last executing test programs: 45m56.150573782s ago: executing program 32 (id=1698): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x1, 0x803, 0x0) sendto$packet(r0, &(0x7f0000000100)="ff008400e01980000200977686dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4}, 0x14) 42m7.876154323s ago: executing program 33 (id=2723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "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"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="861c6018941173b57b5573e341a4de271a7702d35ca3de77894f4a58dabb", 0x1e}, {&(0x7f0000000500)="898f4cf4fdcc0b516167531815608f2877271d90f037fd59e8764f78f75f0381eac699272d5c2db1a9b7890bbd3ad5b5a857a29ef55fcdd5ad643c5849d64c0c8260169dcae2b7dbaa88abce8f66044f140af6f757d0f4baceccbdd17ee512846ffff54607286c6bc89df0071fcd8077a1e99b15a6c45b55b214f599b78451d5d23ef4fa3e6c8f2a9128bed4bfe0b89719c67bd803ef6ea2f110c187b94c40a76d1bf1", 0xa3}], 0x2, &(0x7f0000000640)=[{0xb0, 0x10b, 0xcf1e, "fa00f721c7ac20ceea2884c589982364c0ecca2397ec862dd13ebd8898b18ac8d9a7a3e9168f03597bfe4ca06a3cc763746e1f1b43f34d587607fa7993390cdb54b89b39a6d3936557f4c9d18f089ee9295fdcad99a49732431f2f16bfc5f05ba264a972a2c7f033f7695670b776ae30bec30a6b44940ef8dc4f40bba920691bf05c6dd3a4378e5c0a5cb8654f927dcc2dce2d4494eab022b128e4341fe2ceb79431"}, {0x84, 0x118, 0x2e2, "4a68403dde786f1dc50357e4603b3ecfea4fd6ab541eb8a2ee043594ebc77b7e923dabfc0a2a41d6dd3191197605d0cc85b196589577991ba619105c29c5d434016d61781473314efc0c0e42816315e465d4a94f8e0b532118d195f137ae638804b3a2ee17ec995d5769a4b5bdf58a2d28e724f3f27f"}], 0x134}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f23021e8d0b9fafbd55d1cc2b57a8fa6d8c2478779333a3176306722ee20aba5", 0x20}], 0x1}}, {{&(0x7f00000008c0)=@ll={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="84f617b42ce54f21fa6f14a86c01f1f895a9115f65b0fbfd3f0ce8f106d81bf87e7290dcabf2794fdcbda84efe9c9c49fef637cfa4e3c78428bbfaaeb454f60c9ba821549166a228a1e44b3dbd5733441b8245caca8ba1e2bf784638ddd25a82e07a4b4ddde74d6b599b144ec8b9ef655dbf422058cc0b4b1577e51131f00607f5265c639bcfb2c13d0a07f0401d6c8d057683a960cdcedf7757419fb5b51751da49b50e1c7745", 0xa7}, {&(0x7f0000000a40)="3f9453b3c9632a6da01b348e366c906f21f95b2af33db013551fd7a28f441d773718bcf13c36246f4047c1f4756996289e0a332bdf7e96daecd12704020639050c18808752f121261e088bc8e08c33b4c77a302d1126e18e995cf26ce3c1939908ff908348333c93eef4036da1f841638b0505dad4962f23051bbb1d154a90bdd916bf331dafe32e95420490269932aa753c80b7d2af9572ad1bb04aa6823405fdd94474619cac58740322c89a78151df41f7d0c35534abdad20", 0xba}], 0x2, &(0x7f0000000b40)=[{0xc8, 0x0, 0x9, "7350f1baaa62f376deb8fa10672f3ace9dfd2198c8ead04e6d5b454d70bff057cbd2b0825472a1c5739ff2b8bb9bffcab0738ed3a1a3ab110970b8a486819c0370a24a86b592ebd1db16695927e8cad18ce5b48f66dd32799eb2a25d710f58115963e42a2ac4a816b2696ec61f7a40e9c75d58335b52ccd23bde5b00be580865bacedf50563799e10c6cf5be4cc539646b1cefb660a7c6e554674e83564e22228566ef4bcc4d939436e7da2083b4691c0d4ce8efd9cabdbbf7de"}, {0x5c, 0x115, 0x6, "324e7c6d7fdd84bb16afab9ca89a2e0cd1feea050a76f9db04d17015f9fbc38fb968905b75d276b6331be693c40ca1e971e994e829c661206f04cafd5c1d13d00c1db31814ab252a9a216a034b"}, {0xc4, 0x108, 0x6, "96acb12d31066da104604c138b491b109a437d5b9879206416257c138511b05c4aeb00b7810f7b3d197584622458424e8afe0862174fbe7f31d321ec87e52adf22498d468a13ac3d809ab1f3aa5fb0e4936479047f6dbdfeb4ddec01b21da2a98b32ac7fb76d70bd25023bc92414da9310171033511ac8ea57950d035420a1c0a988b0f0a60487517deccd3835064dc3797693fe3678a43d92db106a0bcb4fa3cb5cb9d9d85d540edd644260e6590112458b5c33f60a7a"}, {0x64, 0x10d, 0x3, "ee30727bfb2a637462fafe67587981b8100e8a6a2bf8732ecc3bf40534ee0278d931e557ae70f22b6b59474a0498998d548d09cd2ce8265bad6e695c46a0de221eecaae2811888235f84fce029b30d7d422db09e91"}, {0x94, 0x108, 0xfffffff8, "5d8d81b01d44a9c1777690c3d56740792a94c797cb3fdf3a4751845ce3883445056b6b006005a4fd545255d0d0521d3f53267eb175510f5a65273276302bfb445fc8ad4cd394cc7f1992b313a3f4654fa0e980dede6a89fbe89153817c8bb816b75a1f46d6e8a9ab3589cfa558995cce685683261c743a15c2459da3a035b588692f31159cc4"}, {0xfc, 0x0, 0x1, "6f56a9d1476c3ceeab66879eb34285061c08fd750f4d37659ea2ba7e060f32113d95e6af678366c56aa8e9d8482522d78ddaaad90f23dd4542c50b7f62c42d4e76e78208f3e7ac33c79a258bf4d3375f1f37b240da72409ba2b1d7543b3df6eaffd993a0e273edc0af66b4174586bbf7db509e6c493ba8924200987a409ac5c96ad45c99e0930e256423ad25d278b6f8f676e7f87fb562512938a6527ef6497b163f40d2aded49f1b73464cf3a04c325ae594665deb386ab6915b9e32ad2a415e3567e22f4ca6262739723c1d608c40849ac4576d7dd9529c939b1694dc9a686cc3c0fae8e4f12159711ab54583644"}, {0x100, 0x117, 0x3, "da8aa5f9562a7758c619e0d1e5ddb6af4160e27e3e3a35af18df59c1ee70c340285354d6e948d3ca957f907346c5dca3317dcbe811db82b409f1a0883fe0bbd4480d2c392f7f24ead366070c052e57c487154406e43ec6ab82f58adac5a25d5abe8783bd93a0bb054724dcf2d921968ad323525065a16b4df9d7faf95bf5a6d1bdf11f423ef9eac41744a3a0373e206b73e6f029b18cf034c31ba69d782d9c79f12d7a51bb9e12a664e0433e1f94856f16e389d3977f6cdb9a3b21fc61fbc633e4e503616b7ef35416d985b153e3b638c6a23b9448174ed65acc0ee6ca32a3db9e2bea59a147a44391fdc9d2bb66c96fcea41c"}, {0x6c, 0x116, 0x1, "a23055eb372a06cd88531a82ec7ae5f5810d5552a338f1cceaf6f67158cdf474d943054f2be1c15da8c43097aa32db3d7929daf783729badd1f17fff1f4e36cbdf22aa0c8701f105851597774e8f44297596433e773e42d5f33426ba71f9"}], 0x548}}], 0x3, 0x400d0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 39m31.431107847s ago: executing program 34 (id=3752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x3}}, 0x0, 0x0, 0x21, 0x0, "fbb3af84d9d7165048514205defffff97f905c1990c91e0323ba5897af26ebf89b6b0412c105cf0b3436d27c8101f3fd8f9ac440ec5a21cbf66c9f22cdf158f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8) listen(r0, 0x0) syz_emit_ethernet(0xfe43, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) 38m49.294104081s ago: executing program 35 (id=4140): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 38m37.008347971s ago: executing program 36 (id=4245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, 0x0) socket(0xb, 0x2, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 38m30.282966108s ago: executing program 37 (id=4273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) 38m12.601117302s ago: executing program 38 (id=4351): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 38m3.971031197s ago: executing program 39 (id=4404): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r4, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}}, 0x40000) epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000000a0601010000000d0000000001000000050001000700000014000880100007800900120073797a32110000000900020073797a32000000000800094000000000a4691b98897d92890489ae4c00904bca8e19d67cffc98db8ad8e0c3ceaa38b60db670fad0d0c52dc68a8afaa93cef60e3ce14e21775b9c211f985d4d5483e81ded52689a3dd4a5673dff3f784460cabb9b344e227ef5"], 0x44}}, 0x0) userfaultfd(0x1) 37m59.191077986s ago: executing program 40 (id=4413): pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 37m49.798064598s ago: executing program 0 (id=4476): r0 = syz_usb_connect(0x0, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="120120020e13e5088d1a0d109e30010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0}, 0x0) 37m46.730229634s ago: executing program 0 (id=4477): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000000c0)='q', 0x1}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 37m46.729327496s ago: executing program 0 (id=4478): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 37m46.662080625s ago: executing program 0 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20040000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 37m46.661527287s ago: executing program 0 (id=4480): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000004c0)=ANY=[@ANYBLOB="d4dc34ebaf8d81956b272ddb22002b0b76c7071eaa494b651083e4d36ba5f51a0893cd08be8e1bfbad737ba389d39c20de1920675148"], 0x5, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000340)=0x84) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000001, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 37m43.23563627s ago: executing program 41 (id=4449): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0xff, 0x1f], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 37m42.252866311s ago: executing program 0 (id=4482): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="830300", 0x3}], 0x1}}], 0x1, 0x4004c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 37m42.230665236s ago: executing program 42 (id=4461): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/llc/socket\x00') sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x8, @local, 0x1ff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e00000027f0000010000000003", @ANYRES8=r0], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @remote}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 37m34.839747085s ago: executing program 43 (id=4471): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1f, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) socket$netlink(0x10, 0x3, 0x15) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400100016800c0001000000000000000fff080005000a010102060015000600f8fd07004d226d309e78387e397f069db7c76dcc982e78e3f75d36617bc54d2b930436d76bf68f8cbcec04e39d9da821d20c215894d95a1d1f0bb11c14b3eab7d7a1a3d1554b5a182dbd1a5525c2e7b4c8973b8cda2f87217135ddb50622615c"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 37m26.584322366s ago: executing program 44 (id=4482): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="830300", 0x3}], 0x1}}], 0x1, 0x4004c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 34m37.843860771s ago: executing program 6 (id=6189): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 34m37.479901138s ago: executing program 6 (id=6190): r0 = openat$sysfs(0xffffff9c, 0x0, 0xc581, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) landlock_restrict_self(r1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026, r4}, &(0x7f0000000500)={0xec56, 0x9, 0x0, 0xd, 0x7, 0xe}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r8, &(0x7f0000000280)=""/149, 0x95) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, {0x3, 0x0, 0x1, 0x0, 0x89, 0x0, 0x0, 0xa5, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r9, 0x40046104, &(0x7f0000000540)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 34m37.074717633s ago: executing program 6 (id=6191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x10000) 34m37.018351452s ago: executing program 6 (id=6194): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x40000, 0x3ff, 0x3, 0xffffffffffffffff, 0x0, 0x0}) 34m36.648017064s ago: executing program 6 (id=6197): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000004c0)=ANY=[@ANYBLOB="d4dc34ebaf8d81956b272ddb22002b0b76c7071eaa494b651083e4d36ba5f51a0893cd08be8e1bfbad737ba389d39c20de1920675148"], 0x5, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r5, 0x5, 0x30}, &(0x7f0000000440)=0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62f20534}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 34m35.714937666s ago: executing program 6 (id=6201): socket(0x2b, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x404}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x1) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3, 0x4}, 0x38) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @any, 0x15}, 0xa) openat$procfs(0xffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xe27, 0xec0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 34m21.420019438s ago: executing program 5 (id=6276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 34m20.577684041s ago: executing program 45 (id=6201): socket(0x2b, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x404}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x1) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3, 0x4}, 0x38) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @any, 0x15}, 0xa) openat$procfs(0xffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xe27, 0xec0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 34m19.14347758s ago: executing program 5 (id=6283): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r2, &(0x7f0000000000), 0x0) 34m19.109290632s ago: executing program 5 (id=6284): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000feb400000000000000f5fffff6ffffffff"]) 34m18.125795873s ago: executing program 5 (id=6287): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 34m17.17962651s ago: executing program 5 (id=6289): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000004c0)=ANY=[@ANYBLOB="d4dc34ebaf8d81956b272ddb22002b0b76c7071eaa494b651083e4d36ba5f51a0893cd08be8e1bfbad737ba389d39c20de1920675148"], 0x5, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r5, 0x5, 0x30}, &(0x7f0000000440)=0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62f20534}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000001, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 34m16.270286124s ago: executing program 5 (id=6295): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x40000, 0x3ff, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x7f, '\x00', @string=0x0}}) 34m15.710092298s ago: executing program 2 (id=6300): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8, 0xfff, 0x5, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000003c0)) 34m15.442737151s ago: executing program 2 (id=6301): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 34m14.389698504s ago: executing program 2 (id=6305): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 34m14.315480874s ago: executing program 2 (id=6306): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f000001aa40)=ANY=[@ANYBLOB="61643d62aafff95227c234ecaa942184fd83aa24a6d5e97c62a05cd12469809446950fef0268883ce88211c5da32471c7000cffad8dce0482adc339a4b5c3539c824c91ca36777bd1337c0ed9867b4920858c9becace30cdce7d1b0c017b896c1b751734eebc1f9a96097604bcd9e1713418bd54aceb3afd85b37e929563fe710de1a0d93ebe7d2d1887723f55910901cd0c254cd7b2da81672deb575d00e9d793b6608c8696c3d7ba14faa0fff27fe4873f3946d8458e963b812262149900", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 34m12.913876948s ago: executing program 2 (id=6312): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000004c0)=ANY=[@ANYBLOB="d4dc34ebaf8d81956b272ddb22002b0b76c7071eaa494b651083e4d36ba5f51a0893cd08be8e1bfbad737ba389d39c20de1920675148"], 0x5, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r5, 0x5, 0x30}, &(0x7f0000000440)=0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62f20534}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000001, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 34m12.043271469s ago: executing program 2 (id=6315): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 34m1.059012276s ago: executing program 46 (id=6295): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x40000, 0x3ff, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x7f, '\x00', @string=0x0}}) 33m56.946447371s ago: executing program 47 (id=6315): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22m17.871488698s ago: executing program 9 (id=9573): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001e0001000000000000000000ff0200000000000000000000000000010000000000000000fc01000000000000006c000000000000000000000000000041ad35cb25a2e47c47c836"], 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x2000, 0x3, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000002700)=""/102392, 0x18ff8) r12 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r12, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 22m15.385455232s ago: executing program 9 (id=9587): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}, 0x0) r2 = gettid() r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x2, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x8000006, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x3, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0x0, 0x0, 0xda7a, 0x4, 0x8000, 0x200b, 0x400, 0x401, 0x6, 0x7, 0x4, 0x3, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xbfff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x5, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0x326c, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x401, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3ffffe, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d00028400000000564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x166830, 0x0) 22m13.908218788s ago: executing program 9 (id=9592): syz_usb_connect(0x6, 0xfffffffffffffc8e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r4, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$kcm(0x10, 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000540)=@nfs={0x90, 0x24, {0xcfed, 0x100, 0x0, 0x80, "89a9fa62a990e471a4757fd7716a05eebd81e9d85f5ad8eaa294d1bd61380e0b38374dcabb480ee956cf6351466ffdcaba817434712aef991f4c706e3a2513213883d2d8456a4795ce8e66181daf0488df7b737b33a63d581bd10c48917857649f79cdb083c776e3db4de203d70af5948b9bae83efa84afe5b8e7257c0d5c930"}}, 0x3) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 22m13.362666568s ago: executing program 8 (id=9596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaa8aaaaaabb86dd6d002000001011ff00000000000000000000000010000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 22m13.290883129s ago: executing program 8 (id=9597): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 22m13.249071614s ago: executing program 8 (id=9598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.opaque\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x40) sendfile(r3, r5, 0x0, 0x10ffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23002cbd7000fcdbdf250100000014000600fe8000000000020000000000000000210800020003000000080001006e666300"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) 22m13.012153954s ago: executing program 8 (id=9599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.opaque\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x40) sendfile(r3, r5, 0x0, 0x10ffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23002cbd7000fcdbdf250100000014000600fe8000000000020000000000000000210800020003000000080001006e666300"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) 22m12.933224745s ago: executing program 8 (id=9600): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xfe, 0x0) 22m12.863473845s ago: executing program 8 (id=9602): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000feb400000000000000f5ff"]) 22m10.762641596s ago: executing program 9 (id=9607): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x300, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 22m10.692850841s ago: executing program 9 (id=9608): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (fail_nth: 6) 22m10.692627291s ago: executing program 9 (id=9609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.opaque\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x40) sendfile(r3, r5, 0x0, 0x10ffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23002cbd7000fcdbdf250100000014000600fe8000000000020000000000000000210800020003000000080001006e666300"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) 21m57.322314117s ago: executing program 48 (id=9602): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000feb400000000000000f5ff"]) 21m55.34975044s ago: executing program 49 (id=9609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.opaque\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x40) sendfile(r3, r5, 0x0, 0x10ffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23002cbd7000fcdbdf250100000014000600fe8000000000020000000000000000210800020003000000080001006e666300"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) 9.040396876s ago: executing program 3 (id=16099): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) 5.981310451s ago: executing program 3 (id=16112): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x175068f3fa4e714d}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/91) statx(0xffffffffffffff9c, 0x0, 0x3000, 0x8, &(0x7f00000015c0)) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000009000000000000000008001b00000000"], 0x30}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) listen(r6, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0xfd36) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) 5.53116422s ago: executing program 1 (id=16114): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x705a82, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) 4.635552604s ago: executing program 1 (id=16117): fanotify_init(0x200, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f00000070c0)=""/4107, 0x100b}, {&(0x7f0000000000)=""/218, 0xda}], 0x5}, 0x8}], 0x4, 0x122, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0)={0x1, 0x2}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.723905814s ago: executing program 1 (id=16122): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000380)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x35, 0x37, 0x65]}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x15, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x58}}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$fb0(0xffffff9c, 0x0, 0x1, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000780)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 3.342617806s ago: executing program 7 (id=16123): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5633, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x61}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6d15, 0xe5, &(0x7f0000000680)=""/229, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="64030000240001dbdf25520300807a0264807c002180d9b45c1c72ea0f6ec741f650e5d8f1c76e4dd42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880a00fa00", @ANYRES32=r3, @ANYBLOB="04001d80180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1d163c4dacf64f522205c5db52d49b537c72f55ceba4e254b869c565f44022a586f05577e8c09b75b685d010f800c0063009200000000000000796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b163633239d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f208005e00", @ANYRES32=r3, @ANYBLOB="040030800000000c0056001206000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5060000"], 0x364}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)={0x4c0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x474, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x340, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xfffffffffffffe73}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x5d, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{}, {0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x0, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x72, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r8, r8, 0x0, 0x40008) 2.757730451s ago: executing program 3 (id=16124): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x9c}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 5) 2.748812466s ago: executing program 1 (id=16125): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) setsockopt(r1, 0x107, 0x2, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) write(r0, &(0x7f0000000340)="23000000010007", 0x7) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000003fc0)=0xfffff800, 0x4) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "031c4fb87d3f475cb26912a999c1377f", 0x7}}}, 0x1a) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "99c2f3d6d37ef54487a98663424f22329c80d3631154f6dd7e176f0f8076c8d6dd3126c40624b4197ce9e146093fb0c6c1b037fab0eb45ad6e675464bf293e8479789358aa2a827c4cb9fe002e6991438785d6c9185792328e5f9ebe1b07b7aaef3e41219713c6fe1baa1569b405c7d76b16fed4fb4fe8af0c2fd1913c1199"}, 0x83) 2.625954209s ago: executing program 4 (id=16126): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3bf40300010006", 0x7) 2.625522853s ago: executing program 3 (id=16127): fanotify_init(0x200, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f00000070c0)=""/4107, 0x100b}, {&(0x7f0000000000)=""/218, 0xda}], 0x5}, 0x8}], 0x4, 0x122, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0)={0x1, 0x2}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.61693135s ago: executing program 1 (id=16128): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000380)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x35, 0x37, 0x65]}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ctinfo={0x60, 0x15, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x24, 0x6, "0744f1c7eaa76c23143edcd943c8291a940644d7b3a069e06f0b46ea71deff7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x78}}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$fb0(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 2.616249723s ago: executing program 4 (id=16129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40008073, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.542491697s ago: executing program 1 (id=16130): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x175068f3fa4e714d}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0xfd36) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 2.377803286s ago: executing program 7 (id=16131): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) syz_clone(0x400, &(0x7f00000005c0)="4d269fe22da67c9593730fa2688ee8aa28704a1d6d529fe5482214c7c2604e145fc2eb38c8ebe95958ebfd968987e64f02d68f1ac3a9cb85c803f1e4c9243596fbcfd5d52e51f36edfe3f1d772668f1816e179b9e1375953ae4105d8e201f633fbd0ee5a5112cd524cddc30bbfbeddd3c6ba6aa28050e3f54183e1130c07cc5c2db5ee43f518635ad1cb20a687de3164abefea6d62e1236a0aa318c417b2c1b9303bff99dfe08587d529b0005c6134273cf0c5dd69c82079014c6ac09eec242277fbffa809d394fdfb4f06e3b7082677b75011471e5b159c77170c6bf79a3ed41b1b278fdd79c0dc7cb6937f8e71eed2ba51a84122b3df829868492845a4872eb684c3a843408c2538bd09d8965e7dd75f07f8b97b107cee633e31b9fd2fb14989943c74049777fa08e386bab9802da75d05867fdedb33ebc3ae9f17dc5126a88c96daf939730016feeca6ea6089962fc4da35e129145d4868770e7d370feddb2dbde99d2d3f9a860d4ba46b26f558dc30dd0c1a223706a92b95d855383497fa1d9d0313318f33ebf89c12a433bf4167055cc1e0a54f5509c738977c124f2ed92f35bc391c1fadcfd1c0038ea71a73989ae44752da3f7fc077a0d63711809edb1aa557447d12ed2beb86348d435c1a5b61cd3f7d0926e935ec9e48606b85624b1483fd93b5a56e22a6f7f017c624be88406a518135ae3c91d9e30fe203dbdec21748bcec885ea394bc7b8872d4c91adaea02541557d795a214b2f029c9cdd77a26409753306f64e6a27a951cb7c69236d5be06abfec329c0b5238a55e6b95ddfae829307925fae8d59f5c1b1bcffd720b0106d24acc719ae70206f85fb3619e35664bd6287a6aaf0bc7819760c20ba164b78da56efcd24e3a8221367cc750ab89f1b15d5060c905e95282c62dc1e8399d1adb8c7bdfc14fceeea80dbc969553d36da31ef3298be35ecb81009e3a26744baa9ee9e7176725b11d798e5909d4d6f69883f9864a792cc9d3aab95f6ef5365958448d79460072faecc9941940fb948104f1035966c80bb000d45cf3e9de90e3afff16075d81079c6bebb08c988deefc33f033161ba3611ba89e46c4437031ab3dc2626b5a8d7a4e1263c265ff8eb91d5e9aa5ee9ecd591f21b96a732f0458ecb3787b6ae460cdbfeaee68db6f59aae52fc4de325bf9fa57749a318c6d48b173056c4b5ba72e247f5a31d0655432d8da574b8b16539ed516c79f906e3780d78eb4f1d387204940d2eee3117a6be6944ab88ecdeee66c72dc72fdccde8f91c67be259bf3b039f7540d343f09b303c71030aba6f13bbd1313e895d4e1645f981a176bbc5a048fe027adfb364819d07d9402a4461cdd0bfc80a7b543bfdbe97a7e4c76a361cf6b51bd62768fe4ca8de9710298987966c84c00cbc171cc00d677bea4d130b684ec7547f39889581e6d761943f7380e8022a7e139c94d63223c2178d40b92de70e17badb291c1f6ece2131dc00a21a338a2d3c32a16b47f8379544c5f1567b384d221c1303a7c022c953c5a12c8ca3c5b1d69b3d2efc5adb2757dda18a47d839262507889872ba6f4a497a260ed434c135d079ec27e16f1cf701d178ff9890f89fadb02045ca3c2d4baf334b982a24ea8d6eb3688c40ae8dd38f53e02b233eba117277c515184c38645d9cbea512c2e535fc75149cee5fb088a2378209dcf53b9546b8333571acf177e42ee7ed4ce4401ae809c9fc7724368d3e7c90cdcfa36e902efa4a2bb1c0f34e5a11a9a624ba96d60c9e6e58ed96c024e27bb1ebb6055767bc43aeb4c9d3a365513ad99d5c1634e4321620003a26cfa86b231c23295aa84f27eb8b9d1afde0170ac8a0113a4f78602ad19e75e26b7e53f48a8a208e1b60340d1828fc457488f3cc1659c704afd20048d22ce7509ba9f16a3765903293f156b962f728ef78e359064411a1cd5df3ec8730b016df36fdef7bf4a7f8613f8f5eb02e9c4ffa475eabb01f3003a5773fb5e8ccd1d9a03d5b21949be6b41385194b4b2e9e56f51c1de78e6483b509659aa41bd9ec5f46a4a98125d0922ae07e6a135a6bcf466d43b3f3617c8ecd94f348ca7a6d8fc2c5dfe4825f62d3d9c0d404895bcae8bd0de1802d2179252f9bbe99db030b6d47f880409514c60403655fbe365b4d61b25988c6fca5e5766c5ac9b13898eacd0c02d0199ce6f2b195530c6f32f6acf5d364bbb3d781bb4d5094e72b58072256efc918ac77beff900a5747462d8c00f8f7742f145cfb04b413b82487e4f419d440190571f06fb6537cd26cfe9964b81ba58ce28281630e76d9211a962bd4dd0f8bff21acb5709384dacfb46c1b976259cc263df52f1157f55a0294c9ac9ae2dff787f28ee3f08610967eddb451d1fbc08999c306aee735b87367e936ffd6885d8aa1c04365b52ffecb9d328bbfbb94725f19a5eef2fb5bd", 0x6c0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0x7}}}, 0x24}}, 0x0) (fail_nth: 1) 2.281117509s ago: executing program 7 (id=16132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000003) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) ppoll(&(0x7f0000000640)=[{r3, 0x2009}], 0x1, &(0x7f0000000700), &(0x7f00000006c0)={[0x0, 0x1e01]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) io_setup(0xfb, &(0x7f0000000000)=0x0) io_submit(r10, 0x1, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x101, r4, 0x0, 0x6000}]) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0xfdff) r11 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x110, r11, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40e968c2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x8c, 0xc5, "393bbb2c994ad43ab50cac19353a8648650789adb16f46f1ac2710776cff7302f7d3cd984ac4fcbbff77909d7bec4653e5537602cfc7ffddfa1555453e8f7e1ca54a5c65ab97f96ea85304885401452a1c5ead45d9e05948832bbc366206af26e053a72fdea01e34c0596d4408b6c4c5c0a25e1a9ffbc979cfe5168dadd7d41579d8e75c74cd79c6"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x960}, @NL80211_ATTR_VENDOR_DATA={0x2c, 0xc5, "196248f2942467362148c7c4c6d07901589033bdd0360b614f3c2ae037c81e5c1f4bb84be169c511"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x40814}, 0x4004000) 1.914429049s ago: executing program 7 (id=16133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x800, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) readv(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close(r5) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000180)=0x8, 0x4) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004c00)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000014000e"], 0x104}}, 0x0) 1.694744332s ago: executing program 3 (id=16134): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, 0x0, 0x200448c4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c36c15a25ffe360a3262efcfd64d780125a80dcba463661688a922adcb24fa18ecc87223ae6a20ce716aecf93e02750f0b86b80f91f59b1172b442e30cc14f2d08a082b2cb90fc6eaebcebf8f8c9b64e65d48b989cea8bf5179df216684a221c72632afc37e8d72d956be7d1dc752b803c9869476fa670dc9245c5ad153eaeb822d66ea17c1dfd42932510000000000000006674763ac70bab340819bd3326a801c0a3d9c881d50c1a656816956581fd8e466aec86ecd4c815bfdb7d21909c43547d0eadc1457892761b6ced1c03af28d233a126786df7e460800873cc18112"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x1e0, 0x7, 0x0, 0xf, 0x0, {}, {}, {}, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0xc, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0x8}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.228605192s ago: executing program 4 (id=16135): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d7d85b37507e277247", 0x9}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.117624213s ago: executing program 4 (id=16136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d7d85b37507e277247", 0x9}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (fail_nth: 1) 970.102344ms ago: executing program 4 (id=16137): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r4, &(0x7f00000000c0)=0x33482a89, 0x8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x40, 0x1, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r10, r12, 0x25, 0x4}, 0x14) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r13, r14, 0x4, r10}, 0x10) r15 = socket$inet_udp(0x2, 0x2, 0x0) splice(r8, 0x0, r15, 0x0, 0x4ffe6, 0x0) dup(r9) 926.58696ms ago: executing program 7 (id=16138): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = dup2(r2, r2) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r10, 0xffffffffffffffff, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 675.266941ms ago: executing program 3 (id=16139): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x705a82, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) 6.300771ms ago: executing program 7 (id=16140): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) 0s ago: executing program 4 (id=16141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000003) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) ppoll(&(0x7f0000000640)=[{r3, 0x2009}], 0x1, &(0x7f0000000700), &(0x7f00000006c0)={[0x0, 0x1e01]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) io_setup(0xfb, &(0x7f0000000000)=0x0) io_submit(r10, 0x1, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x101, r4, 0x0, 0x6000}]) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0xfdff) r11 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x110, r11, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40e968c2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x8c, 0xc5, "393bbb2c994ad43ab50cac19353a8648650789adb16f46f1ac2710776cff7302f7d3cd984ac4fcbbff77909d7bec4653e5537602cfc7ffddfa1555453e8f7e1ca54a5c65ab97f96ea85304885401452a1c5ead45d9e05948832bbc366206af26e053a72fdea01e34c0596d4408b6c4c5c0a25e1a9ffbc979cfe5168dadd7d41579d8e75c74cd79c6"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x960}, @NL80211_ATTR_VENDOR_DATA={0x2c, 0xc5, "196248f2942467362148c7c4c6d07901589033bdd0360b614f3c2ae037c81e5c1f4bb84be169c511"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x40814}, 0x4004000) kernel console output (not intermixed with test programs): r=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2984.752095][T21028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.961133][T21028] usb 6-1: usb_control_msg returned -32 [ 2984.963501][T21028] usbtmc 6-1:16.0: can't read capabilities [ 2985.378621][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15390'. [ 2985.998235][T21434] usb 46-1: device descriptor read/8, error -110 [ 2986.388892][T21434] usb usb46-port1: attempt power cycle [ 2986.503391][T27695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2986.506258][T27695] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2986.511213][T27695] vhci_hcd vhci_hcd.0: Device attached [ 2986.589157][T27695] netlink: 'syz.4.15391': attribute type 10 has an invalid length. [ 2986.758093][T21434] usb 46-1: SetAddress Request (108) to port 0 [ 2986.763774][T21434] usb 46-1: new SuperSpeed USB device number 108 using vhci_hcd [ 2987.152566][ T9549] usb 52-1: device descriptor read/8, error -110 [ 2987.264317][T27696] vhci_hcd: connection reset by peer [ 2987.266533][ T90] vhci_hcd: stop threads [ 2987.268049][ T90] vhci_hcd: release socket [ 2987.269821][ T90] vhci_hcd: disconnect device [ 2987.307580][ T60] usb 6-1: USB disconnect, device number 101 [ 2987.568618][ T9549] usb usb52-port1: attempt power cycle [ 2987.571779][T27708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2987.574424][T27708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2987.581632][T27708] vhci_hcd vhci_hcd.0: Device attached [ 2987.908232][ T60] usb 40-1: SetAddress Request (102) to port 0 [ 2987.910516][ T60] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 2988.039512][T27714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15397'. [ 2988.042372][T27714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15397'. [ 2988.159347][ T9549] usb usb52-port1: unable to enumerate USB device [ 2988.189589][T27709] vhci_hcd: connection reset by peer [ 2988.191831][ T13] vhci_hcd: stop threads [ 2988.193325][ T13] vhci_hcd: release socket [ 2988.195203][ T13] vhci_hcd: disconnect device [ 2988.339164][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15408'. [ 2988.910892][T27732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15401'. [ 2989.599940][T27746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15404'. [ 2990.928006][ T9549] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2991.079557][ T9549] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2991.082814][ T9549] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2991.086172][ T9549] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2991.089310][ T9549] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2991.093791][ T9549] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2991.098619][ T9549] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2991.101624][ T9549] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2991.104207][ T9549] usb 6-1: Product: syz [ 2991.105584][ T9549] usb 6-1: Manufacturer: syz [ 2991.113479][ T9549] cdc_wdm 6-1:1.0: skipping garbage [ 2991.115748][ T9549] cdc_wdm 6-1:1.0: skipping garbage [ 2991.120497][ T9549] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2991.122785][ T9549] cdc_wdm 6-1:1.0: Unknown control protocol [ 2991.624020][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2991.624227][ T9549] usb 6-1: USB disconnect, device number 102 [ 2991.626031][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2991.629747][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2991.998671][T21434] usb 46-1: device descriptor read/8, error -110 [ 2992.695223][T27768] input: syz0 as /devices/virtual/input/input291 [ 2992.958094][ T60] usb 40-1: device descriptor read/8, error -110 [ 2993.097045][T21434] usb usb46-port1: unable to enumerate USB device [ 2993.361519][ T60] usb usb40-port1: attempt power cycle [ 2993.543722][T27777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15413'. [ 2994.508483][ T60] usb usb40-port1: unable to enumerate USB device [ 2994.537017][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15417'. [ 2995.084621][T27798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15419'. [ 2995.161785][T27800] binder: 27799:27800 ioctl c0306201 80000280 returned -14 [ 2995.176370][T27800] binder: 27799:27800 ioctl 8933 800002c0 returned -22 [ 2995.333172][T17877] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 2995.360334][T27810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2995.362393][T27810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2995.365048][T27810] vhci_hcd vhci_hcd.0: Device attached [ 2995.510751][T17877] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2995.513878][T17877] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2995.519059][T17877] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2995.523137][T17877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2995.728363][T21028] usb 44-1: SetAddress Request (17) to port 0 [ 2995.730313][T21028] usb 44-1: new SuperSpeed USB device number 17 using vhci_hcd [ 2995.781982][T17877] usb 6-1: usb_control_msg returned -32 [ 2995.789195][T17877] usbtmc 6-1:16.0: can't read capabilities [ 2995.975682][T27811] vhci_hcd: connection reset by peer [ 2995.978227][ T1241] vhci_hcd: stop threads [ 2995.979690][ T1241] vhci_hcd: release socket [ 2995.983000][ T1241] vhci_hcd: disconnect device [ 2997.044766][T27832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15427'. [ 2997.211682][T27835] binder: BINDER_SET_CONTEXT_MGR already set [ 2997.214173][T27835] binder: 27834:27835 ioctl 4018620d 800001c0 returned -16 [ 2997.847331][T27843] tmpfs: Group quota block hardlimit too large. [ 2998.042665][T22084] usb 6-1: USB disconnect, device number 103 [ 2998.150438][T27846] binder: 27845:27846 ioctl c0306201 80000280 returned -14 [ 2998.167558][T27846] binder: 27845:27846 ioctl 8933 800002c0 returned -22 [ 2998.528544][T27856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2998.530561][T27856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2998.538140][T27856] vhci_hcd vhci_hcd.0: Device attached [ 2998.808082][T22084] usb 40-1: SetAddress Request (106) to port 0 [ 2998.810320][T22084] usb 40-1: new SuperSpeed USB device number 106 using vhci_hcd [ 2999.066359][T27857] vhci_hcd: connection reset by peer [ 2999.069377][ T13] vhci_hcd: stop threads [ 2999.070776][ T13] vhci_hcd: release socket [ 2999.072112][ T13] vhci_hcd: disconnect device [ 2999.359342][T27864] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2999.361462][T27864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2999.366398][T27864] vhci_hcd vhci_hcd.0: Device attached [ 2999.460784][T27864] netlink: 'syz.3.15437': attribute type 10 has an invalid length. [ 2999.918604][T27865] vhci_hcd: connection closed [ 2999.918826][T28985] vhci_hcd: stop threads [ 2999.922765][T28985] vhci_hcd: release socket [ 2999.924814][T28985] vhci_hcd: disconnect device [ 2999.938314][T27881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15441'. [ 3000.798627][T21028] usb 44-1: device descriptor read/8, error -110 [ 3001.191969][T21028] usb