last executing test programs: 2m2.271315981s ago: executing program 2 (id=677): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x30, 0xffffffffffffffff, 0xffffc000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000340)={{}, 'port0\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='bcache_keyscan\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400800) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000340)={0x300, 0x9, 0x0, '\x00', 0x0}) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0xfffb, 0xf0, 0x8, 0xffdffffb}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x19}, @fda={0x66646185, 0x5, 0x1, 0x3a}}, &(0x7f0000000240)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = syz_io_uring_setup(0x24f9, &(0x7f0000000780)={0x0, 0xfffffffc, 0x4, 0xfffffffe, 0xfffffffe, 0x0, r7}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x4010, r11, 0xbb448000) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x38, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 2m1.821779929s ago: executing program 2 (id=680): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x2f00) recvmmsg$unix(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m1.804359689s ago: executing program 2 (id=681): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0) 2m1.5722099s ago: executing program 2 (id=686): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) unshare(0x62040200) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40009, 0x5, 0xfffffffe, 0x2]}, &(0x7f0000000100)=0x54) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0) 2m1.392091788s ago: executing program 2 (id=688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @multicast1}], 0x2c) r1 = socket(0x1d, 0x4, 0xfffffffc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x1010, r2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) close(r1) r5 = io_uring_setup(0x1692, &(0x7f00000001c0)={0x0, 0x0, 0x200, 0xfffffffd, 0x68}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0xfe06) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x5a) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="71d346a4cfde3b70a3228271118695ee", 0x10}], 0x1}}], 0x1, 0x9200000000000000) dup3(r8, r1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = dup(r2) getpeername$packet(r9, 0x0, 0x0) 2m0.941222992s ago: executing program 1 (id=692): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/78, &(0x7f0000000480)=""/74, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0xfd33, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)="675901", 0x2, 0x0, 0x2}, 0x4c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = io_uring_setup(0x4649, &(0x7f0000000080)={0x0, 0x99a8, 0x20000, 0x2, 0x296}) io_uring_enter(r2, 0x1b29, 0x121d, 0x0, &(0x7f0000000100)={[0x0, 0x6aed2686]}, 0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x2300, @local, 0x5}, 0x1c) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) socket(0x1e, 0x3, 0x8) 2m0.940981412s ago: executing program 1 (id=693): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000a2f5488640323601ce9a6ea39ecda7d6e958f99395c9456b9d5f9dddf888ffcfbc8cf79cc8c35d2794e2a77b1f6f57a3962f", @ANYRES16=r2, @ANYBLOB="01000000000003000000010000000400048008000200010000000800010003000000100008800c00078008000600f0004000"], 0x38}}, 0x4080) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000a2f5488640323601ce9a6ea39ecda7d6e958f99395c9456b9d5f9dddf888ffcfbc8cf79cc8c35d2794e2a77b1f6f57a3962f", @ANYRES16=r2, @ANYBLOB="01000000000003000000010000000400048008000200010000000800010003000000100008800c00078008000600f0004000"], 0x38}}, 0x4080) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/crypto\x00', 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000004400)={0x2020}, 0x2020) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) (async) 2m0.862220426s ago: executing program 1 (id=694): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b4, 0xa4, 0x0, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x500, 0xffffffff, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0x110, 0x144, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010101, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 2m0.861959119s ago: executing program 1 (id=695): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0xc000, 0x0) 2m0.661382027s ago: executing program 1 (id=696): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x6281, &(0x7f0000000080)) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "e15894755656faf405d72edf0025a07a7e4f9748bda12f1ec1116e9db985a86d", 0xa5e, 0x9, 0x7, 0x2e3}, 0x3c) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000ff030000080000000000000000880100a2082c221cfe4b717d8a0c9721980a749810cd2ce457323a6574ede08c4b7f5d82f3fa43efd2a248b2620bca0adce42d6745372ec4a27a5db198007f530b7024283112b4157cfba75684efae2c7110c03b00a0e701fa152afda895c03d7caf312c4d4addc6f6e30ef1dab1a1e8b36d61fb0785a68a57a219d0ecfb", @ANYRES32, @ANYBLOB="ff7fffff00"/18, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x0, 0x0, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000010000802215939ba415905b7026f10b000000"]) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080009"], 0x1c}}, 0x0) (async) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10700, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000100)) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltfilter={0x44, 0x2d, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xe}, {0x0, 0xfff3}, {0xa, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_CHAIN={0x8}]}, 0x44}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000001b0001000000000000000000ac141400000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 2m0.532115169s ago: executing program 1 (id=697): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{0x2}, {0x10}]}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x3, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfffffffffffffe61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = socket(0x11, 0xa, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) getsockname$packet(r5, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000000), 0x3a) close(r4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) (async) read$alg(r5, &(0x7f0000000100)=""/2, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x0, 0x40}) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m0.531738014s ago: executing program 2 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x9, 0x8000) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = userfaultfd(0x801) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r8 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x9) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m45.484941446s ago: executing program 32 (id=697): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{0x2}, {0x10}]}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x3, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfffffffffffffe61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = socket(0x11, 