last executing test programs: 4m42.914753429s ago: executing program 3 (id=1721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010016000000000000000500000a48000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c001180040001006669620014000000110001d5b0a09a413e5de5000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket$inet6(0xa, 0x80000, 0x10000) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc00000000003a02e7d9b01143f8e809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 4m42.795212219s ago: executing program 3 (id=1723): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r0 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) keyctl$reject(0x13, 0x0, 0x3, 0x202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r2, 0x40045436, 0x3) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/27, 0x1b) 4m42.7048629s ago: executing program 3 (id=1724): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}}, 0x2004c0a0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 4m41.101197551s ago: executing program 3 (id=1740): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00030200000102033ad14174cad5a8613e78b08f28b9c0c4959e56e65dd53cfbb3af959d17727396e931b1f3e01ba99b50792c2b0bab8948c38f5376cfccfadd367d49bd1f14d8399ccee17735dd9faaaf5905a017f34bc855ede6446ebd35f0ec7667763cf5933a1f222ea8ff08a5d3efdbe0ee32a8a4ccdbfc0c73cf63ff805bbaaa101c84aa5523bb59798f2f63093e1f46c633b15ba11f88"], 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="000000001340000008000f00080000001400140539690ce2a513be7fe7bb0368bf6d26b95f68730800000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="000000001340000008000f00080000001400140539690ce2a513be7fe7bb0368bf6d26b95f68730800000000"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) epoll_create1(0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x204}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) (async) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) (async) setpgid(r6, r6) setpgid(0x0, r6) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="8baaaaaaaaaac4bc9cace2148553d926efa1add9f696860011aa00bfd70000"], 0x0) fchdir(r5) (async) fchdir(r5) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) 4m40.024412863s ago: executing program 3 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44a300, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read(r2, &(0x7f0000002340)=""/10, 0x55) r4 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xb782, 0x400, 0x0, 0x212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r8 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = getpgrp(r3) r14 = syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x1, 0x107, 0x0, 0x0, 0x1000, 0xe, r13, 0x0, 0x10}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000480)=@ublk_get_dev_info_sqe={0x2e, 0x40, 0x0, r15, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, r16, '\x00', {r14, 0xffff, 0x0, 0x0}}) io_uring_enter(r4, 0x20, 0xd9db, 0x8, 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) r18 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r18) ptrace$pokeuser(0x6, r18, 0x118, 0xffffb453) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000620030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r19, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r20 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 4m39.714226133s ago: executing program 3 (id=1765): socket$netlink(0x10, 0x3, 0x12) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000500)="7e73563f9fe8493edf8352aed793a133c5789156b40498767a22b908e00984aef85e2bf7ec8f892cf90af7e3ba41d1cb7abb8433d83c590293d46abe0c85e7422124edefad542e528ec0b310f8337da500ea609ee561cf9cba43fc18a183e9af738bd79c24adb24146b676a4b504cef85b500e7b37d394ee39c863bcb39c362c912457955dc896cb56d3f29c1928d1255e64", 0x1}, {0x0, 0x4e}], 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r3, 0x0, 0x0) r5 = io_uring_setup(0x79d, &(0x7f0000000300)={0x0, 0x6b7a, 0x2, 0x0, 0x134, 0x0, r0}) r6 = socket(0x1e, 0x4, 0x7) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x8000000010, 0x2, 0x0) 4m24.58858787s ago: executing program 32 (id=1765): socket$netlink(0x10, 0x3, 0x12) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000500)="7e73563f9fe8493edf8352aed793a133c5789156b40498767a22b908e00984aef85e2bf7ec8f892cf90af7e3ba41d1cb7abb8433d83c590293d46abe0c85e7422124edefad542e528ec0b310f8337da500ea609ee561cf9cba43fc18a183e9af738bd79c24adb24146b676a4b504cef85b500e7b37d394ee39c863bcb39c362c912457955dc896cb56d3f29c1928d1255e64", 0x1}, {0x0, 0x4e}], 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r3, 0x0, 0x0) r5 = io_uring_setup(0x79d, &(0x7f0000000300)={0x0, 0x6b7a, 0x2, 0x0, 0x134, 0x0, r0}) r6 = socket(0x1e, 0x4, 0x7) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x8000000010, 0x2, 0x0) 3m22.953319343s ago: executing program 0 (id=2375): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000a2c781004000080046010020006600000801907864010102ac1414aa"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="41000200010078", 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018"], 0x0, 0x34}, 0x28) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='./ffs/ep0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="93", 0xf5) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) 3m22.504663039s ago: executing program 0 (id=2378): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000340)=0x3) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x5) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 3m21.674691794s ago: executing program 0 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe8000001f000000", @ANYRESDEC], 0xffdd) 3m19.245185856s ago: executing program 0 (id=2390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000200)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)="6f6f6d5f73636f72655f61646a203c20319f", 0x12) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r2, r6, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, 0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000280)) 3m18.685505566s ago: executing program 0 (id=2393): syz_emit_ethernet(0x13e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x108, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x10, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18027ccfcf821b0d0b3740cfa0b00cc7608eb0244f8a95140387befab8ce64406821ee0be5c6464ddcb1d2799d65e924f18247450000"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0xc, "d712d060659f8db7791d98cee1e95283d13e93ff6952174692a0f6edd47ab2d0642cfcbf291149c2db403dc590269d998c3cecf3194c0fb1bb4e24772c0100003aa96009d59021678071ed23d17da29e4c2fefdfaf89170fa60b0c5063e06199267a5f48"}]}}}}}}, 0x0) io_setup(0x62, &(0x7f00000000c0)) 3m18.055362213s ago: executing program 0 (id=2399): r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='\x00', 0x200000, 0x2c) mount_setattr(r0, 0x0, 0x1000, 0x0, 0x0) 3m18.009115446s ago: executing program 33 (id=2399): r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='\x00', 0x200000, 0x2c) mount_setattr(r0, 0x0, 0x1000, 0x0, 0x0) 3m15.882428079s ago: executing program 2 (id=2426): keyctl$setperm(0x5, 0x0, 0x122cd1b75c749ee1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c56}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32], 0x1c}}, 0x200040c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3m15.784721026s ago: executing program 2 (id=2427): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={0x0}, 0x1) close(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000ac000000030a03000000000000000000000000020900030073797a3000000000280008800c00024000000000000000030c00024000000000000000080c00024000000000000000034c1008800c00024000000000000010000c00014000000000000000000c0002407fffffffffffffff0c00024000000000000000090c00024000000000000000010c00024000000000000000020c00024000000000000000050900030073797a3200000000140000001000010000000000000000000084000a"], 0xf4}}, 0x20008844) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c000100feffffff0800000033df0bb41afeffc6c4b569be858442c6f7a2589ae318dc74516a990e9ac46d514deb30449a930e5ac67b5d2a12e40cc8d6fdd638af6fd78e8261e2e6e28941ed06c5527bf7fe8e33a0e6439d2df3b15d3238d634456164403e0fcc0fdde38decd5496f03f56b502381a18a2f3add50ed84ace019ade252800286588222c656c50a29cc0928641678289d4b1fd182f253e9fc209367"], 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) syz_io_uring_modify_offsets$generic(r1, r2, 0x34, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x20000000}) sendto$inet6(r7, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r7) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x2f8}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x6, 0x100, &(0x7f0000000440)="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"}) 3m15.491643278s ago: executing program 2 (id=2428): open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x172) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2) setresgid(0x0, 0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x5, 0x5, 0x7}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = io_uring_setup(0xf272, &(0x7f0000000440)={0x0, 0x8270, 0x400, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r6], 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) 3m14.390403665s ago: executing program 2 (id=2437): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000200)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="6f6f6d5f73636f72655f61646a203c20319f", 0x12) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r0, r4, 0x0) 3m14.060211474s ago: executing program 2 (id=2442): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xffe4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = open(0x0, 0x14927e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x78, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x3ffd, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x5c, 0x3, 0x0, 0x1, [@nested={0x58, 0x147, 0x0, 0x1, [@nested={0x52, 0x7e, 0x0, 0x1, [@typed={0x4, 0x12d}, @generic="c7931bc8357e983839d833367ff4eb6da489dd748eb91a2c6e863a679257de25969fc0f6504c11de745eb5c31cbe0c874979918c826eb318b6bca4a949fa8015797d9e987788253b9722"]}]}]}]}, 0x78}}, 0x4008030) copy_file_range(r1, 0x0, r1, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r3, &(0x7f0000001600)='dummy_udc.0', 0xb) 3m13.654061906s ago: executing program 2 (id=2445): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x3, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) 3m13.524036323s ago: executing program 34 (id=2445): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x3, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) 3m12.766582626s ago: executing program 5 (id=2452): fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) read(r0, &(0x7f0000000040)=""/248, 0xf8) 3m12.692928705s ago: executing program 5 (id=2453): openat$fb0(0xffffff9c, &(0x7f0000000000), 0x402000, 0x0) r0 = socket$inet(0x2, 0xce0ec1ff0c545b84, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'rose0\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x0, 0x4, 0xffffffc0, 0x8, 0x3, 0x292, 0x6, [0xbdf5, 0x3]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x5, 0x0, 0x0, @adapter={0x7, 0xffffffffffffffff, 0x8000000000000001, 0x27, 0x7fffffff}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x3c, r0}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) write$tun(r4, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000740)=@assoc_value={0x0}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r10, @in6={{0xa, 0x4e24, 0x8b42, @loopback, 0x2}}, 0x10, 0x1000}, 0x88) 3m11.595236405s ago: executing program 5 (id=2461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {0x0}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 3m10.57418034s ago: executing program 5 (id=2472): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpuacct'}]}, 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40408c0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 3m10.505112382s ago: executing program 5 (id=2473): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc1943) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) (async) keyctl$read(0xb, r2, &(0x7f00000003c0), 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)="303132333a616263643a30102765", 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000f8ffffff000018010000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@rnullb, 0xee00, &(0x7f0000000300)={0xc3c, 0x8, 0x0, 0x5, 0x9, 0x2, 0xfffffffffffffffc, 0x10001, 0x7ff}) ioctl$NBD_DO_IT(r0, 0xab03) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x8}, 0x30, 0x0) landlock_restrict_self(r7, 0x9) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='ufs\x00', 0x8000, &(0x7f00000001c0)='GPL\x00') 3m9.935208411s ago: executing program 5 (id=2476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000a00)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000900)) socket(0x10, 0x80002, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x268, 0x940c, 0x3002, 0x268, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x5, 0xfffffffffffffff7, 0x0, 0xfffffff7, 0x6, 0x9, 0xfffffffe, 0xfffffff8, 0x80, 0xe8}, {0xc3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x5, 0x9, 'syz0\x00', {0x4}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'ip6tnl0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x3, 0x69}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x37}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e20, 0xca01, 0x0, 0xffffffff, 0x4, 0x7}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x48c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2m56.30626717s ago: executing program 1 (id=2574): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) socket(0x40000000015, 0x5, 0x0) openat$userfaultfd(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = openat$sr(0xffffff9c, &(0x7f00000001c0), 0x140, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @multicast2}, {0x306, @broadcast}, 0x14, {0x2, 0x4e23, @local}, 'wg2\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x4, 0x9, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@noop, @lsrr={0x83, 0x17, 0x66, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x3d, [@broadcast]}]}}}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket(0x10, 0x3, 0x0) 2m56.144222237s ago: executing program 1 (id=2575): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3fd}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendfile(r1, r2, 0x0, 0x2000007ff) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="fdd29530b28b6106e71b53769a88", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000200)={0x0, 0x5, 0x2, 0x0, 0x7}) r9 = fsmount(r0, 0x0, 0x84) openat(r9, &(0x7f0000000340)='./file1\x00', 0x200, 0x41) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m55.570394505s ago: executing program 1 (id=2577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./configfs/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r1}) add_key$keyring(&(0x7f0000000480), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x3f000000}, 0x0) 2m55.084024549s ago: executing program 1 (id=2578): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000200)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="6f6f6d5f73636f72655f61646a203c20319f", 0x12) close_range(r1, r4, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, 0xffffffffffffffff}) 2m54.948727084s ago: executing program 35 (id=2476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000a00)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000900)) socket(0x10, 0x80002, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x268, 0x940c, 0x3002, 0x268, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x5, 0xfffffffffffffff7, 0x0, 0xfffffff7, 0x6, 0x9, 0xfffffffe, 0xfffffff8, 0x80, 0xe8}, {0xc3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x5, 0x9, 'syz0\x00', {0x4}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'ip6tnl0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x3, 0x69}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x37}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e20, 0xca01, 0x0, 0xffffffff, 0x4, 0x7}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x48c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2m54.897054645s ago: executing program 1 (id=2580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x8, 0x0) ioctl$MEMWRITE(r2, 0xc0304d18, &(0x7f00000001c0)={0xffffffff, 0x50, 0x2e, &(0x7f0000000100)="302811b5a31838ef276d59e4ec552ddec0e71a9162be420265f16d0a8682e82f6285e3c898bf71050ee53575cf45e8aaea83ca2cb4dde0f8a83860cecf140bfd5dbb6f07e10c15a0bef498f4f79a1c96", &(0x7f0000000180)="28fe9037f5a612ee4ae173de82c4d7f06c5906d09c2af2ed887c0d5102794d3b697000cafe637cd6a2f27e421141", 0x2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c080}, 0xc000) 2m54.489841948s ago: executing program 1 (id=2581): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m54.400888872s ago: executing program 36 (id=2581): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m27.824167946s ago: executing program 8 (id=3215): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, @dev, @empty, 0x80, 0x0, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1m27.721008222s ago: executing program 8 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x10008010) 1m27.28398848s ago: executing program 8 (id=3221): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)="6f6f6d5f73636f72655f61646a203c20319f", 0x12) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) close_range(r1, r3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, 0xffffffffffffffff}) 1m27.193226545s ago: executing program 8 (id=3223): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', r1}, 0x14) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff8e, &(0x7f0000000000)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0x44, 0x4, 0x4ac, 0xffffffff, 0x0, 0x31c, 0x150, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7b}}, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0x7e5debfdf7c2f28d], 'nr0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3a, 0xf, 0x0, 0x4}, 0x203, 0x12c, 0x150, 0x8502, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 0x0, 0x0, {0x2}}}, @common=@hbh={{0x48}, {0x5, 