usb44-port1: attempt power cycle [ 3001.753890][T21028] usb usb44-port1: unable to enumerate USB device [ 3002.772641][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15444'. [ 3002.775958][T27889] openvswitch: netlink: Flow actions attr not present in new flow. [ 3002.781345][T27889] qrtr: Invalid version 0 [ 3002.820235][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15442'. [ 3002.868379][T27893] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15445'. [ 3003.849301][T22084] usb 40-1: device descriptor read/8, error -110 [ 3004.258912][T22084] usb usb40-port1: attempt power cycle [ 3004.806339][T27919] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3004.808431][T27919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3004.815768][T27919] vhci_hcd vhci_hcd.0: Device attached [ 3004.896973][T27919] netlink: 'syz.4.15452': attribute type 10 has an invalid length. [ 3004.918203][T22084] usb usb40-port1: unable to enumerate USB device [ 3005.131976][T29237] usb 46-1: SetAddress Request (110) to port 0 [ 3005.133879][T29237] usb 46-1: new SuperSpeed USB device number 110 using vhci_hcd [ 3005.424761][T27920] vhci_hcd: connection reset by peer [ 3005.426587][T17108] vhci_hcd: stop threads [ 3005.428144][T17108] vhci_hcd: release socket [ 3005.429607][T17108] vhci_hcd: disconnect device [ 3005.526044][T27932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3005.528493][T27932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3005.532971][T27932] vhci_hcd vhci_hcd.0: Device attached [ 3005.598240][T27932] netlink: 'syz.3.15453': attribute type 10 has an invalid length. [ 3005.848009][T21434] usb 44-1: SetAddress Request (21) to port 0 [ 3005.978960][T21434] usb 44-1: new SuperSpeed USB device number 21 using vhci_hcd [ 3006.190240][T27933] vhci_hcd: connection reset by peer [ 3006.192735][T17108] vhci_hcd: stop threads [ 3006.194081][T17108] vhci_hcd: release socket [ 3006.200586][T17108] vhci_hcd: disconnect device [ 3006.236472][T27938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15456'. [ 3006.470827][ T40] audit: type=1326 audit(2025458974.093:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27945 comm="syz.1.15458" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3006.985465][T27953] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3006.987857][T27953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3007.017592][T27953] vhci_hcd vhci_hcd.0: Device attached [ 3007.042974][T27953] netlink: 'syz.7.15459': attribute type 10 has an invalid length. [ 3007.333273][ T9549] usb 52-1: SetAddress Request (4) to port 0 [ 3007.335586][ T9549] usb 52-1: new SuperSpeed USB device number 4 using vhci_hcd [ 3007.672940][T27961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.710857][T27954] vhci_hcd: connection reset by peer [ 3007.717859][ T90] vhci_hcd: stop threads [ 3007.725568][ T90] vhci_hcd: release socket [ 3007.727630][ T90] vhci_hcd: disconnect device [ 3007.779659][T27961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.853282][T27961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.949173][T27961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.041489][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.049034][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.063220][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.066572][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3009.138411][T22282] usb 12-1: new high-speed USB device number 50 using dummy_hcd [ 3009.310296][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15469'. [ 3009.417399][T22282] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3009.427983][T22282] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3009.431423][T22282] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3009.434331][T22282] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3009.450594][T22282] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3009.461542][T22282] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3009.464320][T22282] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3009.466731][T22282] usb 12-1: Product: syz [ 3009.481761][T22282] usb 12-1: Manufacturer: syz [ 3009.492263][T22282] cdc_wdm 12-1:1.0: skipping garbage [ 3009.493910][T22282] cdc_wdm 12-1:1.0: skipping garbage [ 3009.506156][T22282] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 3009.506747][T27991] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3009.508562][T22282] cdc_wdm 12-1:1.0: Unknown control protocol [ 3009.510066][T27991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3009.514814][T27991] vhci_hcd vhci_hcd.0: Device attached [ 3009.630219][T27997] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3009.632318][T27997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3009.635003][T27997] vhci_hcd vhci_hcd.0: Device attached [ 3009.718380][T27991] netlink: 'syz.1.15466': attribute type 10 has an invalid length. [ 3009.794444][T27997] netlink: 'syz.3.15470': attribute type 10 has an invalid length. [ 3009.798322][ T29] usb 40-1: SetAddress Request (110) to port 0 [ 3009.800396][ T29] usb 40-1: new SuperSpeed USB device number 110 using vhci_hcd [ 3010.158021][T29237] usb 46-1: device descriptor read/8, error -110 [ 3010.267353][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3010.269516][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3010.271858][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3010.273965][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3010.276086][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3010.278127][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3010.280351][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3010.282417][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3010.284348][T22084] usb 12-1: USB disconnect, device number 50 [ 3010.286248][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3010.286259][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3010.286266][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3010.562676][T29237] usb usb46-port1: attempt power cycle [ 3010.658052][T27992] vhci_hcd: connection reset by peer [ 3010.660146][ T13] vhci_hcd: stop threads [ 3010.661564][ T13] vhci_hcd: release socket [ 3010.663090][ T13] vhci_hcd: disconnect device [ 3010.687266][T27998] vhci_hcd: connection closed [ 3010.687504][ T13] vhci_hcd: stop threads [ 3010.690502][ T13] vhci_hcd: release socket [ 3010.692268][ T13] vhci_hcd: disconnect device [ 3011.048469][T21434] usb 44-1: device descriptor read/8, error -110 [ 3011.244291][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15473'. [ 3011.248516][T28005] openvswitch: netlink: Flow actions attr not present in new flow. [ 3011.249725][T29237] usb usb46-port1: unable to enumerate USB device [ 3011.254344][T28005] qrtr: Invalid version 0 [ 3011.467133][T21434] usb usb44-port1: attempt power cycle [ 3011.582356][T28018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15477'. [ 3011.739060][T28020] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3011.741118][T28020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3011.743714][T28020] vhci_hcd vhci_hcd.0: Device attached [ 3011.822389][T22282] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 3011.971754][T22282] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3011.974883][T22282] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3011.979625][T22282] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3011.982501][T22282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.039139][T21434] usb usb44-port1: unable to enumerate USB device [ 3012.190230][T22282] usb 6-1: usb_control_msg returned -32 [ 3012.194218][T22282] usbtmc 6-1:16.0: can't read capabilities [ 3012.214286][T28021] vhci_hcd: connection closed [ 3012.214501][ T13] vhci_hcd: stop threads [ 3012.219225][ T13] vhci_hcd: release socket [ 3012.220928][ T13] vhci_hcd: disconnect device [ 3012.398105][ T9549] usb 52-1: device descriptor read/8, error -110 [ 3012.796761][ T9549] usb usb52-port1: attempt power cycle [ 3013.346731][T28038] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3013.348815][T28038] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3013.352467][T28038] vhci_hcd vhci_hcd.0: Device attached [ 3013.475275][T28038] netlink: 'syz.7.15482': attribute type 10 has an invalid length. [ 3013.540636][ T9549] usb 52-1: SetAddress Request (7) to port 0 [ 3013.542756][ T9549] usb 52-1: new SuperSpeed USB device number 7 using vhci_hcd [ 3013.597657][T28042] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.641591][T28042] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.733874][T28042] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.793270][T28042] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.869666][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3013.878214][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3013.884264][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3013.891035][ T1139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3013.950198][T28039] vhci_hcd: connection reset by peer [ 3013.951958][ T13] vhci_hcd: stop threads [ 3013.953319][ T13] vhci_hcd: release socket [ 3013.954918][ T13] vhci_hcd: disconnect device [ 3014.267428][T28048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3014.270089][T28048] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3014.274014][T28048] vhci_hcd vhci_hcd.0: Device attached [ 3014.355090][T28048] netlink: 'syz.4.15484': attribute type 10 has an invalid length. [ 3014.536322][T22282] usb 6-1: USB disconnect, device number 104 [ 3014.578066][T21434] usb 46-1: SetAddress Request (114) to port 0 [ 3014.580197][T21434] usb 46-1: new SuperSpeed USB device number 114 using vhci_hcd [ 3014.631119][T28058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15487'. [ 3014.635003][T28058] openvswitch: netlink: Flow actions attr not present in new flow. [ 3014.641832][T28058] qrtr: Invalid version 0 [ 3014.889326][ T29] usb 40-1: device descriptor read/8, error -110 [ 3014.987107][T28049] vhci_hcd: connection reset by peer [ 3014.993988][ T1139] vhci_hcd: stop threads [ 3014.995375][ T1139] vhci_hcd: release socket [ 3015.000069][ T1139] vhci_hcd: disconnect device [ 3015.134541][T28067] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3015.137158][T28067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3015.140170][T28067] vhci_hcd vhci_hcd.0: Device attached [ 3015.278078][ T29] usb 40-1: SetAddress Request (111) to port 0 [ 3015.280179][ T29] usb 40-1: new SuperSpeed USB device number 111 using vhci_hcd [ 3015.800191][T28068] vhci_hcd: connection reset by peer [ 3015.802087][ T13] vhci_hcd: stop threads [ 3015.808643][ T13] vhci_hcd: release socket [ 3015.815187][ T13] vhci_hcd: disconnect device [ 3015.895366][T28074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15491'. [ 3015.930251][T28076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15492'. [ 3016.010052][T28080] binder: 28079:28080 ioctl c0306201 80000280 returned -14 [ 3016.093893][T28080] binder: 28079:28080 ioctl 8933 800002c0 returned -22 [ 3016.159177][T28086] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.303029][T28086] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.362635][T28086] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.434963][T28086] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.570052][ T1241] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3016.581492][ T1241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3016.592475][T28985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3016.603065][T28985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3016.646955][T28092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3016.649058][T28092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3016.652197][T28092] vhci_hcd vhci_hcd.0: Device attached [ 3016.786284][T28096] input: syz0 as /devices/virtual/input/input292 [ 3017.431713][T28093] vhci_hcd: connection closed [ 3017.432415][T28985] vhci_hcd: stop threads [ 3017.436369][T28985] vhci_hcd: release socket [ 3017.443977][T28985] vhci_hcd: disconnect device [ 3018.103902][T28115] binder: 28114:28115 ioctl c0306201 80000280 returned -14 [ 3018.113674][T28115] binder: 28114:28115 ioctl 8933 800002c0 returned -22 [ 3018.135398][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15504'. [ 3018.259536][T28125] tmpfs: Group quota block hardlimit too large. [ 3018.697994][ T9549] usb 52-1: device descriptor read/8, error -110 [ 3018.908501][T28130] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3018.910889][T28130] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3018.913579][T28130] vhci_hcd vhci_hcd.0: Device attached [ 3019.384810][ T9549] usb usb52-port1: unable to enumerate USB device [ 3019.493081][T28131] vhci_hcd: connection closed [ 3019.514501][ T1241] vhci_hcd: stop threads [ 3019.517763][ T1241] vhci_hcd: release socket [ 3019.523531][ T1241] vhci_hcd: disconnect device [ 3019.786141][T21434] usb 46-1: device descriptor read/8, error -110 [ 3020.208456][T21434] usb usb46-port1: attempt power cycle [ 3020.318047][ T29] usb 40-1: device descriptor read/8, error -110 [ 3020.428641][ T29] usb usb40-port1: attempt power cycle [ 3020.557546][T28156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15512'. [ 3020.739964][T28160] binder: 28159:28160 ioctl c0306201 80000280 returned -14 [ 3020.755704][T28160] binder: 28159:28160 ioctl 8933 800002c0 returned -22 [ 3020.778637][T21434] usb usb46-port1: unable to enumerate USB device [ 3020.838111][ T60] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 3020.877003][T28169] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15516'. [ 3020.999308][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3021.001521][ T29] usb usb40-port1: unable to enumerate USB device [ 3021.002344][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3021.008450][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3021.011226][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.019835][T28171] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3021.022546][T28171] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3021.030941][T28171] vhci_hcd vhci_hcd.0: Device attached [ 3021.138117][T28171] netlink: 'syz.3.15515': attribute type 10 has an invalid length. [ 3021.220137][ T60] usb 6-1: usb_control_msg returned -32 [ 3021.222011][ T60] usbtmc 6-1:16.0: can't read capabilities [ 3021.227631][ T60] usb 6-1: USB disconnect, device number 105 [ 3021.308001][ T29] usb 44-1: SetAddress Request (25) to port 0 [ 3021.310626][ T29] usb 44-1: new SuperSpeed USB device number 25 using vhci_hcd [ 3021.665008][T28172] vhci_hcd: connection reset by peer [ 3021.672482][ T1139] vhci_hcd: stop threads [ 3021.673878][ T1139] vhci_hcd: release socket [ 3021.675386][ T1139] vhci_hcd: disconnect device [ 3021.767124][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15517'. [ 3022.028124][T21434] usb 12-1: new full-speed USB device number 51 using dummy_hcd [ 3022.190892][T21434] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3022.204319][T21434] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3022.215526][T21434] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3022.224584][T21434] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.824244][T21434] usb 12-1: usb_control_msg returned -32 [ 3022.826034][T21434] usbtmc 12-1:16.0: can't read capabilities [ 3023.793857][T28198] binder: 28197:28198 ioctl c0306201 80000280 returned -14 [ 3023.816709][T28198] binder: 28197:28198 ioctl 8933 800002c0 returned -22 [ 3023.845990][T28201] tmpfs: Group quota block hardlimit too large. [ 3024.600048][T28206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3024.602676][T28206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3024.606532][T28206] vhci_hcd vhci_hcd.0: Device attached [ 3024.778170][T21028] usb 12-1: USB disconnect, device number 51 [ 3024.793541][T28210] tmpfs: Group quota block hardlimit too large. [ 3025.332398][T21434] usb 40-1: SetAddress Request (114) to port 0 [ 3025.334373][T21434] usb 40-1: new SuperSpeed USB device number 114 using vhci_hcd [ 3026.036899][T28219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3026.038997][T28219] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3026.041840][T28219] vhci_hcd vhci_hcd.0: Device attached [ 3026.267434][T28218] netlink: 'syz.4.15530': attribute type 10 has an invalid length. [ 3026.276638][T28205] netlink: 'syz.1.15526': attribute type 10 has an invalid length. [ 3026.368936][T28228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3026.371442][T28228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3026.380873][T28228] vhci_hcd vhci_hcd.0: Device attached [ 3026.428031][ T9549] usb 46-1: SetAddress Request (118) to port 0 [ 3026.430525][ T9549] usb 46-1: new SuperSpeed USB device number 118 using vhci_hcd [ 3026.686049][T28207] vhci_hcd: connection reset by peer [ 3026.689090][ T1241] vhci_hcd: stop threads [ 3026.691212][T28220] vhci_hcd: connection reset by peer [ 3026.691496][ T1241] vhci_hcd: release socket [ 3026.694409][ T1241] vhci_hcd: disconnect device [ 3026.696030][ T1241] vhci_hcd: stop threads [ 3026.697385][ T1241] vhci_hcd: release socket [ 3026.698960][ T1241] vhci_hcd: disconnect device [ 3026.935363][T28229] vhci_hcd: connection reset by peer [ 3026.937247][ T1139] vhci_hcd: stop threads [ 3026.938725][ T1139] vhci_hcd: release socket [ 3026.941695][ T1139] vhci_hcd: disconnect device [ 3026.941694][ T29] usb 44-1: device descriptor read/8, error -110 [ 3027.348431][ T29] usb usb44-port1: attempt power cycle [ 3027.396120][T28240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15535'. [ 3027.658177][T29237] usb 12-1: new full-speed USB device number 52 using dummy_hcd [ 3028.218364][T29237] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3028.222185][T29237] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3028.227290][T29237] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3028.232268][ T29] usb usb44-port1: unable to enumerate USB device [ 3028.244368][T29237] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.281855][T28251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3028.284440][T28251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3028.467093][T29237] usb 12-1: usb_control_msg returned -32 [ 3028.480714][T29237] usbtmc 12-1:16.0: can't read capabilities [ 3028.514285][T28251] vhci_hcd vhci_hcd.0: Device attached [ 3028.608665][T28253] netlink: 'syz.3.15536': attribute type 10 has an invalid length. [ 3028.966404][ T29] usb 44-1: SetAddress Request (29) to port 0 [ 3028.974264][T28254] vhci_hcd: connection closed [ 3028.974478][ T90] vhci_hcd: stop threads [ 3028.977422][ T90] vhci_hcd: release socket [ 3028.979022][ T90] vhci_hcd: disconnect device [ 3028.982114][ T29] usb 44-1: new SuperSpeed USB device number 29 using vhci_hcd [ 3029.005492][ T29] usb 44-1: enqueue for inactive port 0 [ 3029.315905][T28263] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3029.317982][T28263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3029.320924][T28263] vhci_hcd vhci_hcd.0: Device attached [ 3029.378525][T28263] netlink: 'syz.4.15539': attribute type 10 has an invalid length. [ 3029.451792][ T29] usb usb44-port1: attempt power cycle [ 3029.619786][T28267] tmpfs: Group quota block hardlimit too large. [ 3029.942635][T28264] vhci_hcd: connection closed [ 3029.943626][ T1241] vhci_hcd: stop threads [ 3029.946739][ T1241] vhci_hcd: release socket [ 3029.948494][ T1241] vhci_hcd: disconnect device [ 3030.038504][ T29] usb usb44-port1: unable to enumerate USB device [ 3030.372140][ T29] usb 12-1: USB disconnect, device number 52 [ 3030.717648][T28282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3030.902159][T28282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.028818][T28282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.052857][T28296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15551'. [ 3031.055471][T28296] openvswitch: netlink: Flow actions attr not present in new flow. [ 3031.059468][T28296] qrtr: Invalid version 0 [ 3031.086138][T28282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.268436][T21434] usb 40-1: device descriptor read/8, error -110 [ 3031.326937][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3031.354193][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3031.375261][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3031.401076][T17108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3031.528062][ T9549] usb 46-1: device descriptor read/8, error -110 [ 3031.583283][T28309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15555'. [ 3031.658470][T21434] usb usb40-port1: attempt power cycle [ 3031.953664][ T9549] usb usb46-port1: attempt power cycle [ 3032.093174][T28314] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3032.095302][T28314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3032.268903][T21434] usb usb40-port1: unable to enumerate USB device [ 3032.298036][T28314] vhci_hcd vhci_hcd.0: Device attached [ 3032.358326][T28314] netlink: 'syz.7.15556': attribute type 10 has an invalid length. [ 3032.568678][ T9549] usb usb46-port1: unable to enumerate USB device [ 3032.608894][T21434] usb 52-1: SetAddress Request (8) to port 0 [ 3032.610891][T21434] usb 52-1: new SuperSpeed USB device number 8 using vhci_hcd [ 3032.932593][T28315] vhci_hcd: connection reset by peer [ 3032.934534][ T90] vhci_hcd: stop threads [ 3032.935944][ T90] vhci_hcd: release socket [ 3032.937377][ T90] vhci_hcd: disconnect device [ 3033.329165][T28321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3033.331274][T28321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3033.334217][T28321] vhci_hcd vhci_hcd.0: Device attached [ 3033.374526][T28321] netlink: 'syz.1.15557': attribute type 10 has an invalid length. [ 3033.608055][ T9549] usb 40-1: SetAddress Request (118) to port 0 [ 3033.611644][ T9549] usb 40-1: new SuperSpeed USB device number 118 using vhci_hcd [ 3033.939878][T28322] vhci_hcd: connection reset by peer [ 3033.941680][ T61] vhci_hcd: stop threads [ 3033.943043][ T61] vhci_hcd: release socket [ 3033.944514][ T61] vhci_hcd: disconnect device [ 3034.054127][T28331] input: syz0 as /devices/virtual/input/input293 [ 3034.595796][T28341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3034.597914][T28341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3034.683676][T28352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15564'. [ 3034.727328][T28341] vhci_hcd vhci_hcd.0: Device attached [ 3034.846155][T28341] netlink: 'syz.3.15562': attribute type 10 has an invalid length. [ 3034.908774][T28356] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3034.911518][T28356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3034.915109][T28356] vhci_hcd vhci_hcd.0: Device attached [ 3035.145744][ T29] usb 44-1: SetAddress Request (33) to port 0 [ 3035.148264][ T29] usb 44-1: new SuperSpeed USB device number 33 using vhci_hcd [ 3035.163206][T28356] netlink: 'syz.1.15566': attribute type 10 has an invalid length. [ 3035.488974][T28361] fuse: Bad value for 'fd' [ 3035.755753][T28342] vhci_hcd: connection reset by peer [ 3035.764082][ T90] vhci_hcd: stop threads [ 3035.765890][ T90] vhci_hcd: release socket [ 3035.770382][ T90] vhci_hcd: disconnect device [ 3035.967549][T28357] vhci_hcd: connection closed [ 3035.967799][ T90] vhci_hcd: stop threads [ 3035.974490][ T90] vhci_hcd: release socket [ 3035.998385][ T90] vhci_hcd: disconnect device [ 3036.210590][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15570'. [ 3036.458289][T28376] tmpfs: Group quota block hardlimit too large. [ 3036.900280][T28383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3036.902471][T28383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3036.905896][T28383] vhci_hcd vhci_hcd.0: Device attached [ 3036.996627][T28383] netlink: 'syz.1.15574': attribute type 10 has an invalid length. [ 3037.339657][T28387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15575'. [ 3037.467764][T28394] tmpfs: Group quota block hardlimit too large. [ 3037.527448][T28395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15577'. [ 3038.034240][T21434] usb 52-1: device descriptor read/8, error -110 [ 3038.038789][T28384] vhci_hcd: connection closed [ 3038.039046][ T13] vhci_hcd: stop threads [ 3038.043151][ T13] vhci_hcd: release socket [ 3038.045141][ T13] vhci_hcd: disconnect device [ 3038.389789][T28402] tmpfs: Group quota block hardlimit too large. [ 3038.476577][T21434] usb usb52-port1: attempt power cycle [ 3038.638077][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3038.805563][T28406] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.038968][ T9549] usb usb40-port1: attempt power cycle [ 3039.082337][T21434] usb usb52-port1: unable to enumerate USB device [ 3039.126493][T28406] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.324124][T28406] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.427239][T28406] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.549948][T28417] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3039.552061][T28417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3039.562212][T28417] vhci_hcd vhci_hcd.0: Device attached [ 3039.572380][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3039.584359][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3039.593589][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3039.596759][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3039.608500][ T9549] usb usb40-port1: unable to enumerate USB device [ 3039.670332][T28417] netlink: 'syz.7.15583': attribute type 10 has an invalid length. [ 3039.878035][ T9549] usb 52-1: SetAddress Request (12) to port 0 [ 3039.882349][ T9549] usb 52-1: new SuperSpeed USB device number 12 using vhci_hcd [ 3040.168314][T28418] vhci_hcd: connection reset by peer [ 3040.171026][ T1241] vhci_hcd: stop threads [ 3040.172544][ T1241] vhci_hcd: release socket [ 3040.174981][ T1241] vhci_hcd: disconnect device [ 3040.238033][ T29] usb 44-1: device descriptor read/8, error -110 [ 3040.536557][T28430] tmpfs: Group quota block hardlimit too large. [ 3040.930619][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15589'. [ 3041.273779][ T29] usb usb44-port1: attempt power cycle [ 3042.305270][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15592'. [ 3042.398541][ T29] usb usb44-port1: unable to enumerate USB device [ 3043.320460][T28457] input: syz0 as /devices/virtual/input/input294 [ 3043.499458][T28464] fuse: Bad value for 'fd' [ 3043.535226][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 3043.537162][T28467] binder: 28465:28467 ioctl 4018620d 800001c0 returned -16 [ 3043.612918][T28468] binder: 28465:28468 ioctl 8933 800002c0 returned -22 [ 3043.708644][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15598'. [ 3045.038057][ T9549] usb 52-1: device descriptor read/8, error -110 [ 3045.518394][ T9549] usb usb52-port1: attempt power cycle [ 3045.907070][T28487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15603'. [ 3046.119256][ T9549] usb usb52-port1: unable to enumerate USB device [ 3046.922184][T28498] tmpfs: Group quota block hardlimit too large. [ 3047.917271][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15610'. [ 3047.920542][T28505] openvswitch: netlink: Flow actions attr not present in new flow. [ 3047.927207][T28505] qrtr: Invalid version 0 [ 3047.935558][ T40] audit: type=1326 audit(2025459015.553:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28508 comm="syz.1.15609" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3047.977776][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15608'. [ 3048.066237][ T40] audit: type=1326 audit(2025459015.683:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28512 comm="syz.7.15611" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3049.078890][T28532] binder: 28531:28532 ioctl c0306201 80000280 returned -14 [ 3049.085635][ T40] audit: type=1326 audit(2025459016.703:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28534 comm="syz.7.15619" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3049.115846][T28532] binder: 28531:28532 ioctl 8933 800002c0 returned -22 [ 3049.834418][T28544] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3049.836481][T28544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3049.855232][T28544] vhci_hcd vhci_hcd.0: Device attached [ 3050.026627][T28533] netlink: 'syz.1.15615': attribute type 10 has an invalid length. [ 3050.043773][ T40] audit: type=1326 audit(2025459017.663:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28551 comm="syz.7.15621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3050.128000][ T9549] usb 40-1: SetAddress Request (122) to port 0 [ 3050.130129][ T9549] usb 40-1: new SuperSpeed USB device number 122 using vhci_hcd [ 3050.672477][T28548] vhci_hcd: connection reset by peer [ 3050.674412][ T46] vhci_hcd: stop threads [ 3050.675927][ T46] vhci_hcd: release socket [ 3050.677430][ T46] vhci_hcd: disconnect device [ 3051.228704][T22868] usb 12-1: new high-speed USB device number 53 using dummy_hcd [ 3051.314387][ T40] audit: type=1326 audit(2025459018.933:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.1.15626" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3051.368375][T22868] usb 12-1: device descriptor read/64, error -71 [ 3051.757262][T22868] usb 12-1: new high-speed USB device number 54 using dummy_hcd [ 3051.888387][T22868] usb 12-1: device descriptor read/64, error -71 [ 3051.998763][T22868] usb usb12-port1: attempt power cycle [ 3052.229682][ T40] audit: type=1326 audit(2025459019.843:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28576 comm="syz.1.15628" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3052.338562][T22868] usb 12-1: new high-speed USB device number 55 using dummy_hcd [ 3052.359589][T22868] usb 12-1: device descriptor read/8, error -71 [ 3052.584113][T28587] tmpfs: Group quota block hardlimit too large. [ 3052.808435][T28590] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3052.810885][T28590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3052.829955][T28590] vhci_hcd vhci_hcd.0: Device attached [ 3052.868571][T22868] usb 12-1: new high-speed USB device number 56 using dummy_hcd [ 3052.908366][T22868] usb 12-1: device descriptor read/8, error -71 [ 3052.931703][T28590] netlink: 'syz.4.15630': attribute type 10 has an invalid length. [ 3053.018541][T22868] usb usb12-port1: unable to enumerate USB device [ 3053.118356][ T29] usb 46-1: SetAddress Request (122) to port 0 [ 3053.121523][ T29] usb 46-1: new SuperSpeed USB device number 122 using vhci_hcd [ 3053.277032][T28591] vhci_hcd: connection reset by peer [ 3053.279733][ T13] vhci_hcd: stop threads [ 3053.281148][ T13] vhci_hcd: release socket [ 3053.282593][ T13] vhci_hcd: disconnect device [ 3054.051719][T28599] binder: 28598:28599 ioctl c0306201 80000280 returned -14 [ 3054.086900][T28599] binder: 28598:28599 ioctl 8933 0 returned -22 [ 3054.123277][T28603] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3054.126089][T28603] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3054.171575][T28603] vhci_hcd vhci_hcd.0: Device attached [ 3054.244317][T28603] netlink: 'syz.3.15633': attribute type 10 has an invalid length. [ 3054.426953][T28612] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3054.429033][T28612] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3054.448041][T21434] usb 44-1: SetAddress Request (37) to port 0 [ 3054.450038][T21434] usb 44-1: new SuperSpeed USB device number 37 using vhci_hcd [ 3054.541124][T28612] vhci_hcd vhci_hcd.0: Device attached [ 3054.668402][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15637'. [ 3054.759196][T28612] netlink: 'syz.7.15635': attribute type 10 has an invalid length. [ 3054.818234][T28002] usb 52-1: SetAddress Request (16) to port 0 [ 3054.820592][T28002] usb 52-1: new SuperSpeed USB device number 16 using vhci_hcd [ 3055.337993][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3055.468383][T28605] vhci_hcd: connection reset by peer [ 3055.471555][T28985] vhci_hcd: stop threads [ 3055.477825][T28985] vhci_hcd: release socket [ 3055.487945][T28985] vhci_hcd: disconnect device [ 3055.509718][T28613] vhci_hcd: connection reset by peer [ 3055.512158][ T46] vhci_hcd: stop threads [ 3055.515590][ T46] vhci_hcd: release socket [ 3055.519842][ T46] vhci_hcd: disconnect device [ 3055.770733][ T40] audit: type=1326 audit(2025459023.353:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28626 comm="syz.4.15640" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3055.839584][ T9549] usb usb40-port1: attempt power cycle [ 3056.588615][ T9549] usb usb40-port1: unable to enumerate USB device [ 3056.614265][T28637] tmpfs: Group quota block hardlimit too large. [ 3056.685182][T28639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15642'. [ 3056.745228][ T40] audit: type=1326 audit(2025459024.363:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28640 comm="syz.7.15643" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3057.025199][T28646] binder: 28645:28646 ioctl c0306201 80000280 returned -14 [ 3057.270475][T28646] binder: 28645:28646 ioctl 8933 0 returned -22 [ 3058.196992][ T9549] usb 12-1: new high-speed USB device number 57 using dummy_hcd [ 3058.200700][ T29] usb 46-1: device descriptor read/8, error -110 [ 3058.586090][ T9549] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3058.589775][ T9549] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3058.593864][ T9549] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3058.597482][ T9549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3058.618211][ T9549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3058.623433][ T9549] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3058.626225][ T9549] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3058.637968][ T9549] usb 12-1: Product: syz [ 3058.639685][ T9549] usb 12-1: Manufacturer: syz [ 3058.644379][ T9549] cdc_wdm 12-1:1.0: skipping garbage [ 3058.646084][ T9549] cdc_wdm 12-1:1.0: skipping garbage [ 3058.648797][ T9549] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 3058.650912][ T9549] cdc_wdm 12-1:1.0: Unknown control protocol [ 3058.768576][T28664] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3058.770686][T28664] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3058.773462][T28664] vhci_hcd vhci_hcd.0: Device attached [ 3058.799365][ T29] usb usb46-port1: attempt power cycle [ 3058.881694][T28664] netlink: 'syz.1.15648': attribute type 10 has an invalid length. [ 3059.068098][ T9549] usb 40-1: SetAddress Request (126) to port 0 [ 3059.071012][ T9549] usb 40-1: new SuperSpeed USB device number 126 using vhci_hcd [ 3059.388630][ T29] usb usb46-port1: unable to enumerate USB device [ 3059.466616][T28665] vhci_hcd: connection reset by peer [ 3059.478654][ T61] vhci_hcd: stop threads [ 3059.490440][ T61] vhci_hcd: release socket [ 3059.492353][ T61] vhci_hcd: disconnect device [ 3059.527981][T21434] usb 44-1: device descriptor read/8, error -110 [ 3059.645959][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3059.648478][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3059.652091][ T29] usb 12-1: USB disconnect, device number 57 [ 3059.654252][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 3059.656676][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 3059.658916][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3059.928008][T28002] usb 52-1: device descriptor read/8, error -110 [ 3059.949631][T21434] usb usb44-port1: attempt power cycle [ 3060.378618][T28002] usb usb52-port1: attempt power cycle [ 3060.427139][T28681] netlink: 148 bytes leftover after parsing attributes in process `syz.3.15652'. [ 3060.531852][T21434] usb usb44-port1: unable to enumerate USB device [ 3060.990614][T28002] usb usb52-port1: unable to enumerate USB device [ 3062.277121][T28706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15657'. [ 3062.281093][T28706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15657'. [ 3062.470970][T28709] input: syz0 as /devices/virtual/input/input295 [ 3062.739913][T28722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3062.742923][T28722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3062.746814][T28722] vhci_hcd vhci_hcd.0: Device attached [ 3062.969960][T28722] netlink: 'syz.3.15661': attribute type 10 has an invalid length. [ 3063.097984][T21434] usb 44-1: SetAddress Request (41) to port 0 [ 3063.100189][T21434] usb 44-1: new SuperSpeed USB device number 41 using vhci_hcd [ 3063.355007][T28730] qrtr: Invalid version 0 [ 3063.378152][T28723] vhci_hcd: connection reset by peer [ 3063.380291][T20041] vhci_hcd: stop threads [ 3063.381901][T20041] vhci_hcd: release socket [ 3063.384165][T20041] vhci_hcd: disconnect device [ 3063.592329][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3063.675236][ T40] audit: type=1326 audit(2025459031.293:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28740 comm="syz.4.15670" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3063.718437][T22868] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3064.023128][T22868] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3064.030712][T22868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3064.069698][T22868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3064.075229][T22868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3064.088706][T22868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3064.092456][T22868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.106020][T22868] usb 6-1: config 0 descriptor?? [ 3064.328193][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3064.509292][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15671'. [ 3064.592763][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.596229][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.601520][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.604849][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.608703][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.612306][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.615853][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.622478][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.625873][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.629497][T22868] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3064.639833][T22868] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3064.728556][ T9549] usb usb40-port1: attempt power cycle [ 3064.790898][ T29] usb 12-1: new full-speed USB device number 58 using dummy_hcd [ 3064.860799][T22084] usb 6-1: USB disconnect, device number 106 [ 3064.961787][ T29] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3064.965901][ T29] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3064.971339][ T29] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3064.975182][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.197999][ T29] usb 12-1: usb_control_msg returned -32 [ 3065.200403][ T29] usbtmc 12-1:16.0: can't read capabilities [ 3065.219498][ T29] usb 12-1: USB disconnect, device number 58 [ 3065.414084][T28763] tmpfs: Group quota block hardlimit too large. [ 3065.441905][ T9549] usb usb40-port1: unable to enumerate USB device [ 3066.388161][T28771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15678'. [ 3066.391019][T28771] openvswitch: netlink: Flow actions attr not present in new flow. [ 3066.396285][T28771] qrtr: Invalid version 0 [ 3066.958221][T12468] usb 12-1: new high-speed USB device number 59 using dummy_hcd [ 3067.088070][T12468] usb 12-1: device descriptor read/64, error -71 [ 3067.344983][T12468] usb 12-1: new high-speed USB device number 60 using dummy_hcd [ 3067.478020][T12468] usb 12-1: device descriptor read/64, error -71 [ 3067.597043][T12468] usb usb12-port1: attempt power cycle [ 3067.668015][T28796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3067.670083][T28796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3067.673032][T28796] vhci_hcd vhci_hcd.0: Device attached [ 3067.817527][T28796] netlink: 'syz.4.15683': attribute type 10 has an invalid length. [ 3067.964545][T28803] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3067.966570][T28803] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3067.967986][T12468] usb 12-1: new high-speed USB device number 61 using dummy_hcd [ 3067.969671][T28803] vhci_hcd vhci_hcd.0: Device attached [ 3068.014279][T12468] usb 12-1: device descriptor read/8, error -71 [ 3068.058398][ T29] usb 46-1: SetAddress Request (126) to port 0 [ 3068.060441][ T29] usb 46-1: new SuperSpeed USB device number 126 using vhci_hcd [ 3068.268004][T12468] usb 12-1: new high-speed USB device number 62 using dummy_hcd [ 3068.298389][T12468] usb 12-1: device descriptor read/8, error -71 [ 3068.336611][T28797] vhci_hcd: connection reset by peer [ 3068.337501][T28807] netlink: 'syz.3.15687': attribute type 10 has an invalid length. [ 3068.345658][ T90] vhci_hcd: stop threads [ 3068.347039][ T90] vhci_hcd: release socket [ 3068.352794][ T90] vhci_hcd: disconnect device [ 3068.408182][T12468] usb usb12-port1: unable to enumerate USB device [ 3068.679957][T28804] vhci_hcd: connection reset by peer [ 3068.683184][T28985] vhci_hcd: stop threads [ 3068.684785][T28985] vhci_hcd: release socket [ 3068.686302][T28985] vhci_hcd: disconnect device [ 3068.686308][T21434] usb 44-1: device descriptor read/8, error -110 [ 3068.788890][T28809] binder: 28808:28809 ioctl 8933 800002c0 returned -22 [ 3068.864533][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15689'. [ 3068.867629][T28811] openvswitch: netlink: Flow actions attr not present in new flow. [ 3068.873922][T28811] qrtr: Invalid version 0 [ 3068.949333][T28813] tmpfs: Group quota block hardlimit too large. [ 3069.088788][T21434] usb usb44-port1: attempt power cycle [ 3069.580328][T28821] tmpfs: Group quota block hardlimit too large. [ 3069.841649][T21434] usb usb44-port1: unable to enumerate USB device [ 3071.819854][T28846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3071.822616][T28846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3071.827044][T28846] vhci_hcd vhci_hcd.0: Device attached [ 3071.886567][T28850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15700'. [ 3071.889517][T28850] openvswitch: netlink: Flow actions attr not present in new flow. [ 3071.895150][T28850] qrtr: Invalid version 0 [ 3072.196057][T28846] netlink: 'syz.3.15698': attribute type 10 has an invalid length. [ 3072.268036][T21434] usb 44-1: SetAddress Request (45) to port 0 [ 3072.270528][T21434] usb 44-1: new SuperSpeed USB device number 45 using vhci_hcd [ 3072.483791][T28847] vhci_hcd: connection reset by peer [ 3072.486257][ T90] vhci_hcd: stop threads [ 3072.487698][ T90] vhci_hcd: release socket [ 3072.489369][ T90] vhci_hcd: disconnect device [ 3073.138317][ T29] usb 46-1: device descriptor read/8, error -110 [ 3073.494775][T12420] Bluetooth: hci4: unexpected event for opcode 0x204e [ 3073.618504][ T29] usb usb46-port1: attempt power cycle [ 3074.218549][ T29] usb usb46-port1: unable to enumerate USB device [ 3075.326634][T28887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3075.329336][T28887] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3075.338067][T28887] vhci_hcd vhci_hcd.0: Device attached [ 3075.442858][T28887] netlink: 'syz.1.15709': attribute type 10 has an invalid length. [ 3075.620200][ T29] usb 40-1: SetAddress Request (4) to port 0 [ 3075.622195][ T29] usb 40-1: new SuperSpeed USB device number 4 using vhci_hcd [ 3076.359054][T28897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3076.361147][T28897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3076.363908][T28897] vhci_hcd vhci_hcd.0: Device attached [ 3076.467146][T28888] vhci_hcd: connection reset by peer [ 3076.469693][ T90] vhci_hcd: stop threads [ 3076.471841][ T90] vhci_hcd: release socket [ 3076.473811][ T90] vhci_hcd: disconnect device [ 3076.507067][T28897] netlink: 'syz.4.15711': attribute type 10 has an invalid length. [ 3076.778069][T28623] usb 46-1: SetAddress Request (4) to port 0 [ 3076.780096][T28623] usb 46-1: new SuperSpeed USB device number 4 using vhci_hcd [ 3076.878854][T28898] vhci_hcd: connection reset by peer [ 3076.882784][ T61] vhci_hcd: stop threads [ 3076.884688][ T61] vhci_hcd: release socket [ 3076.886769][ T61] vhci_hcd: disconnect device [ 3076.931538][T28909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3076.933682][T28909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3076.936842][T28909] vhci_hcd vhci_hcd.0: Device attached [ 3077.028397][T28909] netlink: 'syz.3.15714': attribute type 10 has an invalid length. [ 3077.291042][T28913] tmpfs: Group quota block hardlimit too large. [ 3077.325430][T28915] tmpfs: Group quota block hardlimit too large. [ 3077.584933][T28910] vhci_hcd: connection reset by peer [ 3077.588432][T20041] vhci_hcd: stop threads [ 3077.590247][T20041] vhci_hcd: release socket [ 3077.592205][T21434] usb 44-1: device descriptor read/8, error -110 [ 3077.595138][T20041] vhci_hcd: disconnect device [ 3077.990279][T21434] usb usb44-port1: attempt power cycle [ 3078.510982][T28930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3078.513929][T28930] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3078.619272][T21434] usb usb44-port1: unable to enumerate USB device [ 3078.760370][T28935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3078.762438][T28935] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3078.800964][T28935] vhci_hcd vhci_hcd.0: Device attached [ 3078.891104][T28940] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3078.893239][T28940] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3078.900928][T28941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3078.903081][T28941] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3078.905999][T28940] vhci_hcd vhci_hcd.0: Device attached [ 3078.910660][T28941] vhci_hcd vhci_hcd.0: Device attached [ 3078.952854][T28935] netlink: 'syz.1.15718': attribute type 10 has an invalid length. [ 3079.248119][T28941] netlink: 'syz.3.15720': attribute type 10 has an invalid length. [ 3079.272737][T28947] binder: 28946:28947 ioctl c0306201 80000280 returned -14 [ 3079.278097][T28002] usb 44-1: SetAddress Request (49) to port 0 [ 3079.280854][T28002] usb 44-1: new SuperSpeed USB device number 49 using vhci_hcd [ 3079.285207][T28947] binder: 28946:28947 ioctl 8933 800002c0 returned -22 [ 3079.432034][T12420] Bluetooth: hci4: unexpected event for opcode 0x204e [ 3079.581246][T28952] netlink: 'syz.4.15721': attribute type 10 has an invalid length. [ 3079.803383][T28942] vhci_hcd: connection closed [ 3079.806948][ T61] vhci_hcd: stop threads [ 3079.810550][ T61] vhci_hcd: release socket [ 3079.812124][ T61] vhci_hcd: disconnect device [ 3079.968247][T28936] vhci_hcd: connection closed [ 3079.968796][T20041] vhci_hcd: stop threads [ 3079.972214][T20041] vhci_hcd: release socket [ 3079.974051][T20041] vhci_hcd: disconnect device [ 3079.982809][T28944] vhci_hcd: connection reset by peer [ 3079.985491][T17108] vhci_hcd: stop threads [ 3079.987336][T17108] vhci_hcd: release socket [ 3079.989836][T17108] vhci_hcd: disconnect device [ 3080.728083][ T29] usb 40-1: device descriptor read/8, error -110 [ 3081.020000][T28967] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3081.022218][T28967] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3081.025096][T28967] vhci_hcd vhci_hcd.0: Device attached [ 3081.153041][T28973] tmpfs: Group quota block hardlimit too large. [ 3081.218819][ T29] usb usb40-port1: attempt power cycle [ 3081.220605][T28968] vhci_hcd: connection closed [ 3081.224003][T17108] vhci_hcd: stop threads [ 3081.227085][T17108] vhci_hcd: release socket [ 3081.235952][T17108] vhci_hcd: disconnect device [ 3082.302696][T28623] usb 46-1: device descriptor read/8, error -110 [ 3082.728843][T28623] usb usb46-port1: attempt power cycle [ 3082.808782][ T29] usb usb40-port1: unable to enumerate USB device [ 3083.212074][T12420] Bluetooth: hci2: unexpected event for opcode 0x204e [ 3083.311872][T28623] usb usb46-port1: unable to enumerate USB device [ 3084.318326][T28002] usb 44-1: device descriptor read/8, error -110 [ 3084.606138][T29021] fuse: Bad value for 'group_id' [ 3084.607753][T29021] fuse: Bad value for 'group_id' [ 3084.723911][T28002] usb usb44-port1: attempt power cycle [ 3084.935335][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3085.078088][ T40] audit: type=1326 audit(2025459052.693:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29030 comm="syz.3.15745" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3085.085687][ T40] audit: type=1326 audit(2025459052.703:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.4.15743" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3085.348092][T28002] usb usb44-port1: unable to enumerate USB device [ 3085.793458][T29032] binder: 29028:29032 ioctl 8933 800002c0 returned -22 [ 3086.083707][T29045] tmpfs: Group quota block hardlimit too large. [ 3086.521881][T29050] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3086.981415][T29052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3086.983885][T29052] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3086.987486][T29052] vhci_hcd vhci_hcd.0: Device attached [ 3087.073447][T29052] netlink: 'syz.4.15746': attribute type 10 has an invalid length. [ 3087.191564][T12420] Bluetooth: hci4: unexpected event for opcode 0x204e [ 3087.224272][T29053] vhci_hcd: connection closed [ 3087.224578][ T46] vhci_hcd: stop threads [ 3087.228084][ T46] vhci_hcd: release socket [ 3087.230121][ T46] vhci_hcd: disconnect device [ 3087.268941][T21434] usb 46-1: enqueue for inactive port 0 [ 3087.373017][T29065] fuse: Unknown parameter 'user_id00000000000000000000' [ 3087.404381][T29065] input: syz0 as /devices/virtual/input/input296 [ 3087.753893][T29070] binder: 29068:29070 ioctl 8933 800002c0 returned -22 [ 3087.758878][T21434] usb usb46-port1: attempt power cycle [ 3087.842352][T29072] tmpfs: Group quota block hardlimit too large. [ 3088.510620][T29075] fuse: Bad value for 'fd' [ 3088.539009][T29075] input: syz0 as /devices/virtual/input/input297 [ 3088.701017][T21434] usb usb46-port1: unable to enumerate USB device [ 3088.819246][T29084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3089.126892][T29093] binder: 29092:29093 ioctl c0306201 80000280 returned -14 [ 3089.250490][T29095] binder: 29092:29095 ioctl 8933 800002c0 returned -22 [ 3089.590090][T29098] tmpfs: Group quota block hardlimit too large. [ 3089.613207][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3089.735127][T29106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15767'. [ 3089.744857][T29106] openvswitch: netlink: Flow actions attr not present in new flow. [ 3089.750830][T29106] qrtr: Invalid version 0 [ 3089.894059][T29110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3090.018198][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15768'. [ 3090.874213][T29124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15771'. [ 3090.930093][T29125] fuse: Unknown parameter 'fd0x0000000000000008' [ 3090.989228][T29125] input: syz0 as /devices/virtual/input/input298 [ 3091.106245][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3091.248204][T29134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3091.251001][T29134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3091.256074][T29134] vhci_hcd vhci_hcd.0: Device attached [ 3091.628110][T28002] usb 40-1: SetAddress Request (8) to port 0 [ 3091.635704][T28002] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 3091.665854][T29134] netlink: 'syz.1.15774': attribute type 10 has an invalid length. [ 3091.988217][ T40] audit: type=1326 audit(2025459059.613:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.7.15779" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3092.148752][T29136] vhci_hcd: connection reset by peer [ 3092.158182][ T61] vhci_hcd: stop threads [ 3092.159667][ T61] vhci_hcd: release socket [ 3092.162333][ T61] vhci_hcd: disconnect device [ 3093.005940][T29162] binder: 29161:29162 ioctl c0306201 80000280 returned -14 [ 3093.102099][T29162] binder: 29161:29162 ioctl 8933 800002c0 returned -22 [ 3093.241160][T12420] Bluetooth: hci2: unexpected event for opcode 0x204e [ 3093.600609][T29178] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3094.315071][ T40] audit: type=1326 audit(2025459061.933:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.7.15791" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3095.543416][T29200] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3095.546198][T29200] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3095.550192][T29200] vhci_hcd vhci_hcd.0: Device attached [ 3095.724594][T29204] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3095.727337][T29204] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3095.731198][T29204] vhci_hcd vhci_hcd.0: Device attached [ 3095.795819][T29200] netlink: 'syz.1.15792': attribute type 10 has an invalid length. [ 3096.018041][T17877] usb 52-1: SetAddress Request (20) to port 0 [ 3096.051209][T17877] usb 52-1: new SuperSpeed USB device number 20 using vhci_hcd [ 3096.191454][T29206] vhci_hcd: connection reset by peer [ 3096.193906][ T61] vhci_hcd: stop threads [ 3096.195832][ T61] vhci_hcd: release socket [ 3096.197650][ T61] vhci_hcd: disconnect device [ 3096.439147][T29201] vhci_hcd: connection closed [ 3096.439660][ T61] vhci_hcd: stop threads [ 3096.443099][ T61] vhci_hcd: release socket [ 3096.444795][ T61] vhci_hcd: disconnect device [ 3096.728058][T28002] usb 40-1: device descriptor read/8, error -110 [ 3096.736456][T29210] binder: 29209:29210 ioctl c0306201 80000280 returned -14 [ 3096.754784][T29210] binder: 29209:29210 ioctl 8933 800002c0 returned -22 [ 3097.024318][T29219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3097.026446][T29219] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3097.029371][T29219] vhci_hcd vhci_hcd.0: Device attached [ 3097.096741][T29219] netlink: 'syz.4.15797': attribute type 10 has an invalid length. [ 3097.172979][T28002] usb usb40-port1: attempt power cycle [ 3097.558036][T28623] usb 46-1: SetAddress Request (12) to port 0 [ 3097.560345][T28623] usb 46-1: new SuperSpeed USB device number 12 using vhci_hcd [ 3097.691227][T29220] vhci_hcd: connection reset by peer [ 3097.693528][ T1139] vhci_hcd: stop threads [ 3097.695073][ T1139] vhci_hcd: release socket [ 3097.696637][ T1139] vhci_hcd: disconnect device [ 3097.789154][T28002] usb usb40-port1: unable to enumerate USB device [ 3098.262604][ T40] audit: type=1326 audit(2025459065.883:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29233 comm="syz.3.15801" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3098.393153][T29239] tmpfs: Group quota block hardlimit too large. [ 3099.280892][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15804'. [ 3099.491983][T29252] binder: 29251:29252 ioctl c0306201 80000280 returned -14 [ 3099.517500][T29252] binder: 29251:29252 ioctl 8933 800002c0 returned -22 [ 3099.544892][T29255] binder: BINDER_SET_CONTEXT_MGR already set [ 3099.546977][T29255] binder: 29254:29255 ioctl 4018620d 800001c0 returned -16 [ 3099.936665][T29257] binder: 29254:29257 ioctl 8933 800002c0 returned -22 [ 3101.128061][T17877] usb 52-1: device descriptor read/8, error -110 [ 3101.301571][T29278] fuse: Unknown parameter 'grou00000000000000000000' [ 3101.455412][T29282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15815'. [ 3101.544074][T17877] usb usb52-port1: attempt power cycle [ 3101.559057][ T40] audit: type=1326 audit(2025459069.183:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.1.15816" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3102.110427][T17877] usb usb52-port1: unable to enumerate USB device [ 3102.285318][T29298] binder: 29297:29298 ioctl c0306201 80000280 returned -14 [ 3102.348807][T29298] binder: 29297:29298 ioctl 8933 800002c0 returned -22 [ 3102.424665][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3102.648056][T28623] usb 46-1: device descriptor read/8, error -110 [ 3103.050541][T28623] usb usb46-port1: attempt power cycle [ 3103.602822][T29316] fuse: Unknown parameter 'grou00000000000000000000' [ 3103.738566][T28623] usb usb46-port1: unable to enumerate USB device [ 3103.921475][T29319] binder: 29318:29319 ioctl c0306201 80000280 returned -14 [ 3103.957616][T29319] binder: 29318:29319 ioctl 8933 800002c0 returned -22 [ 3104.970054][T12420] Bluetooth: hci3: unexpected event for opcode 0x204e [ 3105.293246][ T40] audit: type=1326 audit(2025459072.913:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.1.15833" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3105.825715][T29351] fuse: Unknown parameter 'grou00000000000000000000' [ 3105.987852][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15836'. [ 3106.291593][T29360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15838'. [ 3107.741075][T29384] fuse: Unknown parameter 'group_i00000000000000000000' [ 3109.961697][T29410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15851'. [ 3110.026577][ T40] audit: type=1326 audit(2025459077.643:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29413 comm="syz.7.15853" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 3111.048783][T29428] tmpfs: Group quota block hardlimit too large. [ 3111.052108][T29426] binder: 29425:29426 ioctl c0306201 80000280 returned -14 [ 3111.064164][T29426] binder: 29425:29426 ioctl 8933 800002c0 returned -22 [ 3112.298191][T17877] usb 12-1: new full-speed USB device number 63 using dummy_hcd [ 3112.469206][T17877] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3112.480345][T17877] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3112.486636][T17877] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3112.490370][T17877] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3112.718753][T17877] usb 12-1: usb_control_msg returned -32 [ 3112.720570][T17877] usbtmc 12-1:16.0: can't read capabilities [ 3113.092684][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15861'. [ 3113.623440][T17877] usb 12-1: USB disconnect, device number 63 [ 3113.974027][T29459] input: syz0 as /devices/virtual/input/input299 [ 3114.180144][T29466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3114.182926][T29466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3114.186489][T29466] vhci_hcd vhci_hcd.0: Device attached [ 3114.276294][T29471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15867'. [ 3114.448002][T18544] usb 44-1: SetAddress Request (53) to port 0 [ 3114.450453][T18544] usb 44-1: new SuperSpeed USB device number 53 using vhci_hcd [ 3114.563444][T22868] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 3114.648488][T29467] vhci_hcd: connection reset by peer [ 3114.650629][T28985] vhci_hcd: stop threads [ 3114.652011][T28985] vhci_hcd: release socket [ 3114.653467][T28985] vhci_hcd: disconnect device [ 3114.719974][T22868] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3114.723022][T22868] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3114.735878][T22868] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3114.739637][T22868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.782061][ T40] audit: type=1326 audit(2025459082.403:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29475 comm="syz.4.15869" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3114.818632][T29477] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3114.820706][T29477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3114.823746][T29477] vhci_hcd vhci_hcd.0: Device attached [ 3114.885363][T29477] netlink: 'syz.7.15868': attribute type 10 has an invalid length. [ 3114.957512][T22868] usb 6-1: usb_control_msg returned -32 [ 3114.961560][T22868] usbtmc 6-1:16.0: can't read capabilities [ 3114.969745][T22868] usb 6-1: USB disconnect, device number 107 [ 3115.108011][T28623] usb 52-1: SetAddress Request (24) to port 0 [ 3115.113913][T28623] usb 52-1: new SuperSpeed USB device number 24 using vhci_hcd [ 3115.316564][ T40] audit: type=1326 audit(2025459082.933:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29485 comm="syz.3.15870" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3115.342098][T29478] vhci_hcd: connection reset by peer [ 3115.346531][ T90] vhci_hcd: stop threads [ 3115.348044][ T90] vhci_hcd: release socket [ 3115.349564][ T90] vhci_hcd: disconnect device [ 3116.952052][T29505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3116.954507][T29505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3116.957373][T29505] vhci_hcd vhci_hcd.0: Device attached [ 3117.112371][T29509] fuse: Unknown parameter 'group_id00000000000000000000' [ 3117.130489][T29505] netlink: 'syz.1.15873': attribute type 10 has an invalid length. [ 3117.242237][ T29] usb 40-1: SetAddress Request (12) to port 0 [ 3117.244859][ T29] usb 40-1: new SuperSpeed USB device number 12 using vhci_hcd [ 3117.669531][T29516] tmpfs: Group quota block hardlimit too large. [ 3117.898351][T29520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15878'. [ 3118.015335][T29506] vhci_hcd: connection reset by peer [ 3118.018426][T20041] vhci_hcd: stop threads [ 3118.020338][T20041] vhci_hcd: release socket [ 3118.022267][T20041] vhci_hcd: disconnect device [ 3118.568207][T29524] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3118.570784][T29524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3118.573445][T29524] vhci_hcd vhci_hcd.0: Device attached [ 3118.775973][T29524] netlink: 'syz.7.15879': attribute type 10 has an invalid length. [ 3118.925544][T29532] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3118.928370][T29532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3118.931948][T29532] vhci_hcd vhci_hcd.0: Device attached [ 3119.129222][T29538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3119.131997][T29538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3119.138145][T29538] vhci_hcd vhci_hcd.0: Device attached [ 3119.298321][ T40] audit: type=1326 audit(2025459086.913:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29541 comm="syz.1.15882" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3119.338206][T26911] usb 46-1: SetAddress Request (16) to port 0 [ 3119.340328][T26911] usb 46-1: new SuperSpeed USB device number 16 using vhci_hcd [ 3119.366765][T29538] netlink: 'syz.3.15881': attribute type 10 has an invalid length. [ 3119.482311][T29533] vhci_hcd: connection reset by peer [ 3119.485796][ T90] vhci_hcd: stop threads [ 3119.487227][ T90] vhci_hcd: release socket [ 3119.488882][ T90] vhci_hcd: disconnect device [ 3119.787011][T29527] vhci_hcd: connection closed [ 3119.787389][ T90] vhci_hcd: stop threads [ 3119.792268][ T90] vhci_hcd: release socket [ 3119.793871][ T90] vhci_hcd: disconnect device [ 3119.915454][T29539] vhci_hcd: connection reset by peer [ 3119.918062][ T90] vhci_hcd: stop threads [ 3119.919543][ T90] vhci_hcd: release socket [ 3119.922749][ T90] vhci_hcd: disconnect device [ 3119.922835][T18544] usb 44-1: device descriptor read/8, error -110 [ 3120.218018][T28623] usb 52-1: device descriptor read/8, error -110 [ 3120.419725][T18544] usb usb44-port1: attempt power cycle [ 3120.609732][T28623] usb usb52-port1: attempt power cycle [ 3120.728404][T17877] usb 12-1: new high-speed USB device number 64 using dummy_hcd [ 3120.924161][T17877] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3120.928428][T17877] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 3120.948730][T17877] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 3120.964970][T17877] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3120.969477][T17877] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3120.972551][T17877] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.979977][T18544] usb usb44-port1: unable to enumerate USB device [ 3121.003894][T17877] usb 12-1: config 0 descriptor?? [ 3121.120081][ T40] audit: type=1326 audit(2025459088.743:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29558 comm="syz.1.15887" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3121.254521][T28623] usb usb52-port1: unable to enumerate USB device [ 3121.509059][T17877] plantronics 0003:047F:FFFF.002F: ignoring exceeding usage max [ 3121.525142][T17877] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 3122.057274][ T40] audit: type=1326 audit(2025459089.673:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.1.15889" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3122.318027][ T29] usb 40-1: device descriptor read/8, error -110 [ 3122.731465][ T29] usb usb40-port1: attempt power cycle [ 3123.166718][T29581] binder: 29580:29581 ioctl c0306201 80000280 returned -14 [ 3123.216359][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15893'. [ 3123.219058][T29581] binder: 29580:29581 ioctl 8933 800002c0 returned -22 [ 3123.288862][ T29] usb usb40-port1: unable to enumerate USB device [ 3123.332462][ T40] audit: type=1326 audit(2025459090.953:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.3.15896" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3123.515611][T29596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3123.517669][T29596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3123.520944][T29596] vhci_hcd vhci_hcd.0: Device attached [ 3123.545771][T22084] usb 12-1: USB disconnect, device number 64 [ 3123.587462][T29596] netlink: 'syz.1.15892': attribute type 10 has an invalid length. [ 3123.828137][ T29] usb 40-1: SetAddress Request (16) to port 0 [ 3123.839216][ T29] usb 40-1: new SuperSpeed USB device number 16 using vhci_hcd [ 3124.407602][T26911] usb 46-1: device descriptor read/8, error -110 [ 3124.800781][T26911] usb usb46-port1: attempt power cycle [ 3124.863781][T29597] vhci_hcd: connection reset by peer [ 3124.866978][T20041] vhci_hcd: stop threads [ 3124.869544][T20041] vhci_hcd: release socket [ 3124.871102][T20041] vhci_hcd: disconnect device [ 3125.358615][T26911] usb usb46-port1: unable to enumerate USB device [ 3125.458321][T18544] usb 12-1: new high-speed USB device number 65 using dummy_hcd [ 3125.611440][T18544] usb 12-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3125.616297][T18544] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3125.622390][T18544] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3125.626186][T18544] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.634110][T18544] usb 12-1: config 0 descriptor?? [ 3125.641943][T18544] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 3126.115677][ T40] audit: type=1326 audit(2025459093.733:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29629 comm="syz.3.15904" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3126.650330][T29637] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3126.653100][T29637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3126.678524][T29637] vhci_hcd vhci_hcd.0: Device attached [ 3126.775779][T29637] netlink: 'syz.1.15903': attribute type 10 has an invalid length. [ 3126.931077][T29638] vhci_hcd: connection closed [ 3126.931527][ T90] vhci_hcd: stop threads [ 3126.935645][ T90] vhci_hcd: release socket [ 3126.937646][ T90] vhci_hcd: disconnect device [ 3128.372286][T18544] usb 12-1: USB disconnect, device number 65 [ 3129.088458][ T29] usb 40-1: device descriptor read/8, error -110 [ 3129.196153][ T40] audit: type=1326 audit(2025459096.813:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29660 comm="syz.3.15911" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3129.500224][ T29] usb usb40-port1: attempt power cycle [ 3130.033327][T29673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3130.039836][T29673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3130.044754][T29673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3130.047386][T29673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3130.050527][T29673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3130.080673][T29671] wlan0 speed is unknown, defaulting to 1000 [ 3130.127977][ T29] usb usb40-port1: unable to enumerate USB device [ 3130.130820][T29673] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 3130.169304][ T40] audit: type=1326 audit(2025459097.793:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29678 comm="syz.1.15915" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3130.202872][T29671] chnl_net:caif_netlink_parms(): no params data found [ 3130.407266][ T61] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.474069][T29671] bridge0: port 1(bridge_slave_0) entered blocking state [ 3130.476397][T29671] bridge0: port 1(bridge_slave_0) entered disabled state [ 3130.484378][T29671] bridge_slave_0: entered allmulticast mode [ 3130.487098][T29671] bridge_slave_0: entered promiscuous mode [ 3130.492155][T29671] bridge0: port 2(bridge_slave_1) entered blocking state [ 3130.494215][T29671] bridge0: port 2(bridge_slave_1) entered disabled state [ 3130.497027][T29671] bridge_slave_1: entered allmulticast mode [ 3130.500329][T29671] bridge_slave_1: entered promiscuous mode [ 3130.506615][ T61] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.590867][T29671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3130.595499][ T61] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.619298][T29671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3130.658814][ T61] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.666269][T29671] team0: Port device team_slave_0 added [ 3130.669669][T29671] team0: Port device team_slave_1 added [ 3130.702996][T29671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3130.705181][T29671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.713367][T29671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3130.717629][T29671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3130.721565][T29671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.730846][T29671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3130.789973][T29671] hsr_slave_0: entered promiscuous mode [ 3130.792708][T29671] hsr_slave_1: entered promiscuous mode [ 3130.888971][ T61] bridge_slave_1: left allmulticast mode [ 3130.890811][ T61] bridge_slave_1: left promiscuous mode [ 3130.892848][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 3130.896241][ T61] bridge_slave_0: left promiscuous mode [ 3130.898267][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 3130.914897][T29697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15918'. [ 3131.167047][T29701] binder: 29700:29701 ioctl c0306201 80000280 returned -14 [ 3131.236545][T29701] binder: 29700:29701 ioctl 8933 800002c0 returned -22 [ 3131.681373][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3131.707786][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3131.732094][ T61] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3131.746357][ T61] bond0 (unregistering): Released all slaves [ 3131.899906][ T61] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 3131.924598][ T61] bond1 (unregistering): Released all slaves [ 3132.058744][ T61] tipc: Left network mode [ 3132.087410][T29673] Bluetooth: hci1: command tx timeout [ 3132.483761][ T61] hsr_slave_0: left promiscuous mode [ 3132.486022][ T61] hsr_slave_1: left promiscuous mode [ 3132.488040][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3132.490344][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3132.514095][ T61] veth1_macvtap: left promiscuous mode [ 3132.515887][ T61] veth0_macvtap: left promiscuous mode [ 3132.517657][ T61] veth1_vlan: left promiscuous mode [ 3132.519798][ T61] veth0_vlan: left promiscuous mode [ 3134.160893][T29673] Bluetooth: hci1: command tx timeout [ 3134.196315][T29732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3134.198194][T29732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3134.200809][T29732] vhci_hcd vhci_hcd.0: Device attached [ 3134.497989][ T53] usb 46-1: SetAddress Request (20) to port 0 [ 3134.499859][ T53] usb 46-1: new SuperSpeed USB device number 20 using vhci_hcd [ 3134.804336][T29733] vhci_hcd: connection reset by peer [ 3134.816729][T17108] vhci_hcd: stop threads [ 3134.818728][T17108] vhci_hcd: release socket [ 3134.820588][T17108] vhci_hcd: disconnect device [ 3135.027155][T29738] tmpfs: Group quota block hardlimit too large. [ 3135.046922][T29671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3135.113195][T29671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3135.121529][T29671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3135.131698][T29671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3135.250131][T29671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3135.263492][T29671] 8021q: adding VLAN 0 to HW filter on device team0 [ 3135.443820][T29671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3135.447076][T29671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3135.468975][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 3135.471252][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3135.474435][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.476699][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3135.506577][ T61] IPVS: stop unused estimator thread 0... [ 3135.600995][T29671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3135.915859][T29671] veth0_vlan: entered promiscuous mode [ 3135.929903][T29671] veth1_vlan: entered promiscuous mode [ 3135.959914][T29671] veth0_macvtap: entered promiscuous mode [ 3135.977585][T29671] veth1_macvtap: entered promiscuous mode [ 3136.004544][T29671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3136.016606][T29671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3136.023106][ T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3136.026204][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3136.035055][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3136.041484][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3136.238402][T29673] Bluetooth: hci1: command tx timeout [ 3136.250415][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3136.265845][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3136.295526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3136.303807][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3136.454194][T29772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15913'. [ 3136.720858][T22084] usb 12-1: new full-speed USB device number 66 using dummy_hcd [ 3136.926825][T22084] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3136.937967][T22084] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3136.943260][T22084] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3136.946944][T22084] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.165010][T22084] usb 12-1: usb_control_msg returned -32 [ 3137.167091][T22084] usbtmc 12-1:16.0: can't read capabilities [ 3137.241292][ T40] audit: type=1326 audit(2025459104.863:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.4.15935" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3137.534215][T29788] tmpfs: Group quota block hardlimit too large. [ 3137.756348][T22084] usb 12-1: USB disconnect, device number 66 [ 3138.318338][T29673] Bluetooth: hci1: command tx timeout [ 3138.817982][T28002] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3138.989153][T28002] usb 6-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 3138.992412][T28002] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3138.995218][T28002] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3139.007937][T28002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3139.013711][T28002] usb 6-1: config 0 descriptor?? [ 3139.241490][T28002] usb 6-1: string descriptor 0 read error: -71 [ 3139.245141][T28002] usb 6-1: USB disconnect, device number 108 [ 3139.258694][T29809] tmpfs: Group quota block hardlimit too large. [ 3139.597985][ T53] usb 46-1: device descriptor read/8, error -110 [ 3140.448836][ T53] usb usb46-port1: attempt power cycle [ 3141.030605][T29834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3141.032797][T29834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3141.035924][T29834] vhci_hcd vhci_hcd.0: Device attached [ 3141.048637][ T53] usb usb46-port1: unable to enumerate USB device [ 3141.168275][T29834] netlink: 'syz.1.15946': attribute type 10 has an invalid length. [ 3141.194769][T29838] tmpfs: Group quota block hardlimit too large. [ 3141.338036][T28002] usb 40-1: SetAddress Request (20) to port 0 [ 3141.340731][T28002] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 3141.966919][T29835] vhci_hcd: connection reset by peer [ 3141.980312][ T61] vhci_hcd: stop threads [ 3141.982312][ T61] vhci_hcd: release socket [ 3141.984173][ T61] vhci_hcd: disconnect device [ 3142.138118][ T40] audit: type=1326 audit(2025459109.753:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29842 comm="syz.7.15949" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3142.783508][T29852] tmpfs: Group quota block hardlimit too large. [ 3142.853744][T29854] tmpfs: Group quota block hardlimit too large. [ 3143.781441][ T40] audit: type=1326 audit(2025459111.403:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.4.15952" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3143.822566][ T40] audit: type=1326 audit(2025459111.443:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29859 comm="syz.7.15953" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3144.827434][T29877] tmpfs: Group quota block hardlimit too large. [ 3144.925866][ T40] audit: type=1326 audit(2025459112.543:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.15958" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3146.475387][T28002] usb 40-1: device descriptor read/8, error -110 [ 3146.868627][T28002] usb usb40-port1: attempt power cycle [ 3146.888678][ T40] audit: type=1326 audit(2025459114.503:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29896 comm="syz.4.15961" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3148.112544][T29912] tmpfs: Group quota block hardlimit too large. [ 3148.174334][T28002] usb usb40-port1: unable to enumerate USB device [ 3149.038861][ T40] audit: type=1326 audit(2025459116.663:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29924 comm="syz.1.15968" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3149.987151][ T40] audit: type=1326 audit(2025459117.603:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.3.15970" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3151.135379][T29673] Bluetooth: hci3: unexpected event for opcode 0x144e [ 3151.953449][ T40] audit: type=1326 audit(2025459119.573:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.3.15977" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3152.899920][T29979] binder: 29978:29979 ioctl c0306201 80000280 returned -14 [ 3152.947468][T29979] binder: 29978:29979 ioctl 8933 800002c0 returned -22 [ 3154.014534][T29996] tmpfs: Group quota block hardlimit too large. [ 3155.382960][T30013] fuse: Invalid rootmode [ 3156.927261][ T40] audit: type=1326 audit(2025459124.543:9235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30025 comm="syz.3.15992" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3157.715794][ T40] audit: type=1326 audit(2025459125.333:9236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.4.15995" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3158.781453][T30052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3158.783636][T30052] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3158.786966][T30052] vhci_hcd vhci_hcd.0: Device attached [ 3158.967840][ T40] audit: type=1326 audit(2025459126.583:9237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30056 comm="syz.7.15999" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3158.996222][T30052] netlink: 'syz.1.15997': attribute type 10 has an invalid length. [ 3159.064941][T30058] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3159.067830][T30058] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3159.098044][T28002] usb 40-1: SetAddress Request (24) to port 0 [ 3159.100648][T28002] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 3159.127436][T30058] vhci_hcd vhci_hcd.0: Device attached [ 3159.445210][T30058] netlink: 'syz.4.15998': attribute type 10 has an invalid length. [ 3159.465365][ T29] usb 46-1: SetAddress Request (24) to port 0 [ 3159.466229][ T40] audit: type=1326 audit(2025459127.083:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30065 comm="syz.3.16000" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3159.468179][ T29] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 3160.141534][T30053] vhci_hcd: connection reset by peer [ 3160.146322][T20041] vhci_hcd: stop threads [ 3160.148417][T20041] vhci_hcd: release socket [ 3160.150329][T20041] vhci_hcd: disconnect device [ 3160.154803][T30060] vhci_hcd: connection reset by peer [ 3160.157604][T20041] vhci_hcd: stop threads [ 3160.159895][T20041] vhci_hcd: release socket [ 3160.161941][T20041] vhci_hcd: disconnect device [ 3160.438736][T30075] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3160.441014][T30075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3160.443843][T30075] vhci_hcd vhci_hcd.0: Device attached [ 3160.469435][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16002'. [ 3160.505204][T30075] netlink: 'syz.7.16001': attribute type 10 has an invalid length. [ 3160.508214][T30075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3160.519974][T30075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3160.535940][T30075] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 