0xa, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) getsockname$packet(r5, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000000), 0x3a) close(r4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) (async) read$alg(r5, &(0x7f0000000100)=""/2, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x0, 0x40}) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m45.43189694s ago: executing program 33 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x9, 0x8000) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = userfaultfd(0x801) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r8 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x9) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m30.050318442s ago: executing program 5 (id=789): epoll_create(0x6) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r2, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000891}, 0x40000c0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r9 = openat$vimc2(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r9, 0xc0245629, &(0x7f0000000400)={0x0, 0x4, 0x5, '\x00', &(0x7f0000000240)=0x1}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m29.351451928s ago: executing program 5 (id=801): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r1, 0x1, 0x13, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = syz_io_uring_setup(0x6059, &(0x7f0000000480)={0x0, 0x1203, 0x0, 0x200002, 0x38e}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000000240), 0x1000, 0x515200) ioperm(0x83, 0x6, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x80, 0xaa140) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f080, 0x19}) r9 = dup(r6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x5722ef1fa38db1be) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000200)={0x40, @time={0x7fff, 0x4}, 0x9, {0x2, 0x6}, 0x81, 0x2, 0xa}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bind$unix(r10, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0xde6a01a55959c7bc, 0x0, @fd=r0, 0x0, 0x0, 0xfffffffb, 0x4}) io_uring_enter(r3, 0x7dea, 0x1000000, 0x4, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4$x25(r10, 0x0, 0x0, 0x80800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)="62598d441aa6235413cd3ecfa6f5936e2bb6c44bde442cc827c593157a2138d78932e8730ef94d76f2fe28c0", 0x2c}, {&(0x7f00000005c0)="c2c180", 0x3}], 0x2) ioctl$VIDIOC_S_FBUF(r9, 0x402c560b, &(0x7f0000000340)={0x2, 0x60, &(0x7f0000000600)="5b8e86249f5a5010c80dfe20bd3cb3d4126adb20785a0df2913aa7cb6f9750e59c89f33388a9098830b2a92417f2381160f2de5a17707e45ed993cf2d164b18e2e46e5a77ccef085461224ec2f14c2518f6040037dc50de5d22449c6517a5e8f3f502dee01cce3b4c911681df0c52a6084267ed173d9b1d1f2b7e79a465df12bcef49bdd48b6971f9835a00c78137bf1f2636cddd05bf644c7d17e5ea3d8536b7ee4c0e035e631c3fcc1477d989e911f6d92ea798eb43f79c6d5b3ba5277adfeb57cdeb0f12c94c0019e351495ebb8a0d9a194f6b2e69f7c5fa0cade615ea59b674ffa3420e7d6d661ac7e9c21e3b89198483f7a1174ec3391df6b1eb19e91db22506b33cdbf63c1ca0b1c152247724b3f13c449821ab971a03d987bf7de61b3532bd6f730cad5094beaf9142199f46281350e42a118fb21d524c6b87d5277a6557a50f1ba6753cfd8474b7498de58ee8898799e7ac2da47c062e07d362b6e525b2fd3d2b73361f7f9cb9549b4aca11c6a6fb261d45a9cf3685e06fb9611865aaf14165bb756093e095af52ea054f953ff0775059a3cb76232c4bac45ea7d48ef4880a52d8dfe5134a81ee58b1b4fea3b47cd1976c93b7bb9560754101d427cf740347997a58a81033b2a5325c400dfb41175d34ca62fb22532a93cf6eda454082323117d673c4616d7063ca7727ad9a20e13ed1094f016dd9675563837e0b45f3f2d58494b79741475e1d3ac4a632ff07d814b61112ec2ce9909e328f448049d471fc37577c6830649f6659d87f2e2f97c86475b00fa6cb2706de1320a3ac858d7adaef2054b0a1fad6aa295223cb003fde4b2418e7ecdc9288cbc8e9d4b9b47d0fbc19f9cad2a254be829ebae9ff81bc374f4b2cc425f332a19605e005923ea65da23a0bdde3cda611831eeecf23e74d8d6f2ecc369cf7d7454dc79352e22799e5aff2d38ac1fe7456b0ead920f963ee358b8717e5c4b83794483fd310443df4e16bd3634f4781cdfe7d66062b35abf6f3d5bb722c299bc71a4cec8f4d6bdcefdcf5a5ea61829457f3360be2e9cb38a3ef100273ccb88b33ebcf06a2cb922b7ee1c173b73a13fd2f21e4ee01159e78d8de6b6338d4315e16fa196fb172a5e87ce68905e2a6d2eecb1ea4331e47e45aeb6968ae1ef6f8c7d02f7dc7b77d1b967e91fc845d86e60877a5a3fff7d93544cecdf5eb630c88418165f45cc8e3ffed50aa1219e47ca8b6e8af9ded0f5b20f8c741583f33b33c72dfed3a7a7c1b9d52ac932e801601ce71dd2bb6b79fd5671373b59f445306ffb9f16cca0071657579619d7e2a951f05743e23b9e5a5ec416bbf12842ab4add2816055d4e71547725493c10743bb79ddbe83cdddfdec742cafaca643402d0043b0e0d3fa14778d85e4c00d4f8c127c6a33f5bd49ed4189a06be465e18fe2a2c4b45912b894b3b677c0c0ae41e8e158e0030d214480bba06f47a850792e076ff6a85ea462e5c329e5137c2078e6bce1e56510bc2c75b0bf6de6ffda1a5468dec925185eed130d6488678c1d813e21e257653734f9f5ef64173b77bd6205d45ef4bf6fcd09277d031e2937a4518aa2fb4dcfa09e9fb902fae206c66560242bd0a8924786e22d328fa5f56ac378afbb9be3a112454612f9ab4b341a1109de90bcccf677bb3fd65b4b5bf58e4da4c09803a8f98f9c951c243c66b558acc1971182fc98fc09eba3b95fa0be7a7c2b7df5874f2740e3f38ed114c92f8be30d3408e16c105f19d2be027fb2d20c4fe14f1d11cee9c163f1e8e49b75d272303b1bc2ae7342784284dd4024b03a509457b41aa3a0380b09fc91b5ad1966f64c3559cea61118975660179000de63291323dd7e4ff0c3a7dc0a6911f8d5db0651dbeb12e67cad805da8bcc21b9b5dc3f48004b6ea7221194e6ad0fdd99c2c569c20f40bd96e8a51063b9cc08190961d39311940e75c23e154bb0a3c1c7cf707a3088a5ed35a64c9b90e502ca8e25fed506b42cbfdbe74b1ecb9007417e9915ed27297a5b462b4d08f0dfd901441c9c61795666576c4449b1bbb36af90902ac2833808cc2045295f84f85dff2329b75f6ac5a514ba38e4479af7faffd95768ffd2bc5f3132fa2f147a5d70a96f6676c2ba632335d652493b16d1719369922688ac9334561dcbbf568c63624e5a14d66ff05ad13bc822b16532282ac9818f704dd5bf0c62ed25018edff112d92801ad28fd8ff1d2ab6494e574534d8cbdaf8a096c5351dec1ffd096a1f182f796dd95e855deee677d19716ac94aea45638780c2a48462a67a9fcb33d1e31d87749a5dda9885014debdc7cab9587f63d2fc838e6966738893690bbc8433a7f34212ff8178089c46b44386a20f52ebe0f998fe13907a4d4209423d7d29fffc764fd7e76aee0109379fd1a9ae8ca85fc62a850b887281d6ac55a363411a442393aceb9c7ce130ddb041aefe5c8fe3dfb58e22af01cbf8ff176bd4c806a29c7298aa5cfc12c788277fb15d30c755a8c571bf4a48187cb98f3e002ccca057bec2dbdef5e21742d6c2b38fe165b5ceba8889eb50f6c8231886c5337601fbb51d6e289693f09ed7952b493b11465e4826dc226a2578d90363298d33ebcc4aeb83255cc3f8fbcdaeabb7162acabc1338889d51d6c694fc62371a09cdbc092b4efa78b0ef69ed7151a599f0547b3aad5306399cba1db90aa10f153a85e0373d20cad17f71b92f14c0a74e5877af93798d3ac4b7709fc354af36b9caae7f1b8c8c9b2f1d9abf752d6b90c5abe93b53c253c6ffca10129d513ced41b6de8876ba12366457ef33e6df1b8425d51227e1789cdaf7f55b6c6c16ad69e6caf5e7fb89ed64f6aa43a41184088015aee3531fd6d24293c4174362d939e0f282c5dc9a39c82581d6b5cbe6a981d32fe6aa54668e5c0b19cbe4d1921a4ac35394c7e2876df5449a8acc86c6ed748d79c278c1ca7bab24bd6bce1d23edca9d884e68de128df42f217328d191a47f359676e2688f8da7f2ac6bf5f6518686d1f118e2d6c014d97ebd8303242d94020f4ac68bf8d26c5dc1a700c9e67ebadd426bb8c2b484189c7423dc1cc4e048e3a01c3ff0cf2e8e8255939d4a6a69c5ea05b52a7864a90d88955a4e2559fe58b28e1d31ac3585c8213b3f755602cb9f75a1bb2d55e5ee90e095af6713b5e036d98d022064a643301281aa475462c250459f0cb94e2de465ac34ce4a084afdd42f49a09b0e8c99faecd945f03331c7a1fe45c22ef120c039c6cec8e39bfeae40da432