0x2, 0x1, [0x8007, 0xfffd, 0x8000, 0x9f, 0x8200, 0xb4f3, 0xffff, 0x6, 0x41, 0x7, 0xfffc, 0x6, 0x8, 0x1, 0x8, 0xd], 0x10}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0x0, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x89, 0x5, 0x4, 0x20}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x200000, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x804, 0x0) 1m26.186176067s ago: executing program 8 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='\x00\x00', 0x2) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1b, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x60}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040104}, 0x48080) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000040), 0x4) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1m26.024445338s ago: executing program 8 (id=3231): fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'wrr\x00', 0x3b, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@txtime={{0x14, 0x1, 0x3d, 0xb}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x400}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0xc4}, 0x40094) 1m10.963866153s ago: executing program 37 (id=3231): fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'wrr\x00', 0x3b, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@txtime={{0x14, 0x1, 0x3d, 0xb}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x400}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0xc4}, 0x40094) 5.470685561s ago: executing program 7 (id=3831): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d09, &(0x7f0000000900)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.482050468s ago: executing program 6 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24867, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x100204}) (async, rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_sctp(0x2, 0x0, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r5 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000180)={0x0, 0x1, 0x11, 0xfffb}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000300)}) close_range(r6, 0xffffffffffffffff, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4044, &(0x7f00000001c0)=ANY=[@ANYBLOB="66643db54e7fdc618cfd14b4854e92d67e2feb52fdf78debd7a56160b07ec006deccbfca0ee6b1abe3f278e835150a4ab26e63739b47a82f58eb0faf1b8af9c3fafafe8177d8dcf533c1663e8dbafbd99f9fd2df4dbaab712edb6c090159dba6214692abf5ddc655afe92117", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002680)) (async) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) open_by_handle_at(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00'], 0x303002) 3.413051049s ago: executing program 6 (id=3843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfff5, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4040854}, 0x40) 3.359532545s ago: executing program 6 (id=3844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 3.291734649s ago: executing program 6 (id=3845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xe00, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.190612094s ago: executing program 6 (id=3847): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0x2e, 0xa9, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001780)=@new_dev={0x1, 0xe31, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x10}}}, &(0x7f0000001840)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) waitid(0x0, r1, &(0x7f0000000180), 0x1, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) 2.79180295s ago: executing program 9 (id=3851): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x134, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e26, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffe}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x10) setuid(0xee01) faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f00000000c0)=""/95, &(0x7f0000000140)=""/185, &(0x7f0000000200)=""/75, 0x10000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.713684235s ago: executing program 7 (id=3853): mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/events/sched/sched_switch/enable\x00', 0x1, 0x129) write(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="ae7740fb", 0x4}], 0x1, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) recvmmsg(r2, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000200)=""/146, 0x92}, 0x40004}], 0x1, 0x0, 0x0) shutdown(r2, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04023520"], 0x7) r3 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./merge\x00', 0x1) fsmount(r3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./merge\x00', &(0x7f0000000080), 0x1000020, &(0x7f0000000100)={[{@gid={'gid', 0x3d, 0xee01}}], [{@subj_type={'subj_type', 0x3d, '(%\\c{:\\'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@\xb8*,#]-&\x97$*]^[\\'}}, {@obj_type={'obj_type', 0x3d, '}$'}}, {@obj_user={'obj_user', 0x3d, '^\\%'}}, {@obj_user={'obj_user', 0x3d, '#'}}]}) 2.713073772s ago: executing program 9 (id=3854): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xa3, &(0x7f00000002c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x6c}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000280)={r2, r13}) r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000100)={0x3, 0x1, 0x58000, 0x1000, &(0x7f0000009000/0x1000)=nil}) r15 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r15, 0x42, 0x1ff) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r16}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r16, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000b80)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.644141399s ago: executing program 4 (id=3855): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x5, 0x1300, 0xffffffffffffffff, 0x9d}, 0x50) 2.64057746s ago: executing program 4 (id=3856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xe00, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.483649303s ago: executing program 7 (id=3857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x600c2, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xa, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7d02}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x6, 0x4, 0x8, 0xc, 0x1}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45}, 0x94) 2.483068542s ago: executing program 4 (id=3858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='anon_inodefs\x00', 0x11000d1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x101002, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000003f40)="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", 0x2000, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030942bd7000fcdbdf251100000008000300", @ANYRES32=r5, @ANYBLOB="060036000c0000000c00430001000000040000000a0006000802110000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4040854}, 0x40) 2.41420523s ago: executing program 4 (id=3859): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = gettid() timer_create(0x0, 0x0, 0x0) ptrace(0x4208, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b801000038000000640200000a0400000f00200002000500000000020000000051e57464040000000900000006000000030000000600000008000000a104000051e57464ff000000020000000000400000f8ffffff7f0020000400000100ffff00"/340], 0xa78) close(r0) socket$kcm(0x29, 0x2, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.413722639s ago: executing program 9 (id=3860): set_mempolicy(0x5, 0x0, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.413331016s ago: executing program 7 (id=3861): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0x2004c16, 0x0, 0x0, 0xbd}, &(0x7f0000000240), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08006600030040000800b600", @ANYRES32=r1, @ANYBLOB], 0x1598}, 0x1, 0x0, 0x0, 0x80}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700000069000b5940a38cd834dcf7000000f33450a73e9d000800010001000000"], 0x20}}, 0x4000000) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0xd3}}) unshare(0x26020480) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000280)=0x3) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'veth1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="91c68da8bc710d02"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x2}) 2.41207531s ago: executing program 4 (id=3862): set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x1ff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080000, 0x0, 0x0, 0xcd8, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xfffffffe, 0x0, 0xfffffffb, 0x806, 0x45, 0x0, 0x0, 0x8000, 0x8, 0x0, 0x0, 0x9, 0x8000001, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0xfffffffe, 0xf2d, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200003, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0x7ff, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CDROMRESET(r3, 0x5312) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) 2.223504171s ago: executing program 9 (id=3863): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xfffc, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054) syz_open_dev$vim2m(&(0x7f0000000000), 0xffd, 0x2) 1.422903135s ago: executing program 7 (id=3864): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2a5c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setresgid(0x0, 0x0, 0xee01) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400d3010408"], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c00026aaa6c383032313100"], 0x20}}, 0x0) r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r6, 0x0, 0x0, 0x1}}, 0x20) r7 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x490002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x7d}}, './file0\x00'}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) 1.231072017s ago: executing program 4 (id=3865): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x7}}, {}]}) rt_sigqueueinfo(0xffffffffffffffff, 0x30, &(0x7f0000000200)={0xa, 0x1, 0x2}) 1.230631183s ago: executing program 7 (id=3866): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.120620881s ago: executing program 9 (id=3867): syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x2a, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r1, 0x8000000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x42020054, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x8a) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3ff, &(0x7f0000000000)) getegid() r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 853.81266ms ago: executing program 6 (id=3868): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xfffffbff, 0xfffffffc}) prctl$PR_CAPBSET_DROP(0x18, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181002, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xa1) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 9 (id=3869): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xa3, &(0x7f00000002c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x6c}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000280)={r2, r13}) r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000100)={0x3, 0x1, 0x58000, 0x1000, &(0x7f0000009000/0x1000)=nil}) r15 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r15, 0x42, 0x1ff) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r16}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r16, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000b80)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): scuous mode [ 468.337198][T17450] macvlan2: left allmulticast mode [ 468.339560][T17450] macvlan3: left promiscuous mode [ 468.341167][T17450] macvlan3: left allmulticast mode [ 468.342792][T17450] macvlan4: left promiscuous mode [ 468.344778][T17450] macvlan4: left allmulticast mode [ 468.347213][T17450] bridge1: left promiscuous mode [ 468.349130][T17450] bridge1: left allmulticast mode [ 468.361819][T17450] macvlan5: left promiscuous mode [ 468.364134][T17450] macvlan5: left allmulticast mode [ 468.366669][T17450] bridge0: left promiscuous mode [ 468.370651][T14014] lo speed is unknown, defaulting to 1000 [ 468.373054][T14014] syz1: Port: 1 Link DOWN [ 468.374867][T14014] lo speed is unknown, defaulting to 1000 [ 468.383845][ T5607] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.390548][ T5607] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.396583][ T5607] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.401646][ T5607] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.422260][T17454] syzkaller0: entered promiscuous mode [ 468.427160][T17454] syzkaller0: entered allmulticast mode [ 468.693930][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.724381][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.727513][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.884797][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.022708][T17491] netlink: 'syz.4.3282': attribute type 9 has an invalid length. [ 470.031594][T17491] macvlan4: entered promiscuous mode [ 470.033944][T17491] macvlan4: entered allmulticast mode [ 470.518791][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 470.518806][ T42] audit: type=1800 audit(2000000126.803:14555): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 470.552934][T17496] CIFS: Attempting to mount //127.0.0.1/share [ 470.603255][T17497] CIFS: VFS: Invalid response size 0 for command 0 [ 470.607445][T17496] CIFS: VFS: cifs_mount failed w/return code = -5 [ 470.649333][ T42] audit: type=1800 audit(2000000126.933:14556): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 470.765172][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.796163][ T42] audit: type=1800 audit(2000000127.083:14557): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=440789 res=0 errno=0 [ 471.804640][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.926064][ T42] audit: type=1800 audit(2000000128.213:14558): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 472.062789][T17517] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3289'. [ 472.538113][T17533] netlink: 'syz.4.3293': attribute type 9 has an invalid length. [ 472.556216][T17533] macvlan5: entered promiscuous mode [ 472.560881][T17533] macvlan5: entered allmulticast mode [ 472.769531][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.844779][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.901961][T17538] wg2 speed is unknown, defaulting to 1000 [ 472.905853][ T42] audit: type=1800 audit(2000000129.193:14559): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 473.099897][T17538] lo speed is unknown, defaulting to 1000 [ 473.103418][T17538] lo speed is unknown, defaulting to 1000 [ 473.162613][ T42] audit: type=1800 audit(2000000129.443:14560): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 473.884018][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.070148][T17568] fuse: fd is not a fuse device [ 474.355620][T17580] wg2 speed is unknown, defaulting to 1000 [ 474.375179][T17578] Set syz1 is full, maxelem 1021 reached [ 474.470804][T17580] lo speed is unknown, defaulting to 1000 [ 474.473511][T17580] lo speed is unknown, defaulting to 1000 [ 474.494303][ T9] libceph: connect (1)[c::]:6789 error -99 [ 474.499572][ T42] audit: type=1800 audit(2000000130.783:14561): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=451705 res=0 errno=0 [ 474.500550][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 474.585592][ T42] audit: type=1800 audit(2000000130.873:14562): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 474.607870][T17583] ceph: No mds server is up or the cluster is laggy [ 474.701917][T17589] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3309'. [ 474.739154][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3309'. [ 474.865005][ T42] audit: type=1800 audit(2000000131.153:14563): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 474.936246][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.951252][T17594] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3312'. [ 475.151858][ T42] audit: type=1800 audit(2000000131.433:14564): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=454928 res=0 errno=0 [ 475.548932][ T42] audit: type=1800 audit(2000000131.833:14565): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3317" name="file0" dev="tmpfs" ino=2729 res=0 errno=0 [ 475.804620][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.819644][T17622] fuse: fd is not a fuse device [ 475.977742][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.174951][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3328'. [ 476.383079][ T42] audit: type=1800 audit(2000000132.663:14566): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=454948 res=0 errno=0 [ 476.393430][ T42] audit: type=1800 audit(2000000132.663:14567): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=454963 res=0 errno=0 [ 476.401991][ T42] audit: type=1326 audit(2000000132.683:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.427669][ T42] audit: type=1326 audit(2000000132.683:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.444389][ T42] audit: type=1326 audit(2000000132.683:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.454183][ T42] audit: type=1326 audit(2000000132.683:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.464129][ T42] audit: type=1326 audit(2000000132.693:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.472860][ T42] audit: type=1326 audit(2000000132.693:14573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.483171][ T42] audit: type=1326 audit(2000000132.693:14574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.6.3330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 476.657471][T17653] CIFS: Attempting to mount //127.0.0.1/share [ 476.709603][T17654] CIFS: VFS: Invalid response size 0 for command 0 [ 476.712636][T17653] CIFS: VFS: cifs_mount failed w/return code = -5 [ 477.017234][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.100059][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.109260][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.112809][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.119613][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.122770][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.331595][T17681] fuse: fd is