasan: bad access detected [ 2008.263995][ C3] page_owner tracks the page as allocated [ 2008.264001][ C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 225, tgid 225 (kworker/u33:7), ts 69373524336, free_ts 69079585123 [ 2008.264033][ C3] post_alloc_hook+0xfd/0x120 [ 2008.264052][ C3] get_page_from_freelist+0xf48/0x3530 [ 2008.264069][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2008.264088][ C3] new_slab+0xa2/0x650 [ 2008.264104][ C3] refill_objects+0xe3/0x410 [ 2008.264121][ C3] __pcs_replace_empty_main+0x376/0x680 [ 2008.264138][ C3] __kmalloc_noprof+0x66d/0x820 [ 2008.264156][ C3] ieee802_11_parse_elems_full+0x17c/0x3dd0 [ 2008.264205][ C3] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 2008.264225][ C3] ieee80211_iface_work+0xa9a/0x1070 [ 2008.264246][ C3] cfg80211_wiphy_work+0x2b7/0x550 [ 2008.264267][ C3] process_one_work+0xa23/0x1940 [ 2008.264288][ C3] worker_thread+0x5ef/0xe50 [ 2008.264307][ C3] kthread+0x370/0x450 [ 2008.264329][ C3] ret_from_fork+0x72b/0xd50 [ 2008.264349][ C3] ret_from_fork_asm+0x1a/0x30 [ 2008.264373][ C3] page last free pid 5922 tgid 5919 stack trace: [ 2008.264383][ C3] __free_frozen_pages+0x79f/0x1090 [ 2008.264408][ C3] qlist_free_all+0x47/0xf0 [ 2008.264427][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2008.264449][ C3] __kasan_slab_alloc+0x69/0x90 [ 2008.264471][ C3] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 2008.264489][ C3] __alloc_skb+0x140/0x710 [ 2008.264536][ C3] alloc_skb_with_frags+0xdd/0x760 [ 2008.264557][ C3] sock_alloc_send_pskb+0x801/0x980 [ 2008.264578][ C3] __ip_append_data+0x20d3/0x44d0 [ 2008.264629][ C3] ip_make_skb+0x28b/0x310 [ 2008.264645][ C3] udp_sendmsg+0x171c/0x2720 [ 2008.264668][ C3] inet_sendmsg+0x105/0x140 [ 2008.264686][ C3] ____sys_sendmsg+0x9c9/0xbe0 [ 2008.264709][ C3] ___sys_sendmsg+0x190/0x1e0 [ 2008.264731][ C3] __sys_sendmmsg+0x309/0x440 [ 2008.264750][ C3] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2008.264775][ C3] [ 2008.264779][ C3] Memory state around the buggy address: [ 2008.264788][ C3] ffff88804c1a8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2008.264802][ C3] ffff88804c1a8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2008.264813][ C3] >ffff88804c1a8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2008.264822][ C3] ^ [ 2008.264833][ C3] ffff88804c1a8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2008.264845][ C3] ffff88804c1a8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2008.264854][ C3] ================================================================== [ 2008.264867][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2008.264884][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2008.264909][ C3] Tainted: [L]=SOFTLOCKUP [ 2008.264917][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2008.264930][ C3] Call Trace: [ 2008.264938][ C3] [ 2008.264948][ C3] dump_stack_lvl+0x100/0x190 [ 2008.264978][ C3] vpanic+0x552/0x970 [ 2008.264998][ C3] ? __pfx_vpanic+0x10/0x10 [ 2008.265016][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 2008.265041][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 2008.265061][ C3] panic+0xd1/0xe0 [ 2008.265078][ C3] ? __pfx_panic+0x10/0x10 [ 2008.265096][ C3] ? end_report.part.0+0x23/0x90 [ 2008.265121][ C3] ? rcu_is_watching+0x12/0xc0 [ 2008.265144][ C3] ? end_report.part.0+0x23/0x90 [ 2008.265167][ C3] ? check_panic_on_warn+0x1f/0x90 [ 2008.265193][ C3] check_panic_on_warn.cold+0x19/0x34 [ 2008.265213][ C3] end_report.part.0+0x3a/0x90 [ 2008.265238][ C3] kasan_report.cold+0xe/0x18 [ 2008.265263][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 2008.265285][ C3] do_raw_spin_lock+0x23b/0x260 [ 2008.265307][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2008.265328][ C3] ? kcov_remote_stop+0x201/0x540 [ 2008.265351][ C3] ? kcov_remote_stop+0x201/0x540 [ 2008.265376][ C3] _raw_spin_lock_irqsave+0x42/0x60 [ 2008.265402][ C3] ? __wake_up+0x1c/0x60 [ 2008.265427][ C3] __wake_up+0x1c/0x60 [ 2008.265452][ C3] usb_anchor_resume_wakeups+0xc7/0xf0 [ 2008.265472][ C3] __usb_hcd_giveback_urb+0x3d6/0x610 [ 2008.265498][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 2008.265525][ C3] dummy_timer+0xda1/0x36c0 [ 2008.265556][ C3] ? find_held_lock+0x2b/0x80 [ 2008.265582][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2008.265608][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 2008.265635][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2008.265661][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 2008.265687][ C3] ? rcu_is_watching+0x12/0xc0 [ 2008.265710][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2008.265735][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 2008.265761][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 2008.265789][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 2008.265813][ C3] handle_softirqs+0x1ea/0x9b0 [ 2008.265835][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 2008.265856][ C3] ? _raw_spin_unlock+0x28/0x50 [ 2008.265879][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 2008.265904][ C3] __irq_exit_rcu+0x162/0x210 [ 2008.265923][ C3] irq_exit_rcu+0x9/0x30 [ 2008.265943][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2008.265977][ C3] [ 2008.265984][ C3] [ 2008.265992][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2008.266012][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2008.266039][ C3] Code: d6 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 57 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2008.266057][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000206 [ 2008.266075][ C3] RAX: 0000000001614403 RBX: ffff88801c3d2540 RCX: ffffffff8b9a42d5 [ 2008.266089][ C3] RDX: 0000000000000000 RSI: ffffffff8df5902e RDI: ffffffff8c1e8f80 [ 2008.266101][ C3] RBP: ffffed100387a4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 2008.266112][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 2008.266125][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 2008.266141][ C3] ? ct_kernel_exit+0x125/0x180 [ 2008.266162][ C3] default_idle+0x9/0x10 [ 2008.266180][ C3] default_idle_call+0x6c/0xb0 [ 2008.266198][ C3] do_idle+0x3a7/0x5b0 [ 2008.266220][ C3] ? __pfx_do_idle+0x10/0x10 [ 2008.266239][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 2008.266262][ C3] cpu_startup_entry+0x4f/0x60 [ 2008.266283][ C3] start_secondary+0x21d/0x2d0 [ 2008.266306][ C3] ? __pfx_start_secondary+0x10/0x10 [ 2008.266361][ C3] common_startup_64+0x13e/0x158 [ 2008.266396][ C3] [ 2008.267256][ C3] Kernel Offset: disabled VM DIAGNOSIS: 07:26:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e7e5e00 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e7e5e00 RDI=ffffffff8e492098 RBP=ffffffff8e491480 RSP=ffffc90000007a68 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffffffff8e492098 R15=0000000000000003 RIP=ffffffff8b9a3020 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880970e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002eb88ff8 CR3=000000005f826000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000386a68f RBX=ffff88801c32a540 RCX=ffffffff8b9a42d5 RDX=0000000000000000 RSI=ffffffff8df5902e RDI=ffffffff8c1e8f80 RBP=ffffed10038654a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8b9a289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880971e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7258850 CR3=000000004af3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000080 RBX=ffff888040ab0810 RCX=0000000000000007 RDX=ffff888029394a80 RSI=ffffffff869366da RDI=ffff888029394a80 RBP=0000000000000007 RSP=ffffc90004eef010 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000007 R11=0000000000000000 R12=ffffc90000415138 R13=ffff888040ab086c R14=ffff888040ab0818 R15=0000000000000000 RIP=ffffffff869366e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc2ed180300 ffffffff 00c00000 GS =0000 ffff8880972e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056231e6e1f40 CR3=00000000512c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=44074f433eaff161 86a65ab60ff714fb 44074f433eaff161 86a65ab60ff714fb 44074f433eaff161 86a65ab60ff714fb 44074f433eaff161 86a65ab60ff714fb ZMM18=ee3af2ae2b89dd46 473dab3896fb8d81 ee3af2ae2b89dd46 473dab3896fb8d81 ee3af2ae2b89dd46 473dab3896fb8d81 ee3af2ae2b89dd46 473dab3896fb8d81 ZMM19=1f3f000000000000 0000000000000004 1f3f000000000000 0000000000000003 1f3f000000000000 0000000000000002 1f3f000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd5fffffffff859a b72dffffffff859b a1c7ffffffff859a 4b37ffffffff84fd ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aee3ffffffff8397 4914ffffffff82bd 68b1ffffffff859a 4bcdffffffff859a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20cfffffffff84e9 d7adffffffff89c9 9da8ffffffff87fc b279ffffffff859a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89af4954 ffffffff82275028 ffffffff8b3ca930 ffffffff82902993 ZMM25=473dab38473dab38 473dab38473dab38 473dab38473dab38 473dab38473dab38 473dab38473dab38 473dab38473dab38 473dab38473dab38 473dab38473dab38 ZMM26=2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 2b89dd462b89dd46 ZMM27=ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ee3af2aeee3af2ae ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 1e3f00001e3f0000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8584b945 RDI=ffffffff9b4eeca0 RBP=ffffffff9b4eec60 RSP=ffffc900005e84f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b1ef1e6 R15=ffffffff8584b8e0 RIP=ffffffff8584b96f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008015e000 CR3=000000005410e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000008468000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000