892546f8b26e217fbac5bb154692b687f758a0d9580d28faec6b7715e735b1873a543b63f0751d50a18bd6b8892e67394e5a740c87d181dcd67b8ba3feb65e21d399b99956826c990e0cd60ea0e6e0e73a6a3af08e73c7ade7b51e80d945d5995810a588c8edf61f8a8d409fc50bc98d48e4c9df48779bbea4da4ba75464ff89ba6da0902dc4f78a69e0195ade3ac0d2d402bbd1a1a11a7b2678646280861a12beff52477e19625f73104ca56508fcc97eafdb560c4c299ec2eef33842d350f921fa8809341a72a225984dcc08135eeb78800abe373fae4011bf0738782f783e78458e1a761a070fc4ed9dbaf9d0ad9045f0a2a1926960bf6e0bfa86f2342c3f1bb5a54f32400c698e8f6295feb3e2c0a071acb19ad6d567fdad042907fed513d91ad7b86326bda74fa231397fbdd31e3698d3f402c6c487f4dccceff91130c128848b7279acfbbe1d4ab1b9369cc5864d31625d36d9db89046bcb40a7bd18de51dfb1a3d64f25646b34cf4024867a0fe5d6381c681c369ecc52f9ae760de365b4d4007199fbc3717b85ac8984fe3d8370474ec86f70b70ebcf6f933a2d2942840fb8bb3ab21cbe13b85dd7ccbeea62ca1ec6b549516043a90a65226e685fda9323e3c011be9669aaa6055dee616fa0b854c43ca92fb5daf64f2e6515a421422ea8573f2a65c99e715b865a397198bcbe6ff901ff20070abf21a8c824622b281ab0849fe23a51d5814cf38b47d4c4fdf1479148e5d3c9a03dbcaed6602968304c6ead6e0b2c2f079dc44d9292d60efa1a8bbf81e122672a148d4510f7c7358dcce1f6273a2d05a248b28f9470ede6d52b13b908f0fe69989f8dd3596c7dbcf4eab942a15cb5758964fc08011d35d450f37f1b80ab0fe4911cfe349b675d60db563213a2991856dd829a30b83dddd4731c028e187421bd799ed0628aa40e21f111d2ae1a54bdc09c51b9205991982b9ce927beb192673ceb2965a05b7c2a087ff3d477433418b368ec8d0451831af12458dfb1d8579b7a80a74f608aa43e6a0b47925dc708e8a85c68f7d4cc58c1a14e924a6561493c1d8bf5f791be62ab22b49ca38470f385560e4bc3fbff28b42eb3030865f564a4d44df4607087a87cd4671d99d8249a9cfdfbf9b2996f6796182fc85d0a80d1f61030238e37c5259a69f68e736d66e381a36378ee68f4ae02a049dcd71c0f4dc038fc92f86aeeb7b3a1d8808568ac3cf1b5027185b723349a99b6fc05845c4eba1be554353e98710a9711e290ea91b306da698b3001dc97448f5444e37153cf0550d61b5f69205940d9f70b54b9a5b343ddaf5e49fc05f4706696d437f88177f27660e31e6d3ac5732600aad441ec2684cd739e7669a2a3d3cb06dd57663dd50782902e1c27fbb251415c71a8d6cb7813c282390217f8ca9816a10fcc7ee4ce1469942bc88b1ee97204355e5af5902355ea213443df6e6d4d1decd35358ddc263c90f08a0e65a57788eb1d6e6d887a3fb1e8ee409ce6ee9082d9ccbd1c671544067f43b1827bf1398e836c81f8c34f6ab84818bb9e87146ce57185677755c86ea8c629511b68d56d92abafa6166fe39afa5ba398683a2b38cb1932021ce5e700691f2cf106c174c9cdae62599738f887dc1a9b9a1d7d17e7ff4a1ada222cbc42a30eee6d0410993dcd25c363b0aab70d4a7a9889ae3ea0e3025f51ab46dba941cdc6d2d21935873b175415016d95546fd7bdb5cfb1f7a60a9c4298fb664ecfc1b15da61c311d0f014bf2138e0f9ff463bd5153a5ed455c996d46d5f0fb15afd359d6162ab9cbc06fc992873ade6c3a29ea0bb4d4c221cb7150eed6d1d1c980760311396d49f4b8875cd01c14aa68ce675ccb58c0cf2696548ace79198cf30131e8bc5ce449472ad4313652f29a8df69fcacc0ec1fe47070c4e78a813d80d57104277a892d684b2c6982e3cbeae878d1dce8c8268100df41858c3dc36056cba31dedaa2aba0e2c2f87e3cf3cf84668eb7df29ba5588fd3ad54bc9343302a458598adf527e1770d6be87673150b09065d779da9dd4fc4ff0c3426af23423a587ba9c14aa1f379abadb008b68a7350aaac592f4df2d444d7f31d686156e473180f52e2d0008b939084f7cba6ca7a5827e3d684a10a739fa9158f690404aa44c8f4a701f064a37f2d96939defb218a5649edad4ebab5ea1913c6d836d507c2f6ec618ff93c9aa76e78fdd15a9b1aef9331cc4d3df99f077431f537c9a5927788b846915ead1a3f8b4cab6952e9068644743e5a0b4c7d64d5f0ab3e41331ae0e76e3c380c899673edde274fa35d586ddb43b6b356bce588bc5883a56564714b8aadcaadbf1691cdb6857d0476324abe7fac6b19cd1a3f918e7344d24afa0f369aaa943623db3dd17936c859b84b2df7510f10a2a29af0062bdcbb300ccfa9a579ff0e9da22bb93dd1bd836ff11108a4073f811640ac125963d286f5328d858c1d0a14e4bee6e6eeb9174cdf38e0aca740b95d0fc9c71e85d021089a96958ed361c5214b56b715b7d3385f", {0x80, 0x2, 0x30364d54, 0x67761c7d9dff8497, 0x3, 0xc, 0x6, 0xca}}) 1m29.071538369s ago: executing program 5 (id=804): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) (async) 1m28.1691654s ago: executing program 5 (id=810): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000740)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xda\xfd$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9!\a\x12\xa9\x18\x93C\v79?L\x98e\f\xb5\x0f8\bH\xa8l\r\xfb\xd6>G\xf5\x11dV\xc9ty\xdaJ'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = add_key$user(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x1}, &(0x7f0000000e80)="da", 0x1, 0xfffffffffffffffc) socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$read(0xb, r9, &(0x7f0000000f40)=""/54, 0x36) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108"], 0x2cc}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m27.804632229s ago: executing program 5 (id=815): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) getpid() ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x0, 0x13791}, &(0x7f0000000000), &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m27.098139737s ago: executing program 5 (id=818): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x12002, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd2e, 0x0}, 0x81288c7d73bc98db) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r1, 0x4, &(0x7f00000000c0)={0x8, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000000000000000000d0000000000002e0044a5d7c6f16db394b3a07164fc1e8ae93228fabf396f87081011885de92501cd4c8ee4f886cb951f82b17a19a0acf9418b4b4038e425fcba5dccdeb9c2f4b76895d976e2a684d90d1b2ea03b3e41b5edd773f6057238fa331a5930595c012f36512ea3f0aadd8004e1b090ea7cb14e0e20d6a32ca3b69b53ff2e31c816bedd4c56677590cc6dd77bc42bbd21263044a33c85613753400b83fb012a5ea1b69d258e89ba6c006f5a0d"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) read$msr(r3, &(0x7f0000000840)=""/102371, 0xffffffa7) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x0) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8949, &(0x7f0000000580)="4d69efbe11777d2b7107d362977b62d8ba93736ab3d15ba5ac1ce2cb3eaa8ad181b91bced64235278f21973f3121647d955682dcefaa2692636dc818fd6f189ce8ae348684f7df98f8ac3cc9e50fa2b28bf14c0c5d594c7c216594d3f333000000000000") 1m11.230621633s ago: executing program 34 (id=818): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x12002, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd2e, 0x0}, 0x81288c7d73bc98db) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r1, 0x4, &(0x7f00000000c0)={0x8, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000000000000000000d0000000000002e0044a5d7c6f16db394b3a07164fc1e8ae93228fabf396f87081011885de92501cd4c8ee4f886cb951f82b17a19a0acf9418b4b4038e425fcba5dccdeb9c2f4b76895d976e2a684d90d1b2ea03b3e41b5edd773f6057238fa331a5930595c012f36512ea3f0aadd8004e1b090ea7cb14e0e20d6a32ca3b69b53ff2e31c816bedd4c56677590cc6dd77bc42bbd21263044a33c85613753400b83fb012a5ea1b69d258e89ba6c006f5a0d"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) read$msr(r3, &(0x7f0000000840)=""/102371, 0xffffffa7) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x0) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8949, &(0x7f0000000580)="4d69efbe11777d2b7107d362977b62d8ba93736ab3d15ba5ac1ce2cb3eaa8ad181b91bced64235278f21973f3121647d955682dcefaa2692636dc818fd6f189ce8ae348684f7df98f8ac3cc9e50fa2b28bf14c0c5d594c7c216594d3f333000000000000") 