not a fuse device [ 477.416141][T17666] wg2 speed is unknown, defaulting to 1000 [ 477.527107][T17666] lo speed is unknown, defaulting to 1000 [ 477.530882][T17666] lo speed is unknown, defaulting to 1000 [ 477.772676][T17693] vmxnet3 0000:00:02.0: Incompatible h/w version (0x0) for adapter [ 477.822645][T17693] vmxnet3 0000:00:02.0: probe with driver vmxnet3 failed with error -16 [ 478.022806][T12425] bridge_slave_1: left allmulticast mode [ 478.025787][T12425] bridge_slave_1: left promiscuous mode [ 478.028656][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.045170][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.051899][T12425] bridge_slave_0: left allmulticast mode [ 478.057228][T12425] bridge_slave_0: left promiscuous mode [ 478.058140][T17713] fuse: fd is not a fuse device [ 478.061847][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.454084][T17726] ptrace attach of ""[17728] was attempted by "/syz-executor exec"[17726] [ 478.473350][T12425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.481913][T12425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.486513][T12425] bond0 (unregistering): Released all slaves [ 478.493249][T12425] bond1 (unregistering): Released all slaves [ 478.504612][T12425] bond2 (unregistering): Released all slaves [ 478.545659][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 478.648866][T12425] tipc: Left network mode [ 478.756246][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.763501][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.773177][T17666] bridge_slave_0: entered allmulticast mode [ 478.785737][T17666] bridge_slave_0: entered promiscuous mode [ 478.797793][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.819950][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.825299][T17666] bridge_slave_1: entered allmulticast mode [ 478.834347][T17666] bridge_slave_1: entered promiscuous mode [ 478.854020][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.948466][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.979130][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.031346][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 479.094759][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.148924][T17666] team0: Port device team_slave_0 added [ 479.164378][ T5755] Bluetooth: hci3: command tx timeout [ 479.186069][T17666] team0: Port device team_slave_1 added [ 479.342966][T17750] bond2: entered promiscuous mode [ 479.351373][T17750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.389187][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.396159][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.434560][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.487771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.488346][T17747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.507442][T17747] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 479.526665][T17747] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 479.587443][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.593868][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.602361][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.742735][T12425] hsr_slave_0: left promiscuous mode [ 479.757575][T12425] hsr_slave_1: left promiscuous mode [ 479.765024][T12425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.783128][T12425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.082554][T12425] team0 (unregistering): Port device team_slave_1 removed [ 480.103050][T12425] team0 (unregistering): Port device team_slave_0 removed [ 480.127794][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.304861][T17666] hsr_slave_0: entered promiscuous mode [ 480.309748][T17666] hsr_slave_1: entered promiscuous mode [ 480.314445][T17666] debugfs: 'hsr0' already exists in 'hsr' [ 480.321533][T17666] Cannot create hsr debugfs directory [ 480.329939][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11 [ 480.555417][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 480.555441][ T42] audit: type=1800 audit(2000000136.843:14613): pid=17666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 480.569117][ T42] audit: type=1800 audit(2000000136.853:14614): pid=17666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27370 res=0 errno=0 [ 480.590321][ T42] audit: type=1800 audit(2000000136.853:14615): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35246 res=0 errno=0 [ 480.598597][ T42] audit: type=1800 audit(2000000136.863:14616): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35269 res=0 errno=0 [ 480.612588][ T42] audit: type=1800 audit(2000000136.863:14617): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=467564 res=0 errno=0 [ 480.716845][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12 [ 480.776045][T12425] IPVS: stop unused estimator thread 0... [ 480.779297][T17666] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.785649][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.788798][T17666] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 480.796450][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.800375][T17666] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 480.807425][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.811290][T17666] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 480.813755][ T4173] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 480.820842][T17666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.940093][T17666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.957035][T17666] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.971679][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.974903][T10595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.989373][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.992075][T10595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.993415][ T4173] usb 12-1: unable to get BOS descriptor or descriptor too short [ 481.007926][ T4173] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 481.011870][ T42] audit: type=1800 audit(2000000137.293:14618): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 481.020315][ T4173] usb 12-1: can't read configurations, error -71 [ 481.071753][T17666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.079644][T17666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.122860][T17809] Unsupported ieee802154 address type: 0 [ 481.130381][T17809] jffs2: notice: (17809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 481.192444][ T42] audit: type=1800 audit(2000000137.393:14619): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 481.248402][ T5755] Bluetooth: hci3: command tx timeout [ 481.484390][T17666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.695968][T17666] veth0_vlan: entered promiscuous mode [ 481.707714][T17666] veth1_vlan: entered promiscuous mode [ 481.728191][T17666] veth0_macvtap: entered promiscuous mode [ 481.735279][T17666] veth1_macvtap: entered promiscuous mode [ 481.750340][T17666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.758984][T17666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.826586][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.888179][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.899637][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.910367][ T42] audit: type=1800 audit(2000000138.163:14620): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=467924 res=0 errno=0 [ 481.953926][ T5607] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.957747][ T5607] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.983289][ T6906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.992426][ T6906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.997493][ T42] audit: type=1800 audit(2000000138.273:14621): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=468050 res=0 errno=0 [ 482.057563][ T42] audit: type=1800 audit(2000000138.343:14622): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 482.067602][ T6906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.071270][ T6906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.105212][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.355871][ T846] usb 12-1: new full-speed USB device number 15 using dummy_hcd [ 482.566856][ T846] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 482.804852][ T846] usb 12-1: config 0 interface 0 has no altsetting 0 [ 482.829168][ T846] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.833570][ T846] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.838190][ T846] usb 12-1: Product: syz [ 482.840405][ T846] usb 12-1: Manufacturer: syz [ 482.843432][ T846] usb 12-1: SerialNumber: syz [ 482.846804][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.903781][ T846] usb 12-1: config 0 descriptor?? [ 483.050718][ T846] usb 12-1: selecting invalid altsetting 0 [ 483.054056][T17848] bond2 (unregistering): Released all slaves [ 483.326697][ T5755] Bluetooth: hci3: command tx timeout [ 483.783395][T17866] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3375'. [ 483.823901][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3376'. [ 483.833078][T17868] veth0_macvtap: left promiscuous mode [ 483.883915][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.924046][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.933975][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.127493][ T5890] usb 12-1: USB disconnect, device number 15 [ 485.211928][T17899] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3386'. [ 485.216919][T17899] netlink: 'syz.7.3386': attribute type 1 has an invalid length. [ 485.223336][T17899] tipc: Enabled bearer , priority 0 [ 485.225863][T17900] tipc: Enabling of bearer rejected, already enabled [ 485.263812][ T846] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 485.277390][T17903] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3387'. [ 485.281873][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.324261][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3388'. [ 485.403939][ T5755] Bluetooth: hci3: command tx timeout [ 485.437838][T17913] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 485.495200][ T846] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.498583][ T846] usb 14-1: config 1 descriptor has 1 excess byte, ignoring [ 485.501523][ T846] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.505746][ T846] usb 14-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.511647][ T846] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.514886][ T846] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.517633][ T846] usb 14-1: Product: syz [ 485.519073][ T846] usb 14-1: Manufacturer: syz [ 485.527390][ T846] cdc_wdm 14-1:1.0: skipping garbage [ 485.530314][ T846] cdc_wdm 14-1:1.0: probe with driver cdc_wdm failed with error -22 [ 485.565671][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 485.565687][ T42] audit: type=1800 audit(2000000141.853:14672): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3391" name="level" dev="sysfs" ino=468782 res=0 errno=0 [ 485.759757][ T42] audit: type=1800 audit(2000000142.043:14673): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 485.778436][ T41] usb 14-1: USB disconnect, device number 2 [ 485.861891][ T42] audit: type=1800 audit(2000000142.143:14674): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 485.934948][ T42] audit: type=1800 audit(2000000142.223:14675): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 485.963508][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3394'. [ 485.966866][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.008279][ T42] audit: type=1800 audit(2000000142.293:14676): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 486.065689][ T42] audit: type=1800 audit(2000000142.353:14677): pid=17931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3393" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 486.067224][T17931] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 486.067294][T17931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 486.068619][T17931] vhci_hcd vhci_hcd.0: Device attached [ 486.098918][T17932] vhci_hcd: connection closed [ 486.100021][ T13] vhci_hcd vhci_hcd.7: stop threads [ 486.100446][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3395'. [ 486.123272][ T13] vhci_hcd vhci_hcd.7: release socket [ 486.123302][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 486.218569][ T5890] tipc: Node number set to 2865922847 [ 486.718325][ T42] audit: type=1800 audit(2000000142.993:14678): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 487.004009][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.052273][ T42] audit: type=1800 audit(2000000143.333:14679): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 487.263553][T17950] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3400'. [ 487.343323][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3403'. [ 487.419227][T17964] fuse: fd is not a fuse device [ 487.653914][ T42] audit: type=1800 audit(2000000143.933:14680): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 487.732897][ T42] audit: type=1800 audit(2000000144.013:14681): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 487.739038][T17982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.963857][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.044494][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.307032][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3414'. [ 488.313801][T17992] sctp: [Deprecated]: syz.6.3414 (pid 17992) Use of int in max_burst socket option deprecated. [ 488.313801][T17992] Use struct sctp_assoc_value instead [ 488.489804][ T5890] libceph: connect (1)[c::]:6789 error -99 [ 488.493758][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 488.509865][T18002] ceph: No mds server is up or the cluster is laggy [ 488.605352][T17984] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 488.713143][T18024] syzkaller0: entered promiscuous mode [ 488.715885][T18024] syzkaller0: entered allmulticast mode [ 489.086258][ T1486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.093988][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.336640][T18039] CIFS: Attempting to mount //127.0.0.1/share [ 489.390630][T18036] netlink: 'syz.4.3429': attribute type 9 has an invalid length. [ 489.400885][T18036] macvlan6: entered promiscuous mode [ 489.402865][T18036] macvlan6: entered allmulticast mode [ 489.804579][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.123933][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.166397][T18039] CIFS: VFS: Error connecting to socket. Aborting operation. [ 490.170132][T18039] CIFS: VFS: cifs_mount failed w/return code = -4 [ 490.204357][ T846] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 490.375694][ T846] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 490.382053][ T846] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 490.392235][ T846] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 490.403710][ T846] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.407468][ T846] usb 12-1: Product: syz [ 490.411475][ T846] usb 12-1: Manufacturer: syz [ 490.416170][ T846] usb 12-1: SerialNumber: syz [ 490.435476][ T846] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 490.465796][ T846] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 490.473557][ T846] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 490.581104][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 490.581142][ T42] audit: type=1800 audit(2000000146.863:14713): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=469342 res=0 errno=0 [ 490.591073][T18073] __nla_validate_parse: 1 callbacks suppressed [ 490.591088][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'. [ 490.631683][ T42] audit: type=1800 audit(2000000146.883:14714): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=469369 res=0 errno=0 [ 490.657373][T18074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.662368][ T42] audit: type=1800 audit(2000000146.913:14715): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=469383 res=0 errno=0 [ 490.684888][ T42] audit: type=1800 audit(2000000146.913:14716): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=469327 res=0 errno=0 [ 490.720298][ T42] audit: type=1800 audit(2000000146.933:14717): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=469330 res=0 errno=0 [ 490.746856][ T42] audit: type=1800 audit(2000000146.933:14718): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=469356 res=0 errno=0 [ 490.776489][ T42] audit: type=1800 audit(2000000146.933:14719): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=469370 res=0 errno=0 [ 490.817963][ T42] audit: type=1800 audit(2000000147.103:14720): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=469343 res=0 errno=0 [ 490.997840][ T42] audit: type=1800 audit(2000000147.283:14721): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 491.004233][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.028009][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.165986][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.954054][ T42] audit: type=1800 audit(2000000148.233:14722): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 491.982302][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 492.091227][T18091] CIFS: Attempting to mount //127.0.0.1/share [ 492.124963][ T5755] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 492.132233][ T5755] Bluetooth: hci3: Injecting HCI hardware error event [ 492.145250][ T5100] Bluetooth: hci3: hardware error 0x00 [ 492.177126][T18097] netlink: 'syz.6.3448': attribute type 2 has an invalid length. [ 492.213930][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.233775][ T846] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 492.284273][T18054] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 492.291119][ T7160] usb 12-1: USB disconnect, device number 16 [ 492.304252][ T7160] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 492.309070][ T7160] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 492.314802][ T7160] ti_usb_3410_5052 12-1:2.0: device disconnected [ 