last executing test programs: 4m54.027226255s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xfff4, 0x1, {0x0, 0xb, 0x7ffffffe}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000001}, 0xc0c4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000040)={0xffffff01}, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r6, &(0x7f00000001c0), 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="59532dbd7000fddbdf256b000000", @ANYBLOB="0c009900070000006900000088008080000d"], 0xb0}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x0, 0x0) 4m53.660971012s ago: executing program 3 (id=132): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r2 = socket(0x23, 0x5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r7, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000090000006311e000000000009500000000000000fa301b57574c18a3090ac321502637bc766677e15cfd1c530475c2467707ca3162cf569d9ff53101e7a685ab6d751b4f6f79ebca51f2e95a257c6abbeb5241fe7ebcabaca89ce3cfe87b44a209deb815fe83d969c503224651e917e8f80a8566ed32df1141cb5d040f4d4875aa137479bc3116bb0d41d28f0688f77626b4890f47ef334cea513005cecf8b8bff936971c7d4b375cd10530865bb09acbb7e80344e91460bdc283311b9b647894e4c9840a8f2b4dfdce775cab6b4fb3c2ab7ae18655c561e43f6149ea96d7da1984f543c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 4m51.904747137s ago: executing program 3 (id=141): syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00883a0000000000000000000000ffff76000001ff02000000000000000000000000000b040190780000000163db887afffb2b0100000000000000000000ffff0a010102fc0200000000000000000000000000003a0a040503080100fc020000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001fe8000000000000000000000000000aafc0200"/190], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000480)={0xffffffffffffffed, 0x0, 0x1ff, {0x7, 0x29, 0x5, 0x24ff871991f08fe7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./sys/bus/pci/drivers/ata_generic/new_id\x00', &(0x7f00000002c0)) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x3ff, {0x7a44, 0xffffffff, 0x0, {0x0, 0x0, 0x280005, 0x4, 0x0, 0xfffffffffffffffb, 0xfffffffa, 0xa, 0xbe, 0x8000, 0x10000, 0xee00, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xc}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7fffffff}]}}]}, 0x3c}}, 0x914) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', r5, 0x7, 0x7800, 0x5, 0x4, {{0x29, 0x4, 0x3, 0x3a, 0xa4, 0x65, 0x0, 0x7, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xbf, 0x3, 0x9, [{@loopback, 0x3}, {@private=0xa010100, 0x6634}, {@broadcast, 0x3}, {@local, 0xf}, {@remote, 0xc}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @cipso={0x86, 0x49, 0x2, [{0x0, 0xa, "3fc774fe767e277e"}, {0x1, 0xe, "973f49dc84fb9ba9a964332d"}, {0x7, 0x11, "c58c81ccab37b662019def89441573"}, {0x1, 0x11, "7d33f21340f260afa73fd634c1c05c"}, {0x5, 0x9, "0320c27ee1895f"}]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x2}]}}}}}) ioctl$TCFLSH(r3, 0x540b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x18, &(0x7f0000000080)=0xa, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) write(r6, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) 4m51.57881644s ago: executing program 3 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m48.429269951s ago: executing program 3 (id=152): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x842) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r4, 0x407, 0x0) read$FUSE(r4, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x29, 0x4, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff}) fcntl$setlease(r9, 0x400, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000140)={"7a3389ed915ddba1cf61f8986123787776c66ede144c890ee7038c080d31fffc", r0}) lseek(r0, 0x1, 0x0) 4m47.559196138s ago: executing program 3 (id=155): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x42000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001900)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001940)='./file0\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/90], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) 4m31.629128535s ago: executing program 32 (id=155): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x42000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001900)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001940)='./file0\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/90], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) 1m40.024214242s ago: executing program 4 (id=797): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'ni_atmio16d\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x3, 0x100, 0x10, 0x401, 0x1, 0x20003, 0x7ff, 0xe, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x100, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x37, 0xc, 0x10000006, 0x664, 0xfffffff4]}) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f00000edb40)={0x0, &(0x7f00000ed9c0)}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000740)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x7fff, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) 1m39.146336363s ago: executing program 4 (id=800): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='* ./export_dir \\x0x000000 8194 0 0 0\n', 0x25) 1m39.029480636s ago: executing program 4 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="de00de764c3a728a08e1c77cdc55eb47ef000000000000b708000000000000000007020000f8ffffffb703000000000000b704000000007f0585000000570000009500"/80], 0x0, 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x5}, {0x5, 0x9}, {0xfff1, 0xc}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 1m38.866121862s ago: executing program 4 (id=806): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) 1m38.747673482s ago: executing program 4 (id=807): syz_io_uring_setup(0x2cf9, &(0x7f0000000500)={0x0, 0x18f9, 0x100, 0x0, 0x1e1}, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}}) close(0x3) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) set_thread_area(&(0x7f0000000180)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}) pread64(r3, 0x0, 0x0, 0x10000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.493772255s ago: executing program 4 (id=808): io_uring_setup(0x6281, &(0x7f00000002c0)={0x0, 0x523e, 0x80, 0xfffffffe, 0x9}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcbc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x5, 0x39, 0x0, &(0x7f0000000240)="2129d0525a329c4686d51ffc9a780e11f9db16557e559885e3d3ba0b3abdcb32f19fa2d19cc9ca512b0df6a4523f5ce39dcd5c9194250a66f7", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x4c) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r9], 0x34}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 1m36.055973802s ago: executing program 2 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xfffffffa, 0x5, 0xc72}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000008c0)={{0x2, 0x3, 0x1, 0x7, 0x8, 0x3}, 0x214, [0x1000, 0x3, 0x8, 0x2, 0xa, 0x3, 0xfffffff9, 0x6, 0x80000000, 0x8, 0x100, 0x5, 0x7ff, 0x20c496, 0x3, 0x2000, 0x80000000, 0x8, 0x80, 0x8, 0x5, 0x5, 0x2, 0x3, 0x2, 0x7ff, 0x9cd, 0x7, 0x22a, 0x86, 0x5, 0x7, 0xff, 0x4, 0x6, 0x0, 0x6, 0x8, 0x5, 0x4, 0x1, 0x3, 0x9, 0x40, 0x0, 0x3, 0x6, 0x2, 0x1, 0x0, 0x6, 0x5, 0x4, 0xfffffffa, 0xbfe, 0x40, 0x69, 0x6, 0xfffffff7, 0x10000, 0x8, 0x1, 0x6, 0x6, 0x81, 0x5, 0xfffffffa, 0x101, 0x1, 0x25, 0xba, 0x7, 0x3, 0xcf5, 0x8, 0x1, 0x3, 0x3, 0x6, 0x9450, 0xce47, 0x92dc, 0x9, 0x1, 0x9, 0x0, 0x9, 0x3, 0x7fff, 0xca, 0xfff, 0x8ffc, 0x3, 0x4, 0xf784, 0x6, 0x6, 0x6, 0x3, 0xd9, 0x10001, 0x8001, 0x7fff, 0x5, 0xa000, 0x1, 0x54f, 0x2, 0x0, 0x800000, 0x0, 0x400, 0x9b3a, 0x7, 0xb7f, 0x80, 0x8, 0x5, 0x3, 0x5bc0, 0x2, 0x0, 0x9, 0x2f, 0x5d, 0x1, 0xb400, 0xb, 0x3, 0x2, 0x3, 0x3, 0x3, 0x3c7, 0x9, 0x8d, 0x1, 0x1, 0x8, 0x8cd, 0x4, 0x1000, 0x29b, 0x7, 0x800, 0x4, 0x1000, 0xb, 0x3, 0x7, 0x0, 0xfffffffe, 0x721f, 0x81, 0x3, 0x6af1, 0x3, 0x3, 0x10001, 0x6, 0xf5, 0xfffffff9, 0x80, 0x1, 0x0, 0xfffffffe, 0x7, 0x9, 0x9, 0x3, 0x3, 0x10001, 0x1, 0x6, 0xd, 0x9, 0x6, 0x0, 0x9, 0x6, 0xc8, 0xf4e, 0x7, 0x9, 0x597, 0x8, 0xc7, 0x8, 0x8, 0x8, 0x80, 0x9874, 0x2, 0x0, 0x4, 0x2, 0x8000, 0x97, 0xd, 0x7, 0xf8, 0xd75, 0x40, 0xfffffffa, 0x5, 0xffffffff, 0x7, 0xb8, 0xfffff410, 0x7fff, 0x0, 0xb, 0xa73, 0x7f, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x626c, 0x0, 0x1, 0x80000001, 0x8001, 0x4, 0x14000000, 0x8, 0x8, 0x2, 0xd, 0x8001, 0xfffffeff, 0x101, 0x2, 0x5, 0x7, 0x8, 0x2, 0x92a, 0x5, 0x401, 0x5, 0x3e12, 0x4, 0x7, 0x308, 0x1ff, 0x5991, 0x8, 0x800, 0x3, 0xffffffff, 0xe, 0x34ef, 0x1, 0xd, 0x3, 0x4, 0x10001, 0x6, 0x4, 0x7, 0x5, 0xfffffff8, 0x4, 0x9, 0x435cfea9, 0x20, 0x2, 0x2, 0x8, 0x5, 0xa, 0xc468, 0x1, 0xc, 0x7, 0xca, 0x4a4, 0x9, 0x4, 0x8, 0xc9, 0xff, 0xf3, 0x4, 0x3, 0x7731, 0x3, 0xbcf7, 0x8, 0x40, 0x0, 0x3, 0x800, 0xce, 0x401, 0x0, 0x3603, 0xf5ee, 0x2, 0x1, 0xdefb, 0x0, 0x3, 0x2, 0x0, 0x2, 0x6, 0x4, 0x333a, 0xfe8, 0x4, 0xfffffff4, 0x3, 0x0, 0x10000, 0x4, 0xfffffffc, 0x8, 0x80000001, 0x70, 0x2, 0x6, 0x5, 0x6, 0x0, 0x6, 0xa1, 0x40, 0x200, 0x9d2, 0x9, 0x19, 0x80000001, 0x4, 0x0, 0x800, 0xffff, 0x15, 0x6, 0x3, 0x6, 0x46f, 0x2e88, 0x5f, 0x6, 0x8f34, 0x6, 0x1ff, 0xb, 0xff, 0x7, 0x7e, 0x5, 0x9, 0x10001, 0xffffffff, 0xffffffff, 0xff, 0x8, 0x2, 0x9, 0x5f, 0xdc7, 0xfffffff7, 0x70f5, 0x1000, 0x8, 0x5, 0x5, 0x0, 0xffffc527, 0x1, 0x0, 0x6, 0x4, 0x3ff, 0x2, 0x9, 0x7, 0x3, 0x3, 0x7, 0x6, 0x9, 0x5, 0x5, 0x8, 0x1ff, 0x29a, 0xffffffff, 0x8, 0x1000, 0xe472, 0xdf, 0x3, 0x3, 0xd, 0x0, 0x2, 0xe, 0x566, 0x9, 0xe1, 0x95, 0x4, 0x80, 0x6, 0x5, 0x36, 0x7f, 0x9, 0x6, 0x6, 0x2, 0x101, 0xfffff3f5, 0x2, 0x80000000, 0x6, 0xf, 0x0, 0xa58, 0x3, 0x80000000, 0x200, 0x40, 0x9, 0x7, 0x7, 0x2, 0x307f, 0x7fffffff, 0x2, 0xbd, 0x9, 0x6, 0x8, 0x6, 0x23f4, 0x0, 0x2ce2, 0xe, 0x7, 0x5, 0x4, 0x5, 0x1, 0x8, 0x100, 0x9, 0x6, 0x7, 0x0, 0x8, 0x980, 0x5, 0x1, 0xf, 0xff, 0x101, 0x3, 0xf41c, 0x10001, 0x6, 0x80000001, 0xfffffff9, 0x2, 0x0, 0x6, 0xeee, 0x9, 0x6, 0x100, 0x4, 0xffffffff, 0xce, 0x80, 0x8, 0x9dad, 0xc, 0x4, 0x8, 0xd5, 0x1, 0x5, 0x800, 0xf4d7, 0x9, 0xffff0a2a, 0x7, 0x3, 0x400, 0x3f, 0x42a, 0xffff, 0x20007, 0x1036fe25, 0x8, 0x1d2, 0x1, 0xe5d5, 0xe8e, 0x6, 0x59, 0x100, 0x669c, 0x0, 0x1, 0x1, 0x9, 0x7ff, 0x6, 0x8, 0x7fffffff, 0x7ff, 0x1, 0x36, 0x5, 0x80000000, 0x0, 0x68, 0x570, 0x4b, 0x3, 0xff, 0x2, 0xf9, 0x0, 0x75, 0x7c, 0x6, 0xe71, 0x4, 0x0, 0x0, 0x32a0, 0x747b, 0x2, 0x9, 0xfcb9, 0x7f, 0x3, 0x4, 0x7, 0x4, 0x3, 0x10000, 0x0, 0x8, 0x5, 0xffffffff, 0x1, 0xfffffff8, 0x5aa2, 0xffffffff, 0x0, 0x8, 0x7, 0x40, 0x4, 0x9, 0x5, 0x5, 0x80, 0xfffffff7, 0x0, 0x1, 0x3, 0x92a, 0x0, 0x1ff, 0x2, 0x0, 0xfffffffa, 0x6, 0x3, 0x5, 0x3, 0x2c78, 0x4, 0x5, 0xfff, 0xd, 0x9, 0x6d09, 0x3e6, 0x400, 0xdb0, 0x0, 0x9, 0x0, 0x8, 0x4, 0x6, 0x7f, 0x100, 0x6, 0x4, 0x5, 0x8001, 0x0, 0xca2, 0x7, 0xe46, 0x8000, 0xff, 0x1, 0x3, 0x1, 0xbad6, 0x5, 0x0, 0xff, 0x6, 0x8000, 0x8, 0x7, 0xfffffe01, 0x80000001, 0x3e7093d9, 0x5, 0x9, 0x2, 0x0, 0x4, 0xc, 0x7fff, 0x6, 0x3, 0x1, 0xe, 0x2, 0x0, 0x80, 0x4, 0x1, 0x1, 0x1, 0x217b, 0x8001, 0xfffffffe, 0xffff, 0x7, 0xfffffe00, 0x3, 0x6, 0xf30, 0x2, 0xe393, 0x253f, 0xa, 0x7fff, 0x1, 0x1, 0xf8f, 0x100f3f, 0x101, 0x5, 0x1, 0x7, 0x1, 0x1, 0x5, 0x7, 0x0, 0xfffffffe, 0x6, 0x2, 0xe6, 0x6, 0x10001, 0xf53, 0x7, 0x7, 0xd, 0x0, 0x81, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x8, 0x8000, 0x10000, 0xff, 0x9, 0x6, 0x7, 0x2, 0x6, 0x3, 0x8, 0x534b, 0x86ef, 0x8, 0x6, 0x8, 0x6, 0x10, 0x81, 0x0, 0x2, 0x2, 0x5, 0x80000001, 0x7, 0xba1f, 0x2, 0x6, 0x8b, 0xffffffff, 0x10, 0xfff, 0xfffffff9, 0x2, 0x8, 0x3, 0x81df, 0x9, 0x1, 0x8b0000, 0x2, 0x6, 0x8, 0x2, 0x1, 0x20, 0x2, 0x401, 0x45faef3f, 0x5, 0x401, 0x9, 0x7f, 0xff, 0xfffff0d2, 0x7fffffff, 0x8, 0x8, 0x5, 0x7, 0x0, 0x7, 0x6bc, 0xcd2, 0x2, 0x7, 0x5000000, 0x3, 0x0, 0x1, 0x7, 0x6, 0x6ec4, 0x8, 0x1, 0x0, 0x2, 0x3, 0x6bcd983b, 0x8, 0x7, 0x2, 0x179, 0xf, 0x9, 0xffff, 0x1, 0x81, 0x5, 0x9, 0xf, 0x8000, 0xd862, 0xf, 0x7f, 0x10, 0x30, 0x81, 0x7f, 0x4, 0x3, 0x9, 0xfff, 0x3, 0x3, 0x5, 0xffff0000, 0xc3, 0x7a, 0x7fffffff, 0xe06, 0x2, 0x5, 0x3, 0x5, 0x3, 0x800, 0x80000000, 0x2, 0x8, 0x16, 0x0, 0x0, 0x4, 0x4, 0x0, 0xa3a, 0x2, 0x6cd1, 0x91c, 0x40, 0x6, 0x1, 0x8, 0xffff, 0xfffffff7, 0x3, 0x4, 0x9, 0xd04, 0x6, 0xf91, 0x0, 0x9, 0xf3e, 0x6, 0x9d259b7, 0x7fffffff, 0x1, 0xffffffff, 0x9, 0x6, 0x200, 0xcb, 0x6, 0x7fff, 0x8, 0x5, 0x44f, 0x8, 0x1, 0x8, 0x207, 0x8, 0x4000, 0x4, 0x5, 0x7ff, 0x3ff, 0x7, 0x2, 0x0, 0x991e, 0x4, 0x67c, 0x4, 0x8, 0x6, 0x7, 0x7d2, 0x137, 0x9, 0x3, 0x7ff, 0x800, 0xa, 0x8, 0x62afffb0, 0xff, 0x4, 0x9, 0x10000, 0x3033d96e, 0x6, 0x6, 0x4, 0x545, 0x8, 0x1000, 0x25, 0x0, 0xfffffffc, 0x9, 0x3ff, 0x1, 0x7, 0x7ff, 0x7, 0xc, 0x8, 0x4, 0x8, 0x5, 0x0, 0x4, 0x0, 0x1000, 0x9, 0x401, 0x3, 0x6, 0x4, 0xffffffff, 0x9, 0x10, 0x1, 0x4, 0x4, 0x4ae965bf, 0x2, 0x5, 0x24, 0x2, 0x0, 0xffff, 0x4ec109d2, 0xa, 0x5, 0x473, 0x6, 0x0, 0x6, 0x2, 0x0, 0xe, 0xf, 0xfffffffb, 0xb, 0x1, 0xffff9ab1, 0x8, 0xfff80000, 0x7fff, 0x9, 0x4, 0x10, 0x0, 0x95, 0x3, 0x8, 0x7, 0x200, 0x3ff, 0x1, 0x9, 0xfffff1d8, 0xfffffffa, 0x1, 0xa52, 0x1, 0xe, 0xc53, 0x1, 0x7, 0x2, 0xe99, 0x5, 0x3ce, 0x7, 0x200, 0xb7, 0x6, 0x2, 0x3, 0x5, 0x5, 0x9, 0x5, 0x7, 0xfff, 0x8000, 0x6, 0x6, 0x9, 0x5, 0x7, 0x9, 0x28, 0x9, 0x9, 0x4, 0x6, 0x9, 0x5, 0x80000001, 0xb6, 0x8, 0xef, 0x2, 0x7de, 0xdef8, 0x92c2, 0x8000, 0xd1a, 0x4, 0x3, 0x2a0, 0x1000, 0x94, 0x6, 0x8, 0x1, 0x1, 0x4, 0x10000, 0x80000000, 0x4, 0x3, 0x4, 0x4, 0x5, 0x2, 0x1af, 0x7, 0x9, 0x1, 0x0, 0xffffffff, 0x9]}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000380)=@newchain={0x1500, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x1, 0x9}, {0xc, 0x2}}, [@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x700000, 0xd5ff, 0x7f}, {0x7fb, 0x7ff}, 0x84, 0x5, 0xb7}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0xf2c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x10, 0x3d3c, 0x2, 0x401, 0x7, 0x0, 0xdcfe, 0x5d1f, 0x9, 0xd81, 0x0, 0xffff1557, 0xef72, 0x8, 0x372a, 0x2, 0xa, 0x323e, 0x5, 0x10, 0x9, 0x47, 0x3, 0x9, 0x5, 0x40fd17, 0x9, 0x3, 0xdcc7, 0x80, 0x1, 0xffff0001, 0x7, 0xa2cd, 0xfff, 0x7ff, 0xb4b, 0x1, 0x9, 0x5, 0x0, 0x7ff, 0x0, 0xe, 0x8, 0x9, 0x101, 0x3744, 0xffffffff, 0x5, 0xd3, 0x7, 0x5, 0x0, 0xe000000, 0x9, 0xb32c, 0x1, 0xffff, 0x9, 0x8, 0x401, 0x1, 0x80000001, 0xcb9, 0x3, 0xfffffff7, 0x3, 0x80000001, 0x8, 0x5, 0x2, 0x7ff, 0xfc0, 0x5, 0x5, 0x3, 0x7, 0x7ff, 0x8, 0xd, 0x20, 0x4, 0x6, 0x800, 0x7, 0x3ff, 0xfffffffb, 0x8, 0xfffffffa, 0x200, 0x3ff, 0xffffff81, 0x7, 0x3ff, 0x1, 0xffff61a9, 0x1000, 0x2, 0x3, 0x0, 0x1000, 0x808, 0x10001, 0x7fffffff, 0x0, 0x8, 0x7, 0x0, 0x6, 0x7, 0x0, 0x400, 0x4, 0x3, 0x5, 0x4, 0x0, 0x9, 0xa, 0x6, 0x8, 0x1000, 0x4, 0x0, 0xc058, 0x8001, 0xffff, 0x83, 0x3, 0x2, 0xffffff60, 0x6, 0x2, 0x0, 0x0, 0x10, 0x1, 0xffffffff, 0x2, 0x9, 0x224871c5, 0x7, 0x4, 0xfff, 0x67, 0x2, 0x3, 0x146, 0x2, 0x101, 0x4, 0x4a, 0x6, 0xd, 0x2, 0xfad8, 0x6, 0x1, 0xe09e, 0x7, 0x5, 0x61cf, 0x8, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xa, 0x100, 0x1, 0x101, 0x7b18, 0x1, 0x10, 0x5, 0xffffff1f, 0x0, 0x9, 0x7fff, 0x8001, 0x0, 0x2, 0x800, 0xdc4, 0x9, 0x6b8, 0x7, 0x7, 0x2, 0x4, 0x0, 0x0, 0x88, 0x1, 0x7f, 0x3, 0x9, 0x2, 0x8ac, 0x3, 0xc8da7d2, 0x800, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x1ffc00, 0xffffffff, 0xed6, 0xc, 0xaf, 0xc000, 0x4, 0x6a3973c8, 0x3, 0x9, 0x5, 0x7, 0x6, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x0, 0xbc1d2524, 0xfffffffe, 0x400, 0x80, 0x40, 0x6, 0x5, 0x7, 0x1, 0x370, 0x2, 0x4, 0x3ff, 0x5, 0xd, 0xffffffff, 0xb425, 0xa80, 0xf9, 0xfffffff9, 0x7, 0x4008, 0x0, 0x7f, 0x6, 0xffffff81, 0x3929, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x4, 0x1}, {0x200, 0x37, 0x459}, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x8b4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x40, 0x4, 0xffffffff, 0x32f, 0x9, 0xbcb9, 0x2, 0x1, 0x9, 0x800, 0x7856, 0x2, 0x2e2, 0x2, 0x7, 0x1, 0xffff, 0x30f, 0x5, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4523, 0x1, 0xa, 0x9, 0xa, 0x0, 0x4, 0x4, 0x1, 0x37, 0x7fffffff, 0x9, 0x6, 0x45, 0xda, 0x7900, 0x3, 0x9, 0x1, 0x401, 0x4, 0xf, 0x400, 0x8, 0x80, 0xb5f, 0x6, 0x8, 0xa87f, 0x1, 0x9, 0x8001, 0x10, 0x1f, 0x9, 0xffffffff, 0x3, 0x4, 0x10001, 0x7fff, 0x401, 0xd03c, 0x3, 0x80000001, 0xfffffffc, 0x3, 0x68c4, 0x326, 0xde6, 0xc, 0x80000001, 0x4, 0xd, 0x2, 0xeb4, 0x8, 0xe3, 0x40, 0x0, 0x9, 0x5, 0x7, 0x5, 0x81, 0xa56, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x8c9, 0xfffffff2, 0xd, 0xe, 0x2, 0x8, 0x6, 0x2c, 0x0, 0x1000, 0x5d5, 0xfffff30f, 0x6, 0x8, 0x1, 0x3, 0x6, 0x8001, 0x7, 0x9, 0x7, 0x4, 0xa4, 0x80, 0x7, 0x2, 0x0, 0x6000000, 0x6, 0xfffff11c, 0xe63c, 0xb, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x24, 0x10000, 0xffffffc0, 0xf0, 0x1ffd, 0x3, 0x6, 0x4, 0x2, 0x1cb3, 0x8000, 0x1ff, 0xb8e, 0x5, 0xfffffffd, 0x1, 0x1333, 0x4, 0x80000001, 0x5008, 0x400, 0x0, 0x4, 0x3, 0xce98, 0x0, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x6, 0x2, 0x200, 0xfffffff8, 0x0, 0x8, 0x9, 0x8, 0x400, 0x7ff, 0xb, 0x49, 0x8, 0x3, 0xfff, 0xd6d, 0xc92e, 0x7fff, 0x93, 0x10, 0x8, 0xfffffffd, 0x2, 0x7, 0x8, 0xe3, 0x4, 0x4, 0x5, 0x885c, 0x1, 0x7fffffff, 0x6, 0x325f, 0xffff8001, 0xe, 0x4, 0xe, 0x8, 0x3, 0x5, 0x6, 0x4, 0x80000001, 0x7, 0x2, 0x8001, 0x7, 0x3, 0xfffffff8, 0x33ef00, 0x7, 0x8, 0xe, 0x3, 0x80000000, 0xffff, 0x7, 0x2, 0x6, 0x6, 0x5, 0x9, 0x6, 0x1, 0x10000, 0x8000, 0xac4, 0xf, 0x2, 0xfffffffe, 0x8, 0x7, 0x1, 0x40, 0x8001, 0x7, 0x6, 0x200, 0x1, 0x401, 0x71, 0x2, 0x7, 0xb, 0x6, 0x0, 0x5e3d, 0x9, 0x3791, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf9, 0xf, 0x6181, 0x80000000, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xffff518d, 0x9, 0x0, 0x19, 0xfffffff9, 0xe365, 0x6, 0x7, 0x0, 0x0, 0xf9, 0xf, 0x9, 0x0, 0x8, 0x4, 0x8b, 0x1, 0x101, 0x80000001, 0x8, 0x0, 0x581b4d4d, 0x72, 0x6, 0x2, 0x8f2, 0x9, 0x1, 0xc, 0x4, 0x8001, 0x1ff, 0x40, 0x7, 0xfff, 0xe23e, 0x7, 0x7, 0x1, 0x6, 0x7, 0x1, 0xe86, 0x6, 0x8, 0xf, 0xc57, 0x8, 0x7000000, 0xf, 0x100, 0x5, 0x9, 0x7, 0xe2, 0x101, 0xfff, 0x5, 0x3, 0x7, 0x8, 0x1, 0xfff, 0xc8bd, 0x9, 0x0, 0x401, 0x7, 0x0, 0x9, 0x6, 0x81, 0xd, 0x2, 0xe, 0xfff, 0xb8aa, 0x3, 0xfffffffb, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x7ff, 0x6000, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x40, 0xa3d, 0x80, 0x6, 0x10, 0x10000, 0x8000, 0x8, 0x7, 0xf, 0x6, 0x0, 0x1, 0xc, 0x1, 0x10001, 0xffffff81, 0x9, 0x6, 0x9, 0x9, 0x6, 0x81, 0xffff8000, 0x7900, 0x8001, 0xfffffffb, 0x5, 0x9, 0x8, 0x5, 0x401, 0x8000, 0xd, 0x3, 0x972, 0x6, 0x0, 0x6, 0x1, 0x397, 0x9, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0xfffffffc, 0x72, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x4, 0x9b, 0x3, 0x5, 0x800, 0x763e, 0x6, 0x7, 0xfff, 0x4b, 0x100, 0x10000, 0x6, 0xca4, 0xfffffc00, 0x9, 0x0, 0x3, 0x4, 0xd, 0x4, 0xffff0000, 0x9, 0x7, 0x7, 0x0, 0xbe, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0xeede, 0xfda, 0x4, 0x97, 0xfffffffe, 0x3a3fa87f, 0x8, 0x5, 0x1, 0x7426, 0x948, 0x0, 0x8, 0x800000, 0x5, 0x9, 0x9e8, 0x3, 0x94, 0x1, 0x1, 0x6be, 0x9, 0x8, 0x4, 0x4, 0x8a, 0x100, 0x3, 0x0, 0xe, 0x3, 0x8, 0x2, 0x5, 0x0, 0x10, 0x8001, 0x7, 0x5, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x3f6, 0x0, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x1000, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000005, 0x5c8, 0x1, 0xe, {0x2, 0x0, 0x5f2, 0x6a56, 0x9, 0xec3}, {0x5, 0x2, 0x8, 0xac00, 0xffc0, 0x3}, 0x0, 0x7, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x0, 0x5, {0x5, 0x0, 0xfffe, 0xfff, 0x4, 0x4}, {0xe, 0x2, 0xd, 0xfff, 0x2, 0x5}, 0x2, 0x5, 0x10001}}]}, @TCA_RSVP_ACT={0x210, 0x6, [@m_gact={0x108, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd87, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x5, 0x4e5, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x28, 0x0, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x400, 0xffffffffffffffff, 0xffff8000, 0x7611}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x0, 0x4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3ee, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x9, 0x3}}]}, {0x49, 0x6, "a5cf17be334baedc1816c41fe8aa9c28e4b2af4f9a3e63ab201fb95c0af045b54ca968da879932902f7e978913a3629ea329b3bbc967e19c2543f464e348e6e8761441b846"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x5, 0x1, 0x8}, 0x4d}}]}, {0xb9, 0x6, "526c9cc953f5d88e7022726172b20ae90963a2414a8e3299027d14483f1efb55b25123baa500eff15a83a400fe82138a37475983ba13e4bbba5e1628c9536836d4788eea6b39e3e4e2d9d8a16bdb669a2278777061485a7437b340908e62557a62dc8d10081a6d4e621921f0a33d70f4d0da51590811d2112e8782185c92e8bd89e16ec09522eda270844a9573bc67346c21c76da70cf35db58584cd7c407b34410af2f6ad11551bc1a8c98eece49c57de037d2277"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x9, 0x9}, {0xfffffc00, 0x1, 0x9}, 0x79, 0x31, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}, @f_rsvp={{0x9}, {0x540, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_ACT={0x124, 0x6, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*(74}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "f531b7c8c4fa1686caac90fd5431b8cefc1e77e85bc99f9c412472d93c00b86f012125f625b546f3362ecbe473cb7efe29b2382f038333c99a1e27373a156054129c1f3182593887cac1dd9d54978fb4bc6e01c2895281423c7d31a00f4ed2bf5a4d7be4316d8a788583ccfdaada73c09f73dfeb947aa5b11078c9de9971583c05918fb8b6868a323e400bdd85ecea9c175e8e93b4a9d0971e812279b391e5c13cadfce6103f61ca782eca4d207ed1a86f0960f5eea29dad333b27f60969a025fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd, 0x4, 0x3, 0xd178, 0x80000001, 0x1, 0x5c0, 0x0, 0x5, 0x6, 0x7, 0x0, 0xfffffffa, 0x7, 0x3, 0x7, 0x9, 0x1, 0x7fff, 0x4, 0x8001, 0xfff, 0x5, 0xe, 0xd4, 0x903, 0x4, 0x6, 0x10, 0x6, 0x0, 0x151, 0x3, 0x5, 0xffffffcc, 0x689, 0x2, 0x1, 0x0, 0xfffffff9, 0x6, 0x8, 0x606, 0x80000000, 0x97, 0x2, 0xb6, 0x7660, 0x6, 0x4, 0x4, 0x9, 0x30, 0x80000001, 0xfd09, 0x6, 0x1, 0x5, 0x4, 0x6, 0x3ff, 0xd, 0x7, 0x100, 0x67, 0x6, 0x8000, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x5, 0x9, 0x8, 0x6, 0x400, 0x0, 0xffff8001, 0x9, 0xbd92, 0x5468, 0x9, 0xffffffc4, 0x8, 0x33d, 0xfff, 0x6, 0x10001, 0x3, 0x6, 0x756, 0x80000001, 0x938, 0x1000, 0x76, 0x3, 0x4bc6, 0x5, 0x7fb, 0x100, 0x9, 0x8, 0x9, 0x9d2, 0xd, 0x7, 0x10, 0x258d, 0x81, 0x4, 0x7, 0x2f6a, 0x8, 0xe00, 0x0, 0x7, 0x7f, 0x3, 0x388e, 0x2, 0x80, 0xdf5, 0x3, 0xf, 0x0, 0x6, 0x1, 0x1, 0x75d7, 0x8, 0xa4c, 0x9, 0x36619a9e, 0x1, 0x6f61, 0x6, 0x80000000, 0x0, 0x5, 0x4, 0x2, 0x0, 0xd4b, 0x7fff, 0x9, 0xffff1395, 0xfffffffe, 0x3, 0x0, 0x9, 0x70a5000, 0x4, 0x4, 0x8b1, 0x3, 0x7, 0xb0f, 0x2, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x6, 0x81, 0x7fff, 0x7ff, 0x7, 0x0, 0x2b4, 0x0, 0x3ff, 0x8, 0x5, 0x9, 0x7, 0x7, 0x8, 0x9, 0x0, 0x800, 0x9, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x1, 0xc6, 0x5, 0x6, 0x7ee, 0x1, 0x8, 0x5, 0x9, 0x8001, 0x7, 0xf5, 0xb90, 0x5, 0x0, 0x3635, 0x1, 0x8, 0x5, 0x0, 0x80000001, 0xe, 0x8, 0x1, 0x2, 0x8001, 0x55, 0x3a48, 0x4, 0x7, 0x1, 0x2, 0x5, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x1, 0xb, 0x4, 0xe0, 0x400, 0x616c, 0x3, 0x2d, 0x5, 0xfffffff8, 0x9, 0x80000000, 0x3e, 0x3, 0x0, 0x8, 0x9, 0x1, 0x3, 0xadf, 0x3, 0x6, 0xfc, 0x9]}]}]}}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) socket(0x10, 0x3, 0x0) r4 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x80000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m31.890393157s ago: executing program 2 (id=843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffe0, 0xffffffffffffff62, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m31.647176762s ago: executing program 2 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0xf000, 0x0, 0x200448d3}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc1400000047", 0xb, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r3, 0x501, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x4) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xf}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], 0x1000f) 1m30.711608193s ago: executing program 2 (id=852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m30.60630705s ago: executing program 2 (id=853): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xed4, 0x4, 0x8}}) syz_emit_ethernet(0x101e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @broadcast, @val={@val={0x88a8, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '-', '\x00', 0x9300, "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"}}}}}, 0x0) 1m29.68484329s ago: executing program 2 (id=858): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xaf, 0x172f, 0x38, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xbcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xa4, 0x62}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x40, 0x5, 0xf, 0xb7, 0x9}, 0x55, &(0x7f00000000c0)={0x5, 0xf, 0x55, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "1d3bebabd8a80330a7a6a9e917a0015e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x2, 0xa1aa}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xc, 0xff00, 0x0, [0x3f00, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x7, 0xf00f, 0x7, [0xffc00f, 0xc00f]}]}, 