1m4.371236881s ago: executing program 6 (id=971): r0 = syz_io_uring_setup(0x5674, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) syz_io_uring_setup(0x100b7e, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000240)) io_uring_enter(r0, 0x1659, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000382000000000001418600000000000000000000000000400bf91000000000000b70200000000000e8500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0xc2d00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000500)=""/202, 0xca) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1m4.047159814s ago: executing program 6 (id=977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x2}, {@in=@local, 0x0, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0x0, 0x970}, {0x0, 0x0, 0x9}, {}, 0x0, 0x3503, 0x2}}, 0xf0}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn:') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x0, 0x11}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x2}, {@in=@local, 0x0, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0x0, 0x970}, {0x0, 0x0, 0x9}, {}, 0x0, 0x3503, 0x2}}, 0xf0}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn:') (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x0, 0x11}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1m3.788405548s ago: executing program 6 (id=979): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff000000000005"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYBLOB, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x8, 0xc5, &(0x7f0000000480)=""/197, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x3c, 0x11, 0x1, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x3, 0x6}}, [{0x8, 0xb, 0xa13e}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x2004400c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 1m0.644625268s ago: executing program 6 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4d) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x9, &(0x7f0000000140)=[{0x40, 0x4, 0x2, 0x2}, {0x401, 0x4, 0x3, 0x5}, {0x4, 0x4, 0xf9, 0x33dd0765}, {0x8, 0x5, 0x3, 0x1}, {0x9, 0xb6, 0x48, 0x29}, {0x80, 0xb, 0x9, 0x6}, {0x0, 0xb6, 0x1, 0xd}, {0x430b, 0x5, 0x6, 0x2}, {0xfffc, 0x0, 0x4, 0xfffffff5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={r2, 0x1, r3, 0x3}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={&(0x7f00000000c0)=""/93, 0x5d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m0.331387403s ago: executing program 6 (id=1006): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x0, 0x1000000}, {0x0, 0xff}, {0x4}, {}, {0x0, 0x1ff}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001700)=ANY=[@ANYBLOB="002088fbff05070000ffaaaaaaa3aabb0c00000000ff299078ac1e0001ac1405aa00000000000890780000000000"], 0x2e) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$MRT(r4, 0x0, 0xce, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 59.019814789s ago: executing program 6 (id=1013): r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000380)={0x32, 0x140, 0x80, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x8000, 0x6, 0x1}, {0x1, 0xcd3}, {0xa}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x100081, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0x0, 0x100, 0x0, 0x6}) socket$netlink(0x10, 0x3, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x8, 0x34324152, 0x0, 0x1, [{0x0, 0x2fd5}, {0x10}, {}, {}, {0x0, 0x8}, {}, {0xfffffffd}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000e262c728563c9d9dfbeb", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) ftruncate(r0, 0x2955) 58.888210987s ago: executing program 35 (id=1013): r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000380)={0x32, 0x140, 0x80, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x8000, 0x6, 0x1}, {0x1, 0xcd3}, {0xa}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x100081, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0x0, 0x100, 0x0, 0x6}) socket$netlink(0x10, 0x3, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x8, 0x34324152, 0x0, 0x1, [{0x0, 0x2fd5}, {0x10}, {}, {}, {0x0, 0x8}, {}, {0xfffffffd}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000e262c728563c9d9dfbeb", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) ftruncate(r0, 0x2955) 23.050094534s ago: executing program 3 (id=1212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000002c0)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = getpgid(0xffffffffffffffff) kcmp(0x0, r4, 0x5, r0, r3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0xa40, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) r6 = socket$isdn(0x22, 0x2, 0x25) r7 = socket$isdn(0x22, 0x2, 0x22) r8 = dup3(r6, r7, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000004, 0x4018831, r8, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) 21.470506983s ago: executing program 3 (id=1221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0xfffffffffffffd65) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x4, 0x0, "7e12ddc5a89047bf00"}) r7 = syz_open_pts(r6, 0x0) (async) r8 = syz_io_uring_setup(0x4dff, &(0x7f0000002840), &(0x7f00000028c0), &(0x7f0000002900)) lseek(r8, 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x19, 0x0, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$CDROMVOLCTRL(r2, 0x5392, &(0x7f0000000040)={0x7, 0x53, 0x4e}) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ffddc1ddcccdde75537d5326a4", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 21.466876642s ago: executing program 3 (id=1223): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f000000ff40)=ANY=[]) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x80000239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x13d4, 0x4000, 0x36, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000f, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40002, 0x4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000040)={0xa9e, 0x56, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f000000ff40)=[@in={0x2, 0x4e24, @broadcast}], 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) 20.581653028s ago: executing program 3 (id=1232): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f9", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f9", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000013140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80181, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000002c0)={0x0, 0x1}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x90}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r6, @ANYBLOB="00280012001400028006001100000000000600100000000000"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18.863225323s ago: executing program 3 (id=1247): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x88900) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = dup3(r3, r2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x12) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f00000035c0)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ff8000/0x3000)=nil, 