492.396383][ T846] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.400413][ T846] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 492.405297][ T846] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.409601][ T846] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.414795][ T846] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.421928][ T846] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.426234][ T846] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.429910][ T846] usb 14-1: Product: syz [ 492.431863][ T846] usb 14-1: Manufacturer: syz [ 492.440256][ T846] cdc_wdm 14-1:1.0: skipping garbage [ 492.443440][ T846] cdc_wdm 14-1:1.0: skipping garbage [ 492.449494][ T846] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 492.452159][ T846] cdc_wdm 14-1:1.0: Unknown control protocol [ 492.646693][T18085] : renamed from veth0 (while UP) [ 492.661901][T18085] netlink: 'syz.9.3443': attribute type 9 has an invalid length. [ 492.669020][T18085] macvlan2: entered promiscuous mode [ 492.671038][T18085] macvlan2: entered allmulticast mode [ 492.678069][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 492.680567][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 492.682992][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 492.685600][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 492.688140][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 492.690715][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 492.696287][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 492.698412][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 492.700608][ T5890] usb 14-1: USB disconnect, device number 3 [ 492.923274][T18091] CIFS: VFS: Error connecting to socket. Aborting operation. [ 492.928708][T18091] CIFS: VFS: cifs_mount failed w/return code = -4 [ 493.006454][T18122] veth0_macvtap: entered promiscuous mode [ 493.019840][T18122] 8021q: adding VLAN 0 to HW filter on device eth0 [ 493.023303][T18122] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.031109][T18122] 8021q: adding VLAN 0 to HW filter on device eth2 [ 493.038180][T18122] 8021q: adding VLAN 0 to HW filter on device eth3 [ 493.040790][T18122] bond0: left promiscuous mode [ 493.047432][T18122] bond0: entered allmulticast mode [ 493.050949][T18122] bond0: entered promiscuous mode [ 493.052784][T18122] macvlan2: left promiscuous mode [ 493.054814][T18122] bond0: left promiscuous mode [ 493.056391][T18122] macvlan2: left allmulticast mode [ 493.058082][T18122] bond0: left allmulticast mode [ 493.064238][T18122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.070438][T18122] bond0: entered allmulticast mode [ 493.072207][T18122] bond0: entered promiscuous mode [ 493.074671][T18122] macvlan3: left promiscuous mode [ 493.076250][T18122] bond0: left promiscuous mode [ 493.086647][T18122] macvlan3: left allmulticast mode [ 493.088321][T18122] bond0: left allmulticast mode [ 493.090122][T18122] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 493.093594][T18122] bond0: entered allmulticast mode [ 493.104999][T18122] bond0: entered promiscuous mode [ 493.106796][T18122] macvlan4: left promiscuous mode [ 493.108401][T18122] bond0: left promiscuous mode [ 493.110012][T18122] macvlan4: left allmulticast mode [ 493.111622][T18122] bond0: left allmulticast mode [ 493.113544][T18122] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 493.119135][T18122] bond0: entered allmulticast mode [ 493.120774][T18122] bond0: entered promiscuous mode [ 493.122470][T18122] macvlan5: left promiscuous mode [ 493.133172][T18122] bond0: left promiscuous mode [ 493.136096][T18122] macvlan5: left allmulticast mode [ 493.137924][T18122] bond0: left allmulticast mode [ 493.141681][T18122] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 493.147192][T18122] bond0: entered allmulticast mode [ 493.148984][T18122] bond0: entered promiscuous mode [ 493.150715][T18122] macvlan6: left promiscuous mode [ 493.156573][T18122] bond0: left promiscuous mode [ 493.158252][T18122] macvlan6: left allmulticast mode [ 493.164945][T18122] bond0: left allmulticast mode [ 493.166829][T18122] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 493.253896][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.253942][T12425] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.270695][T12425] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.282854][T12425] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.292051][T12425] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.374619][T18126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3452'. [ 493.629300][T18141] 9p: Bad value for 'wfdno' [ 494.045272][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.206410][ T5100] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 494.433017][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.779934][T18143] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 494.802636][T18143] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 494.809210][T18143] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 494.811652][T18143] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 494.815128][T18143] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 494.832828][T18143] pci 0000:00:01.0: Adding to iommu group 1 [ 494.836571][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3458'. [ 494.839138][T18143] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 494.842011][T18143] pci 0000:00:01.0: vgaarb: bridge control possible [ 494.844071][T18143] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 494.871293][T18143] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 494.874359][T18143] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 494.959504][T18143] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 494.994657][T18157] wg2 speed is unknown, defaulting to 1000 [ 494.997648][T18143] [drm] Found bochs VGA, ID 0xb0c5. [ 494.999557][T18143] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 495.118395][T18143] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 495.254421][T18157] lo speed is unknown, defaulting to 1000 [ 495.259687][T18157] lo speed is unknown, defaulting to 1000 [ 495.311462][T18143] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 495.325187][ T5971] udevd[5971]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 495.481544][T18168] CIFS: Attempting to mount //127.0.0.1/share [ 495.485394][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.533709][T18169] CIFS: VFS: Invalid response size 0 for command 0 [ 495.536357][T18168] CIFS: VFS: cifs_mount failed w/return code = -5 [ 495.587419][ T42] kauditd_printk_skb: 330 callbacks suppressed [ 495.587441][ T42] audit: type=1800 audit(2000000151.873:15053): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 495.658396][ T42] audit: type=1326 audit(2000000151.943:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.7.3456" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 495.758700][ T42] audit: type=1326 audit(2000000152.043:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.7.3456" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x7ffc0000 [ 495.801312][T18174] block nbd4: server does not support multiple connections per device. [ 495.821992][T18174] block nbd4: shutting down sockets [ 495.835895][ T42] audit: type=1800 audit(2000000152.123:15056): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20554 res=0 errno=0 [ 495.937177][ T42] audit: type=1800 audit(2000000152.223:15057): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 496.496809][ T42] audit: type=1326 audit(2000000152.783:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.4.3466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 496.507322][ T42] audit: type=1326 audit(2000000152.793:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.4.3466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 496.518179][ T42] audit: type=1326 audit(2000000152.793:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.4.3466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 496.531430][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.550676][ T42] audit: type=1326 audit(2000000152.793:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.4.3466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 496.558836][ T42] audit: type=1326 audit(2000000152.803:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.4.3466" exe="/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf7f16fec code=0x7ffc0000 [ 496.632750][ T5755] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 496.785445][T18177] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 496.975768][T18203] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 496.978552][T18203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 496.981956][T18203] vhci_hcd vhci_hcd.0: Device attached [ 496.994370][T18203] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3468'. [ 497.068491][T18209] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3470'. [ 497.082588][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3470'. [ 497.094190][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.285864][ T1486] usb 52-1: SetAddress Request (7) to port 0 [ 497.298387][ T1486] usb 52-1: new SuperSpeed USB device number 7 using vhci_hcd [ 497.574340][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.938624][T18205] vhci_hcd: connection reset by peer [ 497.941416][T12425] vhci_hcd vhci_hcd.7: stop threads [ 497.943484][T12425] vhci_hcd vhci_hcd.7: release socket [ 497.948063][T12425] vhci_hcd vhci_hcd.7: disconnect device [ 497.964684][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 498.252742][ T5100] Bluetooth: hci4: unexpected event for opcode 0x369a [ 498.604356][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.690777][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.831298][ T5100] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 499.654224][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.126247][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.146437][T18271] CIFS: Attempting to mount //127.0.0.1/share [ 500.676420][ T42] kauditd_printk_skb: 1124 callbacks suppressed [ 500.676440][ T42] audit: type=1800 audit(2000000155.961:16187): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3490" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 500.677331][T18277] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 500.687739][T18277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 500.690650][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.693550][T18277] vhci_hcd vhci_hcd.0: Device attached [ 500.972268][T18271] CIFS: VFS: Error connecting to socket. Aborting operation. [ 500.975950][T18271] CIFS: VFS: cifs_mount failed w/return code = -4 [ 500.983795][T14014] usb 56-1: SetAddress Request (2) to port 0 [ 500.986594][T14014] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 501.244239][T18278] vhci_hcd: connection reset by peer [ 501.247183][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.249873][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.255902][ T5607] vhci_hcd vhci_hcd.9: stop threads [ 501.257648][ T5607] vhci_hcd vhci_hcd.9: release socket [ 501.259749][ T5607] vhci_hcd vhci_hcd.9: disconnect device [ 501.438369][T18300] netlink: 'syz.6.3499': attribute type 9 has an invalid length. [ 501.449390][T18300] macvlan6: entered promiscuous mode [ 501.452824][T18300] macvlan6: entered allmulticast mode [ 501.586876][T18302] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 501.590487][T18302] tipc: Enabled bearer , priority 10 [ 501.724967][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.869905][ T42] audit: type=1800 audit(2000000157.151:16188): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 501.909725][T18305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3501'. [ 501.918498][ T42] audit: type=1800 audit(2000000157.201:16189): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 501.998668][T18311] 9pnet_fd: Insufficient options for proto=fd [ 502.205424][ T42] audit: type=1800 audit(2000000157.491:16190): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 502.245918][T18315] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3505'. [ 502.250526][T18315] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3505'. [ 502.253381][T18315] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3505'. [ 502.257359][T18315] IPv6: NLM_F_CREATE should be specified when creating new route [ 502.260002][T18315] IPv6: Can't replace route, no match found [ 502.271448][ T42] audit: type=1326 audit(2000000157.551:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.278562][ T42] audit: type=1326 audit(2000000157.551:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.286489][ T42] audit: type=1326 audit(2000000157.551:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.293229][ T42] audit: type=1326 audit(2000000157.561:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.300387][ T42] audit: type=1326 audit(2000000157.561:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.307294][ T42] audit: type=1326 audit(2000000157.561:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.9.3504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 502.363947][ T1486] usb 52-1: device descriptor read/8, error -110 [ 502.559486][T18325] trusted_key: encrypted_key: insufficient parameters specified [ 502.643836][T18330] netlink: 'syz.6.3510': attribute type 9 has an invalid length. [ 502.653122][T18330] macvlan7: entered promiscuous mode [ 502.653307][T18316] Attempt to restore checkpoint with obsolete wellknown handles [ 502.656282][T18330] macvlan7: entered allmulticast mode [ 502.711546][ T50] tipc: Node number set to 3758096385 [ 502.754745][ T1486] usb usb52-port1: attempt power cycle [ 502.764175][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.164017][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.314830][ T1486] usb usb52-port1: unable to enumerate USB device [ 503.425294][T18337] wg2 speed is unknown, defaulting to 1000 [ 503.514089][T18337] lo speed is unknown, defaulting to 1000 [ 503.516468][T18337] lo speed is unknown, defaulting to 1000 [ 503.756254][T18345] kvm_intel: VMCS ffff88804b0b8000, last attempted VM-entry on CPU 1 [ 503.763972][T18345] kvm_intel: *** Guest State *** [ 503.767292][T18345] kvm_intel: CR0: actual=0x000000009df8fffb, shadow=0x00000000ddf8ffdb, gh_mask=fffffffffffefff7 [ 503.771830][T18345] kvm_intel: CR4: actual=0x0000000000002151, shadow=0x0000000000000111, gh_mask=fffffffffffff871 [ 503.778095][T18345] kvm_intel: CR3 = 0x0000000000000000 [ 503.780477][T18345] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 503.783756][T18345] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 503.787830][T18345] kvm_intel: RSP = 0x00000000002004c3 RIP = 0x0000000000000007 [ 503.798348][T18345] kvm_intel: RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 503.802040][T18345] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 503.806007][T18345] kvm_intel: CS: sel=0x0000, attr=0x00017, limit=0x00000000, base=0x0000000000026000 [ 503.806096][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.810246][T18345] kvm_intel: DS: sel=0x000c, attr=0x0a001, limit=0x00010000, base=0x00000000ffff1000 [ 503.820977][T18345] kvm_intel: SS: sel=0x0000, attr=0x090a9, limit=0x00000000, base=0x0000000000100000 [ 503.825909][T18345] kvm_intel: ES: sel=0x000c, attr=0x18081, limit=0xeeef0000, base=0x0000000000002000 [ 503.830013][T18345] kvm_intel: FS: sel=0x3fc6, attr=0x04089, limit=0x33331000, base=0x00000000eeef0000 [ 503.835799][T18345] kvm_intel: GS: sel=0x000e, attr=0x10001, limit=0xeeee8000, base=0x00000000080a0000 [ 503.840964][T18345] kvm_intel: GDTR: limit=0x000008cc, base=0x00000000080a0000 [ 503.846860][T18345] kvm_intel: LDTR: sel=0x0009, attr=0x10060, limit=0x00006000, base=0x0000000000000002 [ 503.851133][T18345] kvm_intel: IDTR: limit=0x00000000, base=0x00000000dddd1000 [ 503.856009][T18345] kvm_intel: TR: sel=0x000a, attr=0x14005, limit=0x0000f000, base=0x0000000000000000 [ 503.860236][T18345] kvm_intel: EFER= 0x000000000000f801 [ 503.863118][T18345] kvm_intel: PAT = 0x0007040600070406 [ 503.883938][T18345] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 503.887908][T18345] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 503.891410][T18345] kvm_intel: *** Host State *** [ 503.893523][T18345] kvm_intel: RIP = 0xffffffff8bb823a0 RSP = 0xffffc9000698f870 [ 503.897675][T18345] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 503.903323][T18345] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096cdf000 TRBase=fffffe000004a000 [ 503.911598][T18345] kvm_intel: GDTBase=fffffe0000048000 IDTBase=fffffe0000000000 [ 503.915045][T18345] kvm_intel: CR0=0000000080050033 CR3=0000000068572000 CR4=0000000000352ef0 [ 503.918799][T18345] kvm_intel: Sysenter RSP=fffffe000004a000 CS:RIP=0010:ffffffff81001df0 [ 503.922248][T18345] kvm_intel: EFER= 0x0000000000000d01 [ 503.925114][T18345] kvm_intel: PAT = 0x0407050600070106 [ 503.931388][T18345] kvm_intel: *** Control State *** [ 503.935693][T18345] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 503.939860][T18345] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 503.945698][T18345] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 503.949762][T18345] kvm_intel: VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 503.953547][T18345] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 503.956831][T18345] kvm_intel: reason=80000021 qualification=0000000000000000 [ 503.960213][T18345] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 503.963271][T18345] kvm_intel: TSC Offset = 0xfffffecdb6560c70 [ 503.966880][T18345] kvm_intel: EPT pointer = 0x000000004f50105e [ 503.969408][T18345] kvm_intel: Virtual processor ID = 0x0001 [ 504.207804][T18368] pimreg: entered allmulticast mode [ 504.514069][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.517629][T18374] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.707553][T18374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.728106][T18374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.844133][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.017316][T18382] veth4: entered promiscuous mode [ 505.019107][T18382] veth4: entered allmulticast mode [ 505.023997][ T5607] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.029667][ T5607] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.033425][ T5607] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.039132][ T5607] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.116923][T18411] fuse: Unknown parameter '01777777777777777777777' [ 505.173790][ T4173] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 505.303917][ T9] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 505.326790][ T4173] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 505.331521][ T4173] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.336597][ T4173] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.340634][ T4173] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 505.348201][ T4173] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 505.352243][ T4173] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 505.356095][ T4173] usb 12-1: Manufacturer: syz [ 505.386229][ T4173] usb 12-1: config 0 descriptor?? [ 505.467473][T18421] CIFS: Attempting to mount //127.0.0.1/share [ 505.486822][T18405] dvmrp0: entered allmulticast mode [ 505.811956][ T4173] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 505.871233][ T4173] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 505.881416][ T42] kauditd_printk_skb: 1151 callbacks suppressed [ 505.881431][ T42] audit: type=1800 audit(2000000161.171:17348): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=484821 res=0 errno=0 [ 505.884375][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.890232][ T42] audit: type=1800 audit(2000000161.171:17349): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=484801 res=0 errno=0 [ 505.903421][ T42] audit: type=1800 audit(2000000161.181:17350): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484842 res=0 errno=0 [ 505.910768][ T42] audit: type=1800 audit(2000000161.181:17351): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484934 res=0 errno=0 [ 505.918091][ T42] audit: type=1800 audit(2000000161.191:17352): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484951 res=0 errno=0 [ 505.924895][ T42] audit: type=1800 audit(2000000161.201:17353): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484965 res=0 errno=0 [ 505.981279][ T42] audit: type=1800 audit(2000000161.261:17354): pid=18427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=484936 res=0 errno=0 [ 506.043808][T14014] usb 56-1: device descriptor read/8, error -110 [ 506.204066][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.294419][T18421] CIFS: VFS: Error connecting to socket. Aborting operation. [ 506.296920][T18421] CIFS: VFS: cifs_mount failed w/return code = -4 [ 506.434699][T14014] usb usb56-port1: attempt power cycle [ 506.464603][T18439] fuse: fd is not a fuse device [ 506.924147][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.994533][T14014] usb usb56-port1: unable to enumerate USB device [ 507.245267][T14014] usb 12-1: reset high-speed USB device number 17 using dummy_hcd [ 507.486455][T18454] fuse: fd is not a fuse device [ 507.538293][T18458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3542'. [ 507.561623][T18460] CIFS: Attempting to mount //127.0.0.1/share [ 507.963966][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.996119][ T42] audit: type=1800 audit(2000000163.281:17355): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 508.053707][ T42] audit: type=1800 audit(2000000163.331:17356): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 508.081697][ T9] usb 14-1: unable to get BOS descriptor or descriptor too short [ 508.089171][ T9] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 508.093987][ T9] usb 14-1: can't read configurations, error -71 [ 508.145479][ T42] audit: type=1800 audit(2000000163.431:17357): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 508.313726][T14947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.394571][T18460] CIFS: VFS: Error connecting to socket. Aborting operation. [ 508.397115][T18460] CIFS: VFS: cifs_mount failed w/return code = -4 [ 508.741868][ T4173] usb 12-1: USB disconnect, device number 17 [ 509.014052][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.018755][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.039009][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.170660][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.244689][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.250977][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.256703][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.260360][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.549676][T18504] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3556'. [ 509.784460][T18512] netlink: 'syz.4.3562': attribute type 2 has an invalid length. [ 510.814251][T18518] netlink: 'syz.4.3564': attribute type 9 has an invalid length. [ 510.836255][T18518] macvlan7: entered promiscuous mode [ 510.838436][T18518] macvlan7: entered allmulticast mode [ 510.847629][T10583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.850916][T10583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.937805][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 510.937841][ T42] audit: type=1800 audit(2000000166.221:17366): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 510.960623][ T42] audit: type=1800 audit(2000000166.241:17367): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 510.968583][T18524] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 511.007802][ T42] audit: type=1800 audit(2000000166.291:17368): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 511.068103][ T42] audit: type=1800 audit(2000000166.351:17369): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 511.104748][T18530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.174071][ T42] audit: type=1800 audit(2000000166.461:17370): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 511.185159][T18532] bond1: left promiscuous mode [ 511.222174][ T42] audit: type=1326 audit(2000000166.501:17371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.9.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 511.232180][ T42] audit: type=1326 audit(2000000166.511:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.9.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 511.239973][ T42] audit: type=1326 audit(2000000166.511:17373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.9.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 511.250074][ T42] audit: type=1326 audit(2000000166.511:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.9.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 511.257188][ T42] audit: type=1326 audit(2000000166.511:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.9.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 512.062411][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3573'. [ 512.704885][T18552] overlay: ./bus is not a directory [ 513.030254][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3576'. [ 513.273827][T18566] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 513.275956][T18566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.278933][T18566] vhci_hcd vhci_hcd.0: Device attached [ 513.324648][T14014] net_ratelimit: 4 callbacks suppressed [ 513.324664][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.383960][T14015] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 513.545300][T14015] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.545479][ T5890] usb 52-1: SetAddress Request (11) to port 0 [ 513.553760][T14015] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 513.556150][ T5890] usb 52-1: new SuperSpeed USB device number 11 using vhci_hcd [ 513.559657][T14015] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.565406][T14015] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 513.573746][T14015] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 513.581901][T18590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3580'. [ 513.585413][T14015] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.585438][T14015] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.585452][T14015] usb 14-1: Product: syz [ 513.585462][T14015] usb 14-1: Manufacturer: syz [ 513.590726][T14015] cdc_wdm 14-1:1.0: skipping garbage [ 513.600856][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3580'. [ 513.603708][T14015] cdc_wdm 14-1:1.0: skipping garbage [ 513.614944][T14015] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 513.617152][T14015] cdc_wdm 14-1:1.0: Unknown control protocol [ 513.858428][T18575] vhci_hcd: connection reset by peer [ 513.866381][ T5607] vhci_hcd vhci_hcd.7: stop threads [ 513.868444][ T5607] vhci_hcd vhci_hcd.7: release socket [ 513.873414][ T5607] vhci_hcd vhci_hcd.7: disconnect device [ 513.892611][T18567] netlink: 'syz.9.3579': attribute type 9 has an invalid length. [ 513.918540][T18567] macvlan3: entered promiscuous mode [ 513.920535][T18567] macvlan3: entered allmulticast mode [ 513.935106][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 513.935309][ T1486] usb 14-1: USB disconnect, device number 6 [ 513.937629][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 513.937647][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 514.108190][T18614] usb usb9: usbfs: interface 0 claimed by hub while 'syz.7.3588' resets device [ 514.262371][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3590'. [ 514.266037][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3590'. [ 514.273370][ T5755] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 514.363980][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.870874][T18627] wireguard: wg0: Could not create IPv4 socket [ 515.312781][T18637] netlink: 'syz.9.3592': attribute type 1 has an invalid length. [ 515.334238][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.349693][ T5755] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 515.404040][T18637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.404333][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.943879][ T42] kauditd_printk_skb: 1164 callbacks suppressed [ 515.943899][ T42] audit: type=1326 audit(2000000171.231:18540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 515.958005][ T42] audit: type=1326 audit(2000000171.231:18541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 515.973847][ T42] audit: type=1326 audit(2000000171.231:18542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 515.986618][ T42] audit: type=1326 audit(2000000171.231:18543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 515.995798][ T42] audit: type=1326 audit(2000000171.231:18544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.009274][ T42] audit: type=1326 audit(2000000171.231:18545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.017890][ T42] audit: type=1326 audit(2000000171.231:18546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.032897][ T42] audit: type=1326 audit(2000000171.231:18547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.041551][ T42] audit: type=1326 audit(2000000171.241:18548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.050099][ T42] audit: type=1326 audit(2000000171.241:18549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.7.3596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 516.264051][T18655] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3602'. [ 516.376263][T18656] bond0: entered allmulticast mode [ 516.378140][T18656] bond0: entered promiscuous mode [ 516.383108][T18656] macvlan7: left promiscuous mode [ 516.385337][T18656] bond0: left promiscuous mode [ 516.387246][T18656] macvlan7: left allmulticast mode [ 516.388898][T18656] bond0: left allmulticast mode [ 516.391292][T18656] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 516.446708][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.940331][T18669] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3604'. [ 517.238774][T18674] jffs2: notice: (18674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 517.249373][T18674] FAULT_INJECTION: forcing a failure. [ 517.249373][T18674] name failslab, interval 1, probability 0, space 9, times 0 [ 517.254229][T18674] CPU: 0 UID: 0 PID: 18674 Comm: syz.9.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.254250][T18674] Tainted: [L]=SOFTLOCKUP [ 517.254255][T18674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.254268][T18674] Call Trace: [ 517.254286][T18674] [ 517.254291][T18674] dump_stack_lvl+0x100/0x190 [ 517.254426][T18674] should_fail_ex.cold+0x5/0xa [ 517.254446][T18674] should_failslab+0xc2/0x120 [ 517.254479][T18674] kmem_cache_alloc_noprof+0x91/0x6a0 [ 517.254494][T18674] ? copy_folio_from_iter_atomic+0x153/0x2000 [ 517.254548][T18674] ? jffs2_write_end+0x1fd/0xea0 [ 517.254586][T18674] jffs2_write_end+0x1fd/0xea0 [ 517.254599][T18674] ? __pfx_jffs2_write_begin+0x10/0x10 [ 517.254613][T18674] ? __pfx_jffs2_write_end+0x10/0x10 [ 517.254625][T18674] ? inode_to_bdi+0x9e/0x160 [ 517.254641][T18674] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 517.254663][T18674] generic_perform_write+0x513/0xa40 [ 517.254688][T18674] ? __pfx_generic_perform_write+0x10/0x10 [ 517.254704][T18674] ? __mark_inode_dirty+0x55c/0x16e0 [ 517.254747][T18674] ? mnt_put_write_access_file+0x4e/0x100 [ 517.254761][T18674] ? file_update_time_flags+0x373/0x500 [ 517.254778][T18674] __generic_file_write_iter+0x1f7/0x240 [ 517.254793][T18674] generic_file_write_iter+0xe1/0x390 [ 517.254807][T18674] vfs_write+0x6ac/0x1050 [ 517.254819][T18674] ? __pfx_generic_file_write_iter+0x10/0x10 [ 517.254834][T18674] ? __pfx_vfs_write+0x10/0x10 [ 517.254844][T18674] ? find_held_lock+0x2b/0x80 [ 517.254880][T18674] ksys_write+0x12a/0x250 [ 517.254891][T18674] ? __pfx_ksys_write+0x10/0x10 [ 517.254901][T18674] ? ksys_write+0x1ac/0x250 [ 517.254912][T18674] ? __pfx_ksys_write+0x10/0x10 [ 517.254925][T18674] __do_fast_syscall_32+0xe7/0x970 [ 517.254985][T18674] ? lockdep_hardirqs_on+0x78/0x100 [ 517.255002][T18674] do_fast_syscall_32+0x32/0x70 [ 517.255019][T18674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.255035][T18674] RIP: 0023:0xf7f94fec [ 517.255051][T18674] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 517.255068][T18674] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 517.255081][T18674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 517.255088][T18674] RDX: 000000000000001b RSI: 0000000000000000 RDI: 0000000000000000 [ 517.255095][T18674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.255101][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.255108][T18674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.255122][T18674] [ 517.376279][T18677] jffs2: notice: (18677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 517.496330][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.538069][T18683] 9p: Bad value for 'rfdno' [ 517.732053][T18692] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3613'. [ 517.852509][T18697] overlayfs: statfs failed on './file0' [ 517.887241][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.926712][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.931175][ T1486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.936699][ T1486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.950749][T18706] netlink: 'syz.4.3620': attribute type 1 has an invalid length. [ 518.003011][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3617'. [ 518.057721][T18717] jffs2: notice: (18717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 518.062156][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 518.069341][T18719] sctp: [Deprecated]: syz.4.3625 (pid 18719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.069341][T18719] Use struct sctp_sack_info instead [ 518.075798][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 518.132270][T18724] wg2 speed is unknown, defaulting to 1000 [ 518.251703][T18724] lo speed is unknown, defaulting to 1000 [ 518.255645][T18724] lo speed is unknown, defaulting to 1000 [ 518.347837][T18730] netlink: 'syz.4.3628': attribute type 9 has an invalid length. [ 518.356862][T18730] macvlan0: entered promiscuous mode [ 518.358615][T18730] macvlan0: entered allmulticast mode [ 518.374234][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.524479][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.603920][ T5890] usb 52-1: device descriptor read/8, error -110 [ 518.988864][T18744] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3632'. [ 519.021834][ T5890] usb usb52-port1: attempt power cycle [ 519.034237][T18745] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3631'. [ 519.048693][T18745] gretap0: entered promiscuous mode [ 519.117450][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3634'. [ 519.159621][T18751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3635'. [ 519.248963][T18758] Cannot find del_set index 1 as target [ 519.309883][T18761] CIFS: Attempting to mount //127.0.0.1/share [ 519.564885][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.594486][ T5890] usb usb52-port1: unable to enumerate USB device [ 519.677802][T18771] netlink: 'syz.6.3642': attribute type 1 has an invalid length. [ 519.692940][T18771] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 519.892425][T18779] Device name not specified. [ 519.892425][T18779] [ 519.903799][ T5100] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 520.126856][T18761] CIFS: VFS: Error connecting to socket. Aborting operation. [ 520.128065][T18790] fuse: fd is not a fuse device [ 520.133821][T18761] CIFS: VFS: cifs_mount failed w/return code = -4 [ 520.187759][T18794] netlink: 'syz.4.3649': attribute type 9 has an invalid length. [ 520.199412][T18794] macvlan8: entered promiscuous mode [ 520.201932][T18794] macvlan8: entered allmulticast mode [ 520.335111][T18804] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3653'. [ 520.339647][T18804] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3653'. [ 520.605874][ T5826] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 