3160.728003][ T9549] usb 52-1: SetAddress Request (28) to port 0 [ 3160.730469][ T9549] usb 52-1: new SuperSpeed USB device number 28 using vhci_hcd [ 3161.266210][T30076] vhci_hcd: connection reset by peer [ 3161.269330][ T1139] vhci_hcd: stop threads [ 3161.271117][ T1139] vhci_hcd: release socket [ 3161.273058][ T1139] vhci_hcd: disconnect device [ 3161.504142][T30093] tmpfs: Group quota block hardlimit too large. [ 3161.556673][T30094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 3161.558917][T30094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3161.562269][T30094] vhci_hcd vhci_hcd.0: Device attached [ 3161.688462][T30098] netlink: 'syz.3.16005': attribute type 10 has an invalid length. [ 3161.838802][T28623] usb 44-1: SetAddress Request (57) to port 0 [ 3161.848629][T28623] usb 44-1: new SuperSpeed USB device number 57 using vhci_hcd [ 3162.744814][T30095] vhci_hcd: connection reset by peer [ 3162.750999][ T61] vhci_hcd: stop threads [ 3162.752555][ T61] vhci_hcd: release socket [ 3162.754248][ T61] vhci_hcd: disconnect device [ 3162.818060][ T40] audit: type=1326 audit(2025459130.433:9239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30107 comm="syz.4.16009" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3163.598334][T30116] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3163.601087][T30116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3163.605326][T30116] vhci_hcd vhci_hcd.0: Device attached [ 3163.759708][T30117] vhci_hcd: connection closed [ 3163.760100][T20041] vhci_hcd: stop threads [ 3163.764153][T20041] vhci_hcd: release socket [ 3163.766403][T20041] vhci_hcd: disconnect device [ 3164.158009][T28002] usb 40-1: device descriptor read/8, error -110 [ 3164.453186][ T40] audit: type=1326 audit(2025459132.073:9240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30129 comm="syz.7.16013" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3164.568005][ T29] usb 46-1: device descriptor read/8, error -110 [ 3164.716294][T28002] usb usb40-port1: attempt power cycle [ 3164.991591][ T29] usb usb46-port1: attempt power cycle [ 3165.309301][T28002] usb usb40-port1: unable to enumerate USB device [ 3165.679068][ T29] usb usb46-port1: unable to enumerate USB device [ 3165.744151][T30145] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3165.746886][T30145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3165.763867][T30145] vhci_hcd vhci_hcd.0: Device attached [ 3165.908449][T30145] netlink: 'syz.7.16016': attribute type 10 has an invalid length. [ 3166.510124][ T40] audit: type=1326 audit(2025459134.133:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30153 comm="syz.4.16018" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3166.546784][T30147] vhci_hcd: connection reset by peer [ 3166.550216][ T61] vhci_hcd: stop threads [ 3166.551795][ T61] vhci_hcd: release socket [ 3166.553334][ T61] vhci_hcd: disconnect device [ 3166.553362][ T9549] usb 52-1: device descriptor read/8, error -110 [ 3166.752710][ T40] audit: type=1326 audit(2025459134.373:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30159 comm="syz.1.16020" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3166.958078][T28623] usb 44-1: device descriptor read/8, error -110 [ 3166.989803][ T9549] usb usb52-port1: attempt power cycle [ 3167.559057][T28623] usb usb44-port1: attempt power cycle [ 3167.687994][ T9549] usb usb52-port1: unable to enumerate USB device [ 3167.747130][T30173] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3167.749986][T30173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3167.760522][T30173] vhci_hcd vhci_hcd.0: Device attached [ 3167.974917][T30173] netlink: 'syz.4.16021': attribute type 10 has an invalid length. [ 3168.069851][T30178] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 3168.072027][T30178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3168.074598][T30178] vhci_hcd vhci_hcd.0: Device attached [ 3168.168536][ T9549] usb 46-1: SetAddress Request (28) to port 0 [ 3168.170632][ T9549] usb 46-1: new SuperSpeed USB device number 28 using vhci_hcd [ 3168.308492][T28623] usb usb44-port1: unable to enumerate USB device [ 3168.348508][T21028] usb 52-1: SetAddress Request (32) to port 0 [ 3168.351401][T21028] usb 52-1: new SuperSpeed USB device number 32 using vhci_hcd [ 3168.426164][T30179] vhci_hcd: connection closed [ 3168.432967][ T1139] vhci_hcd: stop threads [ 3168.436480][ T1139] vhci_hcd: release socket [ 3168.450850][ T1139] vhci_hcd: disconnect device [ 3168.665787][T30174] vhci_hcd: connection reset by peer [ 3168.669273][ T46] vhci_hcd: stop threads [ 3168.670675][ T46] vhci_hcd: release socket [ 3168.671070][T30187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16024'. [ 3168.672307][ T46] vhci_hcd: disconnect device [ 3168.957987][ T53] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 3169.121124][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3169.125280][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3169.130956][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3169.134635][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3169.380711][ T53] usb 6-1: usb_control_msg returned -32 [ 3169.385288][ T53] usbtmc 6-1:16.0: can't read capabilities [ 3169.563726][T30203] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3169.566697][T30203] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3169.570360][T30203] vhci_hcd vhci_hcd.0: Device attached [ 3169.667714][T30203] netlink: 'syz.4.16027': attribute type 10 has an invalid length. [ 3170.148482][T30204] vhci_hcd: connection closed [ 3170.148732][T17108] vhci_hcd: stop threads [ 3170.151687][T17108] vhci_hcd: release socket [ 3170.153279][T17108] vhci_hcd: disconnect device [ 3170.336748][ T40] audit: type=1326 audit(2025459137.953:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30208 comm="syz.3.16030" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3171.195582][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16031'. [ 3171.731111][T22868] usb 6-1: USB disconnect, device number 109 [ 3171.761500][ T40] audit: type=1326 audit(2025459139.383:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.1.16033" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3171.990842][T30226] tmpfs: Group quota block hardlimit too large. [ 3172.573653][ T40] audit: type=1326 audit(2025459140.193:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30231 comm="syz.7.16035" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3172.861940][T30236] binder: 30234:30236 ioctl c0306201 80000280 returned -14 [ 3172.887961][T30236] binder: 30234:30236 ioctl 8933 800002c0 returned -22 [ 3172.950049][T30239] tmpfs: Group quota block hardlimit too large. [ 3173.299374][ T9549] usb 46-1: device descriptor read/8, error -110 [ 3173.368418][ T40] audit: type=1326 audit(2025459140.993:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30241 comm="syz.4.16038" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3173.558597][T21028] usb 52-1: device descriptor read/8, error -110 [ 3173.733436][ T9549] usb usb46-port1: attempt power cycle [ 3174.103310][ T40] audit: type=1326 audit(2025459141.723:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30249 comm="syz.7.16039" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3174.295015][T21028] usb usb52-port1: attempt power cycle [ 3174.348760][ T9549] usb usb46-port1: unable to enumerate USB device [ 3174.642816][ T40] audit: type=1326 audit(2025459142.263:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30254 comm="syz.1.16040" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3174.772444][ T40] audit: type=1326 audit(2025459142.383:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30257 comm="syz.4.16041" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3175.011132][T21028] usb usb52-port1: unable to enumerate USB device [ 3175.355065][ T40] audit: type=1326 audit(2025459142.973:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.3.16043" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3175.888060][T21028] usb 12-1: new full-speed USB device number 67 using dummy_hcd [ 3176.039644][T21028] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3176.042909][T21028] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3176.047704][T21028] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3176.055682][T21028] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.289623][T21028] usb 12-1: usb_control_msg returned -32 [ 3176.291784][T21028] usbtmc 12-1:16.0: can't read capabilities [ 3176.665274][T30285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3176.668201][T30285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3176.672980][T30285] vhci_hcd vhci_hcd.0: Device attached [ 3176.792836][T30291] tmpfs: Group quota block hardlimit too large. [ 3177.290568][T30286] vhci_hcd: connection closed [ 3177.290827][ T61] vhci_hcd: stop threads [ 3177.294807][ T61] vhci_hcd: release socket [ 3177.296703][ T61] vhci_hcd: disconnect device [ 3177.337243][T21028] usb 46-1: enqueue for inactive port 0 [ 3177.829688][T21028] usb usb46-port1: attempt power cycle [ 3178.356407][ T9549] usb 12-1: USB disconnect, device number 67 [ 3178.388877][T21028] usb usb46-port1: unable to enumerate USB device [ 3178.758628][ T9549] usb 12-1: new full-speed USB device number 68 using dummy_hcd [ 3178.800225][ T40] audit: type=1326 audit(2025459146.423:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30311 comm="syz.1.16053" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3178.909900][ T9549] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3178.914068][ T9549] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3178.919704][ T9549] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3178.923665][ T9549] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3179.209637][ T9549] usb 12-1: usb_control_msg returned -32 [ 3179.211962][ T9549] usbtmc 12-1:16.0: can't read capabilities [ 3180.025358][T30323] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3180.028145][T30323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3180.032285][T30323] vhci_hcd vhci_hcd.0: Device attached [ 3180.124030][T30323] netlink: 'syz.1.16054': attribute type 10 has an invalid length. [ 3180.338131][ T9549] usb 40-1: SetAddress Request (28) to port 0 [ 3180.340201][ T9549] usb 40-1: new SuperSpeed USB device number 28 using vhci_hcd [ 3180.628515][T30324] vhci_hcd: connection reset by peer [ 3180.631298][T28985] vhci_hcd: stop threads [ 3180.633263][T28985] vhci_hcd: release socket [ 3180.635318][T28985] vhci_hcd: disconnect device [ 3181.061577][ T40] audit: type=1326 audit(2025459148.683:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30326 comm="syz.4.16056" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3181.402531][ T53] usb 12-1: USB disconnect, device number 68 [ 3181.976792][ T40] audit: type=1326 audit(2025459149.593:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.4.16059" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3182.886296][T30350] tmpfs: Group quota block hardlimit too large. [ 3183.585700][ T40] audit: type=1326 audit(2025459151.203:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30364 comm="syz.4.16065" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3184.217752][ T40] audit: type=1326 audit(2025459151.833:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30369 comm="syz.3.16066" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3184.826856][ T40] audit: type=1326 audit(2025459152.443:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30378 comm="syz.7.16068" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3185.438021][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3185.846838][ T9549] usb usb40-port1: attempt power cycle [ 3186.008008][T25391] usb 12-1: new high-speed USB device number 69 using dummy_hcd [ 3186.138434][T25391] usb 12-1: device descriptor read/64, error -71 [ 3186.387976][T25391] usb 12-1: new high-speed USB device number 70 using dummy_hcd [ 3186.517482][ T9549] usb usb40-port1: unable to enumerate USB device [ 3186.528592][T25391] usb 12-1: device descriptor read/64, error -71 [ 3186.639335][T30398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3186.642203][T30398] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3186.646467][T30398] vhci_hcd vhci_hcd.0: Device attached [ 3186.668553][T25391] usb usb12-port1: attempt power cycle [ 3186.792919][T30398] netlink: 'syz.1.16072': attribute type 10 has an invalid length. [ 3187.018494][T25391] usb 12-1: new high-speed USB device number 71 using dummy_hcd [ 3187.067992][ T9549] usb 40-1: SetAddress Request (32) to port 0 [ 3187.068886][T25391] usb 12-1: device descriptor read/8, error -71 [ 3187.070120][ T9549] usb 40-1: new SuperSpeed USB device number 32 using vhci_hcd [ 3187.308139][T25391] usb 12-1: new high-speed USB device number 72 using dummy_hcd [ 3187.328716][T25391] usb 12-1: device descriptor read/8, error -71 [ 3187.451424][T25391] usb usb12-port1: unable to enumerate USB device [ 3187.968336][T30399] vhci_hcd: connection reset by peer [ 3187.970152][T20041] vhci_hcd: stop threads [ 3187.971709][T20041] vhci_hcd: release socket [ 3187.973220][T20041] vhci_hcd: disconnect device [ 3188.026680][ T40] audit: type=1326 audit(2025459155.643:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.4.16074" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3188.142671][ T40] audit: type=1326 audit(2025459155.763:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.16075" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3188.835102][ T40] audit: type=1326 audit(2025459156.453:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30422 comm="syz.7.16078" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 3188.964460][T30426] tmpfs: Group quota block hardlimit too large. [ 3189.093491][ T40] audit: type=1326 audit(2025459156.713:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.3.16081" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3190.021594][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16082'. [ 3190.029486][T30449] tmpfs: Group quota block hardlimit too large. [ 3192.158088][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3192.779154][ T9549] usb usb40-port1: attempt power cycle [ 3192.783455][T30462] input: syz1 as /devices/virtual/input/input300 [ 3192.948907][T30466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3192.951268][T30466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3192.975898][T30466] vhci_hcd vhci_hcd.0: Device attached [ 3192.981446][ T40] audit: type=1326 audit(2025459160.603:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30473 comm="syz.4.16091" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 3193.067453][T30466] netlink: 'syz.1.16089': attribute type 10 has an invalid length. [ 3193.128958][ T9549] usb 40-1: SetAddress Request (34) to port 0 [ 3193.131550][ T9549] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 3193.557004][T30470] vhci_hcd: connection reset by peer [ 3193.566020][ T61] vhci_hcd: stop threads [ 3193.568956][ T61] vhci_hcd: release socket [ 3193.572660][ T61] vhci_hcd: disconnect device [ 3194.203604][T30487] tmpfs: Group quota block hardlimit too large. [ 3195.373562][T30501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16097'. [ 3195.373564][T30500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16097'. [ 3196.104473][T30512] netlink: 36 bytes leftover after parsing attributes in process `syz.7.16100'. [ 3196.216565][T30515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16100'. [ 3196.317259][T30520] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16100'. [ 3196.471780][T30522] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3196.474879][T30522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3196.480561][T30522] vhci_hcd vhci_hcd.0: Device attached [ 3196.584884][T30515] team0 (unregistering): Port device team_slave_0 removed [ 3196.585106][T30522] netlink: 'syz.1.16102': attribute type 10 has an invalid length. [ 3196.598140][T30515] team0 (unregistering): Port device team_slave_1 removed [ 3197.115222][T30523] vhci_hcd: connection closed [ 3197.115831][ T1241] vhci_hcd: stop threads [ 3197.120535][ T1241] vhci_hcd: release socket [ 3197.122639][ T1241] vhci_hcd: disconnect device [ 3197.216092][T30529] /dev/nullb0: Can't lookup blockdev [ 3197.335843][T30532] wlan0 speed is unknown, defaulting to 1000 [ 3197.828886][T30529] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3197.978941][T30547] tmpfs: Group quota block hardlimit too large. [ 3198.058976][T25391] usb 12-1: new high-speed USB device number 73 using dummy_hcd [ 3198.209748][T25391] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3198.214619][T25391] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 3198.219236][T25391] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 3198.223796][T25391] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3198.230524][T25391] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3198.234409][T25391] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.237982][ T9549] usb 40-1: device descriptor read/8, error -110 [ 3198.241912][T25391] usb 12-1: config 0 descriptor?? [ 3198.638743][ T9549] usb usb40-port1: unable to enumerate USB device [ 3198.652534][T25391] usbhid 12-1:0.0: can't add hid device: -71 [ 3198.654443][T25391] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 3198.658887][T25391] usb 12-1: USB disconnect, device number 73 [ 3198.696536][T30556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16112'. [ 3199.063257][T30558] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16113'. [ 3199.135988][ T40] audit: type=1326 audit(2025459166.754:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30562 comm="syz.1.16114" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 3199.200188][T30565] tipc: Started in network mode [ 3199.202310][T30565] tipc: Node identity 6ac3f8ddf2f9, cluster identity 4711 [ 3199.205034][T30565] tipc: Enabled bearer , priority 0 [ 3199.210060][T30565] syzkaller0: entered promiscuous mode [ 3199.212463][T30565] syzkaller0: entered allmulticast mode [ 3199.238104][T30564] tipc: Resetting bearer [ 3199.257450][T30564] tipc: Disabling bearer [ 3199.485723][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16116'. [ 3200.132194][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16117'. [ 3200.342067][T30580] tmpfs: Group quota block hardlimit too large. [ 3200.970341][T30587] tmpfs: Group quota block hardlimit too large. [ 3201.677374][T30595] netlink: 56 bytes leftover after parsing attributes in process `syz.7.16123'. [ 3201.819438][T30597] FAULT_INJECTION: forcing a failure. [ 3201.819438][T30597] name failslab, interval 1, probability 0, space 0, times 0 [ 3201.824421][T30597] CPU: 1 UID: 0 PID: 30597 Comm: syz.3.16124 Not tainted syzkaller #0 PREEMPT(full) [ 3201.824449][T30597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 3201.824456][T30597] Call Trace: [ 3201.824461][T30597] [ 3201.824466][T30597] dump_stack_lvl+0x16c/0x1f0 [ 3201.824486][T30597] should_fail_ex+0x512/0x640 [ 3201.824501][T30597] ? __kmalloc_noprof+0xbf/0x510 [ 3201.824516][T30597] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 3201.824535][T30597] should_failslab+0xc2/0x120 [ 3201.824549][T30597] __kmalloc_noprof+0xd2/0x510 [ 3201.824561][T30597] ? __pfx___might_resched+0x10/0x10 [ 3201.824576][T30597] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 3201.824603][T30597] ? __mutex_lock+0x1c5/0x1060 [ 3201.824628][T30597] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 3201.824657][T30597] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3201.824694][T30597] ? bpf_lsm_capable+0x9/0x10 [ 3201.824711][T30597] ? security_capable+0x7e/0x260 [ 3201.824731][T30597] ? ns_capable+0xd7/0x110 [ 3201.824747][T30597] genl_rcv_msg+0x55c/0x800 [ 3201.824766][T30597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3201.824783][T30597] ? __pfx_hwsim_set_edge_lqi+0x10/0x10 [ 3201.824801][T30597] ? __lock_acquire+0x62e/0x1ce0 [ 3201.824818][T30597] netlink_rcv_skb+0x155/0x420 [ 3201.824833][T30597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3201.824851][T30597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3201.824872][T30597] ? netlink_deliver_tap+0x1ae/0xd30 [ 3201.824886][T30597] ? is_vmalloc_addr+0x86/0xa0 [ 3201.824900][T30597] genl_rcv+0x28/0x40 [ 