0x3000}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) write$P9_RREADDIR(r7, &(0x7f0000000180)={0x6e, 0x29, 0x2, {0x862, [{{0x40, 0x3, 0x7}, 0xc8, 0x4, 0x7, './file0'}, {{0x8, 0x4, 0x1}, 0x3, 0x9, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0xc, 0x1, 0xd, './file0/file0'}]}}, 0x6e) 18.561210898s ago: executing program 3 (id=1249): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2b7d18090f00442c}, 0x0]) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000080)}, 0x10) syz_emit_ethernet(0x72, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 6.339393237s ago: executing program 7 (id=1315): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000010) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbcfbd613fe4dca5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x440, 0x80) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x12002) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[], 0x28) socket$igmp(0x2, 0x3, 0x2) socket(0x21, 0x2, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x3}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, &(0x7f0000000000)='9', 0x1) 3.689741365s ago: executing program 4 (id=1332): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {}, {0x0, 0xa04}], 0x3, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000004080)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@flag='ro'}, {@fowner_gt={'fowner>', r3}}, {@dont_hash}, {@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000001f80)=[{{&(0x7f0000000300)=@caif=@dgm, 0x80, &(0x7f0000001780)=[{&(0x7f0000001b00)=""/247, 0xf7}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000001680)=""/196, 0xc4}], 0x7, &(0x7f00000017c0)}, 0x4}, {{&(0x7f0000001800)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000001880)=""/75, 0x4b}, {&(0x7f0000001900)=""/23, 0x17}, {&(0x7f0000001940)=""/60, 0x3c}, {&(0x7f0000001980)=""/199, 0xc7}, {&(0x7f0000001a80)=""/82, 0x52}], 0x5, &(0x7f0000003100)=""/224, 0xe0}, 0x7fff}, {{&(0x7f0000001c40)=@caif, 0x80, &(0x7f0000001f40)}, 0x4}], 0x3, 0x40002721, 0x0) renameat2(r4, &(0x7f00000017c0)='./file1\x00', r4, 0x0, 0x2) sendfile(r5, r4, 0x0, 0x578410eb) sendfile(r5, r4, 0x0, 0x100000000) 2.691012743s ago: executing program 0 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e4000000260001000000000000000000d40000800c000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50464dad7f2a778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803"], 0xe4}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd9f442d8b3a7f4900a9358c0bb195d713a63a7d74b353606789d5737ab41e20743341d63d62e3aa272b37af8cb203f165eb24f397707a931c8131ae900e53a0112c313363ec80ad3f150390459399e7018b4e25ee427a219ef31f618b3375082c43e89132b277452bcfba5c3ab0859c27e6b1d6827af1811e06eeb2e528d3c13fb3180f69a741802e6bc2ec61be51ae78f3813d56a1ade11d778b6e4c5c3bc648ad9a96b060178518b6191eff547597c4f0e4dbf332516b0366a37254994258a66182ad492bcb1cdfa8d68d2685acaabc679b6a4db24e6f2de5e5647ba4", 0x30a}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x4c}}, 0x0) 2.662942069s ago: executing program 36 (id=1249): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2b7d18090f00442c}, 0x0]) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000080)}, 0x10) syz_emit_ethernet(0x72, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 2.18458335s ago: executing program 7 (id=1335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="58750f688dc16a224a6d5986eff155d3ec074b015dcbc52cc97c07111a5efe96965e24476c1ef251eade7dcfe4bf39a6ec59fe90c3a452d1fdbdbfddcab97db52a29caf89a14605ba29a04ec924416dfe08b0767c5ec69b1837a2b603d1ce779cef0211f61f7d3a92c7583a897662f32a338f81612b43f9e8fd3814584bb3b670e21af0773112161bdcbb38bd89ad2795002039e6441a1e4ca8825229c55ef8b7c56ee78867b707d91ca53024f6bfafac372a3ecc2596e77f8325e04f311e928b5fc88a0b2e13ba2f0543d42183fbcce11daa582ba8424e3", 0xd8}, {&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f5368fce7bf91d3e36cbe0c0f119a3e30349ba7b75d8664eeea79a658", 0x71}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c", 0x47}, {&(0x7f0000000c00)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f4886642ca34d7d96eb8bb5dc6d2e753eb60f68b8462127502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf0240d2d56af0b9b552bdbc2aaf509556b22e6ee04911b793f394fbc2842019b1ee70bb3336a594016d97fd81e4ed49e192e627a723ed47c1653cbb6a0800099d67c1623444d5fdb7c0b111aaec599ee041d3f46ba87a8c1df29994d3feeda94f7307fb5b051de6a227e0d9d90018af6a2b05a5d92e7f6b06000000000000003ab11fa77f00000000000048b71b5a9b7d2916eb2009d4974033c4b294e44c294c9aa0c774abca6db80e8aec9c969065a9d475a194834b466dfd4c5b06ec85bcd4957ce3d6959cec9346fbf900d6b79f3a3c699225609506df832860b7d572ae7fea9134d2336a9ce2a407e85616de313cfb3dc6e151229dfc5b3e7321ea6c966c9e635a70e16c5dd046b0efb4089fe516913a8e1ff38278a5bc6c9839be8051793701d3d6c521efda554778b62c9bf4e772ff0f0000000000000891460b6524c6d03f92b8e19f669908c6d7c701252ab81ef90add", 0x1a1}, {&(0x7f0000001480)="e64c362564be2e7fed0812e95e1341b043beac0e9516e33763c01c3b1d31ed3250d864b93d96b7582d8c5ab6ccf2d066562004d9cc467bec6c16a25e6891431ff678f267deda96b51304038d08450f5b03298743021deb7bb664148102dc826a81fb6edf4920083b0c9adc2d7362a300dce02ced4e3a4981501faa05784bcf6af3ee2bb18d0ef75aaf089a2ec0e055a53135b16ac4d04657bcc4b4afc7612ff11f72d7eea9f4a801f4170015d0f5acf1b52d6cb5ab05e36fe88878fd274ab2401172202a470e9f767051819aa7638f4910a5ab8be3c983d1977f8ba2e414f410d221f9607f671c33df4d787fce13aa29ce0a937d5d976236c37f60d433f2fc0aa0b89247be7fbe554cfa84bf099fa37a82ac399fd7e73859df2b24fa632c0363d0a4b67fb8c18c67e0fa274c6ec16ae548638ca357cd69389db147961ddb13806dca32263a8a122e7744b175d8b89447be5bba944ba963bbd8b05af218849bfdd48aa4f8c093e73e7e06cf0f7cc64f26564455dc5741536740ffabc555295f2ba08ec1678f3e8f87c4685f67d3892675edad7250949b77ed8478783097e5d88a90085526c03ad2e851fe61057d3602026d29646a3d0dde656b8ba826c01925e558bc1f92faa810247211dbc1f559151f95e9a8304337e35760160c0c0de381421e1bad96494e132c62e9d1d3512a6adcd463aaa57a71004b1c01a7e38b23f42819f0fe890af2282d8a28a85111649be06960dd5679db6920e590cefb4607aeec5a49643aa6a16e9d868379a2904fb7b93d3dd233be6ed1f42026234e9c99ffb2d474ef2548ceb31edff52f0f685d8330fe542d0f4a8cea796e1f6e708d4bd47b94f5811e527a2951c3eb99b8055a35dfbc8098390fa4cb4bff9b41ec4069f89ffebafe93730e9a80f39bb577b7268fb54ca5678eae0a2bfb9d67c7c7f917a91ceddf14512b2a518bf288058075a741dcb3184b5843abb5894d658063e2ffa084fedb09ae8b4549eaff47b81b88631901c584aa6ecc442a61441d17530dc5c4090dc19a363e3b929260fa45cded6389b278d08672678fa6cff117999935801b8a4eac51539a2373f5621d1677d83814a95685a6aa8eed6211b60226cf9bc3a5ac52898a25651851da71662a765ed651bf9106d448032973051c11255db6845f8ada369d529bdba1b04298a6f26247c2cdbd67f14cbcab04779d3fc96301656723e8919ceb8f09e13674f3df771031c65727ce9458068bd4097ce8e5fde509bd0583720051fb9b0cab4627e7afadab4f40038a5e5560dd4738323b31d352cba7fc7f7ecca218c039a23f4fdc9f808d5f6778a8735ffb8ee5293b4c7b1e0511a5156658100cec2bea338f1c75fc293125f7c853b860efdeac89eaaa0d0d44e78eba9087ec39ad5bcbeec9a384eadd333ab1b67f112ed1b628170bd82bddb2c5ed19bacef647ac3978f7ce521d16d0378289b4b3168e607889df800a43d790fd1d6c667617a0529f12d52391c31b29b1e23a96fbb9ce