0x2, [{0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "c4b09c9b165e65175e195cd44e633ac3222bc9fbead431307cb0d447e25c09591e42a1679ea1afaabf5a0557c21a8fa9cb93759e03ed0aead21b2f8a5601d736a0f39983eb1d2ff0e77ad07e59711db44eb206696916514a9eb1e144fcffffffffffffffba0a0c0950f2ee984f338e9c9ce5d550db282180f2339f3d1a4766b8f5a3b84fab51fd155c0373a2050270c698a1f18f06f3649cd44989641d3f76706cb1b9c6946e5e589ec4fe268039482e982f4f887f7113b175177e58679035b056427f13eb9b721c5c009fc635b605372d838f720708a2db99fbb00ee4aa2f076a2621bb998a02cef9c49b5a2e0a926c3d86c9"}}, {0x53, &(0x7f0000000380)=@string={0x53, 0x3, "425c123081fb48329741c072ebba54cd0d8d41eb08da783bb60d8fa2400324df65c162164b132a3ce71e18535ae9064268a3c54fb8b16b7c22cf3ba09659b061a04a1cc3d67ee7be240eec8b8a5c60c97a"}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000000000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000031e40002000000000000aa08f01b265a044acd3350fc93684043c019f915f4150d208302a77333e50aa97ededaccd3d7baa15d6c422684847d0164f671dddaf20b466cb7b662497f8878d2b878f89550131dfa2a19bbf5c97dd4ac96afe1c9e0cb9405a7282a070a30d453732f7cc5d6421fadf50f8cc5b37de24fd93e2d20106516f09a69d9bdee31954857ad52bb6cc401f6dbd9866a49f64ab60e12ae0b578ac6df3211752d8f82ff991e614f282698393a5462df8e28fd0cb621ad99764474acb13e3f"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="6b08bd694cd73315497c044f6282e4886cb9eac5d9a1ee3fea1026f5c5639d935c13fd6993521609846271e668356c7adb67edfbd934b26f5a09c3b1fad40939926e23f26026401224267b5d3d2bd0562a8e84c1f3b255e6a8153ef6d8811e5a97d21a1977d1f643a0e1e6da36f81e6f568b67e548c8f30babc385c48cec91ee871661492cf6b3097af13e61ecc78a648e86cd6149da25185acb128266e9bc49573247e6be64c6960d85453c5a5d3a037613f40f9756cfd7a1485fb0a518b40843714c848071050fe0a2b1933df929345c63d5764a350540f2ef3ca96a5422714240985a2fecc4596e57922db204a68085c64d8dcebbee96b97c22f12146a1014d06ef9064137bbe2b3450b0c82e4a806cdcaf99341ee2f9c1bc475a4b798cbd616906f27be31d06d75dafc57318e90bfee500c7534cf3b77f1ced5a23e219e5e4865091cb7455a635f37c60f1254206af064fa6bf4a0d23e43b8e8d57bb52284515fb73ce016b9b2ba3b86f1f193837fd0209f2f2abef2359ae34e67277918b93a82a70c05397b91be761e7b6c516afa978e3dbc18071e0488bfed15582000e05731b8527bf797de299a54d3fb01b4f54b497502925fef74ca6c3f16be2ca428cea7c6c453c75bd6bf6e48341ecca87fad1d478461a64c05c165172d6893ab1c12a0be785743ec3d4409976b96d0cd59a78e887dc5311407b8fe1ee3b6d9da6057cdf7751c37823885482bf596fe6b273bbdaf50903bb3b70cec447c6ec5f05f2bdd5ccedf737bb53adcd52cbb2f2adedb32af313d97f2c25519bfd718265f1d9e52a0d3937a800d93033149b0a83779f568cf76cfd30011cc634531703e0ad0f6d6f9b7df360579fe88bf10f3c44bfe230dad514bc4156ab51997dd3bcad954bfa6c9d4509b57385cb959d1cdff16cf280a404a572c2f2c3de985bbcc0fea81ecd6a430202939507c4e93bfc25d82a9d8a340f377ca62193218f7ecf5d0ab3216fcd0e221f699fd93381faea8a5120cef4d0c43539482180f0bb7070d3db519d5c1a006efa23deb19b773d3961edc8388f8c54c1ab8c988fe6c2ff5f75b66307e15ea7eca3ea1ec5c0cb3c4b767014bafa8b76cd209a1a6be80428d80d782a23c0405b670f129bdd22620141ef21bb69c7342002f2382aab8f5638a7ee2435ed850d5adfd733ed84b87f4d021703ebb72673f9c928cd617cfc21545a3d0bd07e8ee6f10be7bb5c366d76fc8161844d8abe06a3b960ec2114e742d66a9cfaa629e92356b932c219b35b170c96bcc8ab7a4cc1c0ea39c035907325b87f35c4d5f343126f79fa19f8e63f3f8a80fec7aeae6e742a8e0f2577d1955140f74f4e1e3f99fd0211a317d2c44b91af97089508b62b62c0ba1142c34d0e1af4717b15e5c8f9649018ccf36408e2d87136868385ca8137dc81dfdb6b6aaf6cccbf3970f33b5315b3143b286f32353402b07bc40b179f3288cceb9a37c589b2371e16b9fdfe3667d1b343dd06104f6b4515a29572fbf8388775cbd06fb22f94398a7ba0e2e674aeb99440b60c6a450610a5b3c3bfadd60de9adf017ae7c66a7bbba9fbe0867979dc5bc414b56b5ffbb7ac441ef7f8c5984f0f4c7222c2bfab53ce9e067770a608bf49bf11c3fcfe2390e895d49e75953dc362f385ee76b4e59888ffcaea291a55afbf792399a66c387c1c203ac642c7f3b7e6ca9fc36be1a92578d61acd61b1e09f11dee67c55f5c87617d3c0f304e1a6e12be52fac3245dc9646c449de10322c8a8c97085c88ee2ab36d363e808666cfd0a03dabfb642a13d9432342ea15335c439de1574e23053eb69f298640d7d6f624d30ba5cbb90c2b30460bb2ee67ae5ae54a8368a746a46839dc1703687f1cefa9c0afc645ef6cbc0dc18f0f433ce16f9a68198aa810b2a6cce9a7744d87272c9706521d945f22d4466855c16cba10c7df98c980fdd6f48a2f3322ab37803f30e6be5575cb63eb92793883c6c133fcdb4ec000763004e8dfbf62b0a9cd13f3e818ee6d31cc7cf261ae0fcae92366c67adbb0d6225e3a0eb9b5ba092e766c8049e2323c5f3b6968718e2feced42bf312704665280632a3341713b912ae379521c2c35209107cada232f2fe77e3381971702744806cad1e3b6a602034f0172dc4e2b2e189a6153bb49b2b6b9839db4c78dc77051cd3a5f6822bbe93f9e3dd0fc75f5349048c45788294e3b940b6a4a67b7273f0478c210721724b0cf6c3e411dca66865ebf9d882843af519d755ff81565e1269fe606d40cf3df6629b75beb405f27a855c04143177f72c080a6a802b8725ddab8e900c7a2730f4e14a672e6ad3944ae427cfd467227fc109eb27b2ae6ac4c1afc35d6c05aaff3c361dae680c775429b7d077152fe3c78672cbed8245eef816ce9ce0870cd536c094c06d400d7a505bac2411a24948a656fb5e9b4ffd66c95a656e1ca9b55102dc24ee4d60847703650e8855312d597000f42089b99821155db56e49df5ee6b0bc4f485e3c8cf6a7a05fa368d8fc77c4f95ccfd781bc88c0da451b240cd8c3755e2e18fd655b87f64820015391c088dab91f40cffefb19b97d41b0c9eca1ffe41120c87104be158d30c6eb0bb07fd086de90aad7c607da856fd9eab387bb2dbb0e5901dfbb6c7f6062ed29b4a30e7e646f2b913dc8f4793fd190f93f34671de1e9c46c18e8f08ed45597084921ce2e2b90af0f30e11418273c806f9b3a1aebbf403140731980a907cfbe13225337c586172d2a507d7e051dd6c26152823f9cb161feb6a45ff40f5e5e37a8e2d2b4513bbb1caa8b0e4c8a73ddf3bb0281eaeb3bd981aed79e430bd2afb1c1245b63dce58a1890028c2e3964036c7188a3bf284f9b0a90f1c8f819affc31d136190679c7ad6ae27fcba339b2b402858609c398d3648c44359f865babe3a038d1ba93f0a6742d0244f078cbce5c702634f7c5d79c93cbce776420bddd0b87522c768fd4f1e28803018a762f3cd2b1339829ecea30a71380c2058bea8d66f97f00ef3c575826a693dd2c3448f6657fc0ceab26393cf8680e6f4d9053cc88d51d3fb7b7fb019b2a7b10bf636202c59d242950434079388673f441beba818d277a481ebf55e0d8178740f46fdfbc71ce1e80632374bce9b3a2e904837180a233c67684fa37c8b96c6937d0e61aec0aecc8b45dfae5461d0683d9f5e1e0d45805c39069a369ac45c4a961860908cd81730e2d2a0662191ca8c7f80e0482631bd4e486b88786afc167f71237b6f02f7d99115943ee3c395c6dd8238c45f4955ed91428d0516aeecec3279432064fb51151bce2870c96cdca627a63c8687b31dce5c558615036d791b455870f85351b937ad0328b5d4090412ae7408d801dd09c75190b94a1b0e48d76ea017f8d4bc4d2821d8cd8b3b1b5873fa3f838b42a911767d2528f3300f25b38370c6a6749d00e399f09e0b79b0c21649b80cfd4f192c9b0a8d4a921c91f09e25d39fc1b432a5a78db02034b7a633adaf743ac73cf41aa9a82c18fe187e3e77bf16bdd7ec243109c72fbdda1dc208d268551275ebb6f841336ea838c2575f62c3665ed0e091d54c8a1fdaa5463aade8538c2e23011d78b95956265f08d7a4647f94477142158257d2666c65439e7ad780b570647154f67257ce40d952af85607f8e66f16b9d2881adb9512bb8d436f7d9bc5d73ed9ff67d376174564f221e65b65079102cc7e9d4d6d69178aa0d2e221a61d7f2934324c65b1e9380425edfb24a9b3e4c733d2d222fc23ce2d741570d1ab8a87da392e650b54d820c95925e289839470048287023e9cca1866d094bd2aaf9c2c2844555860661699b4a97e95246526f6ff11c343fd49d2c0935170328aa463c5e6a8aa24da78cb3e5aa4a10acdb72477f56a35c16b692de8c81e804bf5ea3efc314a4b192ddb2ab3d9a2774a093744b58961810da83d862dc3065dfb69217723a8909744cf10bfbc00353cc265c62c31c2ec82a5aa16f986daac762de930fec8e995c48becf3aa60fe1df35417afdb3e2033203b30d9dadef2db48fedae0eec84fea12d84cab45397c68d20819de21cfe00c5a727500a01ea77d0ec9ad54730c1465e85281d426f19d3a623ada34ddd47058b2cb5dbef4d8743e815bd34736f9d95c91ace74acc74391b42d99766de90d78f4a8021eddbe4b69723885dec4cfcec355f6cc896fe1b4e3e614812b1bf216243d8cf2893f274d945eaa97d64f2a714cfae395d08de737177dee61d8c23f010ab7b2c4266517ef0102ce0adc5f0d8a186819d93bdf861e8ba7ab8830155a545025885b837bce14ee5c3dbe6890719a61b2a31b57ce6a7f7e30f3f59a31d9367d3eb0f1fd1140b37636f16baa972a00104971d286ca5da0ebd93f21e550e7c8a2da561fee7d14c3c1eaa19d968d73af990b733711a5c660468d175343fcefdd26d3fdb794955999c27475840dbc051e0b898f008d86691ab21c355c3f2cb882d6d8b6679e89b7a2b85e7db45323a24eabfc0d74742cc89036c958854bab64cb3abe5ac887c5d88027c8bc0745d3e1d69d7f61df639323fd6d77d7eed657e4ec96ad2adda32ad88bb212182ee3031e85694903d8112cbf69ac7400f533049b9dae7a2d03680d70be886e7b092a714fd2a3f1086801a861bd715f3b5644236f45b2888bf3a5ed65f327d78a4671f2d7eea9a5ab8ebcfd0708bcd7be8400c80062a6a5f277a883d79f968169ae4bc68043c12f8c688eb0f6fb0d86d3ccede20680a36c5028656546ef98e0988dd5d513fc6d646d33d289aaaeeb369b3501e1e609b7a9d5f70f848206c61643b96ac63778e6ab10eec390656cfd8e9ad1e6d0d833e635d4206015e403d224fac86c1bbb51df2f97759234899971edafe8b21705b580afbf0b12220bf654b6b6f6943830636c5843157cdb5d9f1d484a49e962c1e29c44a6c1e9757d9bce5a12bd3617192b4b1bd548200234bc21d5bfcb6cc05a2400860eefc76eb40351b221357892922156c93891b02f510262b607f167138ec8d74bf32735cff3db2fb9e50a2b13f2229bb9450553879249e93c58b5626418fc2c36a834cdd43aab67676f84d33b394d6d9a3bd3059fbaef1d74e332608ad79afb73e3a2cda69ff7fdcb91b02beb7c2ee8bd458c07fb83d2973468d89330396411e5bff0bf90ae990b28f503d5737c57cc6ac53dc57a03f047ca1bddeb43fca4a797ad1df00443eb93eefa356910e0e87d68086aeacdc6cfed1146e02943d45e3c353f75f2b6f85b84237b467625b6aec103e6c0b0e88242737c09fae3841557375a1fd7bad675101382dc5805fe70dd6c1b45344852802fb803b641e9fea9fff3f17373c1e7a4ed0aaf9a12ef1f1f06201e0a830c800efadcaa476ce0dd5dccefa181b06788bf78db2ebd4dc548ea2c38492b66ba59bd6152f7a8cb62000088dfc686e8203c03446bf16b4bc870e97245200ec9617d4dd71f685ca2996ec8d7b79a9d93d0864e435d987e1db3a05d7b8c03ebf55b3f5411572911d5d39b212eb774a0eb696deeabaa117adadb7b1ee319bd747cfdc6a95b70b9bcf5cbd5e622fdcee27db19d199a71a16867a47b87cdc423f02bcef70f416277bbd8276f918454cd806dd031ad6fa0859f1cb53d3041b29979020fad55e3922f588d286c2f7e58a70af64542ff4868b72574b11afcfbf25848d368203362aeae54b328de226703403bb55a2c566244a2dc126d9540791f8b7715a85b8116caba984c29e4d4afb5df292ca5187653b18390eba51140ca2522c70e9bc527ccc12578a6a0973b7670df0b14dc37f58bcb65b4dee27b2b4ba4b50eb6fa64e8352a1bbcd81c2294fa08540fd6281580af9930adc5352b902f90f03c5dc33198b0f95589e521426934c77f2b11c54f0a83cb4c334ce9c5cdccd7fc7a04630bb7c7e7f2d6dd4ee4773b19c1f23241286200b2e04e9030f51353cd3991e80d7c8c271f64e3c8e28c068331b7d6cdc26eeefd0cf427e7c3938e8a419a59985964043494095e325cfea15227729a2892ae46510c87233e00a4c3ebd91dd4c06059434712749510b8bdcfa4839f7638e7bc0bd75198e3bdd419c69fcf0bbb268310ec43739b82f55631e37cae5f0169dca0a7054a45f11e61e083a5a39c9fda15275af9cfbb7e846fba688824350a71e500d53b5f9d8d8e9521749781c60353676c67bd8f71b79ecd8c6b2f4d2828d09e9f41f2e4b42e9bf73b28b51802d71c5627005d59e0ad9ea292f87fd122b093d682aa73dfa6a35f3e0b7ea17df2d5e57b72b05d8b7407954cea5ead836ee4aa30765013c9434e9f5e3866cc6b288b53bf9f0f71791f82d7fef9dcdafe5add727e4bbfd9cf8d82a779400792871dbd21fd267046262eda0b82f4b235fef275b306481fae561ee429bd6bd1cb1fabef87ff4c09b71ac98cef03f6d7b1aabb9b966d89e3c4e87aec499c407b93d883cb452ff6fd7e4f0d610b2d759e1b5d5f798b5820709cc912b848229673a6162751011722844934a2c3298a815edc4cae92e52d047fc3b0f5303faf6ca66ae06d187292286383e9a450a65cc78877e7cd8b6d7fcddeac505b8415241df58abab44dd13c1fb61cad8cf05880dbdade94313f7c24dc7ab1d0facc52aff36d1d9298214c58fe5f7b99585d53f66981ef708917b22d70fe7bc33042ea007835f3529215ef0f18bb7a3f762b5ab1f3326f106afeb369303ea8b226d4c8039f296ddb2ab8a0a4070cb93f4962a3f9d274df01b23f727107aa3b82696bc3c140b19a3278f6e8cebe1ff7a12cfc331e24a6eb8d01ee30b0514ccc976959bde4274a94fb4ca3a902e9a0f329dc43ced592c3bd4baf419da41ef3fa7276f524aeabffefa5b6e7d2ff5c65149617550536d3e8ab28a04ff3bf5d8390c067d0c3ce4e7d37fa217f033e604b92485605f8ed6f013a0a56a6002eae0fb51cdd6224c02367578392f40e7e6c015247e340ea57179aa3d9bc2e1a71e324f0629e9b623904717e6b341b44a38fd64a7d5f7f3c0d188b81529d1a164d3e39af0916d6f2756b0113b583dc7f2e852e8ded8acf10767ba7732b8b62b47e510b903e5e121295dab85a71e78754da798d98896fb5876afc0efa808bce8f235e7aec5fd2a890bf6873e2c1e7a7aaf5216535af99feb8be1fee35092723275f1ed1d94aefcc4a6b74e102141855adcfbfd2c5dc1a4158b7b10248ffd8bf21f4c2c36080bc83bd0edd255acb08d14ec414651a194c72782960e1fee22b69fe1b0efabb238a410271189ef85708384f3fc904ae5a4d46d4caa60027f395b7dc8d2225340d24af923958f2e9cdd59bd5f71c1c4ec27de88faa5e3ec4a6fd2e4c3eff08ca64f03b7370dacda0cb3acd354d062c699325b815f397e0ce2d0e1938592343873fbd8f1e98b3836bfe7b0fbc3eb0b2135369cd33ba0de2e8d130e15c4cfd318ed9719ff32e6c065237695caec4347da91d3eb692ee60b94c8bb163ac21553b6e8355b2558ac809a192b1c8178d82ca1434bd26af0a3157f46bd9a9c52bf39d2865f2840f20f41340c72f0632401a99015f664a8e3dade3f17d12cbcede0e6884ecb0e244e7d12edd63a8796328f17bf2b9f3507d9f73bc371d0a7b52567e4ff783851043b8dafb2477d90438ac2af69be81fbd5f2718042c0a4538e8908c859c07b40b3b0c153afb64a73ecac63e255f1050e375350d164e891f733ff4eb168ec5b7a2873baa4dd47b9ed01da894139ee1ca0572575975e6511b2e7c82c096fcc173f9865460dfeaefac0157a8a4b58bed45a67c8da9fd8db2947b2e5a3e65cee0b58e8d572165668bd53f6fc84e4f79622a5bf70ab91fd00e6573de81f924d047b890efa76fef1470a6f6172c07afb8bdf291cf6e06596c3ebcd81555b721d33b1bafac0a0b451d884858c84a4a718ab33502fa8ac8773ecc39d384834baac76f7188d068f5f865e8f467a6486b96f1f492384d30f6dbbf692237acb1a3dddbd562941fe613667e2eb4b57073bba3ff81723dde63a700044b9b0063478df4318bb46a28d4181a18445fe308a8734251b6490cb2fc0e5e3ac423c9238d99aea60b941df2526a57e1476a6e37445a053fdb482fcbe81da9200fe58ceb2ca35f371922cc768ae651dcfe895a6e35977ef14a1848b42c6498c370a7888e89cdd8c2a08cd7efd57083cb635e6a724a768d384cc93538eb95f60c63aa117e6ec118b479adadccc1d869eb0acb9ab0d4be52c8060fde8487982e1c2299ef4f3a7f9edf664d113a72e16247d74e6916c617da753cf85f69b9fcf4264e799495c57bc94afc53283166812aaea828d8a7b900f4c80616047731123284174c90990b73ca1a47a6e7b3054a987e612149b52f8bc802890c019e414e17d257d879d16410e419e205815ec286e7c72351dd407dd09f53a7c632a7c6c819873b102ec10701082f02989df4941adbb1e34d86f214f99c68996c11bd760e9164ebc2bcb4a5945188b4eb8be8a6e3421109141e3916134f4756d681f38e9f125c122771fafacb2376b5454344c9675ffd7abf724ebcaf1cf92393f21cecebcf1cdad68e5f6d50f552efff5060d3397a61ab43c7ca02726ffa7e7f2ff52637bebaf639482d817bab143c0f8632f567731db823f187e3fffb7c151cb99ed4707f14dc527cc3552bd6cb3acb85b68b1f637ffb8de95ce404f53b75484a32ea765129041bf76a90ede14c80a705bbd72036a32b0d63cc90ab3c881ce96655b96eb6c72b39469f7c416ef32e28a81ba9965ba01ab090c42bd5ab974ef5000c2739b5b3f0f6d6509c28a7fec520a6ab9dcf2df27b92b6672cadf2fcb14ae5deeb7fca44e41aea48a5e2c571cb2d7bf7c0dc7cc019913330705983d30ae2b9ef8fa6e78dbc097765c71a54cafbb0ff660ba8b766bbf5202a7e3d1ce9cfb2083f5327a2242133d2ffe85b45289d3186547734cd0677490dd2b96290c09b1fcb388e7c597a57282ee46d61b9792d4af5aaeb8814ad4450a78db4f07ce53c84b3b2978e2af3c530a27b45ccc2ac08fcfc8f1f683bd26346c4b739d25423946ff4614c711bd72a1cfc481dfcc96ee913150c0b44516bf4aedcdc28f3b5e74c5f2b9d44053c594d0a5cae4c2f7a92c53e13e9472ba68e1594500ca756c69beb7d9262089dccaa19bf56564fe52097ea7726669d41e85ddcd99e9f6190e0be14d9a7d7cdc043454f1c2bc1eaf6c84a93a90deb2973fe3b662dd009d46df55e7ddccbcd45e8bed49893729751546375e88c417c66776e0aef8949e546566e0c913e58c62e252fe276eab6373b766c2f725db69c5a3ed98571a835e7f974b3ee84aeeefc5318a9a8c933fdb3670afb45bc1708622bc09d528e65613507aca9004fbf3e7449fde426d4c65b9248d877223a7fd98d19f78ba5a3378f6f1a62b5e6400b09d96ade7516a8f19622182f354422e4d0d7aab6e2c71af1e70eca7de747ee09084b43ca0f57a54ccc5e47c417f1e6c28220f4c722e48d3e9230ae47ab9fbf7edce859c63082d08257a5388e21f16761342d716c0dc837f30c3a6b352095e024ba10dcee7aec79d4443f8d42dd71552a858f07f4737e52a2e8cc6d177ee5240a0ec759d04b2974acbd5c5b3351238725e865639188d99539579e6cfcebb27af89878b62c2b6f01c5e9e61dfe55233d37d9e6855c17ab753d41e2e53e632d6a583c921c1473bda06be0dbdacee68f1c00a6bfd8dfd8c34a0c646e0cfaddf63876069819035e596c05db285f6c7794c14f154a2cf154901c04e0d9df55c236e432bf3ca4cc2bace9763767ca6f8b4327c65f811e27e4fc5fb6c44f94a8ffc063fe2d5f53f43139ef49d6446083f71482d3b3e3d3587753b84cca815ec4b94486aa8529af2fbaf8253fa9d80d60e3a49cac0dec4095a8a3c9a54981879cb1b6616bd270ae9d3337e5244b2a2724a409a90530b5653e5a7f9b56a06d33333a19c070c7d984345db088af5124fbe7ba441347f345e2f06e50bdc4b964b321df3ca11987f0f3304ba288eb9fa7839d84d629915f25ca9e89f848a0555b770eac79fcd51f97b6d89166c7a0ff3cd9ad7906d6784356060a5fe9eb7065b539d01d645bd7ddeca887a47156bc93b5c26070c68289f27d0f871e3dd2b5fb117ebd6918d32a05336f5cd3db7ad24c1c403b8544949acf196b8e419d551f6e20ec8e4e1ff216c2a299b7d0be205d6a3b4a9ffebbe76c60492fe156bfaf507eedf1198446c3b157fde1b77f5c1a13ef0369c5e6e3c45037af113ac56e3fa49ec44ac35733afa68568cac5bc41955fd761b0bcd0e4ab32338d3781544e29cc3315a81e6c9212b150748f6495ffbc67a4f8315b2510ec52a1cc90b728daef1aefff6c978769c2e0204d1c13733ee30569e1f2d51336add536f95d00f873959515fadca42374fad3b23c14458b03dc8cefd29e447ff1a48254179c2a46f419b07d6c445882ad10d53f9d264123c496a8ccc0f88af3948a444d418e216149aabe4b00b2ae12ebbf1b02a8a92af62003cc9c090fd3e09640ad008a9f86f85918ccb5214ab368ffacc12ceb2ddf4be1f945eb48efd30d5a20a8d6ab72727b1aba94cb672628862731edf4795c7e3ac2b57a78de4a78ae5585e8fb74ff46579b50faedbe692bfccb26838cec6b4ce7bed4671c6923d6168f0a0f279390bfb20c0869af7c0ab07d34d2d891978168cb43880010a3999f22ff75c69523dd06b84e4c76e903bcfa9fabcb617c40ec5bbf4e0a88f2fd50504c1415c0dc70e2b4c73ce42c86e17ea49b84a28045e5969038ed97e0bf3d2f80bddc7a3b99177a6eb5165a7cea1315c86e30726c5be85be9dadfa36ad569440e9ca5e5042b129d84a1d189400d8ff2c7c7a4ae12354071c9c3ea254a55ce9e47744c8d1e40cd3723233ec069181307ac4ded7b6044c76320edc00a17f98ecec3ca3f67e01732e57db927626efb2518fd376931fe957f2326e3d1d74e5a8dd7a6ff18b1246af3f07abc1d78a09bf78bb381717f8b2c5ac1d311d27d9d172df9fe609155f59cf86aacea3cce4297f8e771f60895cca1c15b616dd2596294fa0bf96c64a14321c178d8286a9406ee11bd2de5f6a0ddc486db5c52d2522b8a42c993ee640bf3009d8bb1b9eee2a95d4db0b783fbca9b29a7369ef66c9cbb8e479e5f9946c6e60d8d76eaee62b9daf6674b9c22d08dcaa0287c006e618e0f751b6e4ae94a931428ecaf74c4c9fa836a4200cb685f961551373610c384e6e3320055160e7579e51b82417a3d698f3b353272c1bc7f103f4a5502c226ffbbb04bb657779de26fdf77d0e1ba25077077744de75170db04a78d4d8419424fc03f3ff3b01c91c1ad7f3013a084609e90125f0d3bfa92be33b3dd042ee69acfea14b99bcb6c59d22e8015bbd1ca2c3a9f22be61e152ee0d6282d0cac7a69ed372b98b77dbe4cc16a17c681443d67c187724d9cb229220ae5295bc7e4fb3aaede51ce5389a6b737bdf9c42b3cd22f7b3dd3fe9f36ec66f04e798df7bda63608e460f127113c7369dfaf22eba56e8ab0ec64c3798f81b946c1f587d8ee6322e7662ca7e8ff67e8b989722fe8d2f344eaae8670322060de6a4bc1f6515385ec2d", 0x2000, &(0x7f000000d280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="38020000000000000000000000ffffff030000000000000002000000000000001000000000000000030000000000000080000000020000000600000000000000040000000000000009000000000000000700000000000000020000000000000001000100000000000500000009", @ANYRES32=r2, @ANYRES32=r3], 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000b00)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, r4, r5, 0x0, r6], 0x9, 0x80800}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000bc0)={0x0, @pix={0x434c, 0x8, 0x59555956, 0x4, 0xc, 0x5, 0x0, 0x40000005, 0x1, 0x2, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 1m23.111553564s ago: executing program 33 (id=808): io_uring_setup(0x6281, &(0x7f00000002c0)={0x0, 0x523e, 0x80, 0xfffffffe, 0x9}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcbc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x5, 0x39, 0x0, &(0x7f0000000240)="2129d0525a329c4686d51ffc9a780e11f9db16557e559885e3d3ba0b3abdcb32f19fa2d19cc9ca512b0df6a4523f5ce39dcd5c9194250a66f7", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x4c) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r9], 0x34}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 1m14.230138021s ago: executing program 34 (id=858): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xaf, 0x172f, 0x38, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xbcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xa4, 0x62}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x40, 0x5, 0xf, 0xb7, 0x9}, 0x55, &(0x7f00000000c0)={0x5, 0xf, 0x55, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "1d3bebabd8a80330a7a6a9e917a0015e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x2, 0xa1aa}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xc, 0xff00, 0x0, [0x3f00, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x7, 0xf00f, 0x7, [0xffc00f, 0xc00f]}]}, 0x2, [{0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "c4b09c9b165e65175e195cd44e633ac3222bc9fbead431307cb0d447e25c09591e42a1679ea1afaabf5a0557c21a8fa9cb93759e03ed0aead21b2f8a5601d736a0f39983eb1d2ff0e77ad07e59711db44eb206696916514a9eb1e144fcffffffffffffffba0a0c0950f2ee984f338e9c9ce5d550db282180f2339f3d1a4766b8f5a3b84fab51fd155c0373a2050270c698a1f18f06f3649cd44989641d3f76706cb1b9c6946e5e589ec4fe268039482e982f4f887f7113b175177e58679035b056427f13eb9b721c5c009fc635b605372d838f720708a2db99fbb00ee4aa2f076a2621bb998a02cef9c49b5a2e0a926c3d86c9"}}, {0x53, &(0x7f0000000380)=@string={0x53, 0x3, "425c123081fb48329741c072ebba54cd0d8d41eb08da783bb60d8fa2400324df65c162164b132a3ce71e18535ae9064268a3c54fb8b16b7c22cf3ba09659b061a04a1cc3d67ee7be240eec8b8a5c60c97a"}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000000000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000031e40002000000000000aa08f01b265a044acd3350fc93684043c019f915f4150d208302a77333e50aa97ededaccd3d7baa15d6c422684847d0164f671dddaf20b466cb7b662497f8878d2b878f89550131dfa2a19bbf5c97dd4ac96afe1c9e0cb9405a7282a070a30d453732f7cc5d6421fadf50f8cc5b37de24fd93e2d20106516f09a69d9bdee31954857ad52bb6cc401f6dbd9866a49f64ab60e12ae0b578ac6df3211752d8f82ff991e614f282698393a5462df8e28fd0cb621ad99764474acb13e3f"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="6b08bd694cd73315497c044f6282e4886cb9eac5d9a1ee3fea1026f5c5639d935c13fd6993521609846271e668356c7adb67edfbd934b26f5a09c3b1fad40939926e23f26026401224267b5d3d2bd0562a8e84c1f3b255e6a8153ef6d8811e5a97d21a1977d1f643a0e1e6da36f81e6f568b67e548c8f30babc385c48cec91ee871661492cf6b3097af13e61ecc78a648e86cd6149da25185acb128266e9bc49573247e6be64c6960d85453c5a5d3a037613f40f9756cfd7a1485fb0a518b40843714c848071050fe0a2b1933df929345c63d5764a350540f2ef3ca96a5422714240985a2fecc4596e57922db204a68085c64d8dcebbee96b97c22f12146a1014d06ef9064137bbe2b3450b0c82e4a806cdcaf99341ee2f9c1bc475a4b798cbd616906f27be31d06d75dafc57318e90bfee500c7534cf3b77f1ced5a23e219e5e4865091cb7455a635f37c60f1254206af064fa6bf4a0d23e43b8e8d57bb52284515fb73ce016b9b2ba3b86f1f193837fd0209f2f2abef2359ae34e67277918b93a82a70c05397b91be761e7b6c516afa978e3dbc18071e0488bfed15582000e05731b8527bf797de299a54d3fb01b4f54b497502925fef74ca6c3f16be2ca428cea7c6c453c75bd6bf6e48341ecca87fad1d478461a64c05c165172d6893ab1c12a0be785743ec3d4409976b96d0cd59a78e887dc5311407b8fe1ee3b6d9da6057cdf7751c37823885482bf596fe6b273bbdaf50903bb3b70cec447c6ec5f05f2bdd5ccedf737bb53adcd52cbb2f2adedb32af313d97f2c25519bfd718265f1d9e52a0d3937a800d93033149b0a83779f568cf76cfd30011cc634531703e0ad0f6d6f9b7df360579fe88bf10f3c44bfe230dad514bc4156ab51997dd3bcad954bfa6c9d4509b57385cb959d1cdff16cf280a404a572c2f2c3de985bbcc0fea81ecd6a430202939507c4e93bfc25d82a9d8a340f377ca62193218f7ecf5d0ab3216fcd0e221f699fd93381faea8a5120cef4d0c43539482180f0bb7070d3db519d5c1a006efa23deb19b773d3961edc8388f8c54c1ab8c988fe6c2ff5f75b66307e15ea7eca3ea1ec5c0cb3c4b767014bafa8b76cd209a1a6be80428d80d782a23c0405b670f129bdd22620141ef21bb69c7342002f2382aab8f5638a7ee2435ed850d5adfd733ed84b87f4d021703ebb72673f9c928cd617cfc21545a3d0bd07e8ee6f10be7bb5c366d76fc8161844d8abe06a3b960ec2114e742d66a9cfaa629e92356b932c219b35b170c96bcc8ab7a4cc1c0ea39c035907325b87f35c4d5f343126f79fa19f8e63f3f8a80fec7aeae6e742a8e0f2577d1955140f74f4e1e3f99fd0211a317d2c44b91af97089508b62b62c0ba1142c34d0e1af4717b15e5c8f9649018ccf36408e2d87136868385ca8137dc81dfdb6b6aaf6cccbf3970f33b5315b3143b286f32353402b07bc40b179f3288cceb9a37c589b2371e16b9fdfe3667d1b343dd06104f6b4515a29572fbf8388775cbd06fb22f94398a7ba0e2e674aeb99440b60c6a450610a5b3c3bfadd60de9adf017ae7c66a7bbba9fbe0867979dc5bc414b56b5ffbb7ac441ef7f8c5984f0f4c7222c2bfab53ce9e067770a608bf49bf11c3fcfe2390e895d49e75953dc362f385ee76b4e59888ffcaea291a55afbf792399a66c387c1c203ac642c7f3b7e6ca9fc36be1a92578d61acd61b1e09f11dee67c55f5c87617d3c0f304e1a6e12be52fac3245dc9646c449de10322c8a8c97085c88ee2ab36d363e808666cfd0a03dabfb642a13d9432342ea15335c439de1574e23053eb69f298640d7d6f624d30ba5cbb90c2b30460bb2ee67ae5ae54a8368a746a46839dc1703687f1cefa9c0afc645ef6cbc0dc18f0f433ce16f9a68198aa810b2a6cce9a7744d87272c9706521d945f22d4466855c16cba10c7df98c980fdd6f48a2f3322ab37803f30e6be5575cb63eb92793883c6c133fcdb4ec000763004e8dfbf62b0a9cd13f3e818ee6d31cc7cf261ae0fcae92366c67adbb0d6225e3a0eb9b5ba092e766c8049e2323c5f3b6968718e2feced42bf312704665280632a3341713b912ae379521c2c35209107cada232f2fe77e3381971702744806cad1e3b6a602034f0172dc4e2b2e189a6153bb49b2b6b9839db4c78dc77051cd3a5f6822bbe93f9e3dd0fc75f5349048c45788294e3b940b6a4a67b7273f0478c210721724b0cf6c3e411dca66865ebf9d882843af519d755ff81565e1269fe606d40cf3df6629b75beb405f27a855c04143177f72c080a6a802b8725ddab8e900c7a2730f4e14a672e6ad3944ae427cfd467227fc109eb27b2ae6ac4c1afc35d6c05aaff3c361dae680c775429b7d077152fe3c78672cbed8245eef816ce9ce0870cd536c094c06d400d7a505bac2411a24948a656fb5e9b4ffd66c95a656e1ca9b55102dc24ee4d60847703650e8855312d597000f42089b99821155db56e49df5ee6b0bc4f485e3c8cf6a7a05fa368d8fc77c4f95ccfd781bc88c0da451b240cd8c3755e2e18fd655b87f64820015391c088dab91f40cffefb19b97d41b0c9eca1ffe41120c87104be158d30c6eb0bb07fd086de90aad7c607da856fd9eab387bb2dbb0e5901dfbb6c7f6062ed29b4a30e7e646f2b913dc8f4793fd190f93f34671de1e9c46c18e8f08ed45597084921ce2e2b90af0f30e11418273c806f9b3a1aebbf403140731980a907cfbe13225337c586172d2a507d7e051dd6c26152823f9cb161feb6a45ff40f5e5e37a8e2d2b4513bbb1caa8b0e4c8a73ddf3bb0281eaeb3bd981aed79e430bd2afb1c1245b63dce58a1890028c2e3964036c7188a3bf284f9b0a90f1c8f819affc31d136190679c7ad6ae27fcba339b2b402858609c398d3648c44359f865babe3a038d1ba93f0a6742d0244f078cbce5c702634f7c5d79c93cbce776420bddd0b87522c768fd4f1e28803018a762f3cd2b1339829ecea30a71380c2058bea8d66f97f00ef3c575826a693dd2c3448f6657fc0ceab26393cf8680e6f4d9053cc88d51d3fb7b7fb019b2a7b10bf636202c59d242950434079388673f441beba818d277a481ebf55e0d8178740f46fdfbc71ce1e80632374bce9b3a2e904837180a233c67684fa37c8b96c6937d0e61aec0aecc8b45dfae5461d0683d9f5e1e0d45805c39069a369ac45c4a961860908cd81730e2d2a0662191ca8c7f80e0482631bd4e486b88786afc167f71237b6f02f7d99115943ee3c395c6dd8238c45f4955ed91428d0516aeecec3279432064fb51151bce2870c96cdca627a63c8687b31dce5c558615036d791b455870f85351b937ad0328b5d4090412ae7408d801dd09c75190b94a1b0e48d76ea017f8d4bc4d2821d8cd8b3b1b5873fa3f838b42a911767d2528f3300f25b38370c6a6749d00e399f09e0b79b0c21649b80cfd4f192c9b0a8d4a921c91f09e25d39fc1b432a5a78db02034b7a633adaf743ac73cf41aa9a82c18fe187e3e77bf16bdd7ec243109c72fbdda1dc208d268551275ebb6f841336ea838c2575f62c3665ed0e091d54c8a1fdaa5463aade8538c2e23011d78b95956265f08d7a4647f94477142158257d2666c65439e7ad780b570647154f67257ce40d952af85607f8e66f16b9d2881adb9512bb8d436f7d9bc5d73ed9ff67d376174564f221e65b65079102cc7e9d4d6d69178aa0d2e221a61d7f2934324c65b1e9380425edfb24a9b3e4c733d2d222fc23ce2d741570d1ab8a87da392e650b54d820c95925e289839470048287023e9cca1866d094bd2aaf9c2c2844555860661699b4a97e95246526f6ff11c343fd49d2c0935170328aa463c5e6a8aa24da78cb3e5aa4a10acdb72477f56a35c16b692de8c81e804bf5ea3efc314a4b192ddb2ab3d9a2774a093744b58961810da83d862dc3065dfb69217723a8909744cf10bfbc00353cc265c62c31c2ec82a5aa16f986daac762de930fec8e995c48becf3aa60fe1df35417afdb3e2033203b30d9dadef2db48fedae0eec84fea12d84cab45397c68d20819de21cfe00c5a727500a01ea77d0ec9ad54730c1465e85281d426f19d3a623ada34ddd47058b2cb5dbef4d8743e815bd34736f9d95c91ace74acc74391b42d99766de90d78f4a8021eddbe4b69723885dec4cfcec355f6cc896fe1b4e3e614812b1bf216243d8cf2893f274d945eaa97d64f2a714cfae395d08de737177dee61d8c23f010ab7b2c4266517ef0102ce0adc5f0d8a186819d93bdf861e8ba7ab8830155a545025885b837bce14ee5c3dbe6890719a61b2a31b57ce6a7f7e30f3f59a31d9367d3eb0f1fd1140b37636f16baa972a00104971d286ca5da0ebd93f21e550e7c8a2da561fee7d14c3c1eaa19d968d73af990b733711a5c660468d175343fcefdd26d3fdb794955999c27475840dbc051e0b898f008d86691ab21c355c3f2cb882d6d8b6679e89b7a2b85e7db45323a24eabfc0d74742cc89036c958854bab64cb3abe5ac887c5d88027c8bc0745d3e1d69d7f61df639323fd6d77d7eed657e4ec96ad2adda32ad88bb212182ee3031e85694903d8112cbf69ac7400f533049b9dae7a2d03680d70be886e7b092a714fd2a3f1086801a861bd715f3b5644236f45b2888bf3a5ed65f327d78a4671f2d7eea9a5ab8ebcfd0708bcd7be8400c80062a6a5f277a883d79f968169ae4bc68043c12f8c688eb0f6fb0d86d3ccede20680a36c5028656546ef98e0988dd5d513fc6d646d33d289aaaeeb369b3501e1e609b7a9d5f70f848206c61643b96ac63778e6ab10eec390656cfd8e9ad1e6d0d833e635d4206015e403d224fac86c1bbb51df2f97759234899971edafe8b21705b580afbf0b12220bf654b6b6f6943830636c5843157cdb5d9f1d484a49e962c1e29c44a6c1e9757d9bce5a12bd3617192b4b1bd548200234bc21d5bfcb6cc05a2400860eefc76eb40351b221357892922156c93891b02f510262b607f167138ec8d74bf32735cff3db2fb9e50a2b13f2229bb9450553879249e93c58b5626418fc2c36a834cdd43aab67676f84d33b394d6d9a3bd3059fbaef1d74e332608ad79afb73e3a2cda69ff7fdcb91b02beb7c2ee8bd458c07fb83d2973468d89330396411e5bff0bf90ae990b28f503d5737c57cc6ac53dc57a03f047ca1bddeb43fca4a797ad1df00443eb93eefa356910e0e87d68086aeacdc6cfed1146e02943d45e3c353f75f2b6f85b84237b467625b6aec103e6c0b0e88242737c09fae3841557375a1fd7bad675101382dc5805fe70dd6c1b45344852802fb803b641e9fea9fff3f17373c1e7a4ed0aaf9a12ef1f1f06201e0a830c800efadcaa476ce0dd5dccefa181b06788bf78db2ebd4dc548ea2c38492b66ba59bd6152f7a8cb62000088dfc686e8203c03446bf16b4bc870e97245200ec9617d4dd71f685ca2996ec8d7b79a9d93d0864e435d987e1db3a05d7b8c03ebf55b3f5411572911d5d39b212eb774a0eb696deeabaa117adadb7b1ee319bd747cfdc6a95b70b9bcf5cbd5e622fdcee27db19d199a71a16867a47b87cdc423f02bcef70f416277bbd8276f918454cd806dd031ad6fa0859f1cb53d3041b29979020fad55e3922f588d286c2f7e58a70af64542ff4868b72574b11afcfbf25848d368203362aeae54b328de226703403bb55a2c566244a2dc126d9540791f8b7715a85b8116caba984c29e4d4afb5df292ca5187653b18390eba51140ca2522c70e9bc527ccc12578a6a0973b7670df0b14dc37f58bcb65b4dee27b2b4ba4b50eb6fa64e8352a1bbcd81c2294fa08540fd6281580af9930adc5352b902f90f03c5dc33198b0f95589e521426934c77f2b11c54f0a83cb4c334ce9c5cdccd7fc7a04630bb7c7e7f2d6dd4ee4773b19c1f23241286200b2e04e9030f51353cd3991e80d7c8c271f64e3c8e28c068331b7d6cdc26eeefd0cf427e7c3938e8a419a59985964043494095e325cfea15227729a2892ae46510c87233e00a4c3ebd91dd4c06059434712749510b8bdcfa4839f7638e7bc0bd75198e3bdd419c69fcf0bbb268310ec43739b82f55631e37cae5f0169dca0a7054a45f11e61e083a5a39c9fda15275af9cfbb7e846fba688824350a71e500d53b5f9d8d8e9521749781c60353676c67bd8f71b79ecd8c6b2f4d2828d09e9f41f2e4b42e9bf73b28b51802d71c5627005d59e0ad9ea292f87fd122b093d682aa73dfa6a35f3e0b7ea17df2d5e57b72b05d8b7407954cea5ead836ee4aa30765013c9434e9f5e3866cc6b288b53bf9f0f71791f82d7fef9dcdafe5add727e4bbfd9cf8d82a779400792871dbd21fd267046262eda0b82f4b235fef275b306481fae561ee429bd6bd1cb1fabef87ff4c09b71ac98cef03f6d7b1aabb9b966d89e3c4e87aec499c407b93d883cb452ff6fd7e4f0d610b2d759e1b5d5f798b5820709cc912b848229673a6162751011722844934a2c3298a815edc4cae92e52d047fc3b0f5303faf6ca66ae06d187292286383e9a450a65cc78877e7cd8b6d7fcddeac505b8415241df58abab44dd13c1fb61cad8cf05880dbdade94313f7c24dc7ab1d0facc52aff36d1d9298214c58fe5f7b99585d53f66981ef708917b22d70fe7bc33042ea007835f3529215ef0f18bb7a3f762b5ab1f3326f106afeb369303ea8b226d4c8039f296ddb2ab8a0a4070cb93f4962a3f9d274df01b23f727107aa3b82696bc3c140b19a3278f6e8cebe1ff7a12cfc331e24a6eb8d01ee30b0514ccc976959bde4274a94fb4ca3a902e9a0f329dc43ced592c3bd4baf419da41ef3fa7276f524aeabffefa5b6e7d2ff5c65149617550536d3e8ab28a04ff3bf5d8390c067d0c3ce4e7d37fa217f033e604b92485605f8ed6f013a0a56a6002eae0fb51cdd6224c02367578392f40e7e6c015247e340ea57179aa3d9bc2e1a71e324f0629e9b623904717e6b341b44a38fd64a7d5f7f3c0d188b81529d1a164d3e39af0916d6f2756b0113b583dc7f2e852e8ded8acf10767ba7732b8b62b47e510b903e5e121295dab85a71e78754da798d98896fb5876afc0efa808bce8f235e7aec5fd2a890bf6873e2c1e7a7aaf5216535af99feb8be1fee35092723275f1ed1d94aefcc4a6b74e102141855adcfbfd2c5dc1a4158b7b10248ffd8bf21f4c2c36080bc83bd0edd255acb08d14ec414651a194c72782960e1fee22b69fe1b0efabb238a410271189ef85708384f3fc904ae5a4d46d4caa60027f395b7dc8d2225340d24af923958f2e9cdd59bd5f71c1c4ec27de88faa5e3ec4a6fd2e4c3eff08ca64f03b7370dacda0cb3acd354d062c699325b815f397e0ce2d0e1938592343873fbd8f1e98b3836bfe7b0fbc3eb0b2135369cd33ba0de2e8d130e15c4cfd318ed9719ff32e6c065237695caec4347da91d3eb692ee60b94c8bb163ac21553b6e8355b2558ac809a192b1c8178d82ca1434bd26af0a3157f46bd9a9c52bf39d2865f2840f20f41340c72f0632401a99015f664a8e3dade3f17d12cbcede0e6884ecb0e244e7d12edd63a8796328f17bf2b9f3507d9f73bc371d0a7b52567e4ff783851043b8dafb2477d90438ac2af69be81fbd5f2718042c0a4538e8908c859c07b40b3b0c153afb64a73ecac63e255f1050e375350d164e891f733ff4eb168ec5b7a2873baa4dd47b9ed01da894139ee1ca0572575975e6511b2e7c82c096fcc173f9865460dfeaefac0157a8a4b58bed45a67c8da9fd8db2947b2e5a3e65cee0b58e8d572165668bd53f6fc84e4f79622a5bf70ab91fd00e6573de81f924d047b890efa76fef1470a6f6172c07afb8bdf291cf6e06596c3ebcd81555b721d33b1bafac0a0b451d884858c84a4a718ab33502fa8ac8773ecc39d384834baac76f7188d068f5f865e8f467a6486b96f1f492384d30f6dbbf692237acb1a3dddbd562941fe613667e2eb4b57073bba3ff81723dde63a700044b9b0063478df4318bb46a28d4181a18445fe308a8734251b6490cb2fc0e5e3ac423c9238d99aea60b941df2526a57e1476a6e37445a053fdb482fcbe81da9200fe58ceb2ca35f371922cc768ae651dcfe895a6e35977ef14a1848b42c6498c370a7888e89cdd8c2a08cd7efd57083cb635e6a724a768d384cc93538eb95f60c63aa117e6ec118b479adadccc1d869eb0acb9ab0d4be52c8060fde8487982e1c2299ef4f3a7f9edf664d113a72e16247d74e6916c617da753cf85f69b9fcf4264e799495c57bc94afc53283166812aaea828d8a7b900f4c80616047731123284174c90990b73ca1a47a6e7b3054a987e612149b52f8bc802890c019e414e17d257d879d16410e419e205815ec286e7c72351dd407dd09f53a7c632a7c6c819873b102ec10701082f02989df4941adbb1e34d86f214f99c68996c11bd760e9164ebc2bcb4a5945188b4eb8be8a6e3421109141e3916134f4756d681f38e9f125c122771fafacb2376b5454344c9675ffd7abf724ebcaf1cf92393f21cecebcf1cdad68e5f6d50f552efff5060d3397a61ab43c7ca02726ffa7e7f2ff52637bebaf639482d817bab143c0f8632f567731db823f187e3fffb7c151cb99ed4707f14dc527cc3552bd6cb3acb85b68b1f637ffb8de95ce404f53b75484a32ea765129041bf76a90ede14c80a705bbd72036a32b0d63cc90ab3c881ce96655b96eb6c72b39469f7c416ef32e28a81ba9965ba01ab090c42bd5ab974ef5000c2739b5b3f0f6d6509c28a7fec520a6ab9dcf2df27b92b6672cadf2fcb14ae5deeb7fca44e41aea48a5e2c571cb2d7bf7c0dc7cc019913330705983d30ae2b9ef8fa6e78dbc097765c71a54cafbb0ff660ba8b766bbf5202a7e3d1ce9cfb2083f5327a2242133d2ffe85b45289d3186547734cd0677490dd2b96290c09b1fcb388e7c597a57282ee46d61b9792d4af5aaeb8814ad4450a78db4f07ce53c84b3b2978e2af3c530a27b45ccc2ac08fcfc8f1f683bd26346c4b739d25423946ff4614c711bd72a1cfc481dfcc96ee913150c0b44516bf4aedcdc28f3b5e74c5f2b9d44053c594d0a5cae4c2f7a92c53e13e9472ba68e1594500ca756c69beb7d9262089dccaa19bf56564fe52097ea7726669d41e85ddcd99e9f6190e0be14d9a7d7cdc043454f1c2bc1eaf6c84a93a90deb2973fe3b662dd009d46df55e7ddccbcd45e8bed49893729751546375e88c417c66776e0aef8949e546566e0c913e58c62e252fe276eab6373b766c2f725db69c5a3ed98571a835e7f974b3ee84aeeefc5318a9a8c933fdb3670afb45bc1708622bc09d528e65613507aca9004fbf3e7449fde426d4c65b9248d877223a7fd98d19f78ba5a3378f6f1a62b5e6400b09d96ade7516a8f19622182f354422e4d0d7aab6e2c71af1e70eca7de747ee09084b43ca0f57a54ccc5e47c417f1e6c28220f4c722e48d3e9230ae47ab9fbf7edce859c63082d08257a5388e21f16761342d716c0dc837f30c3a6b352095e024ba10dcee7aec79d4443f8d42dd71552a858f07f4737e52a2e8cc6d177ee5240a0ec759d04b2974acbd5c5b3351238725e865639188d99539579e6cfcebb27af89878b62c2b6f01c5e9e61dfe55233d37d9e6855c17ab753d41e2e53e632d6a583c921c1473bda06be0dbdacee68f1c00a6bfd8dfd8c34a0c646e0cfaddf63876069819035e596c05db285f6c7794c14f154a2cf154901c04e0d9df55c236e432bf3ca4cc2bace9763767ca6f8b4327c65f811e27e4fc5fb6c44f94a8ffc063fe2d5f53f43139ef49d6446083f71482d3b3e3d3587753b84cca815ec4b94486aa8529af2fbaf8253fa9d80d60e3a49cac0dec4095a8a3c9a54981879cb1b6616bd270ae9d3337e5244b2a2724a409a90530b5653e5a7f9b56a06d33333a19c070c7d984345db088af5124fbe7ba441347f345e2f06e50bdc4b964b321df3ca11987f0f3304ba288eb9fa7839d84d629915f25ca9e89f848a0555b770eac79fcd51f97b6d89166c7a0ff3cd9ad7906d6784356060a5fe9eb7065b539d01d645bd7ddeca887a47156bc93b5c26070c68289f27d0f871e3dd2b5fb117ebd6918d32a05336f5cd3db7ad24c1c403b8544949acf196b8e419d551f6e20ec8e4e1ff216c2a299b7d0be205d6a3b4a9ffebbe76c60492fe156bfaf507eedf1198446c3b157fde1b77f5c1a13ef0369c5e6e3c45037af113ac56e3fa49ec44ac35733afa68568cac5bc41955fd761b0bcd0e4ab32338d3781544e29cc3315a81e6c9212b150748f6495ffbc67a4f8315b2510ec52a1cc90b728daef1aefff6c978769c2e0204d1c13733ee30569e1f2d51336add536f95d00f873959515fadca42374fad3b23c14458b03dc8cefd29e447ff1a48254179c2a46f419b07d6c445882ad10d53f9d264123c496a8ccc0f88af3948a444d418e216149aabe4b00b2ae12ebbf1b02a8a92af62003cc9c090fd3e09640ad008a9f86f85918ccb5214ab368ffacc12ceb2ddf4be1f945eb48efd30d5a20a8d6ab72727b1aba94cb672628862731edf4795c7e3ac2b57a78de4a78ae5585e8fb74ff46579b50faedbe692bfccb26838cec6b4ce7bed4671c6923d6168f0a0f279390bfb20c0869af7c0ab07d34d2d891978168cb43880010a3999f22ff75c69523dd06b84e4c76e903bcfa9fabcb617c40ec5bbf4e0a88f2fd50504c1415c0dc70e2b4c73ce42c86e17ea49b84a28045e5969038ed97e0bf3d2f80bddc7a3b99177a6eb5165a7cea1315c86e30726c5be85be9dadfa36ad569440e9ca5e5042b129d84a1d189400d8ff2c7c7a4ae12354071c9c3ea254a55ce9e47744c8d1e40cd3723233ec069181307ac4ded7b6044c76320edc00a17f98ecec3ca3f67e01732e57db927626efb2518fd376931fe957f2326e3d1d74e5a8dd7a6ff18b1246af3f07abc1d78a09bf78bb381717f8b2c5ac1d311d27d9d172df9fe609155f59cf86aacea3cce4297f8e771f60895cca1c15b616dd2596294fa0bf96c64a14321c178d8286a9406ee11bd2de5f6a0ddc486db5c52d2522b8a42c993ee640bf3009d8bb1b9eee2a95d4db0b783fbca9b29a7369ef66c9cbb8e479e5f9946c6e60d8d76eaee62b9daf6674b9c22d08dcaa0287c006e618e0f751b6e4ae94a931428ecaf74c4c9fa836a4200cb685f961551373610c384e6e3320055160e7579e51b82417a3d698f3b353272c1bc7f103f4a5502c226ffbbb04bb657779de26fdf77d0e1ba25077077744de75170db04a78d4d8419424fc03f3ff3b01c91c1ad7f3013a084609e90125f0d3bfa92be33b3dd042ee69acfea14b99bcb6c59d22e8015bbd1ca2c3a9f22be61e152ee0d6282d0cac7a69ed372b98b77dbe4cc16a17c681443d67c187724d9cb229220ae5295bc7e4fb3aaede51ce5389a6b737bdf9c42b3cd22f7b3dd3fe9f36ec66f04e798df7bda63608e460f127113c7369dfaf22eba56e8ab0ec64c3798f81b946c1f587d8ee6322e7662ca7e8ff67e8b989722fe8d2f344eaae8670322060de6a4bc1f6515385ec2d", 0x2000, &(0x7f000000d280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="38020000000000000000000000ffffff030000000000000002000000000000001000000000000000030000000000000080000000020000000600000000000000040000000000000009000000000000000700000000000000020000000000000001000100000000000500000009", @ANYRES32=r2, @ANYRES32=r3], 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000b00)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, r4, r5, 0x0, r6], 0x9, 0x80800}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000bc0)={0x0, @pix={0x434c, 0x8, 0x59555956, 0x4, 0xc, 0x5, 0x0, 0x40000005, 0x1, 0x2, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 20.741616442s ago: executing program 5 (id=1041): r0 = getpgrp(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) rt_tgsigqueueinfo(0x0, r0, 0x16, &(0x7f0000000040)={0x2a, 0x1f, 0x7}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x0, 0x2800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xd30, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x0, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 19.552663708s ago: executing program 5 (id=1050): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x3d, '\x00', @buffer={"a2640912951700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @uvalue=0xffffffffffffffff}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x0, @uvalue=0x7}]}, 0x9}]}) syz_clone(0x88000000, &(0x7f0000000540)="138d8ceb1fcdad6d078b3523407476c0252460c119969873121a390a5be0d2bf8c22fdbb69277b6e1ce06834d7cf613deff29d7bbce636274b793cfe4cd5ac80fde094daa076c91eff9513f74655a4c6c19c2d3507e363a543182f43fe03791eb9d1834f0cd6e7de35987b559afa8c6106f14dfd637f1f", 0x77, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="ed86bd85cf66cd1eaf1b47e0efeff7477f0bec215b892de705446268f281add2732402aea965d90b5b3aad9ba1f7ac50ef5ff22ece3e5804ef48ab6efd9958cbd5c2c0d1174a9653af8db7510bc3982c22943be8") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='z', 0x1}], 0x2) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) futex(&(0x7f000000cffc)=0xfffffff2, 0xd, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 14.787760104s ago: executing program 5 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xfff4, 0x1, {0x0, 0xb, 0x7ffffffe}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000001}, 0xc0c4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000040)={0xffffff01}, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r6, &(0x7f00000001c0), 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="59532dbd7000fddbdf256b000000", @ANYBLOB="0c009900070000006900000088008080000d"], 0xb0}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) 13.016433505s ago: executing program 5 (id=1068): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1cd372ea5bd82db6814a9b190095efaa60dcb7f3cf3d000069e58dac61c4f7705e1e97564a367c321bb04491ae9670e379ac2e1b5e28740c0db4fa3d75c0b4c59aaaa19948079a82715f7bcdb905f863205a8b4e31aa922de48ec1939263a3764087cf6f2bec74ca57b6d3fb7fafc7229ba1c79b8bc8e02537f277b73d1067b8d30b774dd3b1b8c707e517e831404852fea0c4c6806e0c4a6ed3cb2c8ff3dc42d2af06d5cec0f7f7c59bc8150824105adb4b6477a617a70b", @ANYRES16=r5, @ANYBLOB="210328bd7000fddbdf250a0000000500050008000000"], 0x1c}}, 0x24000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18) r6 = dup(r2) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfd, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000010000304000f00000000f351000000", @ANYRES32=0x0], 0x88}, 0x1, 0xba01}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000002200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 11.407808572s ago: executing program 5 (id=1078): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = openat$rtc(0xffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e25, 0x7ff, @empty, 0x7}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xffffff7f) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r3, r0, 0x0) 5.864269386s ago: executing program 5 (id=1094): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) write(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x9c, 0x23b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807feff000500000000000000050009000d000000", 0x24) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x46) r7 = openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0xffff, 0x5, 0x4, 0x0, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x19b) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, 0x0) 3.986029374s ago: executing program 0 (id=1101): syz_clone3(&(0x7f00000005c0)={0x82800400, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x33}, &(0x7f0000000140)=""/103, 0x67, &(0x7f0000000480)=""/233, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffffffffffff, 0x42200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x12, r4, 0x55471000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x24, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x59c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1) pwrite64(r1, &(0x7f0000000040)='F', 0x1, 0x4) getpgid(r0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x80, 0x9, 0x7}, {0xa2, 0x40, 0x8, 0x7}, {0x3, 0x4, 0x4, 0x18e}, {0xec23, 0xd4, 0x8, 0x1}, {0xe6, 0xff, 0x2, 0x7}]}) close_range(r11, r11, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 3.882183082s ago: executing program 1 (id=1102): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) write$cgroup_int(r0, &(0x7f0000000040)=0x20200000ffff, 0x12) syz_emit_ethernet(0xc50, &(0x7f0000001dc0)=ANY=[@ANYRES64=r0], 0x0) 3.282508692s ago: executing program 6 (id=1103): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x1) dup3(r0, r0, 0x0) 2.997278436s ago: executing program 1 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) openat$dir(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x820c1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x16, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000000)={0x0, [[0xc6c], [0x200, 0x0, 0x0, 0x0, 0xd6, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0x1]], '\x00', [{}, {}, {0xffffffff}, {0xffffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xfffff3a5}], '\x00', 0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) mount$9p_unix(&(0x7f00000002c0)='./cgroup.cpu/test\x00', &(0x7f0000000300)='./cgroup.cpu/test\x00', &(0x7f0000000340), 0x284010, &(0x7f0000000380)={'trans=unix,', {[{@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.806385127s ago: executing program 1 (id=1105): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0xc0003) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x28) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setopts(0x4200, r6, 0x0, 0x1) ptrace$cont(0x18, r6, 0x0, 0x0) (async) ptrace$setregs(0x4212, r6, 0x58, &(0x7f0000000080)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000140)=0xfffffffb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 2.64665402s ago: executing program 6 (id=1106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) splice(r4, 0x0, r5, 0x0, 0x7, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000080), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x97f, 0x1, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x92d}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc) r7 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pread64(r9, &(0x7f0000000140)=""/237, 0xed, 0x4) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 2.508141801s ago: executing program 1 (id=1107): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fbffffff00bd460bd611df37810000000c410000004c85b7ffffff0edc726f6164636173742d6c696e6b0000000000000000000037679def9d84496400000041376563000000000000000000000000000000000000000000000000000000001042"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 1.751474572s ago: executing program 6 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg0\x00'}) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYBLOB="05a6f763d3a6bf2529512d5d36481049b1cd31cdaceeb4c3657edccb86ab384c0c21745ab82399a3f1346cdf2245777801d77457949eb95bde675d4f37ba1438ce5cc6c1c5e9fab80880b3eff1d884e0a355e2fe3ca4ed831e80d495b8a4d69d593de056dda71a5d920867a1cde2d4b3397561e59158549b5089c70b2eab8389554f69a29f2e093ba8aa6183d94c91be0025a3ecb49b13f503f6544fb2e236"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xd8, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xb7, 0x121, 0x0, 0x1, [@generic="765daa8ce1e9f1211a236b49d2a87b8487ab064e14587d26e5543b0df228403c5daca53c35afea6f55964aec8f2f294da797edbfafe566f6e185cc99898c7c6b8899efe40515362295af44271c1ab48fd8473139a7f8da8f3c11dbdf8b92700f1a6d16bbbd23adb0739c2991a7914918bc6946dc5c3278a760ba835c2a52fe84072b93220f186d63b2a802f6e87e770111dc6039380c0df531c1a438fa4c0f7858da5ca86798f136f0fab82ab16b48fbb296a9"]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2e00000099f8941fe980963dca9813da7ec92536434d9d841148d6d96d8263a846696bb39d4ab904562c48f432182855febbfc04ea724b6651b1b0a61b49c6372b49a3badf530e0e33c5a2", @ANYRES16=r6, @ANYBLOB="04002abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='v', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) 1.536835722s ago: executing program 1 (id=1109): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socket(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000000c0), 0x0, 0x2004, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000380)=0x200000000000000c, 0x5, 0x3) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x124, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x10, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffe, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x124}}, 0x0) 1.401570439s ago: executing program 6 (id=1110): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x2000000000000216, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701", @ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="00000000000000b7007b8af8ff00000000bfa21f0000000000070203000008000000b704000000000000850000000100"/60], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00087287a82fb4790b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="93a9f28f8e54bd6acc05f7dbfbda61bf", @ANYRESDEC=r2, @ANYBLOB="8030e97d089360f76261efceedc9ab2c6dc0cc1e25f236eb54e7e763dcfc47dda2ad2ace9bbd68a357d1a0bc380874a72d5cc6d775c89c889d362c3bc79c1ca26b8a3d52c64af42f947cac306dbdd6f6791e0d2a189dc12ed21022d008a52574faa93149b977a74646f5fd8112b240c7c537115ca65a21007b90a9b60c8ef967e3001b4d9195be8b2bdff5b38dfa7518af04c174a14100c9434f9c15a94008664f77c51eeba83ca4e564268330d998c80260d482ba3f74855fe4509f608d7c"], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x1, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x88}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = gettid() r9 = gettid() syz_clone(0x22b2bab63e88c7d3, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) getpeername$llc(r10, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000000)="114353012008", 0x6, 0x4008015, &(0x7f0000000040)={0x11, 0xe5, r12, 0x1, 0x7}, 0x14) ptrace(0x11, r9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) 1.071281157s ago: executing program 0 (id=1111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2}, {@in=@loopback, 0x34000, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000600)={'trans=virtio,', {[{@cache_mmap}]}}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 1.02872553s ago: executing program 1 (id=1112): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x3d, '\x00', @buffer={"a2640912951700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @uvalue=0xffffffffffffffff}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x0, @uvalue=0x7}]}, 0x9}]}) syz_clone(0x88000000, &(0x7f0000000540)="138d8ceb1fcdad6d078b3523407476c0252460c119969873121a390a5be0d2bf8c22fdbb69277b6e1ce06834d7cf613deff29d7bbce636274b793cfe4cd5ac80fde094daa076c91eff9513f74655a4c6c19c2d3507e363a543182f43fe03791eb9d1834f0cd6e7de35987b559afa8c6106f14dfd637f1f", 0x77, &(0x7f0000000640), &(0x7f0000000680), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='z', 0x1}], 0x2) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) futex(&(0x7f000000cffc)=0xfffffff2, 0xd, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 597.832896ms ago: executing program 0 (id=1113): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000090}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0xffffffffffffffd8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/17, 0x11}], 0x2}, 0x120) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x41, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 454.002212ms ago: executing program 0 (id=1114): time(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0x743e, 0x80, 0x2, 0x3e4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x4, 0x80000, 0xffffffffffffffff}) read$midi(r5, &(0x7f0000000300)=""/156, 0x9c) 313.477314ms ago: executing program 6 (id=1115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x384, 0xffffffff, 0x2f0, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0x114, 