520.614973][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.777376][ T5826] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.785653][ T5826] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.796731][ T5826] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.804254][ T5826] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 520.813864][ T5826] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 520.828551][ T5826] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.845181][ T5826] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.853812][ T5826] usb 14-1: Product: syz [ 520.859146][ T5826] usb 14-1: Manufacturer: syz [ 520.912893][ T5826] cdc_wdm 14-1:1.0: skipping garbage [ 520.918411][ T5826] cdc_wdm 14-1:1.0: skipping garbage [ 520.949886][ T5826] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 520.954985][ T5826] cdc_wdm 14-1:1.0: Unknown control protocol [ 520.969194][ T42] kauditd_printk_skb: 110 callbacks suppressed [ 520.969214][ T42] audit: type=1800 audit(2000000176.251:18660): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=493852 res=0 errno=0 [ 520.980725][ T42] audit: type=1800 audit(2000000176.251:18661): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=493853 res=0 errno=0 [ 520.989394][ T42] audit: type=1800 audit(2000000176.251:18662): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=493832 res=0 errno=0 [ 520.998656][ T42] audit: type=1800 audit(2000000176.271:18663): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=493874 res=0 errno=0 [ 521.013109][ T42] audit: type=1800 audit(2000000176.281:18664): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=493891 res=0 errno=0 [ 521.194019][T18813] netlink: 'syz.9.3652': attribute type 9 has an invalid length. [ 521.199904][T18812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3655'. [ 521.208593][T18813] macvlan4: entered promiscuous mode [ 521.211719][T18813] macvlan4: entered allmulticast mode [ 521.220967][T18812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.225522][ C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 521.225869][ T1486] usb 14-1: USB disconnect, device number 7 [ 521.228054][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 521.228076][ C0] cdc_wdm 14-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 521.270301][T18819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3657'. [ 521.288570][T18816] erspan0: entered promiscuous mode [ 521.344738][T18821] CIFS: Attempting to mount //127.0.0.1/share [ 521.405974][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.500383][T18829] fuse: fd is not a fuse device [ 521.644215][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.851641][ T42] audit: type=1800 audit(2000000177.131:18665): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 521.971745][ T42] audit: type=1800 audit(2000000177.251:18666): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 521.997560][ T42] audit: type=1800 audit(2000000177.281:18667): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=494074 res=0 errno=0 [ 522.007935][ T42] audit: type=1800 audit(2000000177.301:18668): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=494078 res=0 errno=0 [ 522.182505][T18821] CIFS: VFS: Error connecting to socket. Aborting operation. [ 522.182538][T18821] CIFS: VFS: cifs_mount failed w/return code = -4 [ 522.243913][ T42] audit: type=1800 audit(2000000177.531:18669): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 522.619696][T18871] fuse: fd is not a fuse device [ 522.683803][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.084852][T18880] __nla_validate_parse: 3 callbacks suppressed [ 523.084872][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3669'. [ 523.195478][T18890] 9p: Bad value for 'wfdno' [ 524.271227][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.128722][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.303264][T18922] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3679'. [ 525.326898][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.523828][ T8419] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 525.690795][ T8419] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 525.699963][ T8419] usb 14-1: config 0 interface 0 has no altsetting 0 [ 525.710259][ T8419] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 525.718161][ T8419] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 525.723739][ T8419] usb 14-1: Product: syz [ 525.725537][ T8419] usb 14-1: Manufacturer: syz [ 525.731193][ T8419] usb 14-1: SerialNumber: syz [ 525.740054][ T8419] usb 14-1: config 0 descriptor?? [ 525.754759][ T8419] usb 14-1: selecting invalid altsetting 0 [ 526.038353][ T42] kauditd_printk_skb: 232 callbacks suppressed [ 526.038373][ T42] audit: type=1800 audit(2000000181.321:18902): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26357 res=0 errno=0 [ 526.049667][ T42] audit: type=1800 audit(2000000181.321:18903): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26483 res=0 errno=0 [ 526.200703][ T50] usb 14-1: USB disconnect, device number 8 [ 526.200707][ C3] usb 14-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 526.200845][ C3] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 526.306936][ T42] audit: type=1800 audit(2000000181.591:18904): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 526.364173][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.583851][ T4173] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 526.733816][ T4173] usb 12-1: Using ep0 maxpacket: 32 [ 526.752837][ T4173] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 526.761530][ T4173] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 526.780421][ T4173] usb 12-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 526.786994][ T42] audit: type=1800 audit(2000000182.071:18905): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 526.797496][ T4173] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.811722][ T4173] usb 12-1: Product: syz [ 526.813472][ T4173] usb 12-1: Manufacturer: syz [ 526.816314][ T4173] usb 12-1: SerialNumber: syz [ 526.824294][ T42] audit: type=1800 audit(2000000182.111:18906): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=495295 res=0 errno=0 [ 526.824500][T18938] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 526.843445][ T42] audit: type=1800 audit(2000000182.121:18907): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=495327 res=0 errno=0 [ 526.851996][ T42] audit: type=1800 audit(2000000182.121:18908): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=495302 res=0 errno=0 [ 526.858779][ T42] audit: type=1800 audit(2000000182.121:18909): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=495303 res=0 errno=0 [ 526.874760][T18946] kvm_intel: VMCS ffff8880484b3000, last attempted VM-entry on CPU 2 [ 526.877608][T18946] kvm_intel: *** Guest State *** [ 526.879259][T18946] kvm_intel: CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffefff7 [ 526.882989][T18946] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 526.887001][T18946] kvm_intel: CR3 = 0x0000000000000000 [ 526.889397][T18946] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 526.892795][T18946] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 526.897240][T18946] kvm_intel: RSP = 0x0000000000007fff RIP = 0x58ad29489c2a7d0a [ 526.900435][T18946] kvm_intel: RFLAGS=0x00030203 DR7 = 0x0000000000000400 [ 526.903525][T18946] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 526.906344][T18946] kvm_intel: CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 526.909564][T18946] kvm_intel: DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.913034][T18946] kvm_intel: SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.917230][T18946] kvm_intel: ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.920280][T18946] kvm_intel: FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.923382][T18946] kvm_intel: GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.927933][T18946] kvm_intel: GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 526.931776][T18946] kvm_intel: LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 526.935380][T18946] kvm_intel: IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 526.938520][T18946] kvm_intel: TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 526.941571][T18946] kvm_intel: EFER= 0x0000000000000000 [ 526.944086][T18946] kvm_intel: PAT = 0x0007040600070406 [ 526.946066][T18946] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 526.949282][T18946] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 526.951936][T18946] kvm_intel: *** Host State *** [ 526.954178][T18946] kvm_intel: RIP = 0xffffffff8bb823a0 RSP = 0xffffc90005a2f870 [ 526.956698][T18946] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 526.960422][T18946] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096ddf000 TRBase=fffffe0000091000 [ 526.963786][T18946] kvm_intel: GDTBase=fffffe000008f000 IDTBase=fffffe0000000000 [ 526.966242][T18946] kvm_intel: CR0=0000000080050033 CR3=000000006770c000 CR4=0000000000352ef0 [ 526.968830][T18946] kvm_intel: Sysenter RSP=fffffe0000091000 CS:RIP=0010:ffffffff81001df0 [ 526.971362][T18946] kvm_intel: EFER= 0x0000000000000d01 [ 526.973083][T18946] kvm_intel: PAT = 0x0407050600070106 [ 526.975905][T18946] kvm_intel: *** Control State *** [ 526.977500][T18946] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 526.980553][T18946] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 526.983358][T18946] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 526.986475][T18946] kvm_intel: VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 526.989165][T18946] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 526.992168][T18946] kvm_intel: reason=80000021 qualification=0000000000000000 [ 526.994712][T18946] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 526.996884][T18946] kvm_intel: TSC Offset = 0xfffffebfb14e8f96 [ 526.998870][T18946] kvm_intel: EPT pointer = 0x0000000047baf05e [ 527.000830][T18946] kvm_intel: Virtual processor ID = 0x0001 [ 527.054714][T18938] i2c i2c-1: dtv_property_process_set: SET cmd 0x0ae46cfa undefined [ 527.072128][ T42] audit: type=1800 audit(2000000182.361:18910): pid=18946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3687" name="memory.events" dev="tmpfs" ino=397 res=0 errno=0 [ 527.156390][T18938] netlink: 'syz.7.3683': attribute type 2 has an invalid length. [ 527.159485][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3683'. [ 527.171599][ T42] audit: type=1800 audit(2000000182.451:18911): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20965 res=0 errno=0 [ 527.179549][ T4173] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.182457][ T4173] usb 12-1: MIDIStreaming interface descriptor not found [ 527.246298][ T4173] usb 12-1: USB disconnect, device number 18 [ 527.247909][T18956] MTD: Couldn't look up './dev/mtdblock0': -2 [ 527.363513][T18958] syzkaller0: entered promiscuous mode [ 527.366776][T18958] syzkaller0: entered allmulticast mode [ 527.404167][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.484040][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.704608][T18965] openvswitch: netlink: Message has 8 unknown bytes. [ 527.836909][T18963] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.845208][T18963] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.956126][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3695'. [ 528.052250][T18963] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.057183][T18963] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.190626][T18963] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.194154][T18963] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.214108][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.388631][T18963] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.392773][T18963] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.457257][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.619361][T18999] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3703'. [ 528.690233][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3704'. [ 528.975321][T19007] syzkaller0: entered promiscuous mode [ 528.977839][T19007] syzkaller0: entered allmulticast mode [ 529.022282][ T5829] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.027523][ T5829] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.035678][ T5829] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.039626][ T5829] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.173969][ T5829] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.179863][ T5829] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.186039][ T5829] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.187406][T14015] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 529.198153][ T5829] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.231571][T19012] 9p: Bad value for 'port' [ 529.318408][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3709'. [ 529.432802][T14015] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 529.442093][T14015] usb 14-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 529.446451][T14015] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.490081][T19008] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 529.494245][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.501290][T14015] opticon 14-1:1.0: opticon converter detected [ 529.516432][T14015] usb 14-1: opticon converter now attached to ttyUSB0 [ 530.221090][T19044] jffs2: notice: (19044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 530.517362][ T5100] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 530.536600][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.717269][T19060] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 530.891769][T19071] siw: device registration error -23 [ 531.056041][ T42] kauditd_printk_skb: 165 callbacks suppressed [ 531.056060][ T42] audit: type=1800 audit(2000000186.341:19076): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=496626 res=0 errno=0 [ 531.236491][ T42] audit: type=1800 audit(2000000186.521:19077): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 531.248002][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.300763][ T42] audit: type=1800 audit(2000000186.581:19078): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 531.317265][ T42] audit: type=1326 audit(2000000186.601:19079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.326181][ T42] audit: type=1326 audit(2000000186.601:19080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.340164][ T42] audit: type=1326 audit(2000000186.601:19081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.351972][ T42] audit: type=1326 audit(2000000186.601:19082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.360989][ T42] audit: type=1326 audit(2000000186.601:19083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.370565][ T42] audit: type=1326 audit(2000000186.601:19084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.378973][ T42] audit: type=1326 audit(2000000186.601:19085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19087 comm="syz.7.3732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 531.389014][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.399401][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.404680][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.407825][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.410488][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.450520][ T5755] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 531.574159][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.704482][T19102] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3733'. [ 531.711901][T19089] wg2 speed is unknown, defaulting to 1000 [ 531.814037][T19089] lo speed is unknown, defaulting to 1000 [ 531.816896][T19089] lo speed is unknown, defaulting to 1000 [ 532.205676][T19089] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.209442][T19089] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.212632][T19089] bridge_slave_0: entered allmulticast mode [ 532.216771][T19089] bridge_slave_0: entered promiscuous mode [ 532.221803][T19089] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.224743][T19089] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.227150][T19089] bridge_slave_1: entered allmulticast mode [ 532.230083][T19089] bridge_slave_1: entered promiscuous mode [ 532.259813][T19089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.266390][T19089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.284838][T19089] team0: Port device team_slave_0 added [ 532.289619][T19089] team0: Port device team_slave_1 added [ 532.306036][T19089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.308248][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.316094][T19089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.321180][T19089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.324174][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.334758][T19089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.384161][T19089] hsr_slave_0: entered promiscuous mode [ 532.386674][T19089] hsr_slave_1: entered promiscuous mode [ 532.389031][T19089] debugfs: 'hsr0' already exists in 'hsr' [ 532.390922][T19089] Cannot create hsr debugfs directory [ 532.581425][T19089] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.586740][T19089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.615378][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.769652][T19089] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.775500][T19089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.866077][T19089] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.870746][T19089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.998308][T19089] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.002385][T19089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.332470][T19124] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 533.494286][ T5100] Bluetooth: hci0: command tx timeout [ 533.596331][ T5829] batman_adv: batadv0: Interface