5d4870b2f07e723859e0196fdb3f9c1e971756d6efeee57787206034ed84dc18c49c26beb1e97b3115576fdcbdbbf1fc3fe5d98ea04691dac89c45d083c6e816c7f829c7c742ee267fbf1d20a08c093bf974285a8cf58a754c9dc2fb4356a6bfc0cc902cd16a758449ac5d23b4f3b0a72414fc262d624a9a30d6fca551ac8d172e023aa7c2aebf6aeb5408f35cf9c7c5da24dfa914d50481793af16196ff921fb1b776eaced109b56522d124b2c6e62c6f895fa0259f22c533d39dda60f7169b44d8576956916a7d0186502790cbd13c5922421aa01159a184f3a2a03106263af262c2c55d4eb6ff1671bc8065bd61a2d4a96388263825cc3aaaffe3f110e4e4e57c0056f23ae5d0e0edbaeffb3131f809efdbd0ad364b609be392914062b203ae3de647ed88871af7a3abafe03fd7763c379189dbc86054692a01c661636580e9a1f69090c6162d9e6d49985a0eeb4d2e18d39b2df1b84cfcd07eaf2775d40c656c7a456bb25241f9ac279d32e1a9419a627cd2c5775cd8cb0b7a1a8ba63f6c53288b9a66f6c54cff98f9e537ee981c200f39ae9aa225cf9bb1ac30c2f151cd50ae2d5c92fad3e98a364074d496518dbbbe62bd11b681b761b462d4ae111c4709b6c192db56737590dacf1c592d9a2e5b7e7b97b83231eb0b60eec8d0042acccb3f4c7e661b305fb2290808f942131365dd9652e2d24be0313c6885d41d1e518181334d33344669b4c9658f6ade4a9240b16bcaf97724c3041a9f716f0c6003af3107e6a9d813fe2588fd4d6037a95f3d2635b5990b9f57527a2c5f62f7ce38efc51611931fa0f1518797683c7904b820fc761a2254e13fde80a8df9314dc48969fcac419a02a122c15405aefc4936b24bb4269345029da625ae015210efa6dddc1202ebb41a972303be837d67da27e512db62ce0f7d18ee844697cab1f045f154ad600f089c8a58eb9d24cbccb2d4b427908ba511c6f20864d3183cb7a56115a4beb3427873aca64bfd817c85eb8405b05ddeff426f0a44b8c8021c9e644c83196253e45789c1c4014544bc297ca05f0abe861536b9ca99aa38b9e088b62c4cadcc76524ec88b10202601b4bba498ddae02158ed56f9793d51a4c68780798f6b971ac25b64f526495442303c4049b925f14ba8f8027997f1c7292e5487719cc100ec92034f0bb6c80efa911cc39aa2e1534d3d4ab9ecda9c506a8878215ee935205269540725c22d9970a310c50ce538716f78fa6400c6f6bfa780bca1c841a80a0230f2bc6a217d0d0ac155f98536a46e4afcf71c95139c3101499b3cfd8c2048bd47f2f6256ffb31ddc38b976c3378e8e504f2a9d6c4750d68f9c291d892b7bdbf736ca45d69ccaeea636574bcf073d71eb1ac836005d6deda63be07cb0c69e7a043e6ba72f03c4472b70f620364d86b44c0e06b4738ceec44173d14641bb31e077b5b275527dfda18603559191d832c99d81ba5a3ea6664d70f2c680153449c72fdae61cb8a540c6efdf321afd40de62ed3f48c4f0086381d1234670d14f8726fb2c328622cc1fad02270679ad7795852cf654e2f3cf23193cfaf3b141b2415a181719023a0a401dfd466c3b39e9aa1ea4ce079ca29ddcc0be0b070c8bc16405818500d62264ef30d07b866000568ddc09c3b9113bd9baa6c6cb9233275fbbb80de1c970de79a33993dc39ff51e889762df9cd43603f0a31170d767df02d243acfea51cbc03d9b56757bd55fcfc4efa26f3c4967ec0c4adc30c725fe299b29306d9f255f69040be16b1e160861d392013803bb8485b35a5c11dd613c118afaf6b3549a810d6f1a03900e36a5fa794bbd95898ca47dc74115ee4da8b6a73696e60c060557008a93e7c9f6ee5a95d59218c67239f051717d52e37e437eae16b3325744b91a98f14da83dfa9ff6cfebfe1d4c31d60d1fcd04c98d8aed22c64b341bd76", 0x998}], 0x5}], 0x1, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) r3 = eventfd(0x9) io_submit(r2, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x1000000, 0x0, 0x700000000000000, 0x7, 0x0, r0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000180)="42a2d877b2f709f066b2090bfa7b9394fa367614e944eecaaef1f78ab4c347bef28425db737ef95b6529b91bce7ac521457570db01047286c8441c65d88e5ab89959e44fd362c4c6b45fa616b39979512495a7106731c1bccad150761e15cca29e3a1f8430d7e6df02988f687609671ce6e38accdc04614cb80f8c4cccbd08f232763bfe6dd0d18635fd5b7c", 0x8c, 0x10000, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000280)="80972823ffaf30d4401f5bcbf932bf1820d1147f649266e6845cdc5f1fb02b78449e51af908ecfba6be0aca7cb1191744fcc00400296216e403497f5091c76bdf08170332ba981b705083ebcf1f6a01cd6d672b53b98fef92da696ae85a593141cdc3624ce650216af79d5b24fb8a47e48ab734c5c73", 0x76, 0x8000000000000001, 0x0, 0x3, r3}]) 2.168913788s ago: executing program 4 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bf"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0xfffffffc, @private2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="0f60caed42", 0x5}], 0x1}, 0x44811) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8}}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.999956124s ago: executing program 7 (id=1337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40140921, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 1.999623303s ago: executing program 7 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f0000000700)={{0x7, 0x0, 0x400000, 0x0, 'syz1\x00', 0x3}, 0x0, [0x8001, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x42, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x6]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES16=r2, @ANYRES32=0x0, @ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_plug\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000100)=0x38, 0x4) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x20}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000340)=0x926, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="13fb0000", @ANYRES16=0x0, @ANYRES64=r5], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000005) recvfrom$packet(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3001000002090108000000000000000000000000680002292c00018014000300fe8000000000000000000000000000bb14000400fc0100000000000000000000000000000c000280050001003a0000002c00018014000300ff0100000000000000000000000000011400040000000000000000000000ffff7f0000010c000200060003400000000098000200060003400098786d66825a5630bae069ab0000000c00028005000100000000001400018008000100ac1414bb08000200e000000106000340000000002c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000002c000180140003000000000000000000000000000000000114000400fc0102000000000000000000000000000c000280050001"], 0x130}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000800000002180000ff0000060000000008000110ac141400"], 0x24}}, 0x0) 1.810987972s ago: executing program 7 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x0, 0x40}, {}, {0xfffe, 0x0, 0x0, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0xc0182101, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.745850272s ago: executing program 0 (id=1340): epoll_create(0x6) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r6 = openat$vimc2(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r6, 0xc0245629, &(0x7f0000000400)={0x0, 0x4, 0x5, '\x00', &(0x7f0000000240)=0x1}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe324, @void, @value}, 0x94) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) 1.287764192s ago: executing program 4 (id=1341): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x20008, 0xb2, &(0x7f0000000140)=""/178, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x801, 0x7, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x33f3, 0x0, 0xfffffffe, 0x3aa}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x200, 0x0, 0x131}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403020000002cbd7000fcdbdf25ab91005b142dd561eded6dd8e311383545b726ff40d727f49e57d30c5a418668713ab20df39b296ed8041cfac6094a70446602f89d7e5aff6db8cd994a14de864f5cf60a0932367750b251171871e0e17808b179ab72fe15e6bc1f3ff6628de104a9b5cd822364fbed90b52e271d6bc26f30af5fbc53d9d1669b0232575d14af3a0ce80c52c363e47f1a7cd62e6a9a7bd68489a53a787354ca64a9b9678c26"], 