0x138, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xff000000, 0xff000000, 0xff000000], 0x5, 0x2, {0xfffffffb}}}, @common=@unspec=@physdev={{0x64}, {'veth0_vlan\x00', {}, 'macvlan1\x00', {0xff}, 0x1, 0x1d}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xdc, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x6, 0x5, 0x0, 0x4, 0x6, 0x4], 0x6, 0x6}}}, @common=@ah={{0x2c}, {[0xfff, 0x1], 0x1}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x4}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3e0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x10001) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f00000002c0)={0x8, 0xd, 0x6, 0x7, 0x0, 0x1000, "47da858fff45f3f24d38385aab41f29d", 0x0, 0x0, 0x3d, 0x14, 0x3, 0x0, 0x7}) 195.577341ms ago: executing program 0 (id=1116): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x842) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff}) fcntl$setlease(r4, 0x400, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000140)={"7a3389ed915ddba1cf61f8986123787776c66ede144c890ee7038c080d31fffc", r0}) lseek(r0, 0x1, 0x0) 186.723585ms ago: executing program 6 (id=1124): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = open(&(0x7f0000000040)='./mnt/test2\x00', 0x105000, 0xa) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/36) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x6, 0x4, 0x10e1, 0x1}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000003100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000003140)=@delchain={0x24, 0x65, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xffff, 0xd}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0xc8f1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) 0s ago: executing program 0 (id=1117): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) ioctl$CDROM_CHANGER_NSLOTS(r4, 0x5328) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) write$FUSE_INTERRUPT(r4, &(0x7f0000004c80)={0x10}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000500)="b7d762d46eb3a0b92797049d2d91f9a21cae9c8015b096a1f228237e61597b042ab952e670fd2c5e7638461877a50832c31565307d211d18ced6a1fac409791dfe6a585fe0c75eb369528feb0e2d41967db7fa676a20522e1dc7af2a7c8b6a645c2c2dd57039c28b3582232a467ce9c56bf7bb0fb1c4eef08fc619355f760137d32785b9914213", 0x87}, {&(0x7f0000000680)="738d0e1592a9b83ce82497669982a4ae76cb3175f10c3c27012d3fe1f3136b4d139db4134f2ceed6665178e9b5944f353ac821fbc4b3b4be88056bf12e0349345b9af647635f864c849322c2179691fce223a0b832acaae85b6146cca26d0046dba63c293cf702e7c156978b39fa09ff5f0ab9b14b4336a6e153acd6a0b20e4e75f1b2863c0d9f22817c26de1702e65c20d8a85ef2693992a9036a08fbc0a0df9f4b83", 0xa3}, {&(0x7f0000000240)="bc53cb97d5f295f7cc021a6bacb1e277b1ad", 0x12}, {0x0}, {&(0x7f0000000900)="3d5f156707d18d582b4b6778b785ecb60b6a3c167a1340352369d1d0a495bf4b01939ad6eb3d02406648b350cd8d000283c9fb081d1d6b56f061638869434173dd2863ffa278294022b3eee850ffca678c618b2a97e82f9287d6c17fa40d2ba0647679db78414390efd1717c89058e28cd0bc206e419794f22a883166ffce3c5e05b0daad99e9f7c4ff08d8b80178e4b5220432a953c5a974b0235", 0x9b}, {&(0x7f0000000740)="7bbd561d17ef21517bf391f09e595888b18ad69ada770a93edcd45601cf424b35baa1d15e8b970c8cc0e02e585b47ae8afb28a7623ebcb2b1457b23a64cf0db366f6a77627c5301ac9e3dd01098accf5773a4c683ccd8bf620890227e27aa678769d6816a8e3c8a9d73cfc8d696c867d5dc6324bd8797972b3507eed53b2689bc73a1dc526d65538d332082aa9129c31172bc2e6ee4cc551c790d5d0907b597782865f8b11fb22841a8c6865b0af6b4e846a2d619f28ca472f7ceef8307723dc75d9f439", 0xc4}], 0x7}, 0x8000) kernel console output (not intermixed with test programs): sotp_sendmsg: can_send_ret -ENETDOWN [ 163.754168][ T24] usb 7-1: USB disconnect, device number 9 [ 163.802658][ T24] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 164.057736][ T7277] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 164.271231][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 164.433778][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 164.452922][ T7288] qnx4: no qnx4 filesystem (no root dir). [ 164.616484][ T7298] binder_alloc: 7297: binder_alloc_buf, no vma [ 164.741565][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 164.919086][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 164.985141][ T7311] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 165.205002][ T7311] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.796497][ T7319] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 166.062761][ T7319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.757518][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 166.915233][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 166.938304][ T7343] qnx4: no qnx4 filesystem (no root dir). [ 167.087167][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 167.148386][ T7351] binder_alloc: 7350: binder_alloc_buf, no vma [ 167.155131][ T7347] ip6erspan0: left promiscuous mode [ 167.675607][ T7358] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 167.724568][ T7358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 168.066139][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 168.088849][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 168.178913][ T2314] kernel write not supported for file /input/event0 (pid: 2314 comm: kworker/0:2) [ 168.233177][ T9] usb 7-1: device descriptor read/64, error -71 [ 168.490260][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 168.628806][ T9] usb 7-1: device descriptor read/64, error -71 [ 168.750582][ T9] usb usb7-port1: attempt power cycle [ 169.013112][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 169.122281][ T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 169.140036][ T9] usb 7-1: device descriptor read/8, error -71 [ 169.170304][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 169.287645][ T7379] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 169.384088][ T7379] 8021q: adding VLAN 0 to HW filter on device bond10 [ 169.418816][ T9] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 169.439518][ T9] usb 7-1: device descriptor read/8, error -71 [ 169.559247][ T9] usb usb7-port1: unable to enumerate USB device [ 169.925415][ T7389] binder_alloc: 7388: binder_alloc_buf, no vma [ 170.379295][ T7396] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 170.472377][ T7396] 8021q: adding VLAN 0 to HW filter on device bond11 [ 170.865775][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 171.031989][ T10] kernel write not supported for file /input/event0 (pid: 10 comm: kworker/0:1) [ 171.624618][ T7409] openvswitch: netlink: Duplicate key (type 6). [ 172.505355][ T7420] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 172.623657][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 172.735643][ T7420] 8021q: adding VLAN 0 to HW filter on device bond12 [ 172.921704][ T7437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.357'. [ 172.980277][ T7437] Mount JFS Failure: -5 [ 172.993317][ T7437] jfs_mount failed w/return code = -5 [ 173.890830][ T7435] bond_slave_0: left allmulticast mode [ 173.990668][ T7435] vlan2: left promiscuous mode [ 173.992576][ T7435] hsr0: left promiscuous mode [ 173.994660][ T7435] vlan2: left allmulticast mode [ 173.999809][ T7435] hsr0: left allmulticast mode [ 174.003080][ T7435] hsr_slave_0: left allmulticast mode [ 174.006750][ T7435] hsr_slave_1: left allmulticast mode [ 174.346741][ T7452] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 174.638356][ T7452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.827198][ T7454] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f800 [ 175.282359][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 175.396893][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 175.399562][ T5746] Bluetooth: hci0: command 0x0406 tx timeout [ 175.470645][ T5831] kernel write not supported for file /input/event0 (pid: 5831 comm: kworker/1:3) [ 175.482365][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 175.911163][ T5842] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 176.112969][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 176.118316][ T5842] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 176.123641][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 176.134658][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.139578][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.161882][ T5842] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected [ 176.171516][ T5842] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 176.358894][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 176.597185][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 176.603125][ T7485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 178.127915][ T7496] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 178.280196][ T7496] 8021q: adding VLAN 0 to HW filter on device bond13 [ 179.102623][ T7500] overlayfs: statfs failed on './file0' [ 179.764723][ T5842] usb 7-1: USB disconnect, device number 14 [ 179.849772][ T5842] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 179.914622][ T5842] kobil_sct 7-1:1.0: device disconnected [ 180.221570][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 180.232057][ T7514] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 180.318939][ T7514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.682820][ T7524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 181.279686][ T7530] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 181.404847][ T7530] 8021q: adding VLAN 0 to HW filter on device bond14 [ 181.762583][ T7537] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 181.863481][ T7537] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.930654][ T7541] bond6: (slave dummy0): making interface the new active one [ 181.935672][ T7541] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 182.122203][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 182.371211][ T42] audit: type=1800 audit(1786898217.158:56): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.383" name="cdrom" dev="configfs" ino=18007 res=0 errno=0 [ 182.520640][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 182.596241][ T7551] qnx4: no qnx4 filesystem (no root dir). [ 182.710634][ T7553] binder: BINDER_SET_CONTEXT_MGR already set [ 182.713260][ T7553] binder: 7552:7553 ioctl 4018620d 80000040 returned -16 [ 183.197974][ T7562] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 183.444022][ T7562] 8021q: adding VLAN 0 to HW filter on device bond15 [ 183.890394][ T5842] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 184.096383][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 184.435185][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 184.675475][ T5831] kernel write not supported for file /input/event0 (pid: 5831 comm: kworker/1:3) [ 185.213478][ T7583] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 185.283355][ T7583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.607145][ T7587] binder: BINDER_SET_CONTEXT_MGR already set [ 185.609562][ T7587] binder: 7586:7587 ioctl 4018620d 80000040 returned -16 [ 185.752059][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 185.908720][ T7594] netlink: zone id is out of range [ 185.911773][ T7594] netlink: zone id is out of range [ 185.914123][ T7594] netlink: get zone limit has 4 unknown bytes [ 185.975005][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 186.208937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 186.554191][ T5842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.568217][ T5842] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 186.596206][ T5842] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 186.607560][ T5842] usb 7-1: can't read configurations, error -71 [ 186.961093][ T7610] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 187.024141][ T7610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.690340][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 187.828537][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 187.848894][ T7620] binder: BINDER_SET_CONTEXT_MGR already set [ 187.853098][ T7620] binder: 7619:7620 ioctl 4018620d 80000040 returned -16 [ 187.899011][ T5831] kernel write not supported for file /input/event0 (pid: 5831 comm: kworker/1:3) [ 187.996326][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 188.211382][ T7626] ima: rule for LSM 'u' is undefined [ 188.228150][ T7625] ima: policy update failed [ 188.237827][ T42] audit: type=1807 audit(1786898223.008:57): action=measure func=FILE_CHECK obj_type=u res=0 [ 188.277884][ T42] audit: type=1802 audit(1786898223.008:58): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.406" res=0 errno=0 [ 188.294990][ T42] audit: type=1802 audit(1786898223.028:59): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.406" res=0 errno=0 [ 188.589519][ T7631] netlink: 'syz.4.407': attribute type 1 has an invalid length. [ 188.805584][ T7631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.991254][ T7636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 189.539147][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.688793][ T24] usb 5-1: device descriptor read/64, error -71 [ 189.958888][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.038100][ T7643] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 190.171274][ T24] usb 5-1: device descriptor read/64, error -71 [ 190.317679][ T24] usb usb5-port1: attempt power cycle [ 190.361871][ T5743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 190.508165][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.414'. [ 190.552712][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.4.415'. [ 190.556352][ T7652] qnx4: no qnx4 filesystem (no root dir). [ 190.670137][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.673248][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 190.702256][ T24] usb 5-1: device descriptor read/8, error -71 [ 190.828904][ T10] kernel write not supported for file /input/event0 (pid: 10 comm: kworker/0:1) [ 190.903473][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 191.013417][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.113645][ T24] usb 5-1: device descriptor read/8, error -71 [ 191.233475][ T24] usb usb5-port1: unable to enumerate USB device [ 192.187233][ T7674] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 192.337624][ T7674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.403818][ T5832] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.571044][ T5832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 193.579932][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.597620][ T7698] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 193.600322][ T5832] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.641409][ T5832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.661185][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 193.672052][ T5832] usb 5-1: Product: syz [ 193.675749][ T5832] usb 5-1: Manufacturer: syz [ 193.679141][ T5832] usb 5-1: SerialNumber: syz [ 193.738889][ T7698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.796785][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.810224][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.818306][ T7700] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 193.933001][ T5832] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 194.192038][ T5832] usb 5-1: USB disconnect, device number 15 [ 194.212163][ T7693] usblp0: removed [ 194.244427][ T7694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.243851][ T7709] warning: `syz.2.430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.316096][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.369256][ T851] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 195.507412][ T851] usb 9-1: device descriptor read/64, error -71 [ 195.789731][ T851] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 195.929378][ T851] usb 9-1: device descriptor read/64, error -71 [ 196.059865][ T851] usb usb9-port1: attempt power cycle [ 196.484934][ T851] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 196.535913][ T851] usb 9-1: device descriptor read/8, error -71 [ 196.675947][ T7731] program syz.0.435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.807282][ T851] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 196.831925][ T851] usb 9-1: device descriptor read/8, error -71 [ 196.942430][ T851] usb usb9-port1: unable to enumerate USB device [ 197.792323][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 199.313016][ T7767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 199.322372][ T7758] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 199.403490][ T7758] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.999193][ T5832] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 200.108913][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 200.116596][ T42] audit: type=1326 audit(1786898234.908:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.1.454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 200.149665][ T42] audit: type=1326 audit(1786898234.908:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.1.454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 200.159173][ T5832] usb 9-1: device descriptor read/64, error -71 [ 200.305413][ T7783] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 200.321662][ T7783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 200.435870][ T5832] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 200.482067][ T7783] macvlan2: entered allmulticast mode [ 200.488217][ T7783] batadv_slave_1: entered allmulticast mode [ 200.495785][ T7783] batman_adv: batadv0: Adding interface: macvlan2 [ 200.501099][ T7783] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.518399][ T7783] batman_adv: batadv0: Interface activated: macvlan2 [ 200.579019][ T5832] usb 9-1: device descriptor read/64, error -71 [ 200.706300][ T5832] usb usb9-port1: attempt power cycle [ 201.292488][ T5832] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 201.523945][ T5832] usb 9-1: device descriptor read/8, error -71 [ 201.848812][ T5832] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 201.909619][ T5832] usb 9-1: device descriptor read/8, error -71 [ 202.025648][ T5832] usb usb9-port1: unable to enumerate USB device [ 202.214404][ T7811] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 202.276292][ T7811] 8021q: adding VLAN 0 to HW filter on device bond16 [ 202.453298][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 202.590147][ T851] kernel write not supported for file /input/event0 (pid: 851 comm: kworker/2:2) [ 203.805697][ T7836] random: crng reseeded on system resumption [ 203.819113][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 204.441722][ T7843] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 204.454665][ T7843] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 205.156040][ T5832] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.313263][ T5442] veth0_vlan: left promiscuous mode [ 205.338860][ T5832] usb 5-1: device descriptor read/64, error -71 [ 205.355392][ T5842] veth0_vlan: entered promiscuous mode [ 205.401575][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 205.511152][ T5842] kernel write not supported for file /input/event0 (pid: 5842 comm: kworker/3:4) [ 205.600594][ T5832] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.801413][ T5832] usb 5-1: device descriptor read/64, error -71 [ 205.911284][ T5832] usb usb5-port1: attempt power cycle [ 205.919398][ T7883] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 205.922443][ T7882] netlink: Failed to add helper -22 [ 205.924732][ T7882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.202561][ T7883] 8021q: adding VLAN 0 to HW filter on device bond10 [ 206.288969][ T5832] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 206.309510][ T5832] usb 5-1: device descriptor read/8, error -71 [ 206.578088][ T5832] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 206.610192][ T5832] usb 5-1: device descriptor read/8, error -71 [ 206.763326][ T5832] usb usb5-port1: unable to enumerate USB device [ 206.807673][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 206.948969][ T5842] kernel write not supported for file /input/event0 (pid: 5842 comm: kworker/3:4) [ 207.178083][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 207.672796][ T7902] syzkaller0: entered promiscuous mode [ 207.684033][ T7902] syzkaller0: entered allmulticast mode [ 207.833688][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'. [ 208.903178][ T7931] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 208.910805][ T7931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.913662][ T7930] syzkaller1: entered promiscuous mode [ 208.944790][ T7930] syzkaller1: entered allmulticast mode [ 209.179792][ T7937] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 209.290337][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 209.388455][ T7939] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 209.438796][ T9] usb 7-1: device descriptor read/64, error -71 [ 209.689229][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 209.848775][ T9] usb 7-1: device descriptor read/64, error -71 [ 209.969620][ T9] usb usb7-port1: attempt power cycle [ 210.256190][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.495'. [ 210.308859][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 210.344280][ T9] usb 7-1: device descriptor read/8, error -71 [ 210.621969][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 210.650862][ T9] usb 7-1: device descriptor read/8, error -71 [ 210.762193][ T9] usb usb7-port1: unable to enumerate USB device [ 211.069174][ T851] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 211.077398][ T7964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 211.894195][ T851] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 212.176840][ T851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.186543][ T851] usb 9-1: config 0 descriptor?? [ 212.309307][ T7976] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 212.318733][ T7976] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 212.328579][ T7976] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 212.357104][ T7976] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 212.376646][ T7976] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 212.480825][ T37] smbdirect: ib_dev[syz2] removed [ 212.523197][ T7979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.755343][ T851] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 212.758564][ T851] [drm:udl_init] *ERROR* Selecting channel failed [ 212.889454][ T851] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 212.905376][ T851] [drm] Initialized udl on minor 2 [ 212.923446][ T851] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.985487][ T851] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 213.006683][ T851] usb 9-1: USB disconnect, device number 10 [ 213.059896][ T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 213.385340][ T7989] netlink: 'syz.4.507': attribute type 5 has an invalid length. [ 214.472076][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 214.487349][ T7999] veth0_vlan: left promiscuous mode [ 214.675400][ T42] audit: type=1326 audit(1786898249.408:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.2.510" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 214.767666][ T8002] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 215.480719][ T8002] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 216.045920][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 216.309082][ T5735] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 216.490297][ T5735] usb 5-1: device descriptor read/64, error -71 [ 216.759068][ T5735] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.898830][ T5735] usb 5-1: device descriptor read/64, error -71 [ 217.020620][ T5735] usb usb5-port1: attempt power cycle [ 217.388847][ T5735] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.440274][ T5735] usb 5-1: device descriptor read/8, error -71 [ 217.709056][ T5735] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 217.727057][ T5735] usb 5-1: device descriptor read/8, error -71 [ 217.844818][ T5735] usb usb5-port1: unable to enumerate USB device [ 218.049230][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 218.237580][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 218.245181][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 218.265130][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 218.268759][ T24] usb 9-1: config 0 has no interface number 0 [ 218.271094][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.275191][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 218.283490][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.291464][ T24] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.302458][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.310918][ T24] usb 9-1: config 0 descriptor?? [ 218.360446][ T24] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 219.137105][ T2314] usb 9-1: USB disconnect, device number 11 [ 219.199917][ T2314] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 219.693418][ T8036] syzkaller0: entered promiscuous mode [ 219.695978][ T8036] syzkaller0: entered allmulticast mode [ 219.811258][ T8042] FAULT_INJECTION: forcing a failure. [ 219.811258][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.817020][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.2.