deactivated: gretap1 [ 533.645023][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.810811][ T5829] batman_adv: batadv0: Removing interface: gretap1 [ 533.853475][ T5829] bond1 (unregistering): Released all slaves [ 533.907166][ T5829] bond0 (unregistering): Released all slaves [ 533.961449][T19089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.975421][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.979756][T19089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.987788][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.995490][T19089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.001042][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.004385][T19089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.013827][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.167331][ T5829] tipc: Disabling bearer [ 534.172484][ T5829] tipc: Left network mode [ 534.210041][T19136] fuse: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 534.268112][T19089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.285135][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.328425][T19089] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.336304][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.339231][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.346312][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.349324][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.442345][T19141] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 534.687850][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.740845][T19160] jffs2: notice: (19160) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 534.882421][T14015] usb 14-1: USB disconnect, device number 9 [ 534.915026][T14015] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 534.924499][T14015] opticon 14-1:1.0: device disconnected [ 534.976829][T19089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.996138][ T5829] hsr_slave_0: left promiscuous mode [ 535.000003][ T5829] hsr_slave_1: left promiscuous mode [ 535.002153][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.007523][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.017316][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.021651][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.048557][ T5829] veth1_macvtap: left promiscuous mode [ 535.050751][ T5829] veth0_macvtap: left promiscuous mode [ 535.053555][ T5829] veth1_vlan: left promiscuous mode [ 535.059335][ T5829] veth0_vlan: left promiscuous mode [ 535.473396][T19199] netlink: 'syz.6.3759': attribute type 2 has an invalid length. [ 535.476123][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'. [ 535.563774][ T5100] Bluetooth: hci0: command tx timeout [ 535.734024][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.989111][T19089] veth0_vlan: entered promiscuous mode [ 536.020212][T19089] veth1_vlan: entered promiscuous mode [ 536.066410][T19089] veth0_macvtap: entered promiscuous mode [ 536.072797][T19089] veth1_macvtap: entered promiscuous mode [ 536.087389][T19089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.097018][T19089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.106699][T19138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.113554][T19138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.129071][ T42] kauditd_printk_skb: 609 callbacks suppressed [ 536.129089][ T42] audit: type=1800 audit(2000000191.411:19695): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 536.147593][T19209] xt_connbytes: Forcing CT accounting to be enabled [ 536.173371][ T42] audit: type=1800 audit(2000000191.461:19696): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=509198 res=0 errno=0 [ 536.178911][T19209] xt_SECMARK: invalid mode: 0 [ 536.181799][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.196225][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.215267][ T5829] IPVS: stop unused estimator thread 0... [ 536.222279][ T42] audit: type=1800 audit(2000000191.501:19697): pid=19209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3761" name="sync_wait" dev="sysfs" ino=62894 res=0 errno=0 [ 536.236456][ T7160] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 536.246814][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.255546][ T42] audit: type=1800 audit(2000000191.541:19698): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=509324 res=0 errno=0 [ 536.258376][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.281558][ T42] audit: type=1800 audit(2000000191.561:19699): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 536.290104][T10260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.294688][T10260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.323108][ T42] audit: type=1800 audit(2000000191.601:19700): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 536.341684][ T42] audit: type=1800 audit(2000000191.621:19701): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 536.356244][ T42] audit: type=1800 audit(2000000191.641:19702): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 536.377197][ T42] audit: type=1800 audit(2000000191.661:19703): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 536.397076][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3765'. [ 536.423745][ T7160] usb 12-1: Using ep0 maxpacket: 32 [ 536.427883][ T7160] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 536.430459][ T42] audit: type=1800 audit(2000000191.711:19704): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 536.430850][ T7160] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 536.439064][T19219] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 536.443763][ T7160] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 536.450677][ T7160] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 536.455442][ T7160] usb 12-1: config 0 interface 0 has no altsetting 0 [ 536.461370][ T7160] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 536.464946][ T7160] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 536.468225][ T7160] usb 12-1: Product: syz [ 536.470212][ T7160] usb 12-1: Manufacturer: syz [ 536.472347][ T7160] usb 12-1: SerialNumber: syz [ 536.479000][ T7160] usb 12-1: config 0 descriptor?? [ 536.484033][ T7160] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 536.490371][ T7160] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 536.704861][ T5890] usb 12-1: USB disconnect, device number 19 [ 536.707496][ C0] ldusb 12-1:0.0: usb_submit_urb failed (-19) [ 536.719001][ T5890] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 536.766939][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.103717][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.251864][T19248] Cannot find add_set index 0 as target [ 537.324981][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.387371][T19257] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3774'. [ 537.397309][T19260] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3775'. [ 537.642350][T19276] kernel read not supported for file /eth0 (pid: 19276 comm: syz.7.3780) [ 537.647063][ T5100] Bluetooth: hci0: command tx timeout [ 537.804416][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.814858][ T7160] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 537.977851][ T7160] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.981791][ T7160] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 537.986256][ T7160] usb 14-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 537.989848][ T7160] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.003462][ T7160] spcp8x5 14-1:1.0: SPCP8x5 converter detected [ 538.008241][ T7160] usb 14-1: SPCP8x5 converter now attached to ttyUSB0 [ 538.496129][T19292] fuse: fd is not a fuse device [ 538.574368][T19295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 538.577153][T19295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 538.587121][T19295] vhci_hcd vhci_hcd.0: Device attached [ 538.715290][T19311] fuse: fd is not a fuse device [ 538.843179][T19317] kvm: user requested TSC rate below hardware speed [ 538.860204][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.873820][ T5826] usb 46-1: SetAddress Request (2) to port 0 [ 538.880965][ T5826] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 538.881467][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3794'. [ 539.176273][T19297] vhci_hcd: connection reset by peer [ 539.182054][ T12] vhci_hcd vhci_hcd.4: stop threads [ 539.184453][ T12] vhci_hcd vhci_hcd.4: release socket [ 539.187112][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 539.204716][T19322] veth6: entered allmulticast mode [ 539.253221][T19322] bond3: (slave veth6): Enslaving as an active interface with an up link [ 539.301034][T19324] bond3 (unregistering): (slave veth6): Releasing backup interface [ 539.305583][T19324] bond3 (unregistering): Released all slaves [ 539.587801][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 539.589945][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 539.690775][T19332] ceph: No mds server is up or the cluster is laggy [ 539.725047][ T5100] Bluetooth: hci0: command tx timeout [ 539.849459][T19339] netlink: 'syz.4.3799': attribute type 1 has an invalid length. [ 539.894972][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.925485][T19347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.364398][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.380559][T19365] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 540.383263][T19365] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 540.387163][T19365] vhci_hcd vhci_hcd.0: Device attached [ 540.661727][ T5890] usb 14-1: USB disconnect, device number 10 [ 540.693122][ T5890] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 540.703694][ T5890] spcp8x5 14-1:1.0: device disconnected [ 540.924121][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.928447][T19366] vhci_hcd: connection closed [ 540.928612][ T5829] vhci_hcd vhci_hcd.4: stop threads [ 540.933144][ T5829] vhci_hcd vhci_hcd.4: release socket [ 540.935725][ T5829] vhci_hcd vhci_hcd.4: disconnect device [ 541.051529][ T5100] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 541.287143][ T42] kauditd_printk_skb: 200 callbacks suppressed [ 541.287176][ T42] audit: type=1800 audit(2000000196.571:19905): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.301243][T19388] jffs2: notice: (19388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 541.386277][ T42] audit: type=1800 audit(2000000196.671:19906): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.512369][ T42] audit: type=1800 audit(2000000196.791:19907): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.546371][T19393] program syz.7.3817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.663982][ T42] audit: type=1800 audit(2000000196.941:19908): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.692028][T19396] 9p: Bad value for 'rfdno' [ 541.701486][ T42] audit: type=1800 audit(2000000196.981:19909): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 541.744474][ T42] audit: type=1800 audit(2000000197.021:19910): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 541.784955][ T42] audit: type=1800 audit(2000000197.061:19911): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.797217][T19400] netlink: 'syz.7.3821': attribute type 21 has an invalid length. [ 541.805124][T19400] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.810498][T19400] netlink: 'syz.7.3821': attribute type 1 has an invalid length. [ 541.876392][ T42] audit: type=1800 audit(2000000197.151:19912): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 541.908582][ T42] audit: type=1800 audit(2000000197.191:19913): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 541.944512][ T42] audit: type=1326 audit(2000000197.211:19914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19405 comm="syz.9.3822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000 [ 541.965036][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.134393][T19412] xt_hashlimit: max too large, truncated to 1048576 [ 542.137202][ T5100] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 542.182824][T19409] AppArmor: change_hat: Invalid input 'š—' [ 542.454741][T19425] MTRR 1 not used [ 542.571886][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 542.890787][T19433] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 542.893608][T19433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 542.897710][T19433] vhci_hcd vhci_hcd.0: Device attached [ 543.007947][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.075513][T19434] vhci_hcd: connection closed [ 543.075756][ T5829] vhci_hcd vhci_hcd.9: stop threads [ 543.083481][ T5829] vhci_hcd vhci_hcd.9: release socket [ 543.087084][ T5829] vhci_hcd vhci_hcd.9: disconnect device [ 543.413864][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.973856][ T5826] usb 46-1: device descriptor read/8, error -110 [ 544.021106][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 544.033816][ T5100] CPU: 2 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.033854][ T5100] Tainted: [L]=SOFTLOCKUP [ 544.033862][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.033895][ T5100] Workqueue: hci0 hci_rx_work [ 544.034054][ T5100] Call Trace: [ 544.034141][ T5100] [ 544.034150][ T5100] dump_stack_lvl+0x100/0x190 [ 544.034252][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 544.034289][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 544.034381][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 544.034417][ T5100] ? find_held_lock+0x2b/0x80 [ 544.034459][ T5100] ? kobject_add_internal+0x25f/0x930 [ 544.034510][ T5100] ? kobject_add_internal+0x25f/0x930 [ 544.034537][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 544.034576][ T5100] kobject_add_internal+0x2c8/0x930 [ 544.034604][ T5100] kobject_add+0x16a/0x1e0 [ 544.034624][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 544.034651][ T5100] ? class_to_subsys+0x10f/0x150 [ 544.034734][ T5100] ? kobject_put+0xb9/0x640 [ 544.034751][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 544.034794][ T5100] device_add+0x294/0x1970 [ 544.034825][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 544.034858][ T5100] ? __pfx_device_add+0x10/0x10 [ 544.034879][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 544.034929][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 544.034959][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 544.035005][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 544.035034][ T5100] ? hci_event_packet+0x186/0xcd0 [ 544.035062][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 544.035097][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 544.035139][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 544.035178][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 544.035211][ T5100] hci_event_packet+0x51c/0xcd0 [ 544.035244][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 544.035270][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 544.035306][ T5100] ? kcov_remote_start+0x384/0x670 [ 544.035356][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 544.035391][ T5100] hci_rx_work+0x451/0xfc0 [ 544.035427][ T5100] process_one_work+0xa23/0x1940 [ 544.035468][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 544.035536][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 544.035580][ T5100] worker_thread+0x5ef/0xe50 [ 544.035619][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 544.035655][ T5100] ? kthread+0x13a/0x450 [ 544.035688][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 544.035713][ T5100] kthread+0x370/0x450 [ 544.035745][ T5100] ? __pfx_kthread+0x10/0x10 [ 544.035774][ T5100] ret_from_fork+0x72b/0xd50 [ 544.035808][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 544.035839][ T5100] ? __switch_to+0x800/0x10f0 [ 544.035872][ T5100] ? __pfx_kthread+0x10/0x10 [ 544.035909][ T5100] ret_from_fork_asm+0x1a/0x30 [ 544.035956][ T5100] [ 544.037117][ T5100] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 544.166094][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.166147][ T5100] Bluetooth: hci0: failed to register connection device [ 544.374965][T19457] fuse: Bad value for 'fd' [ 544.400119][ T5826] usb usb46-port1: attempt power cycle [ 544.671623][T19478] 9pnet_fd: Insufficient options for proto=fd [ 544.678560][T19478] jffs2: notice: (19478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 544.946690][ T5100] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 545.014598][ T5826] usb usb46-port1: unable to enumerate USB device [ 545.246416][T14015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.326029][ T5100] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 545.327625][T19506] fuse: Bad value for 'rootmode' [ 545.398738][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3858'. [ 545.450926][T19515] Invalid argument reading file caps for ./file0 [ 545.576121][T19522] netlink: 5508 bytes leftover after parsing attributes in process `syz.7.3861'. [ 545.625617][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3861'. [ 545.703225][T19518] input: syz1 as /devices/virtual/input/input16 [ 546.418658][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.421929][ T42] kauditd_printk_skb: 459 callbacks suppressed [ 546.421941][ T42] audit: type=1800 audit(2000000201.701:20374): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 546.458629][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.459859][ T42] audit: type=1800 audit(2000000201.741:20375): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=513126 res=0 errno=0 [ 546.577396][ T5100] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 546.648012][T19536] vhci_hcd vhci_hcd.0: remove, state 4 [ 546.650266][ T42] audit: type=1800 audit(2000000201.931:20376): pid=19536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3866" name="unbind" dev="sysfs" ino=36610 res=0 errno=0 [ 546.657329][T19536] usb usb38: USB disconnect, device number 1 [ 546.664430][ T42] audit: type=1800 audit(2000000201.931:20377): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 