0xc}}, 0x810) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x7, 0x48, 0xffffff50, 0x8001, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x6, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0xb5, [@remote, @broadcast]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.180466292s ago: executing program 0 (id=1342): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = openat$cgroup_ro(r0, &(0x7f0000000480)='memory.stat\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r0}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) utime(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x2}) (async) utime(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r4, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r4, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast2, @empty}, &(0x7f00000013c0)=0xc) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast2, @empty}, &(0x7f00000013c0)=0xc) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001400)={0x0, @multicast1, @multicast1}, &(0x7f0000001440)=0xc) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001400)={0x0, @multicast1, @multicast1}, &(0x7f0000001440)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000002300)={'sit0\x00', &(0x7f0000002280)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x8, 0x4, {{0x10, 0x4, 0x2, 0x0, 0x40, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xbb, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x61, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000034c0)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000034c0)={'veth0_to_bond\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003580)=[{{&(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000006c0)="1fc8eace9b67b1e28315a747382f882f4e3f55321a13b0b541638973745ac0512bccf1a7df3982cd3865e5fa78a8b0e3ea7545658ebe4c7b6a88e17c29c9cae8426e7b32f655e1ed280e376c1c63e4126005059a3f21", 0x56}, {&(0x7f0000000740)="5e12066f8609acb73789ba5a4be3d472192c6189c8c093aff3cbf418b7691770387596816c4cd03626cb675119203efa8b7acb440c71c5f6c0cb3e21ffe6de0c53da1c8d4080addf465eeed654ed14ce8dd158364df2dc3941cd37b24e9ffe555615bd41877e17b417093aecde9501336b50d798124d785cfdaff4c2630cf82fc5753a37ef90e4c4448c221f8de406e368b67e", 0x93}, {&(0x7f0000000800)="b34051e85ed7c7a35590915ecac43c2246f3f4c7b85aa4f4284e", 0x1a}, {&(0x7f0000000840)="c6a829ae58f36ea270674cdbd184e022c81ee2821a04e61fd2fc8e617c953341851695ff564a8e5cbf9bd82a07dc7336e7651d1b98a4c241649dd671a984cb694391af86e2ac3a53220f54cf8f9670a7e5a25061c6a4022e4173eba90ac9a89e0c8550e6a9de8aa763ecf9a23ed39b3c747333db56c578ae55abc1dd401d253e08b00fe9a5ff10e8d6b8bbf2c2b10d60b6451a081b4877806d670d4e4019a1c39ee6ce282d60ce2685bb4ce1e1b5a34f24b094239fdbfe015909fe7591dd7addbe8cbb09ecad48a442bc1217e21c66630106ce2eb2518b55d2af3b4f722fc49fa6", 0xe1}, {&(0x7f0000000940)="7c0eeee64c3b60d287ad", 0xa}, {&(0x7f0000000980)="4f8c5447a1e879fdc2d5080d545bd6caefb6851650282e98a4996dc4e55d1c26d2f70438a38e283b5fd6d7cda06f21f1a5feb40769fa78df106bd7c30b92303de5feae6c42a87549267ceba166", 0x4d}, {&(0x7f0000000a00)="99a6ba1763ac127786ff3cacb94984ef5ae8ce4ecd7bd5bbd4f2d7e537dea9d66ed29ea01bd71d42f2292d0d943d1df9ccd67bb29a8669e0e5b9310824cd14e424", 0x41}, {&(0x7f0000000a80)="9b2b076da1262b66229a4f07d29851572132063db7a6e400f91e29c49b577b0d20e3b7a2fefea1ad5220114aa8938560b61a2872688fbefb0e162d17e54443166ad017b9c3206eae0674fb490b5df12f", 0x50}], 0x8, &(0x7f0000000b40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xf995}}], 0x10}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="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", 0xfc}], 0x1, &(0x7f0000000d00)=[@ip_ttl={{0x10, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfb}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xef, 0x3, 0x8, [{@remote, 0x81}, {@local}, {@local, 0x8}, {@remote, 0x9b}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0xa, [0x6, 0x1, 0x8000]}, @timestamp_prespec={0x44, 0x4, 0xb8, 0x3, 0x2}, @ssrr={0x89, 0x7, 0xe5, [@dev={0xac, 0x14, 0x14, 0x1c}]}]}}}], 0xac}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000e00)="39706fb6406d82a4b127f0839b4e1fbd57526f255416a37fbe89f9b67b38c985a7487a67302908696b6c591a77729fb49c39f72e911754bbb69da773eb", 0x3d}, {&(0x7f0000000e40)="41d7ea533e63ce9d13f25fab2faff6691136349587c6", 0x16}, {&(0x7f0000000e80)="8325234d4f44ab", 0x7}, {&(0x7f0000000ec0)="46dda3f95e55b6dcda833947068907f01ea1fc1304b52082545993cc33af47f84774ea", 0x23}, {&(0x7f0000000f00)="3ffa2fbf0f8ffe793671abd0f5c435c0597cd54adb870a", 0x17}, {&(0x7f0000000f40)="80812fcc2ce7e7d2e9e831c7c1917a343a90238d0f391782b4c1a9c02ddde2ceadb414a593f5f7013f79166bb742", 0x2e}, {&(0x7f0000000f80)="983a033c54ad737633459c67851575ec1ae2521fb288f06832352b771f277ba270f3a3187cbf4072f7cdd789678be3b704ded2d3e6913b45d56b40713d8f11eef32de98f22b15897c9fe2eb96c366e76ddc0c5f194a62408e394400a4764b866a438d8ccc430c601e231638b572374a148616bfa7ef8746aa77ac69bdd83cf3059f773", 0x83}], 0x7, &(0x7f0000001480)=[@ip_tos_int={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @multicast1, @loopback}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast2, @broadcast}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xf9, 0x0, 0x3, [0xf4, 0x7f91, 0xb67, 0x0, 0x4]}, @noop, @noop]}}}, @ip_ttl={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}], 0xc0}}, {{&(0x7f0000001540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001580)="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", 0xfb}], 0x1, &(0x7f00000016c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0xf74}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xe6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x39}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x14, 0xc8, 0x3, 0x3, [{@remote, 0x1c}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x2, [{@rand_addr=0x64010100, 0xef}, {@loopback, 0x6}, {@loopback, 0x2}, {@multicast1, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x1e, 0x3, 0x6, [{@multicast1, 0x8}, {@rand_addr=0x64010100, 0xb4bd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfe8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3e}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}], 0xec}}, {{&(0x7f00000017c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001800)="39301b58f6a1f8f7690a453afbbd60f129781255a24ebb869cf0b452df82c8bf57f61253a6694bb55e8dd9bf621d8436e8358bb841ac3d7fd264e1df34a4792bf50288756207fb5593a227d63125f7d156388b87a6cea814083359acd9135cee9a2b52573ec3c4d20cf33f9b7e0d50ddf1e2c31d72b533d2b638048d57ed82b891e19e6f7bf9fa9e060c749d1aedcc6d335ffa5bba5e6362a0cdb6a29fc2c83556", 0xa1}, {&(0x7f00000018c0)="e5e94c43dad0fec56afd243ca11bd0622ddc73826ca113b49819a31bdd521c453cbdb69300306eff3522bf512279736fc7aa03afc3da6ce33a4fdedbb5eccf5398c84227887a408e1d41133acc6e7b96688368fd5f0db226bf98f301fe3431397d6c8c4a168088a2be2f2354cbb739ea8f4f5b2ebeddeca6769994bd481b18bc3c5a3a034ceb0c6371eaa9868bb1d0521b1892f5d7d8c38e7e7937b498df1608ac132d3f38760c7ae379fdb368764a9ee88a66366fc69694a0b404d8beea463b49abc7c83d5e4f925bc56fce77013a16331aada5fdfd5de2ec6602590d39a748ee04189e638a70c4b655a854698f4b063f455823", 