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.817048][ T8042] Tainted: [L]=SOFTLOCKUP [ 219.817054][ T8042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.817063][ T8042] Call Trace: [ 219.817073][ T8042] [ 219.817081][ T8042] dump_stack_lvl+0x100/0x190 [ 219.817111][ T8042] should_fail_ex.cold+0x5/0xa [ 219.817133][ T8042] _copy_from_user+0x2e/0xd0 [ 219.817165][ T8042] get_compat_msghdr+0xb3/0x480 [ 219.817185][ T8042] ? __pfx_get_compat_msghdr+0x10/0x10 [ 219.817210][ T8042] ___sys_sendmsg+0x1b6/0x1e0 [ 219.817232][ T8042] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.817257][ T8042] ? find_held_lock+0x2b/0x80 [ 219.817294][ T8042] __sys_sendmsg+0x160/0x210 [ 219.817319][ T8042] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.817348][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 219.817370][ T8042] __do_fast_syscall_32+0xe7/0x970 [ 219.817393][ T8042] ? lockdep_hardirqs_on+0x78/0x100 [ 219.817417][ T8042] do_fast_syscall_32+0x32/0x70 [ 219.817444][ T8042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.817467][ T8042] RIP: 0023:0xf6feefec [ 219.817488][ T8042] Code: Unable to access opcode bytes at 0xf6feefc2. [ 219.817495][ T8042] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 219.817513][ T8042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 219.817523][ T8042] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.817532][ T8042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.817542][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.817550][ T8042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.817572][ T8042] [ 220.289948][ T8050] binder: BINDER_SET_CONTEXT_MGR already set [ 220.292574][ T8050] binder: 8048:8050 ioctl 4018620d 80000040 returned -16 [ 220.673461][ T8053] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 221.082035][ T5735] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 221.639462][ T5735] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 221.682443][ T5735] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 221.703171][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.751587][ T5735] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 221.764705][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.897384][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.940670][ T5735] usb 7-1: Product: syz [ 221.942711][ T5735] usb 7-1: Manufacturer: syz [ 221.945089][ T5735] usb 7-1: SerialNumber: syz [ 221.979501][ T5735] ti_usb_3410_5052 7-1:2.0: required endpoints missing [ 222.068892][ T5832] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 222.220767][ T5832] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 222.230396][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.233284][ T5832] usb 5-1: Product: syz [ 222.235076][ T5832] usb 5-1: Manufacturer: syz [ 222.238498][ T5832] usb 5-1: SerialNumber: syz [ 222.252389][ T5832] usb 5-1: config 0 descriptor?? [ 222.910156][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 222.955410][ T1156] Bluetooth: hci3: Frame reassembly failed (-84) [ 223.079920][ T110] Bluetooth: hci3: Frame reassembly failed (-84) [ 223.488887][ T2314] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 223.702418][ T2314] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 223.733197][ T2314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.769305][ T2314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.773446][ T2314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 223.797820][ T2314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.806275][ T2314] usb 9-1: Product: syz [ 223.807915][ T2314] usb 9-1: Manufacturer: syz [ 223.811428][ T2314] usb 9-1: SerialNumber: syz [ 223.924209][ T2314] usb 9-1: config 0 descriptor?? [ 225.000717][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 225.011838][ T5743] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 225.359207][ T9] usb 5-1: USB disconnect, device number 24 [ 225.977620][ T2314] adutux 9-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 225.986692][ T10] usb 7-1: USB disconnect, device number 21 [ 226.067974][ T2314] usb 9-1: USB disconnect, device number 12 [ 226.110858][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'. [ 226.475456][ T8136] Console: switching to colour dummy device 80x25 [ 226.697443][ T8140] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 226.720810][ T8140] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 227.490460][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 227.526838][ T8159] batman_adv: batadv0: Interface deactivated: macvlan2 [ 227.560489][ T8160] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.575534][ T8159] batadv_slave_1: left allmulticast mode [ 227.598165][ T8159] macvlan2: left allmulticast mode [ 227.609020][ T8160] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 227.620371][ T8160] overlayfs: failed to look up (tracing) for ino (-66) [ 229.204195][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 229.341696][ T8164] FAULT_INJECTION: forcing a failure. [ 229.341696][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.375415][ T8164] CPU: 1 UID: 0 PID: 8164 Comm: syz.2.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.375444][ T8164] Tainted: [L]=SOFTLOCKUP [ 229.375450][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.375459][ T8164] Call Trace: [ 229.375467][ T8164] [ 229.375474][ T8164] dump_stack_lvl+0x100/0x190 [ 229.375502][ T8164] should_fail_ex.cold+0x5/0xa [ 229.375523][ T8164] _copy_from_user+0x2e/0xd0 [ 229.375550][ T8164] get_compat_msghdr+0xb3/0x480 [ 229.375569][ T8164] ? __pfx_get_compat_msghdr+0x10/0x10 [ 229.375594][ T8164] ___sys_sendmsg+0x1b6/0x1e0 [ 229.375616][ T8164] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.375647][ T8164] ? find_held_lock+0x2b/0x80 [ 229.375683][ T8164] __sys_sendmsg+0x160/0x210 [ 229.375708][ T8164] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.375738][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 229.375759][ T8164] __do_fast_syscall_32+0xe7/0x970 [ 229.375783][ T8164] ? lockdep_hardirqs_on+0x78/0x100 [ 229.375805][ T8164] do_fast_syscall_32+0x32/0x70 [ 229.375828][ T8164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.375849][ T8164] RIP: 0023:0xf6feefec [ 229.375870][ T8164] Code: Unable to access opcode bytes at 0xf6feefc2. [ 229.375878][ T8164] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 229.375894][ T8164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 229.375904][ T8164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.375913][ T8164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.375922][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.375931][ T8164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.375952][ T8164] [ 230.420567][ T8168] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 230.463933][ T8168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.313258][ T8182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.542'. [ 231.407329][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 231.485917][ T8190] binder: 8181:8190 ioctl 401c7012 0 returned -22 [ 231.520388][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 231.543109][ T8191] netlink: 156 bytes leftover after parsing attributes in process `syz.2.543'. [ 231.616431][ T8193] qnx4: no qnx4 filesystem (no root dir). [ 232.073603][ T8194] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 232.247103][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 232.310264][ T8194] 8021q: adding VLAN 0 to HW filter on device bond17 [ 232.977865][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 233.058478][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 233.238614][ T24] kernel write not supported for file /input/event0 (pid: 24 comm: kworker/2:0) [ 234.558309][ T8224] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 234.663265][ T8229] tmpfs: Bad value for 'nr_inodes' [ 234.752653][ T8224] 8021q: adding VLAN 0 to HW filter on device bond18 [ 234.763040][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 234.923977][ T8233] binder: 8232:8233 ioctl c00c6211 0 returned -14 [ 235.210566][ T8239] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 235.367277][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 235.490475][ T8243] netlink: 144 bytes leftover after parsing attributes in process `syz.2.556'. [ 235.498276][ T8243] qnx4: no qnx4 filesystem (no root dir). [ 235.507024][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 235.559132][ T5842] kernel write not supported for file /input/event0 (pid: 5842 comm: kworker/3:4) [ 236.304668][ T5743] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 236.443470][ T8261] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.864354][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 237.091867][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 237.709705][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 237.751254][ T8281] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 237.848557][ T8281] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.894053][ T8279] netlink: 144 bytes leftover after parsing attributes in process `syz.2.566'. [ 237.916282][ T8279] qnx4: no qnx4 filesystem (no root dir). [ 238.211177][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 238.285716][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 238.290294][ T2314] kernel write not supported for file /input/event0 (pid: 2314 comm: kworker/0:2) [ 239.193150][ T1034] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 239.378995][ T1034] usb 6-1: Using ep0 maxpacket: 8 [ 239.409132][ T1034] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 239.432186][ T1034] usb 6-1: config 1 interface 0 altsetting 204 endpoint 0x81 has an invalid bInterval 118, changing to 10 [ 239.441942][ T1034] usb 6-1: config 1 interface 0 has no altsetting 0 [ 239.478233][ T1034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.485435][ T8310] netlink: 184 bytes leftover after parsing attributes in process `syz.4.574'. [ 239.490014][ T1034] usb 6-1: Product: syz [ 239.490036][ T1034] usb 6-1: Manufacturer: 粅킾䝵鸐塃摆㚿뢀 [ 239.490051][ T1034] usb 6-1: SerialNumber: syz [ 240.025684][ T42] audit: type=1326 audit(1786898274.798:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.0.572" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 240.160011][ T1034] usbhid 6-1:1.0: can't add hid device: -71 [ 240.163895][ T1034] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 240.214590][ T1034] usb 6-1: USB disconnect, device number 10 [ 241.182321][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'. [ 241.244642][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 241.252718][ T8326] qnx4: no qnx4 filesystem (no root dir). [ 241.892633][ T8331] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 242.043612][ T8331] 8021q: adding VLAN 0 to HW filter on device bond12 [ 242.167055][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 242.261366][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 242.873104][ T8343] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 243.059349][ T8343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.296095][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 244.022833][ T8354] gre1: entered allmulticast mode [ 244.435912][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 244.492476][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'. [ 244.677996][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 244.687420][ T8367] qnx4: no qnx4 filesystem (no root dir). [ 244.824311][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 244.971965][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 245.048448][ T8373] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 245.203555][ T8373] 8021q: adding VLAN 0 to HW filter on device bond19 [ 245.909558][ T5832] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 246.052166][ T8385] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 246.098858][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 246.101842][ T5832] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 246.107746][ T5832] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 246.111956][ T5832] usb 6-1: config 0 has no interface number 0 [ 246.113901][ T8385] 8021q: adding VLAN 0 to HW filter on device bond20 [ 246.114877][ T5832] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 246.133734][ T5832] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 246.141915][ T5832] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.147070][ T5832] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.162514][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.187475][ T5832] usb 6-1: config 0 descriptor?? [ 246.207963][ T5832] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 247.596558][ T851] usb 6-1: USB disconnect, device number 11 [ 247.617150][ T851] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 248.099079][ T42] audit: type=1800 audit(1786898282.878:64): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.599" name="file0" dev="overlay" ino=895 res=0 errno=0 [ 248.165197][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'. [ 248.342152][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 249.057509][ T8419] netlink: 'syz.4.601': attribute type 1 has an invalid length. [ 249.254324][ T8419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.587154][ T8433] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 249.593512][ T8425] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 249.611478][ T8433] device-mapper: ioctl: error adding target to table [ 249.665899][ T8425] 8021q: adding VLAN 0 to HW filter on device bond21 [ 249.749410][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 250.218013][ T42] audit: type=1800 audit(1786898284.978:65): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.607" name="file0" dev="overlay" ino=915 res=0 errno=0 [ 250.386726][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'. [ 250.445883][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 250.645933][ T851] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.790838][ T851] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 250.800427][ T851] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 250.818933][ T851] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.827512][ T851] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 250.864124][ T851] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 250.870707][ T851] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.893310][ T851] usb 6-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 250.925296][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.931784][ T851] usb 6-1: Product: syz [ 250.934236][ T851] usb 6-1: Manufacturer: syz [ 250.939497][ T851] usb 6-1: SerialNumber: syz [ 250.952419][ T851] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 250.960450][ T851] ti_usb_3410_5052 6-1:2.0: missing endpoints [ 251.439979][ T8454] jffs2: notice: (8454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.603571][ T8462] binder: 8460:8462 ioctl 4018620d 0 returned -22 [ 253.202154][ T8469] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 253.270297][ T8469] 8021q: adding VLAN 0 to HW filter on device bond22 [ 253.880462][ T1034] usb 6-1: USB disconnect, device number 12 [ 254.278952][ T851] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 254.455952][ T851] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 254.458280][ T8485] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 254.503393][ T851] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.557695][ T8485] 8021q: adding VLAN 0 to HW filter on device bond13 [ 254.564592][ T851] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.568846][ T851] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.576493][ T851] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.582761][ T851] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.589459][ T851] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.938901][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.944818][ T851] usb 5-1: Product: syz [ 254.963532][ T851] usb 5-1: Manufacturer: syz [ 255.019271][ T851] usb 5-1: SerialNumber: syz [ 255.052794][ T851] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 255.057052][ T851] ti_usb_3410_5052 5-1:2.0: missing endpoints [ 255.200134][ T8496] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 255.261208][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.265230][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.491219][ T8496] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.651265][ T8500] fuse: Bad value for 'user_id' [ 255.688059][ T8500] fuse: Bad value for 'user_id' [ 255.811208][ T8503] binder: 8502:8503 ioctl 4018620d 0 returned -22 [ 256.055176][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 256.239399][ T8513] gre1: left allmulticast mode [ 256.406046][ T8515] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 256.515480][ T8515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.303747][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 257.346657][ T8522] 9p: Bad value for 'wfdno' [ 258.122753][ T2314] usb 5-1: USB disconnect, device number 25 [ 260.262826][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 260.576369][ T8553] binder: 8550:8553 ioctl 4018620d 0 returned -22 [ 260.941811][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 261.781397][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'. [ 261.824652][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'. [ 262.059512][ T5735] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 262.272442][ T5735] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 262.280174][ T5735] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 262.306091][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.312290][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.340053][ T5735] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 262.351281][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.364695][ T5735] usb 7-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.391629][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.395172][ T5735] usb 7-1: Product: syz [ 262.407197][ T5735] usb 7-1: Manufacturer: syz [ 262.410431][ T5735] usb 7-1: SerialNumber: syz [ 262.439510][ T5735] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 262.451886][ T5735] ti_usb_3410_5052 7-1:2.0: missing endpoints [ 264.788069][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 264.791330][ T8592] binder: 8591:8592 ioctl 4018620d 80000040 returned -16 [ 265.697411][ T8594] program syz.0.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.720169][ T5735] usb 7-1: USB disconnect, device number 22 [ 265.877735][ T8594] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 265.992635][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 266.146214][ T8617] FAULT_INJECTION: forcing a failure. [ 266.146214][ T8617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.153119][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.153151][ T8617] Tainted: [L]=SOFTLOCKUP [ 266.153158][ T8617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.153183][ T8617] Call Trace: [ 266.153190][ T8617] [ 266.153197][ T8617] dump_stack_lvl+0x100/0x190 [ 266.153230][ T8617] should_fail_ex.cold+0x5/0xa [ 266.153253][ T8617] _copy_from_user+0x2e/0xd0 [ 266.153284][ T8617] get_compat_msghdr+0xb3/0x480 [ 266.153309][ T8617] ? __pfx_get_compat_msghdr+0x10/0x10 [ 266.153344][ T8617] ___sys_sendmsg+0x1b6/0x1e0 [ 266.153373][ T8617] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.153407][ T8617] ? find_held_lock+0x2b/0x80 [ 266.153450][ T8617] __sys_sendmsg+0x160/0x210 [ 266.153479][ T8617] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.153522][ T8617] __do_fast_syscall_32+0xe7/0x970 [ 266.153583][ T8617] do_fast_syscall_32+0x32/0x70 [ 266.153610][ T8617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.153634][ T8617] RIP: 0023:0xf70cefec [ 266.153658][ T8617] Code: Unable to access opcode bytes at 0xf70cefc2. [ 266.153666][ T8617] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 266.153686][ T8617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 266.153701][ T8617] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.153712][ T8617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.153722][ T8617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 266.153732][ T8617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.153757][ T8617] [ 266.498156][ T8623] binder: BINDER_SET_CONTEXT_MGR already set [ 266.502031][ T8623] binder: 8618:8623 ioctl 4018620d 80000040 returned -16 [ 266.533038][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 266.571756][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 266.639970][ T2314] kernel write not supported for file /input/event0 (pid: 2314 comm: kworker/0:2) [ 266.899559][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 267.103265][ T24] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 267.113008][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 267.119855][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.129170][ T24] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.178559][ T24] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 267.194299][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 267.199029][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.222915][ T24] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.328896][ T24] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 267.371382][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.402131][ T24] usb 6-1: Product: syz [ 267.415549][ T24] usb 6-1: Manufacturer: syz [ 267.417594][ T24] usb 6-1: SerialNumber: syz [ 267.434752][ T8641] FAULT_INJECTION: forcing a failure. [ 267.434752][ T8641] name failslab, interval 1, probability 0, space 0, times 1 [ 267.476253][ T8641] CPU: 2 UID: 0 PID: 8641 Comm: syz.0.