546.685891][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.734282][ T42] audit: type=1800 audit(2000000202.011:20378): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 546.789342][ T42] audit: type=1800 audit(2000000202.071:20379): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 547.277290][T19550] overlayfs: failed to clone upperpath [ 547.498144][T14014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.576233][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 547.585838][ T5829] vhci_hcd vhci_hcd.0: release socket [ 547.592620][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 547.622500][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.627142][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.631627][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.651869][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.657896][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.664928][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.672102][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.677081][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.681624][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.689277][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.694151][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.698625][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.713218][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.718051][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.722710][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.729177][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.729327][T19536] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 547.736221][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.740767][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.742628][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.750902][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.753221][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.891116][ T42] audit: type=1800 audit(2000000203.171:20380): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 547.891963][T19536] vhci_hcd vhci_hcd.0: remove, state 4 [ 547.901546][T19536] usb usb37: USB disconnect, device number 1 [ 547.967061][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.969417][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.972204][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.976594][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.978892][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.981292][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 547.988687][ T12] vhci_hcd vhci_hcd.0: stop threads [ 547.991574][ T12] vhci_hcd vhci_hcd.0: release socket [ 547.993952][T19536] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 548.000081][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 548.003035][ T12] vhci_hcd vhci_hcd.0: stop threads [ 548.006255][ T12] vhci_hcd vhci_hcd.0: release socket [ 548.008529][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 548.010885][ T12] ================================================================== [ 548.014040][ T12] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 548.016963][ T12] Read of size 1 at addr ffff888025858b68 by task kworker/u32:0/12 [ 548.020351][ T12] [ 548.021781][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.021799][ T12] Tainted: [L]=SOFTLOCKUP [ 548.021804][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.021813][ T12] Workqueue: usbip_event event_handler [ 548.021852][ T12] Call Trace: [ 548.021858][ T12] [ 548.021863][ T12] dump_stack_lvl+0x100/0x190 [ 548.021878][ T12] print_report+0x13d/0x4b0 [ 548.021898][ T12] ? __virt_addr_valid+0x239/0x430 [ 548.021924][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.021948][ T12] kasan_report+0xdf/0x1c0 [ 548.021978][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.022001][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.022024][ T12] __kasan_check_byte+0x36/0x50 [ 548.022050][ T12] lock_acquire+0x132/0x370 [ 548.022080][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 548.022103][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 548.022126][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 548.022148][ T12] ? event_handler+0x21e/0x570 [ 548.022169][ T12] event_handler+0x21e/0x570 [ 548.022193][ T12] process_one_work+0xa23/0x1940 [ 548.022224][ T12] ? __pfx_process_one_work+0x10/0x10 [ 548.022254][ T12] ? __pfx_event_handler+0x10/0x10 [ 548.022278][ T12] worker_thread+0x5ef/0xe50 [ 548.022308][ T12] ? kthread+0x13a/0x450 [ 548.022332][ T12] ? __pfx_worker_thread+0x10/0x10 [ 548.022358][ T12] kthread+0x370/0x450 [ 548.022382][ T12] ? __pfx_kthread+0x10/0x10 [ 548.022407][ T12] ret_from_fork+0x72b/0xd50 [ 548.022431][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 548.022452][ T12] ? __switch_to+0x800/0x10f0 [ 548.022469][ T12] ? __pfx_kthread+0x10/0x10 [ 548.022484][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.022502][ T12] [ 548.022506][ T12] [ 548.079559][ T12] Allocated by task 1: [ 548.080871][ T12] kasan_save_stack+0x30/0x50 [ 548.082375][ T12] kasan_save_track+0x14/0x30 [ 548.083862][ T12] __kasan_kmalloc+0xaa/0xb0 [ 548.085339][ T12] __kmalloc_noprof+0x322/0x820 [ 548.086874][ T12] __usb_create_hcd+0x5e/0xac0 [ 548.088385][ T12] vhci_hcd_probe+0xf3/0x4e0 [ 548.089909][ T12] platform_probe+0x106/0x1d0 [ 548.091391][ T12] really_probe+0x241/0xa60 [ 548.092840][ T12] __driver_probe_device+0x20e/0x450 [ 548.094515][ T12] driver_probe_device+0x4a/0x140 [ 548.096101][ T12] __device_attach_driver+0x1df/0x320 [ 548.097849][ T12] bus_for_each_drv+0x159/0x1e0 [ 548.099420][ T12] __device_attach+0x1e4/0x4d0 [ 548.100940][ T12] device_initial_probe+0xaf/0xd0 [ 548.102517][ T12] bus_probe_device+0x64/0x160 [ 548.104018][ T12] device_add+0x121d/0x1970 [ 548.105453][ T12] platform_device_add+0x35a/0x800 [ 548.107063][ T12] platform_device_register_full+0x5cf/0x830 [ 548.108998][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 548.110514][ T12] do_one_initcall+0x11d/0x700 [ 548.112014][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 548.113669][ T12] kernel_init+0x1f/0x1e0 [ 548.115037][ T12] ret_from_fork+0x72b/0xd50 [ 548.116485][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.118039][ T12] [ 548.118786][ T12] Freed by task 19536: [ 548.120061][ T12] kasan_save_stack+0x30/0x50 [ 548.121508][ T12] kasan_save_track+0x14/0x30 [ 548.122948][ T12] kasan_save_free_info+0x3b/0x70 [ 548.124496][ T12] __kasan_slab_free+0x5f/0x80 [ 548.126000][ T12] kfree+0x22b/0x6c0 [ 548.127269][ T12] usb_put_hcd+0x149/0x1f0 [ 548.128736][ T12] vhci_hcd_remove+0x107/0x1b0 [ 548.130286][ T12] platform_remove+0x5f/0x80 [ 548.131739][ T12] device_remove+0xcb/0x180 [ 548.133192][ T12] device_release_driver_internal+0x44e/0x620 [ 548.135105][ T12] unbind_store+0xf8/0x110 [ 548.136513][ T12] drv_attr_store+0x74/0xb0 [ 548.137992][ T12] sysfs_kf_write+0xf2/0x150 [ 548.139509][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 548.141242][ T12] vfs_write+0x6ac/0x1050 [ 548.142607][ T12] ksys_write+0x12a/0x250 [ 548.143970][ T12] __do_fast_syscall_32+0xe7/0x970 [ 548.145621][ T12] do_fast_syscall_32+0x32/0x70 [ 548.147161][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.149156][ T12] [ 548.150010][ T12] Last potentially related work creation: [ 548.151787][ T12] kasan_save_stack+0x30/0x50 [ 548.153297][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 548.154943][ T12] insert_work+0x36/0x230 [ 548.156309][ T12] __queue_work+0x9bc/0x12b0 [ 548.157831][ T12] queue_work_on+0x1a9/0x1e0 [ 548.159326][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 548.161165][ T12] unlink1+0x418/0x510 [ 548.162474][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 548.164076][ T12] usb_kill_urb+0x121/0x320 [ 548.165537][ T12] hub_quiesce+0x1e9/0x320 [ 548.166930][ T12] hub_suspend+0x4ab/0x9e0 [ 548.168366][ T12] usb_suspend_both+0x288/0x950 [ 548.169967][ T12] usb_runtime_suspend+0x49/0x120 [ 548.171553][ T12] __rpm_callback+0xc8/0x620 [ 548.173057][ T12] rpm_callback+0x16a/0x1b0 [ 548.174469][ T12] rpm_suspend+0x2f4/0x11a0 [ 548.175887][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 548.177546][ T12] usb_runtime_idle+0x7e/0x90 [ 548.179046][ T12] rpm_idle+0x322/0x790 [ 548.180402][ T12] pm_runtime_work+0x120/0x150 [ 548.181953][ T12] process_one_work+0xa23/0x1940 [ 548.183519][ T12] worker_thread+0x5ef/0xe50 [ 548.184985][ T12] kthread+0x370/0x450 [ 548.186192][ T12] ret_from_fork+0x72b/0xd50 [ 548.187581][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.189083][ T12] [ 548.189884][ T12] Second to last potentially related work creation: [ 548.191860][ T12] kasan_save_stack+0x30/0x50 [ 548.193355][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 548.194958][ T12] insert_work+0x36/0x230 [ 548.196320][ T12] __queue_work+0x9bc/0x12b0 [ 548.197824][ T12] queue_work_on+0x1a9/0x1e0 [ 548.199295][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 548.200971][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 548.202567][ T12] usb_submit_urb+0x827/0x19b0 [ 548.203925][ T12] usb_start_wait_urb+0x10e/0x580 [ 548.205469][ T12] usb_control_msg+0x328/0x4b0 [ 548.206955][ T12] hub_ext_port_status+0x152/0x600 [ 548.208585][ T12] hub_event+0xc48/0x4a60 [ 548.209968][ T12] process_one_work+0xa23/0x1940 [ 548.211555][ T12] worker_thread+0x5ef/0xe50 [ 548.213021][ T12] kthread+0x370/0x450 [ 548.214314][ T12] ret_from_fork+0x72b/0xd50 [ 548.215765][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.217270][ T12] [ 548.218103][ T12] The buggy address belongs to the object at ffff888025858000 [ 548.218103][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 548.222439][ T12] The buggy address is located 2920 bytes inside of [ 548.222439][ T12] freed 8192-byte region [ffff888025858000, ffff88802585a000) [ 548.226701][ T12] [ 548.227480][ T12] The buggy address belongs to the physical page: [ 548.229856][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25858 [ 548.233305][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 548.235900][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 548.238270][ T12] page_type: f5(slab) [ 548.239582][ T12] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 548.242577][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 548.245237][ T12] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 548.247930][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 548.250659][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 548.253341][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 548.256002][ T12] page dumped because: kasan: bad access detected [ 548.258022][ T12] page_owner tracks the page as allocated [ 548.259934][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11247994600, free_ts 11238239663 [ 548.266365][ T12] post_alloc_hook+0xfd/0x120 [ 548.267877][ T12] get_page_from_freelist+0xf48/0x3530 [ 548.269672][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 548.272128][ T12] new_slab+0xa2/0x640 [ 548.273843][ T12] refill_objects+0xe3/0x410 [ 548.275786][ T12] __pcs_replace_empty_main+0x376/0x680 [ 548.278125][ T12] __kmalloc_noprof+0x66d/0x820 [ 548.280184][ T12] __usb_create_hcd+0x5e/0xac0 [ 548.282200][ T12] vhci_hcd_probe+0xf3/0x4e0 [ 548.284079][ T12] platform_probe+0x106/0x1d0 [ 548.285939][ T12] really_probe+0x241/0xa60 [ 548.287925][ T12] __driver_probe_device+0x20e/0x450 [ 548.290070][ T12] driver_probe_device+0x4a/0x140 [ 548.292202][ T12] __device_attach_driver+0x1df/0x320 [ 548.294426][ T12] bus_for_each_drv+0x159/0x1e0 [ 548.296414][ T12] __device_attach+0x1e4/0x4d0 [ 548.298306][ T12] page last free pid 1 tgid 1 stack trace: [ 548.300955][ T12] __free_frozen_pages+0x79f/0x1090 [ 548.303084][ T12] qlist_free_all+0x47/0xf0 [ 548.305032][ T12] kasan_quarantine_reduce+0x1a0/0x1f0 [ 548.307375][ T12] __kasan_slab_alloc+0x69/0x90 [ 548.309429][ T12] __kmalloc_cache_noprof+0x265/0x6c0 [ 548.311584][ T12] bus_add_driver+0x92/0x5b0 [ 548.313641][ T12] driver_register+0x1e2/0x360 [ 548.315710][ T12] do_one_initcall+0x11d/0x700 [ 548.317896][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 548.320140][ T12] kernel_init+0x1f/0x1e0 [ 548.321953][ T12] ret_from_fork+0x72b/0xd50 [ 548.323896][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.325954][ T12] [ 548.326966][ T12] Memory state around the buggy address: [ 548.329277][ T12] ffff888025858a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 548.332756][ T12] ffff888025858a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 548.336082][ T12] >ffff888025858b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 548.339427][ T12] ^ [ 548.342544][ T12] ffff888025858b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 548.345950][ T12] ffff888025858c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 548.349332][ T12] ================================================================== [ 548.352880][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 548.356073][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.360520][ T12] Tainted: [L]=SOFTLOCKUP [ 548.361884][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.364871][ T12] Workqueue: usbip_event event_handler [ 548.366581][ T12] Call Trace: [ 548.367659][ T12] [ 548.368605][ T12] dump_stack_lvl+0x100/0x190 [ 548.370272][ T12] vpanic+0x552/0x970 [ 548.371486][ T12] ? __pfx_vpanic+0x10/0x10 [ 548.372862][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 548.374437][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.376120][ T12] panic+0xd1/0xe0 [ 548.377355][ T12] ? __pfx_panic+0x10/0x10 [ 548.378732][ T12] ? end_report.part.0+0x23/0x90 [ 548.380289][ T12] ? rcu_is_watching+0x12/0xc0 [ 548.381781][ T12] ? end_report.part.0+0x23/0x90 [ 548.383353][ T12] ? check_panic_on_warn+0x1f/0x90 [ 548.384975][ T12] check_panic_on_warn.cold+0x19/0x34 [ 548.386648][ T12] end_report.part.0+0x3a/0x90 [ 548.388152][ T12] kasan_report.cold+0xe/0x18 [ 548.389675][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.391293][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 548.392936][ T12] __kasan_check_byte+0x36/0x50 [ 548.394461][ T12] lock_acquire+0x132/0x370 [ 548.395900][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 548.397758][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 548.399464][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 548.401083][ T12] ? event_handler+0x21e/0x570 [ 548.402596][ T12] event_handler+0x21e/0x570 [ 548.404058][ T12] process_one_work+0xa23/0x1940 [ 548.405567][ T12] ? __pfx_process_one_work+0x10/0x10 [ 548.407239][ T12] ? __pfx_event_handler+0x10/0x10 [ 548.408923][ T12] worker_thread+0x5ef/0xe50 [ 548.410389][ T12] ? kthread+0x13a/0x450 [ 548.411736][ T12] ? __pfx_worker_thread+0x10/0x10 [ 548.413357][ T12] kthread+0x370/0x450 [ 548.414652][ T12] ? __pfx_kthread+0x10/0x10 [ 548.416110][ T12] ret_from_fork+0x72b/0xd50 [ 548.417651][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 548.419251][ T12] ? __switch_to+0x800/0x10f0 [ 548.421127][ T12] ? __pfx_kthread+0x10/0x10 [ 548.422642][ T12] ret_from_fork_asm+0x1a/0x30 [ 548.424170][ T12] [ 548.425894][ T12] Kernel Offset: disabled [ 548.427272][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:06:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b0d26b RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9b0a RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5359ff4 CR3=00000000428ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91d28e01 RDX=0000000000000000 RSI=ffffffff8e29ff3c RDI=ffffffff8c400a80 RBP=ffffffff81b806be RSP=ffffc900045b6f78 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000016b4b R12=ffff8880237d4a80 R13=ffffc900045b7060 R14=0000000000000202 R15=ffffc900045b7094 RIP=ffffffff8bb89a7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000808d0000 CR3=0000000000cc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a535 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900001e7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b6f71ed R15=ffffffff85a0a4d0 RIP=ffffffff85a0a55f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000350f9ff8 CR3=000000005ef8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e0100 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef0e000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd75f7a520 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd75f6d3d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737152 7373737373734707 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06031d1a5c077343 1e161e035c18101c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30306e6930307069 3030637369393063 6931307064303063 7364393063643230 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 860bd855c4578507 000055c829202913 0000000000000241 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f697472 0000003165730000 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000002 RCX=ffffffff81fd1ee2 RDX=ffff88801cfd2540 RSI=ffffffff81fd1ebc RDI=ffff88801cfd2540 RBP=ffff88802b4433a0 RSP=ffffc90003eef1e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005688675 R14=0000000000000001 R15=ffff88802b53c9c0 RIP=ffffffff8209b139 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080005000 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000607e0000 Opmask01=0000000000000000 Opmask02=0000000003fffeff Opmask03=0000000002082001 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd75f82a00 000055cd75f82a00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd75f72510 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05ee5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737152 7373737373734707 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06031d1a5c077343 1e161e035c18101c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006463 685f696368763a6d 726f6674616c703d 5341494c41444f4d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000595e 555f545e554b0750 4f525b495c514d00 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c82920e842 0000000000000041 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f697472 0000003165730000 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000