3201.824914][T30597] netlink_unicast+0x5aa/0x870 [ 3201.824931][T30597] ? __pfx_netlink_unicast+0x10/0x10 [ 3201.824946][T30597] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 3201.824966][T30597] netlink_sendmsg+0x8d1/0xdd0 [ 3201.824983][T30597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3201.825000][T30597] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 3201.825016][T30597] ____sys_sendmsg+0xa95/0xc70 [ 3201.825028][T30597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3201.825038][T30597] ? get_compat_msghdr+0x11a/0x170 [ 3201.825059][T30597] ___sys_sendmsg+0x134/0x1d0 [ 3201.825074][T30597] ? __pfx____sys_sendmsg+0x10/0x10 [ 3201.825096][T30597] ? find_held_lock+0x2b/0x80 [ 3201.825117][T30597] __sys_sendmsg+0x16d/0x220 [ 3201.825131][T30597] ? __pfx___sys_sendmsg+0x10/0x10 [ 3201.825164][T30597] ? rcu_is_watching+0x12/0xc0 [ 3201.825180][T30597] __do_fast_syscall_32+0x7c/0x3a0 [ 3201.825198][T30597] do_fast_syscall_32+0x32/0x80 [ 3201.825214][T30597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3201.825228][T30597] RIP: 0023:0xf7f35579 [ 3201.825238][T30597] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3201.825250][T30597] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 3201.825262][T30597] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 3201.825269][T30597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3201.825275][T30597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3201.825282][T30597] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3201.825288][T30597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3201.825304][T30597] [ 3201.965735][T30599] gre0: entered allmulticast mode [ 3201.968359][T30599] gre0: left allmulticast mode [ 3202.054549][T30603] tmpfs: Group quota block hardlimit too large. [ 3202.120487][T30608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16127'. [ 3202.346525][T30612] FAULT_INJECTION: forcing a failure. [ 3202.346525][T30612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3202.355965][T30612] CPU: 2 UID: 0 PID: 30612 Comm: syz.7.16131 Not tainted syzkaller #0 PREEMPT(full) [ 3202.355986][T30612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 3202.355996][T30612] Call Trace: [ 3202.356001][T30612] [ 3202.356007][T30612] dump_stack_lvl+0x16c/0x1f0 [ 3202.356031][T30612] should_fail_ex+0x512/0x640 [ 3202.356048][T30612] _copy_from_user+0x2e/0xd0 [ 3202.356064][T30612] get_compat_msghdr+0xa7/0x170 [ 3202.356081][T30612] ? __pfx_get_compat_msghdr+0x10/0x10 [ 3202.356100][T30612] ___sys_sendmsg+0x1ae/0x1d0 [ 3202.356114][T30612] ? __pfx____sys_sendmsg+0x10/0x10 [ 3202.356135][T30612] ? find_held_lock+0x2b/0x80 [ 3202.356155][T30612] __sys_sendmsg+0x16d/0x220 [ 3202.356168][T30612] ? __pfx___sys_sendmsg+0x10/0x10 [ 3202.356187][T30612] ? rcu_is_watching+0x12/0xc0 [ 3202.356200][T30612] __do_fast_syscall_32+0x7c/0x3a0 [ 3202.356215][T30612] do_fast_syscall_32+0x32/0x80 [ 3202.356229][T30612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3202.356243][T30612] RIP: 0023:0xf7fd5579 [ 3202.356251][T30612] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3202.356279][T30612] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 3202.356294][T30612] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 3202.356303][T30612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3202.356312][T30612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3202.356322][T30612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3202.356333][T30612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3202.356355][T30612] [ 3202.459182][T30616] binder: 30615:30616 ioctl c0306201 80000280 returned -14 [ 3202.478263][ T60] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 3202.637138][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3202.642063][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3202.651850][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3202.655360][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.746256][T30616] binder: 30615:30616 ioctl 8933 800002c0 returned -22 [ 3202.868150][ T60] usb 6-1: usb_control_msg returned -32 [ 3202.871579][ T60] usbtmc 6-1:16.0: can't read capabilities [ 3202.992177][T30622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16133'. [ 3203.304035][T30627] syzkaller1: entered promiscuous mode [ 3203.305938][T30627] syzkaller1: entered allmulticast mode [ 3203.595177][T30631] FAULT_INJECTION: forcing a failure. [ 3203.595177][T30631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3203.600418][T30631] CPU: 0 UID: 0 PID: 30631 Comm: syz.4.16136 Not tainted syzkaller #0 PREEMPT(full) [ 3203.600435][T30631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 3203.600445][T30631] Call Trace: [ 3203.600449][T30631] [ 3203.600454][T30631] dump_stack_lvl+0x16c/0x1f0 [ 3203.600476][T30631] should_fail_ex+0x512/0x640 [ 3203.600509][T30631] _copy_from_user+0x2e/0xd0 [ 3203.600529][T30631] get_compat_msghdr+0xa7/0x170 [ 3203.600544][T30631] ? __pfx_get_compat_msghdr+0x10/0x10 [ 3203.600559][T30631] ? __lock_acquire+0x62e/0x1ce0 [ 3203.600576][T30631] ___sys_recvmsg+0x191/0x1a0 [ 3203.600591][T30631] ? __pfx____sys_recvmsg+0x10/0x10 [ 3203.600606][T30631] ? find_held_lock+0x2b/0x80 [ 3203.600625][T30631] __sys_recvmsg+0x16a/0x220 [ 3203.600639][T30631] ? __pfx___sys_recvmsg+0x10/0x10 [ 3203.600662][T30631] ? rcu_is_watching+0x12/0xc0 [ 3203.600675][T30631] __do_fast_syscall_32+0x7c/0x3a0 [ 3203.600694][T30631] do_fast_syscall_32+0x32/0x80 [ 3203.600708][T30631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3203.600722][T30631] RIP: 0023:0xf7fb7579 [ 3203.600730][T30631] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3203.600741][T30631] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 3203.600752][T30631] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 3203.600762][T30631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3203.600768][T30631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3203.600774][T30631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3203.600780][T30631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3203.600793][T30631] [ 3203.994692][ T40] audit: type=1326 audit(2025459171.614:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30640 comm="syz.3.16139" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 3204.748852][T30609] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 3204.752156][T30609] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 30609, name: syz.1.16130 [ 3204.759313][T30609] preempt_count: 1, expected: 0 [ 3204.761642][T30609] RCU nest depth: 0, expected: 0 [ 3204.764086][T30609] no locks held by syz.1.16130/30609. SYZFAIL: failed to recv rpc [ 3204.766754][T30609] Preemption disabled at: [ 3204.766762][T30609] [] schedule+0xe0/0x3a0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3204.768891][T30651] binder: 30650:30651 ioctl c0306201 80000280 returned -14 [ 3204.774622][T30609] CPU: 0 UID: 0 PID: 30609 Comm: syz.1.16130 Not tainted syzkaller #0 PREEMPT(full) [ 3204.774637][T30609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 3204.774643][T30609] Call Trace: [ 3204.774650][T30609] [ 3204.774655][T30609] dump_stack_lvl+0x16c/0x1f0 [ 3204.774675][T30609] __might_resched+0x3c0/0x5e0 [ 3204.774703][T30609] ? __pfx___might_resched+0x10/0x10 [ 3204.774712][T30609] ? pcpu_block_update+0x562/0x660 [ 3204.774732][T30609] ? find_held_lock+0x2b/0x80 [ 3204.774747][T30609] vfree+0x75/0xb50 [ 3204.774763][T30609] ? rcu_is_watching+0x12/0xc0 [ 3204.774774][T30609] ? kfree+0x24f/0x4d0 [ 3204.774787][T30609] ? free_percpu+0x6db/0x13c0 [ 3204.774800][T30609] futex_hash_free+0x98/0xc0 [ 3204.774813][T30609] __mmdrop+0x33f/0x580 [ 3204.774825][T30609] ? rcu_is_watching+0x12/0xc0 [ 3204.774839][T30609] finish_task_switch.isra.0+0x7a4/0xc10 [ 3204.774850][T30609] ? __switch_to+0x7a5/0x11a0 [ 3204.774864][T30609] __schedule+0x1198/0x5de0 [ 3204.774878][T30609] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3204.774892][T30609] ? debug_object_activate+0x2ec/0x4c0 [ 3204.774911][T30609] ? __lock_acquire+0x62e/0x1ce0 [ 3204.774927][T30609] ? __pfx___schedule+0x10/0x10 [ 3204.774941][T30609] ? find_held_lock+0x2b/0x80 [ 3204.774952][T30609] ? schedule+0x2d7/0x3a0 [ 3204.774968][T30609] schedule+0xe7/0x3a0 [ 3204.774982][T30609] do_nanosleep+0x21a/0x570 [ 3204.774995][T30609] ? __pfx_do_nanosleep+0x10/0x10 [ 3204.775008][T30609] ? __asan_memset+0x23/0x50 [ 3204.775019][T30609] ? __hrtimer_setup+0x176/0x280 [ 3204.775038][T30609] hrtimer_nanosleep+0x155/0x380 [ 3204.775052][T30609] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 3204.775067][T30609] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 3204.775083][T30609] ? get_old_timespec32+0xda/0x130 [ 3204.775096][T30609] ? __pfx_get_old_timespec32+0x10/0x10 [ 3204.775114][T30609] common_nsleep+0xa1/0xd0 [ 3204.775131][T30609] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 3204.775146][T30609] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 3204.775159][T30609] ? rcu_is_watching+0x12/0xc0 [ 3204.775170][T30609] __do_fast_syscall_32+0x7c/0x3a0 [ 3204.775189][T30609] do_fast_syscall_32+0x32/0x80 [ 3204.775202][T30609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3204.775216][T30609] RIP: 0023:0xf7fb2579 [ 3204.775225][T30609] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3204.775238][T30609] RSP: 002b:00000000ffd34b40 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 3204.775248][T30609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 3204.775257][T30609] RDX: 00000000ffd34b74 RSI: 00000000ffd34b6c RDI: 00000000ffd34b74 [ 3204.775265][T30609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3204.775271][T30609] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3204.775277][T30609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3204.775290][T30609] [ 3204.899132][T30651] binder: 30650:30651 ioctl 8933 800002c0 returned -22 [ 3204.970514][T29802] usb 12-1: new high-speed USB device number 74 using dummy_hcd [ 3205.272133][ T60] usb 6-1: USB disconnect, device number 110 [ 3205.294043][T20041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.391229][T20041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.475698][T20041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.594328][T20041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.721736][T20041] bridge_slave_1: left allmulticast mode [ 3205.724278][T20041] bridge_slave_1: left promiscuous mode [ 3205.726306][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 3205.730285][T20041] bridge_slave_0: left promiscuous mode [ 3205.732130][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 3206.254960][T20041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3206.263375][T20041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3206.269649][T20041] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3206.274342][T20041] bond0 (unregistering): Released all slaves [ 3206.633446][T20041] hsr_slave_0: left promiscuous mode [ 3206.636237][T20041] hsr_slave_1: left promiscuous mode [ 3206.639232][T20041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3206.642352][T20041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3206.669771][T20041] veth1_macvtap: left promiscuous mode [ 3206.672029][T20041] veth0_macvtap: left promiscuous mode [ 3206.674202][T20041] veth1_vlan: left promiscuous mode [ 3206.676107][T20041] veth0_vlan: left promiscuous mode [ 3208.902641][T20041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.987257][T20041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.065322][T20041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.142311][T20041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.270221][T20041] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.337934][T20041] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.422694][T20041] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.491247][T20041] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.629958][T20041] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.696767][T20041] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.763214][T20041] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.824575][T20041] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.946913][T20041] bridge_slave_1: left allmulticast mode [ 3209.949457][T20041] bridge_slave_1: left promiscuous mode [ 3209.952026][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 3209.957461][T20041] bridge_slave_0: left allmulticast mode [ 3209.960534][T20041] bridge_slave_0: left promiscuous mode [ 3209.963279][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 3209.970221][T20041] bridge_slave_1: left allmulticast mode [ 3209.972621][T20041] bridge_slave_1: left promiscuous mode [ 3209.975105][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 3209.980245][T20041] bridge_slave_0: left promiscuous mode [ 3209.982765][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 3209.989199][T20041] bridge_slave_1: left allmulticast mode [ 3209.991477][T20041] bridge_slave_1: left promiscuous mode [ 3209.994157][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 3209.999257][T20041] bridge_slave_0: left promiscuous mode [ 3210.001771][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 3210.424468][T20041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3210.428703][T20041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3210.432824][T20041] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3210.435947][T20041] bond0 (unregistering): Released all slaves [ 3210.976057][T20041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3210.981597][T20041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3210.985797][T20041] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3210.989067][T20041] bond0 (unregistering): Released all slaves [ 3211.420151][T20041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3211.424279][T20041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3211.428659][T20041] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3211.431762][T20041] bond0 (unregistering): Released all slaves [ 3211.554844][T20041] tipc: Left network mode [ 3211.570004][T20041] tipc: Left network mode [ 3211.598210][T20041] tipc: Left network mode [ 3212.196862][T20041] hsr_slave_0: left promiscuous mode [ 3212.200130][T20041] hsr_slave_1: left promiscuous mode [ 3212.203582][T20041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3212.207051][T20041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3212.215572][T20041] hsr_slave_0: left promiscuous mode [ 3212.219037][T20041] hsr_slave_1: left promiscuous mode [ 3212.221762][T20041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3212.224467][T20041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3212.234552][T20041] hsr_slave_0: left promiscuous mode [ 3212.237291][T20041] hsr_slave_1: left promiscuous mode [ 3212.240477][T20041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3212.243564][T20041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3212.311296][T20041] veth1_macvtap: left promiscuous mode [ 3212.313530][T20041] veth0_macvtap: left promiscuous mode [ 3212.315758][T20041] veth1_vlan: left promiscuous mode [ 3212.317915][T20041] veth0_vlan: left promiscuous mode [ 3212.320701][T20041] veth1_macvtap: left promiscuous mode [ 3212.322903][T20041] veth0_macvtap: left promiscuous mode [ 3212.325134][T20041] veth1_vlan: left promiscuous mode [ 3212.327211][T20041] veth0_vlan: left promiscuous mode [ 3212.330700][T20041] veth1_macvtap: left promiscuous mode [ 3212.332612][T20041] veth0_macvtap: left promiscuous mode [ 3212.334510][T20041] veth1_vlan: left promiscuous mode [ 3212.336221][T20041] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 21:56:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617a75 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900041073f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b0fc6c0 R15=ffffffff85617a10 RIP=ffffffff85617a9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000572304c0 CR3=00000000637b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000008b69bab RBX=0000000000000001 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e4e8c2c3d0 CR3=000000004c6dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003082012050002 04a4e60800010000 02080606013ba800 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9803dcd7842f89b1 dc850356c9d7edac 715dab0000000200 42650c03024c0806 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000012080605 8803000484000584 0322040005800352 c31c81ce05241106 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff01ffffffffffff fffff3080598030c 0200059603000200 0594030204000590 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010008000fffff ffff020184080002 e608000280020100 000008060c0156b2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2808000580020008 0007fe9008000680 020100000008060c 0168ea000001ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffb08 05a403ffffffffff ff01ffffffffffff fffff3080598030c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200059603000200 0594030204000590 0300000012080605 8803000484000584 ZMM25=86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c ZMM26=69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 ZMM27=71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffff888020e0af30 RCX=0000000000020000 RDX=0000000000000007 RSI=0000000000000000 RDI=ffff888020e0af80 RBP=0000000000000000 RSP=ffffc900070179e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000050 R11=0000000000000001 R12=ffff888020e0af80 R13=ffff888020e0a440 R14=0000000000000003 R15=ffffffff8e5c10e0 RIP=ffffffff81973f3b RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003461bff8 CR3=0000000024c4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc90000415000 RBX=ffff888026ac3800 RCX=ffffffff819b8557 RDX=1ffff11004d58687 RSI=ffffffff866a81d4 RDI=ffff888026ac3438 RBP=0000000000000001 RSP=ffffc900005e8ea0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc90000415008 R13=ffff888026ac3428 R14=ffff888026a9d000 R15=0000000000000000 RIP=ffffffff866a8222 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdbf1b4a300 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b195c21f40 CR3=000000004c6dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feeff800 Opmask01=000000000000ffff Opmask02=00000000ff7fefbf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c141b500e876d4fc 57bf194231adea90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41424c8d41bfc0e8 a4a6f55f1b2b5fc0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 171061fb5429ad01 b1a89695cd4bc61a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ecf41ed7e1716fc7 112b970428f38969 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 7ef4008001000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07953fcd07954069 0795468901000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fe200800795404f 010000005c600080 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0795406b27580080 02da008007953fb7 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 734dc22aa6f41013 cf4c7b674cd90f1e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64cb263fa2157e7e ca122e31c04d1a5c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7217184d4c787ed7 381cc2e4f2a6f992 7217184d4c787ed7 381cc2e4f2a6f992 7217184d4c787ed7 381cc2e4f2a6f992 7217184d4c787ed7 381cc2e4f2a6f992 ZMM18=71f5092669aba662 86428e2cff88adcd 71f5092669aba662 86428e2cff88adcd 71f5092669aba662 86428e2cff88adcd 71f5092669aba662 86428e2cff88adcd ZMM19=2145000000000000 0000000000000004 2145000000000000 0000000000000003 2145000000000000 0000000000000002 2145000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 234423436964696d 2f646e732f766564 2f01ffffffffffff ffffdb080180030f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff02040800 0008000208007c08 000a014cd4048080 808008000fffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0201080006015b b20c800800040800 220800060271a20c 8008000608002208 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200059603000200 0594030204000590 0300000012080605 8803000484000584 ZMM25=86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c 86428e2c86428e2c ZMM26=69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 69aba66269aba662 ZMM27=71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 71f5092671f50926 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000 2045000020450000