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.476283][ T8641] Tainted: [L]=SOFTLOCKUP [ 267.476288][ T8641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.476296][ T8641] Call Trace: [ 267.476303][ T8641] [ 267.476310][ T8641] dump_stack_lvl+0x100/0x190 [ 267.476336][ T8641] should_fail_ex.cold+0x5/0xa [ 267.476369][ T8641] should_failslab+0xc2/0x120 [ 267.476392][ T8641] kmem_cache_alloc_noprof+0x91/0x6a0 [ 267.476411][ T8641] ? __mutex_unlock_slowpath+0x35d/0x930 [ 267.476432][ T8641] ? do_getname+0x35/0x390 [ 267.476454][ T8641] do_getname+0x35/0x390 [ 267.476473][ T8641] path_listxattrat+0x2db/0x370 [ 267.476489][ T8641] ? fput+0x79/0x100 [ 267.476505][ T8641] ? __pfx_path_listxattrat+0x10/0x10 [ 267.476519][ T8641] ? ksys_write+0x1ac/0x250 [ 267.476532][ T8641] ? __pfx_ksys_write+0x10/0x10 [ 267.476549][ T8641] __do_fast_syscall_32+0xe7/0x970 [ 267.476568][ T8641] ? lockdep_hardirqs_on+0x78/0x100 [ 267.476587][ T8641] do_fast_syscall_32+0x32/0x70 [ 267.476606][ T8641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.476624][ T8641] RIP: 0023:0xf6ffefec [ 267.476641][ T8641] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 267.476648][ T8641] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e9 [ 267.476663][ T8641] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 267.476672][ T8641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.476680][ T8641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.476688][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.476696][ T8641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.476714][ T8641] [ 267.649318][ T24] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 267.659645][ T24] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 267.703241][ T8636] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 267.710697][ T24] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 267.827408][ T8627] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 267.870026][ T8636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.401883][ T8651] can: request_module (can-proto-3) failed. [ 268.500977][ T8657] binder: BINDER_SET_CONTEXT_MGR already set [ 268.520483][ T8657] binder: 8656:8657 ioctl 4018620d 80000040 returned -16 [ 268.613452][ T8662] 9p: Bad value for 'rfdno' [ 269.015978][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 269.060680][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 269.115070][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 269.600879][ T8683] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 269.890503][ T8683] 8021q: adding VLAN 0 to HW filter on device bond23 [ 270.492650][ T8695] comedi comedi0: pcl816: I/O base address not correctly aligned [ 270.902016][ T5842] usb 6-1: USB disconnect, device number 13 [ 270.916968][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 270.983248][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 270.988644][ T5842] ti_usb_3410_5052 6-1:2.0: device disconnected [ 271.210150][ T8700] netlink: 264 bytes leftover after parsing attributes in process `syz.1.680'. [ 271.216337][ T8700] netlink: 264 bytes leftover after parsing attributes in process `syz.1.680'. [ 271.226740][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 271.417325][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'. [ 271.427539][ T8709] ima: policy update failed [ 271.431991][ T42] audit: type=1802 audit(1786898306.208:66): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.686" res=0 errno=0 [ 271.588426][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 271.872309][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'. [ 271.998855][ T5841] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 272.180253][ T5841] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 272.186412][ T5841] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 272.191839][ T5841] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.202899][ T5841] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.209085][ T5841] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.243743][ T5841] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 272.276835][ T5841] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.301671][ T5841] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.336889][ T5841] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.347396][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.353226][ T5841] usb 6-1: Product: syz [ 272.361231][ T5841] usb 6-1: Manufacturer: syz [ 272.363922][ T5841] usb 6-1: SerialNumber: syz [ 272.401822][ T5841] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 272.420812][ T5841] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 272.427972][ T5841] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 272.611348][ T8719] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 272.825677][ T8723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.702578][ T8732] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 273.805154][ T8732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.891653][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 275.499892][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 275.679925][ T5735] usb 6-1: USB disconnect, device number 14 [ 275.723638][ T5735] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 275.733233][ T5735] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 275.752942][ T5735] ti_usb_3410_5052 6-1:2.0: device disconnected [ 275.994747][ T8762] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 276.405294][ T8777] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 276.426831][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.704'. [ 276.457468][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 276.969931][ T5841] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 277.574686][ T5841] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 277.585237][ T5841] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 277.595342][ T5841] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.608028][ T5841] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 277.612996][ T5841] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.633698][ T5841] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 277.639415][ T5841] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.645790][ T5841] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 277.651825][ T5841] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.665173][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.671301][ T5841] usb 7-1: Product: syz [ 277.673884][ T5841] usb 7-1: Manufacturer: syz [ 277.676900][ T5841] usb 7-1: SerialNumber: syz [ 277.742325][ T5841] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 277.818467][ T5841] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 277.850964][ T5841] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 277.951814][ T8787] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 278.223930][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 278.676733][ T8805] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 278.697440][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 278.828486][ T8805] 8021q: adding VLAN 0 to HW filter on device bond24 [ 279.683180][ T8819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 279.687181][ T8819] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.693638][ T8819] vhci_hcd vhci_hcd.0: Device attached [ 279.998860][ T5832] usb 40-1: SetAddress Request (2) to port 0 [ 280.001681][ T5832] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 280.110260][ T8823] vhci_hcd: connection reset by peer [ 280.139949][ T7861] vhci_hcd vhci_hcd.1: stop threads [ 280.144890][ T7861] vhci_hcd vhci_hcd.1: release socket [ 280.153162][ T7861] vhci_hcd vhci_hcd.1: disconnect device [ 280.160586][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 281.142638][ T29] usb 7-1: USB disconnect, device number 23 [ 281.478127][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 281.573860][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 281.581004][ T29] ti_usb_3410_5052 7-1:2.0: device disconnected [ 281.667397][ T8845] comedi comedi0: Minor 67108864 is invalid! [ 281.703462][ T8843] 9p: Bad value for 'rfdno' [ 282.358260][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 282.583025][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 282.900172][ T8880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 283.292400][ T8886] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 283.607018][ T5743] Bluetooth: hci2: unexpected event for opcode 0x2088 [ 283.873908][ T8882] ima: policy update failed [ 283.899827][ T42] audit: type=1802 audit(1786898318.678:67): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.732" res=0 errno=0 [ 284.574012][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 285.102062][ T5832] usb 40-1: device descriptor read/8, error -110 [ 285.403704][ T8919] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 285.549836][ T8919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.584772][ T5832] usb usb40-port1: attempt power cycle [ 285.731519][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.744'. [ 286.270471][ T5832] usb usb40-port1: unable to enumerate USB device [ 286.928275][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 287.181339][ T9] kernel write not supported for file /input/event0 (pid: 9 comm: kworker/0:0) [ 287.659864][ T8957] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 287.848921][ T5842] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 288.082970][ T5842] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 288.088364][ T5842] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 288.115278][ T5842] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 288.128369][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.134062][ T5842] usb 9-1: Product: syz [ 288.138213][ T5842] usb 9-1: Manufacturer: syz [ 288.141392][ T5842] usb 9-1: SerialNumber: syz [ 288.151518][ T5842] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 288.159861][ T5842] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 288.192684][ T5842] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 288.309233][ T8963] jffs2: notice: (8963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.360684][ T8961] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 288.875544][ T8980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 288.972614][ T8974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.263660][ T42] audit: type=1326 audit(1786898324.058:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.1.762" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x0 [ 291.170842][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 291.201342][ T9044] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 291.253970][ T5841] kernel write not supported for file /input/event0 (pid: 5841 comm: kworker/3:3) [ 292.154373][ T5832] usb 9-1: USB disconnect, device number 13 [ 292.239734][ T5832] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 292.332525][ T9055] tipc: Enabled bearer , priority 0 [ 292.335700][ T9055] syzkaller0: entered promiscuous mode [ 292.340888][ T5832] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 292.341649][ T5832] ti_usb_3410_5052 9-1:2.0: device disconnected [ 292.378123][ T9055] syzkaller0: entered allmulticast mode [ 292.504564][ T9055] tipc: Resetting bearer [ 292.526307][ T9054] tipc: Resetting bearer [ 292.533064][ T9058] 9p: Bad value for 'rfdno' [ 292.572473][ T9054] tipc: Disabling bearer [ 293.111868][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 293.305829][ T9062] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 293.320987][ T9063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.436596][ T9072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 293.439467][ T9072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.483035][ T9080] Illegal XDP return value 16128 on prog (id 113) dev syz_tun, expect packet loss! [ 293.617522][ T9072] vhci_hcd vhci_hcd.0: Device attached [ 293.936207][ T5832] usb 46-1: SetAddress Request (2) to port 0 [ 293.961732][ T5832] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 294.313730][ T9074] vhci_hcd: connection reset by peer [ 294.323072][ T5809] vhci_hcd vhci_hcd.4: stop threads [ 294.325991][ T5809] vhci_hcd vhci_hcd.4: release socket [ 294.348243][ T5809] vhci_hcd vhci_hcd.4: disconnect device [ 294.399451][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 294.589979][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 294.637814][ T10] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.726946][ T10] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.748289][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.758300][ T10] usb 7-1: Product: syz [ 294.773004][ T10] usb 7-1: Manufacturer: syz [ 294.775075][ T10] usb 7-1: SerialNumber: syz [ 294.872779][ T10] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 294.895684][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 294.926305][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 295.089530][ T9089] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 295.453846][ T9105] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 295.607889][ T9110] comedi: valid board names for 8255 driver are: [ 295.610589][ T9110] 8255 [ 295.611689][ T9110] comedi: valid board names for vmk80xx driver are: [ 295.615939][ T9110] vmk80xx [ 295.617143][ T9110] comedi: valid board names for usbduxsigma driver are: [ 295.626144][ T9110] usbduxsigma [ 295.630689][ T9110] comedi: valid board names for usbduxfast driver are: [ 295.638255][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 295.650293][ T9110] usbduxfast [ 295.667548][ T9110] comedi: valid board names for usbdux driver are: [ 295.671357][ T9110] usbdux [ 295.679129][ T9110] comedi: valid board names for ni6501 driver are: [ 295.682396][ T9110] ni6501 [ 295.684125][ T9110] comedi: valid board names for dt9812 driver are: [ 295.686912][ T9110] dt9812 [ 295.688163][ T9110] comedi: valid board names for ni_labpc_cs driver are: [ 295.691858][ T9110] ni_labpc_cs [ 295.693340][ T9110] comedi: valid board names for ni_daq_700 driver are: [ 295.714329][ T9110] ni_daq_700 [ 295.726149][ T9110] comedi: valid board names for labpc_pci driver are: [ 295.730276][ T9110] labpc_pci [ 295.732839][ T9110] comedi: valid board names for adl_pci9118 driver are: [ 295.740784][ T9110] pci9118dg [ 295.751872][ T9110] pci9118hg [ 295.763601][ T9110] pci9118hr [ 295.764894][ T9110] comedi: valid board names for 8255_pci driver are: [ 295.767808][ T9110] 8255_pci [ 295.769877][ T9110] comedi: valid board names for s526 driver are: [ 295.774174][ T9110] s526 [ 295.775445][ T9110] comedi: valid board names for multiq3 driver are: [ 295.784414][ T9110] multiq3 [ 295.786840][ T9110] comedi: valid board names for pcmuio driver are: [ 295.798780][ T9110] pcmuio48 [ 295.800207][ T9110] pcmuio96 [ 295.816686][ T9110] comedi: valid board names for pcmmio driver are: [ 295.819885][ T9110] pcmmio [ 295.821392][ T9110] comedi: valid board names for pcmda12 driver are: [ 295.836796][ T9110] pcmda12 [ 295.838704][ T9110] comedi: valid board names for pcmad driver are: [ 295.850318][ T9110] pcmad12 [ 295.852447][ T9110] pcmad16 [ 295.854047][ T9110] comedi: valid board names for ni_labpc driver are: [ 295.857848][ T9110] lab-pc-1200 [ 295.860731][ T9110] lab-pc-1200ai [ 295.863060][ T9110] lab-pc+ [ 295.864786][ T9110] comedi: valid board names for atmio16 driver are: [ 295.869374][ T9110] atmio16 [ 295.871477][ T9110] atmio16d [ 295.873449][ T9110] comedi: valid board names for ni_at_ao driver are: [ 295.877222][ T9110] at-ao-6 [ 295.880420][ T9110] at-ao-10 [ 295.882329][ T9110] comedi: valid board names for ni_at_a2150 driver are: [ 295.885835][ T9110] ni_at_a2150 [ 295.887240][ T9110] comedi: valid board names for adq12b driver are: [ 295.890931][ T9110] adq12b [ 295.893059][ T9110] comedi: valid board names for mpc624 driver are: [ 295.897564][ T9110] mpc624 [ 295.900531][ T9110] comedi: valid board names for c6xdigio driver are: [ 295.903428][ T9110] c6xdigio [ 295.904812][ T9110] comedi: valid board names for aio_iiro_16 driver are: [ 295.908100][ T9110] aio_iiro_16 [ 295.910571][ T9110] comedi: valid board names for aio_aio12_8 driver are: [ 295.914822][ T9110] aio_aio12_8 [ 295.917019][ T9110] aio_ai12_8 [ 295.919431][ T9110] aio_ao12_4 [ 295.921367][ T9110] comedi: valid board names for fl512 driver are: [ 295.926041][ T9110] fl512 [ 295.927538][ T9110] comedi: valid board names for dmm32at driver are: [ 295.930714][ T9110] dmm32at [ 295.932342][ T9110] comedi: valid board names for dt282x driver are: [ 295.935978][ T9110] dt2821 [ 295.937356][ T9110] dt2821-f [ 295.938910][ T9110] dt2821-g [ 295.940697][ T9110] dt2823 [ 295.942346][ T9110] dt2824-pgh [ 295.944216][ T9110] dt2824-pgl [ 295.946153][ T9110] dt2825 [ 295.948067][ T9110] dt2827 [ 295.949951][ T9110] dt2828 [ 295.951872][ T9110] dt2829 [ 295.953703][ T9110] dt21-ez [ 295.955893][ T9110] dt23-ez [ 295.957424][ T9110] dt24-ez [ 295.959788][ T9110] dt24-ez-pgl [ 295.962215][ T9110] comedi: valid board names for dt2817 driver are: [ 295.965739][ T9110] dt2817 [ 295.967957][ T9110] comedi: valid board names for dt2815 driver are: [ 295.972689][ T9110] dt2815 [ 295.977983][ T9110] comedi: valid board names for dt2814 driver are: [ 295.982561][ T9110] dt2814 [ 295.984769][ T9110] comedi: valid board names for dt2811 driver are: [ 295.989747][ T9110] dt2811-pgh [ 295.992369][ T9110] dt2811-pgl [ 295.994760][ T9110] comedi: valid board names for dt2801 driver are: [ 295.999266][ T9110] dt2801 [ 296.001426][ T9110] comedi: valid board names for das6402 driver are: [ 296.006284][ T9110] das6402-12 [ 296.009075][ T9110] das6402-16 [ 296.011684][ T9110] comedi: valid board names for das1800 driver are: [ 296.016181][ T9110] das-1701st [ 296.018446][ T9110] das-1701st-da [ 296.021374][ T9110] das-1702st [ 296.024188][ T9110] das-1702st-da [ 296.026335][ T9110] das-1702hr [ 296.044509][ T9110] das-1702hr-da [ 296.046355][ T9110] das-1701ao [ 296.048481][ T9110] das-1702ao [ 296.052874][ T9110] das-1801st [ 296.054371][ T9110] das-1801st-da [ 296.055981][ T9110] das-1802st [ 296.057372][ T9110] das-1802st-da [ 296.058983][ T9110] das-1802hr [ 296.060300][ T9110] das-1802hr-da [ 296.086588][ T9110] das-1801hc [ 296.088236][ T9110] das-1802hc [ 296.089852][ T9110] das-1801ao [ 296.091362][ T9110] das-1802ao [ 296.092865][ T9110] comedi: valid board names for das800 driver are: [ 296.106553][ T9110] das-800 [ 296.107949][ T9110] cio-das800 [ 296.129717][ T9110] das-801 [ 296.131338][ T9110] cio-das801 [ 296.132937][ T9110] das-802 [ 296.134457][ T9110] cio-das802 [ 296.136041][ T9110] cio-das802/16 [ 296.137748][ T9110] comedi: valid board names for isa-das08 driver are: [ 296.141575][ T9110] isa-das08 [ 296.143359][ T9110] das08-pgm [ 296.145141][ T9110] das08-pgh [ 296.146906][ T9110] das08-pgl [ 296.148605][ T9110] das08-aoh [ 296.150126][ T9110] das08-aol [ 296.151561][ T9110] das08-aom [ 296.153333][ T9110] das08/jr-ao [ 296.155140][ T9110] das08jr-16-ao [ 296.157201][ T9110] pc104-das08 [ 296.159656][ T9110] das08jr/16 [ 296.161835][ T9110] comedi: valid board names for das16m1 driver are: [ 296.165971][ T9110] das16m1 [ 296.167856][ T9110] comedi: valid board names for dac02 driver are: [ 296.172260][ T9110] dac02 [ 296.174234][ T9110] comedi: valid board names for rti802 driver are: [ 296.177916][ T9110] rti802 [ 296.179585][ T9110] comedi: valid board names for rti800 driver are: [ 296.194617][ T9110] rti800 [ 296.195877][ T9110] rti815 [ 296.197127][ T9110] comedi: valid board names for pcm3724 driver are: [ 296.218213][ T9110] pcm3724 [ 296.221392][ T9110] comedi: valid board names for pcl818 driver are: [ 296.224518][ T9110] pcl818l [ 296.226448][ T9110] pcl818h [ 296.228101][ T9110] pcl818hd [ 296.230081][ T9110] pcl818hg [ 296.232301][ T9110] pcl818 [ 296.233693][ T9110] pcl718 [ 296.235324][ T9110] pcm3718 [ 296.236913][ T9110] comedi: valid board names for pcl816 driver are: [ 296.252002][ T9110] pcl816 [ 296.253320][ T9110] pcl814b [ 296.254780][ T9110] comedi: valid board names for pcl812 driver are: [ 296.255208][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 296.277171][ T9110] pcl812 [ 296.277190][ T9110] pcl812pg [ 296.277200][ T9110] acl8112pg [ 296.277207][ T9110] acl8112dg [ 296.277215][ T9110] acl8112hg [ 296.277223][ T9110] a821pgl [ 296.277231][ T9110] a821pglnda [ 296.277239][ T9110] a821pgh [ 296.277246][ T9110] a822pgl [ 296.277252][ T9110] a822pgh [ 296.277259][ T9110] a823pgl [ 296.277266][ T9110] a823pgh [ 296.277272][ T9110] pcl813 [ 296.277280][ T9110] pcl813b [ 296.277287][ T9110] acl8113 [ 296.277294][ T9110] iso813 [ 296.277301][ T9110] acl8216 [ 296.277308][ T9110] a826pg [ 296.277317][ T9110] comedi: valid board names for pcl730 driver are: [ 296.277326][ T9110] pcl730 [ 296.277334][ T9110] iso730 [ 296.277341][ T9110] acl7130 [ 296.277348][ T9110] pcm3730 [ 296.277356][ T9110] pcl725 [ 296.277363][ T9110] p8r8dio [ 296.277369][ T9110] acl7225b [ 296.277377][ T9110] p16r16dio [ 296.277385][ T9110] pcl733 [ 296.277391][ T9110] pcl734 [ 296.277398][ T9110] opmm-1616-xt [ 296.277439][ T9110] pearl-mm-p [ 296.277449][ T9110] ir104-pbf [ 296.277456][ T9110] comedi: valid board names for pcl726 driver are: [ 296.277465][ T9110] pcl726 [ 296.277472][ T9110] pcl727 [ 296.277479][ T9110] pcl728 [ 296.277486][ T9110] acl6126 [ 296.277493][ T9110] acl6128 [ 296.277500][ T9110] comedi: valid board names for pcl724 driver are: [ 296.277509][ T9110] pcl724 [ 296.277515][ T9110] pcl722 [ 296.277522][ T9110] pcl731 [ 296.277529][ T9110] acl7122 [ 296.277536][ T9110] acl7124 [ 296.277543][ T9110] pet48dio [ 296.277551][ T9110] pcmio48 [ 296.277557][ T9110] onyx-mm-dio [ 296.277565][ T9110] comedi: valid board names for pcl711 driver are: [ 296.277574][ T9110] pcl711 [ 296.277580][ T9110] pcl711b [ 296.277587][ T9110] acl8112hg [ 296.277594][ T9110] acl8112dg [ 296.277602][ T9110] comedi: valid board names for amplc_pc263 driver are: [ 296.277620][ T9110] pc263 [ 296.277628][ T9110] comedi: valid board names for amplc_pc236 driver are: [ 296.277638][ T9110] pc36at [ 296.277646][ T9110] comedi: valid board names for amplc_dio200 driver are: [ 296.277657][ T9110] pc212e [ 296.277665][ T9110] pc214e [ 296.277672][ T9110] pc215e [ 296.277681][ T9110] pc218e [ 296.277688][ T9110] pc272e [ 296.277697][ T9110] comedi: valid board names for comedi_parport driver are: [ 296.277706][ T9110] comedi_parport [ 296.277713][ T9110] comedi: valid board names for comedi_test driver are: [ 296.277722][ T9110] comedi_test [ 296.277730][ T9110] comedi: valid board names for comedi_bond driver are: [ 296.277738][ T9110] comedi_bond [ 296.513602][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 296.711670][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 296.713343][ T9144] tipc: Enabling of bearer rejected, failed to enable media [ 296.797045][ T9149] netlink: 10 bytes leftover after parsing attributes in process `syz.1.803'. [ 296.891524][ T9140] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 296.895380][ T9140] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 296.937669][ T9152] openvswitch: netlink: IPv4 tun info is not correct [ 297.600206][ T9168] fuse: fd is not a fuse device [ 297.604301][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 297.720987][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 298.044901][ T2314] usb 7-1: USB disconnect, device number 24 [ 298.072916][ T2314] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 298.129640][ T2314] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 298.238759][ T2314] ti_usb_3410_5052 7-1:2.0: device disconnected [ 298.545643][ T9187] batadv_slave_1: Device is already in use. [ 299.081766][ T5832] usb 46-1: device descriptor read/8, error -110 [ 299.125969][ T9190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.158288][ T9190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 299.251395][ T9190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.257154][ T9190] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 299.293745][ T9190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.315793][ T9190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 299.353595][ T9190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.356992][ T9190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 299.408019][ T9190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 299.532223][ T5832] usb usb46-port1: attempt power cycle [ 299.818781][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 300.560125][ T29] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 300.565331][ T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 300.587493][ T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 300.588830][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 300.598968][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.624500][ T29] usb 7-1: Product: syz [ 300.627160][ T29] usb 7-1: Manufacturer: syz [ 300.630098][ T29] usb 7-1: SerialNumber: syz [ 300.676731][ T29] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 300.687957][ T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 300.709026][ T5832] usb usb46-port1: unable to enumerate USB device [ 300.718219][ T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 300.864464][ T9218] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 301.314850][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 301.322161][ T5743] Bluetooth: hci2: command 0x0406 tx timeout [ 301.388832][ T5743] Bluetooth: hci4: command 0x0405 tx timeout [ 302.275123][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'. [ 302.681796][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 303.360145][ T9267] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 303.365601][ T9267] CIFS mount error: No usable UNC path provided in device string! [ 303.365601][ T9267] [ 303.409282][ T5743] Bluetooth: hci2: command 0x0406 tx timeout [ 303.420675][ T9267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.424594][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 303.484699][ T5743] Bluetooth: hci4: command 0x0405 tx timeout [ 303.617495][ T29] usb 7-1: USB disconnect, device number 25 [ 303.661226][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 303.707812][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 303.746070][ T29] ti_usb_3410_5052 7-1:2.0: device disconnected [ 303.858349][ T9276] netlink: 'syz.0.845': attribute type 8 has an invalid length. [ 303.874160][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 304.484877][ T9292] ptrace attach of "/syz-executor exec"[5730] was attempted by "/syz-executor exec"[9292] [ 304.818950][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 304.996676][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 305.015745][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.037068][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.049789][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.054728][ T9] usb 6-1: Product: syz [ 305.060021][ T9] usb 6-1: Manufacturer: syz [ 305.061946][ T9] usb 6-1: SerialNumber: syz [ 305.107488][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 305.115568][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 305.144790][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 305.317479][ T9296] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 305.558816][ T5743] Bluetooth: hci4: command 0x0405 tx timeout [ 305.788720][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 305.959238][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 305.964162][ T9316] bridge_slave_1: left allmulticast mode [ 305.970504][ T9316] bridge_slave_1: left promiscuous mode [ 305.973790][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.012325][ T9316] bridge_slave_0: left allmulticast mode [ 306.014902][ T9316] bridge_slave_0: left promiscuous mode [ 306.018745][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.044759][ T5842] usb 6-1: USB disconnect, device number 15 [ 308.094922][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 308.142311][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 308.163733][ T5842] ti_usb_3410_5052 6-1:2.0: device disconnected [ 308.446396][ T42] audit: type=1326 audit(2000000018.649:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.493980][ T42] audit: type=1326 audit(2000000018.649:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.505050][ T42] audit: type=1326 audit(2000000018.659:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.521470][ T9346] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 308.533669][ T9346] netlink: 'syz.1.866': attribute type 2 has an invalid length. [ 308.562603][ T42] audit: type=1326 audit(2000000018.659:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.578885][ T42] audit: type=1326 audit(2000000018.659:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.600567][ T42] audit: type=1326 audit(2000000018.669:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.650238][ T42] audit: type=1326 audit(2000000018.669:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.673444][ T42] audit: type=1326 audit(2000000018.669:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.698578][ T42] audit: type=1326 audit(2000000018.669:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 308.717041][ T42] audit: type=1326 audit(2000000018.669:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.0.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 309.460063][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 309.833527][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 310.439778][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 310.499939][ T851] kernel write not supported for file /input/event0 (pid: 851 comm: kworker/2:2) [ 311.502792][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 311.849720][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'. [ 313.189962][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.265848][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.277829][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.374420][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.422376][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.833409][ T9405] socket: no more sockets [ 314.326405][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 314.806689][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 315.495515][ T9430] overlayfs: failed to clone upperpath [ 315.568018][ T9430] netlink: 'syz.0.890': attribute type 2 has an invalid length. [ 315.812712][ T64] Bluetooth: hci3: command tx timeout [ 316.132904][ T13] bridge_slave_1: left allmulticast mode [ 316.147011][ T13] bridge_slave_1: left promiscuous mode [ 316.193889][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.203813][ T13] bridge_slave_0: left allmulticast mode [ 316.246634][ T13] bridge_slave_0: left promiscuous mode [ 316.251668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.256255][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 316.435306][ T9450] netlink: 156 bytes leftover after parsing attributes in process `syz.0.893'. [ 316.700528][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.703220][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.765627][ T13] batman_adv: batadv0: Removing interface: geneve2 [ 316.852403][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.895049][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.909735][ T13] bond0 (unregistering): Released all slaves [ 316.924428][ T13] bond1 (unregistering): Released all slaves [ 316.950322][ T13] bond2 (unregistering): Released all slaves [ 316.967559][ T13] bond3 (unregistering): Released all slaves [ 317.047556][ T13] bond4 (unregistering): Released all slaves [ 317.064206][ T13] bond5 (unregistering): Released all slaves [ 317.085290][ T13] bond6 (unregistering): Released all slaves [ 317.145162][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 317.173432][ T9449] bridge_slave_0: Caught tx_queue_len zero misconfig [ 317.175746][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 317.278593][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.294538][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.309384][ T9402] bridge_slave_0: entered allmulticast mode [ 317.313764][ T9402] bridge_slave_0: entered promiscuous mode [ 317.351761][ T13] IPVS: stopping backup sync thread 8886 ... [ 317.364166][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.381470][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.387351][ T9402] bridge_slave_1: entered allmulticast mode [ 317.392087][ T9402] bridge_slave_1: entered promiscuous mode [ 317.861095][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.885866][ T64] Bluetooth: hci3: command tx timeout [ 317.892702][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.178482][ T9402] team0: Port device team_slave_0 added [ 318.207880][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 318.289766][ T9402] team0: Port device team_slave_1 added [ 318.786598][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 318.898009][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.903006][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.958813][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.964854][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.971435][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.994029][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.135350][ T9466] batman_adv: batadv0: Adding interface: macvtap1 [ 319.139439][ T9466] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.157678][ T9466] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 319.390083][ T9402] hsr_slave_0: entered promiscuous mode [ 319.429899][ T9402] hsr_slave_1: entered promiscuous mode [ 319.433385][ T9402] debugfs: 'hsr0' already exists in 'hsr' [ 319.435603][ T9402] Cannot create hsr debugfs directory [ 319.854435][ T13] hsr_slave_0: left promiscuous mode [ 319.876071][ T13] hsr_slave_1: left promiscuous mode [ 319.879601][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.918088][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.948906][ T64] Bluetooth: hci3: command tx timeout [ 320.830732][ T13] team0 (unregistering): Port device team_slave_1 removed [ 320.896598][ T13] team0 (unregistering): Port device team_slave_0 removed [ 321.670601][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.029824][ T64] Bluetooth: hci3: command tx timeout [ 322.179765][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.232646][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.288501][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.361798][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.485682][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.516298][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 322.602767][ T5735] kernel write not supported for file /input/event0 (pid: 5735 comm: kworker/1:2) [ 322.933095][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 323.061493][ T9402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.452740][ T9402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.456732][ T9402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.562167][ T9402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.566066][ T9402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.624157][ T9402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.651082][ T9402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.694878][ T9402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.404427][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 324.597726][ T64] Bluetooth: hci4: command tx timeout [ 324.599884][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.739713][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.867632][ T230] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.871106][ T230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.889941][ T9526] netlink: 'syz.1.904': attribute type 13 has an invalid length. [ 324.893000][ T9526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.904'. [ 324.991547][ T9526] syz_tun: refused to change device tx_queue_len [ 324.993748][ T9526] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 325.135369][ T230] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.148823][ T230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.517940][ T9534] netlink: 'syz.0.905': attribute type 2 has an invalid length. [ 325.529358][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 325.916441][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 326.671741][ T64] Bluetooth: hci4: command tx timeout [ 326.682651][ T9559] siw: device registration error -23 [ 327.049912][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.063274][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.071345][ T9568] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 327.137841][ T9479] bridge_slave_0: entered allmulticast mode [ 327.142624][ T9479] bridge_slave_0: entered promiscuous mode [ 327.152252][ T9568] syz_tun: entered promiscuous mode [ 327.222462][ T9568] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 327.274059][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.283122][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.292037][ T9479] bridge_slave_1: entered allmulticast mode [ 327.318081][ T9479] bridge_slave_1: entered promiscuous mode [ 327.975686][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.998427][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.145498][ T9588] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 328.293387][ T9479] team0: Port device team_slave_0 added [ 328.536130][ T9588] 8021q: adding VLAN 0 to HW filter on device bond25 [ 328.672031][ T9479] team0: Port device team_slave_1 added [ 328.773873][ T64] Bluetooth: hci4: command tx timeout [ 328.877970][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.898305][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.909906][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.942940][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.238444][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.243263][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.266382][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.069203][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 330.101156][ T9479] hsr_slave_0: entered promiscuous mode [ 330.224280][ T9479] hsr_slave_1: entered promiscuous mode [ 330.227333][ T9479] debugfs: 'hsr0' already exists in 'hsr' [ 330.234995][ T9479] Cannot create hsr debugfs directory [ 330.671741][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 330.915236][ T64] Bluetooth: hci4: command tx timeout [ 330.958909][ T9402] veth0_vlan: entered promiscuous mode [ 331.171032][ T9402] veth1_vlan: entered promiscuous mode [ 331.359735][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 331.530268][ T9634] hsr0: entered promiscuous mode [ 331.618898][ T9635] syz_tun: left promiscuous mode [ 331.927405][ T13] dvmrp0: left allmulticast mode [ 332.360721][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 332.541270][ T13] bond0 (unregistering): Released all slaves [ 332.552964][ T13] bond1 (unregistering): Released all slaves [ 332.630457][ T13] bond2 (unregistering): Released all slaves [ 332.676779][ T13] bond3 (unregistering): Released all slaves [ 332.786981][ T13] bond4 (unregistering): Released all slaves [ 332.811776][ T13] bond5 (unregistering): Released all slaves [ 332.831472][ T13] bond6 (unregistering): Released all slaves [ 332.922857][ T13] bond7 (unregistering): Released all slaves [ 332.951617][ T13] bond8 (unregistering): Released all slaves [ 333.233400][ T9633] hsr0: left promiscuous mode [ 333.266050][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 333.274197][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 333.285615][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 333.291015][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 333.331801][ T9652] overlay: Unknown parameter 'fscontext' [ 333.358118][ T9402] veth0_macvtap: entered promiscuous mode [ 333.399718][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 333.813559][ T9479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.873077][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.885471][ T9402] veth1_macvtap: entered promiscuous mode [ 333.901785][ T13] tipc: Disabling bearer [ 333.969676][ T13] tipc: Left network mode [ 333.991725][ T9660] netlink: 'syz.1.921': attribute type 21 has an invalid length. [ 333.996349][ T9479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.017948][ T9660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.921'. [ 334.150300][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.176580][ T9479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.224936][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.264581][ T9660] netlink: 'syz.1.921': attribute type 4 has an invalid length. [ 334.269164][ T9660] netlink: 'syz.1.921': attribute type 3 has an invalid length. [ 334.274070][ T9660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.921'. [ 334.450332][ T9479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.491171][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.599693][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.761039][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.125747][ T5809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.285527][ T5541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.289540][ T5541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.293355][ T5541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.342574][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 335.547858][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 335.852164][ T13] hsr_slave_0: left promiscuous mode [ 335.910753][ T13] hsr_slave_1: left promiscuous mode [ 336.629181][ T37] smc: removing ib device syz0 [ 336.816877][ T37] smbdirect: ib_dev[syz0] removed [ 337.494148][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.621526][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.677696][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.680665][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.683256][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.683560][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.695780][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.714813][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.156211][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.166650][ T9479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.171848][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.252899][ T9713] netlink: 'syz.1.928': attribute type 12 has an invalid length. [ 338.472726][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 338.809498][ T9732] binder: 9731:9732 ioctl 4018620d 0 returned -22 [ 338.991600][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 339.028773][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 339.028793][ T42] audit: type=1804 audit(2000000049.179:117): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.929" name="bus" dev="ramfs" ino=28961 res=1 errno=0 [ 339.098017][ T42] audit: type=1804 audit(2000000049.189:118): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.929" name="bus" dev="ramfs" ino=28961 res=1 errno=0 [ 339.166509][ T9735] netlink: 'syz.1.931': attribute type 21 has an invalid length. [ 339.253741][ T9735] netlink: 128 bytes leftover after parsing attributes in process `syz.1.931'. [ 339.281196][ T9735] netlink: 'syz.1.931': attribute type 4 has an invalid length. [ 339.329004][ T9738] fuse: Unknown parameter '' [ 339.347357][ T9735] netlink: 'syz.1.931': attribute type 3 has an invalid length. [ 339.362253][ T9735] netlink: 3 bytes leftover after parsing attributes in process `syz.1.931'. [ 339.533337][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 339.543345][ T9750] 9p: Bad value for 'rfdno' [ 339.545515][ T9747] netlink: 'syz.5.935': attribute type 1 has an invalid length. [ 339.571004][ T13] IPVS: stop unused estimator thread 0... [ 339.824035][ T9758] netlink: 'syz.5.935': attribute type 10 has an invalid length. [ 339.838252][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.935'. [ 339.969876][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 339.973160][ T9758] dummy0: entered promiscuous mode [ 340.304365][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.397699][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 340.558819][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 340.562404][ T9] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 340.568487][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 340.647777][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.710132][ T9] usb 10-1: Product: syz [ 340.730467][ T9] usb 10-1: Manufacturer: syz [ 340.736280][ T9] usb 10-1: SerialNumber: syz [ 340.781432][ T9] usb 10-1: config 0 descriptor?? [ 340.809059][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 340.815483][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 340.959052][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.654673][ T9] usb 10-1: USB disconnect, device number 2 [ 341.686954][ T9789] jffs2: notice: (9789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.694354][ T9479] veth0_vlan: entered promiscuous mode [ 341.845538][ T9479] veth1_vlan: entered promiscuous mode [ 342.003181][ T9479] veth0_macvtap: entered promiscuous mode [ 342.015457][ T9479] veth1_macvtap: entered promiscuous mode [ 342.028808][ T9632] udevd[9632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.091209][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.100684][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.386377][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.390796][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.421309][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.425084][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.485372][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.490801][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.552347][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.578252][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.782050][ T9813] binder: 9812:9813 ioctl c0306201 0 returned -14 [ 342.971319][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 343.285590][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'. [ 343.609309][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.612275][ T9836] xt_TCPMSS: Only works on TCP SYN packets [ 343.631645][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.075031][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.107067][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.383351][ T5809] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.399634][ T5809] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.408075][ T5809] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.476867][ T5809] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.783408][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 346.236964][ T9860] netlink: 'syz.5.956': attribute type 1 has an invalid length. [ 346.671588][ T9869] MTD: Couldn't look up './dev/mtdblock0': -2 [ 347.376455][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 347.585323][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 347.609040][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 347.659492][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 348.135881][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 350.710481][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 351.649817][ T64] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 351.839826][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 353.413001][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 356.082725][T10013] jffs2: notice: (10013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 356.565523][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 356.657921][T10020] 9p: Bad value for 'rfdno' [ 357.379448][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.997'. [ 357.724338][T10047] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 357.771287][T10037] smpboot: CPU 1 is now offline [ 358.191985][T10047] 8021q: adding VLAN 0 to HW filter on device bond26 [ 358.533485][T10052] FAULT_INJECTION: forcing a failure. [ 358.533485][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 358.620685][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.6.999 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.620722][T10052] Tainted: [L]=SOFTLOCKUP [ 358.620729][T10052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.620741][T10052] Call Trace: [ 358.620749][T10052] [ 358.620757][T10052] dump_stack_lvl+0x100/0x190 [ 358.620793][T10052] should_fail_ex.cold+0x5/0xa [ 358.620819][T10052] should_failslab+0xc2/0x120 [ 358.620852][T10052] __kmalloc_cache_noprof+0x91/0x6c0 [ 358.620875][T10052] ? preempt_schedule_thunk+0x16/0x40 [ 358.620907][T10052] ? netlbl_unlhsh_add+0x6bb/0x16d0 [ 358.620946][T10052] netlbl_unlhsh_add+0x6bb/0x16d0 [ 358.620984][T10052] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 358.621015][T10052] ? apparmor_secctx_to_secid+0xfc/0x160 [ 358.621048][T10052] netlbl_unlabel_staticadd+0x48e/0x600 [ 358.621082][T10052] ? __pfx_netlbl_unlabel_staticadd+0x10/0x10 [ 358.621113][T10052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 358.621186][T10052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 358.621212][T10052] ? genl_family_rcv_msg_doit+0x214/0x300 [ 358.621233][T10052] genl_family_rcv_msg_doit+0x214/0x300 [ 358.621256][T10052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.621277][T10052] ? genl_get_cmd+0x3e7/0x760 [ 358.621303][T10052] ? bpf_lsm_capable+0x9/0x10 [ 358.621323][T10052] ? security_capable+0x80/0x260 [ 358.621349][T10052] genl_rcv_msg+0x560/0x800 [ 358.621374][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.621397][T10052] ? __pfx_netlbl_unlabel_staticadd+0x10/0x10 [ 358.621425][T10052] ? __lock_acquire+0x49f/0x1a40 [ 358.621449][T10052] netlink_rcv_skb+0x159/0x420 [ 358.621468][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.621491][T10052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.621522][T10052] ? netlink_deliver_tap+0x1ae/0xcc0 [ 358.621544][T10052] genl_rcv+0x28/0x40 [ 358.621560][T10052] netlink_unicast+0x585/0x850 [ 358.621580][T10052] ? __pfx_netlink_unicast+0x10/0x10 [ 358.621602][T10052] netlink_sendmsg+0x8b0/0xda0 [ 358.621624][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.621645][T10052] ? apparmor_socket_sendmsg+0x15b/0x270 [ 358.621670][T10052] ____sys_sendmsg+0xa4d/0xbe0 [ 358.621690][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.621712][T10052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.621745][T10052] ___sys_sendmsg+0x190/0x1e0 [ 358.621766][T10052] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.621797][T10052] ? find_held_lock+0x2b/0x80 [ 358.621832][T10052] __sys_sendmsg+0x160/0x210 [ 358.621855][T10052] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.621883][T10052] ? __pfx_ksys_write+0x10/0x10 [ 358.621904][T10052] __do_fast_syscall_32+0xe7/0x970 [ 358.621925][T10052] ? lockdep_hardirqs_on+0x78/0x100 [ 358.621948][T10052] do_fast_syscall_32+0x32/0x70 [ 358.621975][T10052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.621997][T10052] RIP: 0023:0xf7f57fec [ 358.622016][T10052] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 358.622023][T10052] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 358.622039][T10052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 358.622049][T10052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.622057][T10052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.622065][T10052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 358.622074][T10052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.622097][T10052] [ 359.039078][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 359.666089][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1002'. [ 359.770949][T10073] syzkaller0: entered promiscuous mode [ 359.790868][T10073] syzkaller0: entered allmulticast mode [ 360.683214][T10079] ptrace attach of ""[10080] was attempted by "/syz-executor exec"[10079] [ 360.828774][ T42] audit: type=1800 audit(2000000071.029:119): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1005" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 361.254110][T10083] input: syz1 as /devices/virtual/input/input13 [ 362.626974][T10087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 362.915962][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'. [ 363.109175][ T5824] kernel write not supported for file /input/event0 (pid: 5824 comm: kworker/2:5) [ 364.387564][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1014'. [ 364.466262][T10107] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 364.488244][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.512138][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.375943][T10107] 8021q: adding VLAN 0 to HW filter on device bond14 [ 365.555043][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 366.180265][T10119] dummy0: left promiscuous mode [ 366.868847][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.877313][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.044301][ T5809] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.117641][ T7861] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.125325][ T7861] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.159066][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.442048][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 370.661391][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 370.858411][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 371.581061][ T9] usb 11-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 371.622479][ T9] usb 11-1: config 0 has no interfaces? [ 371.631364][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.655760][ T9] usb 11-1: config 0 descriptor?? [ 371.837546][T10173] fuse: Unknown parameter '' [ 371.852446][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 372.242536][ T9] usb 11-1: string descriptor 0 read error: -71 [ 372.258218][ T9] usb 11-1: USB disconnect, device number 2 [ 372.869829][T10173] nbd0: detected capacity change from 0 to 63 [ 372.899738][ T9627] udevd[9627]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 373.248850][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1034'. [ 373.398593][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1034'. [ 373.725877][ T5842] kernel write not supported for file /input/event0 (pid: 5842 comm: kworker/3:4) [ 374.359332][T10209] xfrm0: entered allmulticast mode [ 374.488788][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.881484][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1041'. [ 375.133431][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1043'. [ 375.201832][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 375.477376][T10224] 9p: Bad value for 'rfdno' [ 375.612084][T10231] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1046'. [ 376.089617][T10242] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 376.261720][T10242] 8021q: adding VLAN 0 to HW filter on device bond27 [ 376.629433][ T42] audit: type=1326 audit(2000000086.819:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.6.1051" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f57fec code=0x0 [ 376.687275][ T42] audit: type=1326 audit(2000000086.859:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.6.1051" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x0 [ 376.916348][T10251] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.950000][T10251] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 377.042340][T10251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.066209][T10251] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 377.200444][T10251] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.270933][T10251] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 377.323495][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 378.083392][T10251] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.086151][T10251] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 378.136650][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.154900][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.504400][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1054'. [ 379.232023][T10317] pim6reg: entered allmulticast mode [ 379.319174][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 379.557018][T10311] pim6reg: left allmulticast mode [ 379.713906][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 379.746089][T10328] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1056'. [ 381.392711][T10352] Cannot find add_set index 1 as target [ 381.569305][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 381.613005][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1060'. [ 381.785919][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 381.866059][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 382.154461][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 382.423895][ T65] block nbd0: Receive control failed (result -32) [ 383.033947][T10382] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1068'. [ 383.409136][T10384] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.1070'. [ 383.415798][T10384] veth0_to_bond: default FDB implementation only supports local addresses [ 383.791245][T10400] 9p: Bad value for 'rfdno' [ 384.275931][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 384.340024][T10411] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1072'. [ 384.977987][T10409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'. [ 386.465368][T10438] xt_CT: No such helper "syz1" [ 386.957817][ T2314] IPVS: starting estimator thread 0... [ 387.079686][T10452] IPVS: using max 31 ests per chain, 74400 per kthread [ 387.393923][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 387.415935][T10454] xfrm0: left allmulticast mode [ 387.694526][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1089'. [ 389.659123][T10474] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 389.774378][T10474] 8021q: adding VLAN 0 to HW filter on device bond15 [ 389.777942][T10481] libceph: resolve '0' (ret=-3): failed [ 390.157610][ T2314] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 390.161880][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 390.357543][ T2314] usb 10-1: device descriptor read/64, error -32 [ 390.612475][ T2314] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 390.817832][ T2314] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 390.867790][ T2314] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 390.882297][ T2314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.934233][ T2314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.939210][ T2314] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 390.965040][ T2314] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 391.010080][ T2314] usb 10-1: Manufacturer: syz [ 391.023048][ T2314] usb 10-1: config 0 descriptor?? [ 391.050710][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 391.902178][T10497] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 392.153834][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 392.173840][T10480] random: crng reseeded on system resumption [ 392.484762][T10506] bond29: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 392.621524][T10506] bond29 (unregistering): Released all slaves [ 392.690343][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 392.723140][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 392.888721][T10523] syz.5.1094 (10523): drop_caches: 4 [ 393.127813][T10497] bridge0: entered promiscuous mode [ 393.297268][T10497] bond28: (slave bridge0): making interface the new active one [ 393.316887][T10497] bond28: (slave bridge0): Enslaving as an active interface with an up link [ 393.736584][ T5842] IPVS: starting estimator thread 0... [ 393.859252][T10545] IPVS: using max 23 ests per chain, 55200 per kthread [ 393.924926][ T42] audit: type=1800 audit(2000000104.129:122): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1108" name="bmControls" dev="configfs" ino=31920 res=0 errno=0 [ 394.013222][T10548] openvswitch: netlink: Flow key attr not present in new flow. [ 394.543716][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 394.632625][T10562] veth1_to_team: Caught tx_queue_len zero misconfig [ 394.710333][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 395.032565][T10566] netlink: 'syz.0.1113': attribute type 21 has an invalid length. [ 395.036776][T10566] netlink: 'syz.0.1113': attribute type 20 has an invalid length. [ 395.198230][T10568] sock: sock_set_timeout: `syz.0.1114' (pid 10568) tries to set negative timeout [ 395.322370][T10573] x_tables: duplicate underflow at hook 2 [ 395.492672][T10577] 9p: Bad value for 'rfdno' [ 395.806185][T10575] jffs2: notice: (10575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.283712][ C0] ================================================================== [ 396.288212][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 396.293276][ C0] Read of size 1 at addr ffff88801bc88418 by task syz.0.1117/10578 [ 396.300489][ C0] [ 396.301944][ C0] CPU: 0 UID: 0 PID: 10578 Comm: syz.0.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.301968][ C0] Tainted: [L]=SOFTLOCKUP [ 396.301972][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.301981][ C0] Call Trace: [ 396.301989][ C0] [ 396.301996][ C0] dump_stack_lvl+0x100/0x190 [ 396.302026][ C0] print_report+0x13d/0x4b0 [ 396.302052][ C0] ? __virt_addr_valid+0x239/0x430 [ 396.302074][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.302092][ C0] kasan_report+0xdf/0x1c0 [ 396.302115][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.302132][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.302149][ C0] __kasan_check_byte+0x36/0x50 [ 396.302171][ C0] lock_acquire+0x132/0x370 [ 396.302188][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 396.302205][ C0] ? .slowpath+0x9/0x18 [ 396.302223][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 396.302238][ C0] ? p9_req_put+0xaf/0x250 [ 396.302260][ C0] p9_req_put+0xaf/0x250 [ 396.302277][ C0] req_done+0x1dc/0x2e0 [ 396.302294][ C0] ? __pfx_req_done+0x10/0x10 [ 396.302309][ C0] ? rcu_is_watching+0x12/0xc0 [ 396.302327][ C0] ? __pfx_req_done+0x10/0x10 [ 396.302344][ C0] vring_interrupt+0x2ef/0x660 [ 396.302364][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 396.302381][ C0] __handle_irq_event_percpu+0x232/0x880 [ 396.302401][ C0] handle_irq_event+0xab/0x1e0 [ 396.302419][ C0] handle_edge_irq+0x34c/0x950 [ 396.302438][ C0] __common_interrupt+0xd8/0x2f0 [ 396.302534][ C0] common_interrupt+0x60/0xe0 [ 396.302559][ C0] asm_common_interrupt+0x26/0x40 [ 396.302625][ C0] RIP: 0010:handle_softirqs+0x1ad/0x9b0 [ 396.302644][ C0] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 c0 7a cd 8b e8 58 47 f1 09 31 d2 65 66 89 15 b6 eb 9a 12 e8 e9 79 49 00 fb bb ff ff ff ff <49> c7 c4 c0 a0 80 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 1b [ 396.302658][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000212 [ 396.302672][ C0] RAX: 0000000000001f20 RBX: 00000000ffffffff RCX: 0000000000000000 [ 396.302682][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6b0d RDI: ffffffff8c3fe580 [ 396.302701][ C0] RBP: 000000010000251a R08: 0000000000000001 R09: 0000000000000000 [ 396.302710][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000a [ 396.302719][ C0] R13: 0000000000000100 R14: 0000000000000100 R15: 1ffff92000000fec [ 396.302734][ C0] ? handle_softirqs+0x1a7/0x9b0 [ 396.302752][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 396.302769][ C0] ? _raw_spin_unlock+0x28/0x50 [ 396.302784][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 396.302805][ C0] __irq_exit_rcu+0x162/0x210 [ 396.302820][ C0] irq_exit_rcu+0x9/0x30 [ 396.302835][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 396.302853][ C0] [ 396.302858][ C0] [ 396.302863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.302879][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 396.302895][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 b9 28 f6 48 89 df e8 1e 09 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 16 18 f6 65 8b 05 ee c6 a6 08 85 c0 74 16 5b [ 396.302909][ C0] RSP: 0018:ffffc90004c1fac0 EFLAGS: 00000246 [ 396.302921][ C0] RAX: 0000000000000006 RBX: ffff888060710a78 RCX: 0000000000000000 [ 396.302931][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6b0d RDI: ffffffff8c3fe580 [ 396.302940][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 396.302948][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff94654600 [ 396.302957][ C0] R13: ffff888096de7000 R14: ffff888060710a78 R15: ffff888060710000 [ 396.302973][ C0] try_to_wake_up+0xd8d/0x1c90 [ 396.302993][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 396.303008][ C0] ? futex_hash+0x311/0x400 [ 396.303024][ C0] ? plist_check_list+0x1b8/0x280 [ 396.303041][ C0] ? plist_check_list+0x1b8/0x280 [ 396.303054][ C0] ? plist_del+0x308/0x510 [ 396.303068][ C0] ? find_held_lock+0x2b/0x80 [ 396.303087][ C0] ? futex_wake+0x4ea/0x5e0 [ 396.303107][ C0] wake_up_q+0xa1/0x130 [ 396.303124][ C0] futex_wake+0x4f4/0x5e0 [ 396.303144][ C0] ? __pfx_futex_wake+0x10/0x10 [ 396.303165][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.303188][ C0] do_futex+0x2b2/0x440 [ 396.303204][ C0] ? __pfx_do_futex+0x10/0x10 [ 396.303220][ C0] ? find_held_lock+0x2b/0x80 [ 396.303237][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 396.303259][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 396.303278][ C0] __ia32_sys_futex_time32+0x2f4/0x470 [ 396.303298][ C0] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 396.303321][ C0] __do_fast_syscall_32+0xe7/0x970 [ 396.303342][ C0] do_fast_syscall_32+0x32/0x70 [ 396.303362][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.303379][ C0] RIP: 0023:0xf6ffefec [ 396.303398][ C0] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 396.303406][ C0] RSP: 002b:00000000ffdd60bc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 396.303419][ C0] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081 [ 396.303428][ C0] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.303438][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.303447][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 396.303456][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.303471][ C0] [ 396.303477][ C0] [ 396.657299][ C0] Allocated by task 10579: [ 396.658962][ C0] kasan_save_stack+0x30/0x50 [ 396.660726][ C0] kasan_save_track+0x14/0x30 [ 396.662602][ C0] __kasan_kmalloc+0xaa/0xb0 [ 396.664606][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 396.666865][ C0] p9_client_create+0xaf/0xd40 [ 396.668807][ C0] v9fs_session_init+0x3c/0xdd0 [ 396.670839][ C0] v9fs_get_tree+0xb8/0xb50 [ 396.672716][ C0] vfs_get_tree+0x92/0x320 [ 396.674727][ C0] path_mount+0x7d0/0x23d0 [ 396.676722][ C0] __ia32_sys_mount+0x292/0x310 [ 396.679119][ C0] __do_fast_syscall_32+0xe7/0x970 [ 396.681593][ C0] do_fast_syscall_32+0x32/0x70 [ 396.683650][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.686238][ C0] [ 396.687200][ C0] Freed by task 10579: [ 396.688810][ C0] kasan_save_stack+0x30/0x50 [ 396.690689][ C0] kasan_save_track+0x14/0x30 [ 396.692611][ C0] kasan_save_free_info+0x3b/0x70 [ 396.694832][ C0] __kasan_slab_free+0x5f/0x80 [ 396.696827][ C0] kfree+0x22b/0x6c0 [ 396.698474][ C0] p9_client_create+0x72d/0xd40 [ 396.700512][ C0] v9fs_session_init+0x3c/0xdd0 [ 396.702560][ C0] v9fs_get_tree+0xb8/0xb50 [ 396.704557][ C0] vfs_get_tree+0x92/0x320 [ 396.706470][ C0] path_mount+0x7d0/0x23d0 [ 396.708335][ C0] __ia32_sys_mount+0x292/0x310 [ 396.710724][ C0] __do_fast_syscall_32+0xe7/0x970 [ 396.713546][ C0] do_fast_syscall_32+0x32/0x70 [ 396.716443][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.720589][ C0] [ 396.722113][ C0] The buggy address belongs to the object at ffff88801bc88400 [ 396.722113][ C0] which belongs to the cache kmalloc-512 of size 512 [ 396.731590][ C0] The buggy address is located 24 bytes inside of [ 396.731590][ C0] freed 512-byte region [ffff88801bc88400, ffff88801bc88600) [ 396.742037][ C0] [ 396.743516][ C0] The buggy address belongs to the physical page: [ 396.748498][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bc88 [ 396.753905][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 396.759306][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 396.764430][ C0] page_type: f5(slab) [ 396.766960][ C0] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 396.771846][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 396.777237][ C0] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 396.783095][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 396.787760][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 396.792353][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 396.797620][ C0] page dumped because: kasan: bad access detected [ 396.802091][ C0] page_owner tracks the page as allocated [ 396.805733][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 994946172, free_ts 0 [ 396.813249][ C0] register_early_stack+0x74/0xaf [ 396.816422][ C0] init_page_owner+0x4c/0xa10 [ 396.819604][ C0] page_ext_init+0x71d/0x780 [ 396.822542][ C0] mm_core_init+0x229/0x270 [ 396.825321][ C0] page_owner free stack trace missing [ 396.828397][ C0] [ 396.829820][ C0] Memory state around the buggy address: [ 396.833038][ C0] ffff88801bc88300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 396.837859][ C0] ffff88801bc88380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 396.842654][ C0] >ffff88801bc88400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.847901][ C0] ^ [ 396.850988][ C0] ffff88801bc88480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.855847][ C0] ffff88801bc88500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.860391][ C0] ================================================================== [ 396.865675][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 396.872527][ C0] CPU: 0 UID: 0 PID: 10578 Comm: syz.0.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.879124][ C0] Tainted: [L]=SOFTLOCKUP [ 396.881916][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.887295][ C0] Call Trace: [ 396.888720][ C0] [ 396.889922][ C0] dump_stack_lvl+0x100/0x190 [ 396.891788][ C0] vpanic+0x552/0x970 [ 396.893307][ C0] ? __pfx_vpanic+0x10/0x10 [ 396.905140][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 396.907053][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.909042][ C0] panic+0xd1/0xe0 [ 396.910610][ C0] ? __pfx_panic+0x10/0x10 [ 396.921752][ C0] ? end_report.part.0+0x23/0x90 [ 396.925737][ C0] ? rcu_is_watching+0x12/0xc0 [ 396.934921][ C0] ? end_report.part.0+0x23/0x90 [ 396.936981][ C0] ? check_panic_on_warn+0x1f/0x90 [ 396.938987][ C0] check_panic_on_warn.cold+0x19/0x34 [ 396.941878][ C0] end_report.part.0+0x3a/0x90 [ 396.943761][ C0] kasan_report.cold+0xe/0x18 [ 396.947366][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.951198][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 396.954851][ C0] __kasan_check_byte+0x36/0x50 [ 396.958081][ C0] lock_acquire+0x132/0x370 [ 396.961091][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 396.964229][ C0] ? .slowpath+0x9/0x18 [ 396.966698][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 396.969908][ C0] ? p9_req_put+0xaf/0x250 [ 396.972687][ C0] p9_req_put+0xaf/0x250 [ 396.975507][ C0] req_done+0x1dc/0x2e0 [ 396.978177][ C0] ? __pfx_req_done+0x10/0x10 [ 396.981007][ C0] ? rcu_is_watching+0x12/0xc0 [ 396.983995][ C0] ? __pfx_req_done+0x10/0x10 [ 396.986829][ C0] vring_interrupt+0x2ef/0x660 [ 396.988983][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 396.991773][ C0] __handle_irq_event_percpu+0x232/0x880 [ 396.995263][ C0] handle_irq_event+0xab/0x1e0 [ 396.998378][ C0] handle_edge_irq+0x34c/0x950 [ 397.001656][ C0] __common_interrupt+0xd8/0x2f0 [ 397.004797][ C0] common_interrupt+0x60/0xe0 [ 397.007714][ C0] asm_common_interrupt+0x26/0x40 [ 397.010791][ C0] RIP: 0010:handle_softirqs+0x1ad/0x9b0 [ 397.014391][ C0] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 c0 7a cd 8b e8 58 47 f1 09 31 d2 65 66 89 15 b6 eb 9a 12 e8 e9 79 49 00 fb bb ff ff ff ff <49> c7 c4 c0 a0 80 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 1b [ 397.027479][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000212 [ 397.031126][ C0] RAX: 0000000000001f20 RBX: 00000000ffffffff RCX: 0000000000000000 [ 397.035316][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6b0d RDI: ffffffff8c3fe580 [ 397.038867][ C0] RBP: 000000010000251a R08: 0000000000000001 R09: 0000000000000000 [ 397.042720][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000a [ 397.048009][ C0] R13: 0000000000000100 R14: 0000000000000100 R15: 1ffff92000000fec [ 397.052166][ C0] ? handle_softirqs+0x1a7/0x9b0 [ 397.055136][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 397.058319][ C0] ? _raw_spin_unlock+0x28/0x50 [ 397.061357][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 397.064790][ C0] __irq_exit_rcu+0x162/0x210 [ 397.067877][ C0] irq_exit_rcu+0x9/0x30 [ 397.072142][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 397.078564][ C0] [ 397.080212][ C0] [ 397.082668][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.087228][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 397.092505][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 b9 28 f6 48 89 df e8 1e 09 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 16 18 f6 65 8b 05 ee c6 a6 08 85 c0 74 16 5b [ 397.106211][ C0] RSP: 0018:ffffc90004c1fac0 EFLAGS: 00000246 [ 397.110311][ C0] RAX: 0000000000000006 RBX: ffff888060710a78 RCX: 0000000000000000 [ 397.115677][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6b0d RDI: ffffffff8c3fe580 [ 397.120337][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 397.124236][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff94654600 [ 397.149068][ C0] R13: ffff888096de7000 R14: ffff888060710a78 R15: ffff888060710000 [ 397.152444][ C0] try_to_wake_up+0xd8d/0x1c90 [ 397.161241][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 397.166130][ C0] ? futex_hash+0x311/0x400 [ 397.169606][ C0] ? plist_check_list+0x1b8/0x280 [ 397.171542][ C0] ? plist_check_list+0x1b8/0x280 [ 397.178287][ C0] ? plist_del+0x308/0x510 [ 397.179992][ C0] ? find_held_lock+0x2b/0x80 [ 397.185811][ C0] ? futex_wake+0x4ea/0x5e0 [ 397.187628][ C0] wake_up_q+0xa1/0x130 [ 397.195172][ C0] futex_wake+0x4f4/0x5e0 [ 397.197814][ C0] ? __pfx_futex_wake+0x10/0x10 [ 397.199934][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.208923][ C0] do_futex+0x2b2/0x440 [ 397.214393][ C0] ? __pfx_do_futex+0x10/0x10 [ 397.217296][ C0] ? find_held_lock+0x2b/0x80 [ 397.222688][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 397.230016][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 397.238503][ C0] __ia32_sys_futex_time32+0x2f4/0x470 [ 397.246454][ C0] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 397.252718][ C0] __do_fast_syscall_32+0xe7/0x970 [ 397.257601][ C0] do_fast_syscall_32+0x32/0x70 [ 397.263197][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.267293][ C0] RIP: 0023:0xf6ffefec [ 397.269691][ C0] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 397.273556][ C0] RSP: 002b:00000000ffdd60bc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 397.279171][ C0] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081 [ 397.285202][ C0] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.290292][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.295657][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 397.301387][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.305608][ C0] [ 397.308103][ C0] Kernel Offset: disabled [ 397.310329][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:40:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f835 RDI=ffffffff9b9ef520 RBP=ffffffff9b9ef4e0 RSP=ffffc90000007578 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3130383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6ef208 R15=ffffffff85a0f7d0 RIP=ffffffff85a0f85f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032e00ff8 CR3=000000006c924000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c74a540 RSI=ffffffff81b53ece RDI=ffff88801c74a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff96705ab0 RBX=000000000000017f RCX=ffffffff9671ba70 RDX=ffffffff967457c8 RSI=0000000000000596 RDI=ffffffff980ced68 RBP=0000000000000030 RSP=ffffc900005372b8 R8 =ffffffff967457f8 R9 =0000000000000153 R10=ffffc90000537448 R11=0000000000000000 R12=ffffffff81e50820 R13=ffffc90000537360 R14=ffffffff81e51630 R15=ffffffff9806d8c8 RIP=ffffffff81e5205a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53cbff4 CR3=000000004f294000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000014c557 RBX=ffff88801c7ea540 RCX=ffffffff8bb9e335 RDX=0000000000000000 RSI=ffffffff8e1a6b0d RDI=ffffffff8c3fe580 RBP=ffffed10038fd4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=000000006c924000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000