0xf4}, {&(0x7f00000019c0)="8ca8c3e4b8a275d71bbf2d19fd2ccd3bf1bcd021cdaba4119b0953c5685a59a2a82fa5b77b9270afe4d32fec52a89ea9fa79434010497e42312d56fdaae64a24fd1c7050fcd98d374a7dfc86e941c135ea894c77087b84cb0ebaf19b61a3604bf44ea82b16b5fd", 0x67}, {&(0x7f0000001a40)="9c4769b430b1a83a7ea83d9a979d8567fe9305b90b6971527276ffa385e2d206dbcd4753697cf21c777036f45964f17427162bf4d2e508ac09513f6d86e572eac43153d55e79939a52d98189174603974ed1a263f9b14eb95d1a36e383ce4140e182d041b501915200a52e51d140e889043164b8f1b02e142484c6c48954e07f7fcf0c32d7bdbf00719ceb8f98f1e8f42c83eb03446aa4692f809d56f104ad0e3b9aecc6b55b99b29f943af02efc7de9674222308579140419bebbf9fefb4f5fce25d25b99f521b58082a95e558e229a0602a28aac2c01e8fbfbd2f2e7edbe2b28f404b65be83febe9dd835bd3e9f2a8e15e27b7f864d5ac", 0xf8}, {&(0x7f0000001b40)="cc5578b0f707357632a225b5f272e5cc31855f381e6b1fb40bc7e449c1dd998590b6ddda431e929335270a9e9311c4997816f4a97d0a8b9121bf4db742fa522522c4acfdb9b74e9fa534610349c0441eade91c4ef652c190618784382b8e53d8b6bb51c3702499e823ec9c707edcb2e6ee1d6e5e909b0f40ad2d5b782ae6beee496a8d7c43c4087d50c5542219bdaa107795dc70f91175a6e4f6653b38372535caa5a19efc216bbb610fbf4d1e66e3e814a190ed3875710ab35c4afc4db778532536694628b12f7f808018d4da", 0xcd}, {&(0x7f0000001c40)="bd34142f6a0c7323d0b87ce287b8da8fe2069e7c26b3a5652dfb71e356904f65613eee2c03834b83891ee79002cfa180f832eea820", 0x35}, {&(0x7f0000001c80)="f4f2e921a6ce202d71ddf08103bd6f8fd0d54a555aaaee773de16a33680abdc853b5c25e8d02eee204d2e70b3140c878de5a24260fe30d9d27b06072a503f3cc5257aad603b902cea9edd267ee5519f2fff029afab75d6f91bb82a14ea3dbc76c11330beb7d4cbed705440b8c2032952f38d5deee2f5dc556bd0ef75395ee263aa291f78ef9b1db347ae5b", 0x8b}, {&(0x7f0000001d40)="effc5035cd012c6afc17965d07c7352a654a055e8a008d12b9af4d11a838eccdc4ceb5135e78aa389dc66ce3e2d0ceba46b2bfb4ee9dfcf3e5ca24651ff34b5a15e87031ae2cf85f39acbf121594ae3918a6fa8d777c5323a3", 0x59}, {&(0x7f0000001dc0)="ef93a8aa9ea8aa98a0da12d62ea65665ecfd679e701139e4b79a30970a91aff5b0d80f62e40f106d07ee3a658a192b6d2d4f4f298fca29c6f600d5dd534ccdcb0305396aad48747fb6aa5a89d4e0caf190123325447fd3c6991010ec67687010a30853042aabc5b72d57298587cf23229eca6f24cc4c9425a61c229141087f7bf148800af2c73da65cf19b515a5ba44d2e83d654975e7afd2bf0ffa68f556b607a6c7fc4f00423f7e0617241c13f78f4ab15baf2f99431b13817c17089aa00b2abfd1af7bac7d28997b58ee1eb6f6a9ed4185d86", 0xd4}], 0x9}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001f40)="5d1f8be3db41736bdefbf3df1b2c1884bbe12f34b2e262b853d865adc553c8eaa36fb1419c820ea523e0fd9c60c9b0b479596e0ec972ebb5146600b86ae5be41f6bf4248e7522473d9a9236e84e00451a9eb30c819", 0x55}, {&(0x7f0000001fc0)="3fe1658f2942e161219b484e409c975cc34d6083a5a87db8af6c36536b472ab8dfd0db43e6630d3aaaee361eb91e94967ea8ce9dbb579cdfb16d609b5fb9c4cb328f1f9daed8d32549b2f8ad13a3a287deb49c21df7a01c610097ee9eaae59523ed3467cff04eaf489345e2e8c595fc49fcc75b89f243ad40d43b705ccd220707391425bcdcee41a750f", 0x8a}, {&(0x7f0000002080)="5c9a6ad4e4f8855b61e48c986aa4632bc7963bd66d7bda02474f8a59cf5bc3aa57961c87d8a875184065d231b28a5cd3517bd24e41a61dfe931cb4a16f29dd90b486bca750289b7bc680", 0x4a}, {&(0x7f0000002100)}, {&(0x7f0000002140)="63b7380b6de55c266057c36d28a67fb7025fb879e31c1316e390f7debc2c252bb721dfb98b68d85c21ddf836740f95e80d87339f2752963e553b409bcd5a5a63d44bd1756948edfb21", 0x49}, {&(0x7f00000021c0)="18950b42fef0d557877b73e3c076e46951459b0ab785330790e1b254568734ea431c554b37c827af42a08ca59c1338b063de66da63f3cc17a9dd6317df50de1a5dd64aedefe8c4ff8648c633a95f73c96afe4fbf9e8c85091ea03c52", 0x5c}], 0x6, &(0x7f0000002380)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x54, 0x3, 0x1, [{@broadcast, 0x4}, {@multicast1, 0x4}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x9}, {@private=0xa010102, 0xf}]}, @end, @lsrr={0x83, 0xb, 0xdf, [@local, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x46, 0x3, 0x3, [{@remote, 0x6}, {@private=0xa010102, 0x30000000}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xad, 0x3, 0x8, [{@local, 0x6}, {@private=0xa010102, 0x5}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @local, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r11, @broadcast, @loopback}}}], 0xbc}}, {{&(0x7f0000002440)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000003480)=[{&(0x7f0000002480)="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", 0x1000}], 0x1, &(0x7f0000003500)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r12, @loopback, @loopback}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0x48}}], 0x7, 0x1000) write$binfmt_script(r4, &(0x7f0000003680)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '/'}, {0x20, 'blkio.throttle.io_service_bytes_recursive\x00'}, {0x20, '@\\'}, {0x20, 'batadv_slave_1\x00'}, {}, {0x20, 'wlan1\x00'}], 0xa, "b281bb7f21048a01868a802ec7b5"}, 0x68) (async) write$binfmt_script(r4, &(0x7f0000003680)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '/'}, {0x20, 'blkio.throttle.io_service_bytes_recursive\x00'}, {0x20, '@\\'}, {0x20, 'batadv_slave_1\x00'}, {}, {0x20, 'wlan1\x00'}], 0xa, "b281bb7f21048a01868a802ec7b5"}, 0x68) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000003700)={0x0, 0x0, '\x00', @bt={0xfffffffd, 0x240, 0x4, 0x0, 0x9, 0x70, 0x4, 0x1}}) sendmsg$NFT_BATCH(r4, &(0x7f0000003900)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000038c0)={&(0x7f0000003800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x401}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "eef72bbe23ad18b9b38bd20802ece475953e820410b0dddc217a0fae97c8048047150f7b09fc4969c6412205c730fa5b6a9a957b72ff77"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x811}, 0x1) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000003900)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000038c0)={&(0x7f0000003800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x401}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "eef72bbe23ad18b9b38bd20802ece475953e820410b0dddc217a0fae97c8048047150f7b09fc4969c6412205c730fa5b6a9a957b72ff77"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x811}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003940)={r4, r9, 0x25, 0x8, @void}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000003980), &(0x7f00000039c0)=0x4) recvmmsg$unix(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003a00)=""/14, 0xe}], 0x1, &(0x7f0000003a80)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x4c}}, {{&(0x7f0000003b00)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003b80)=""/166, 0xa6}, {&(0x7f0000003c40)=""/165, 0xa5}], 0x2, &(0x7f0000003d40)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x2, 0x102, &(0x7f0000003e40)={0x77359400}) stat(&(0x7f0000003e80)='./file0/file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getgid() (async) r25 = getgid() sendmsg$netlink(r5, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000003f40)={0x11c0, 0x3b, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xaa, 0xb9, 0x0, 0x1, [@generic="eaae836b9f5a0143846e55a56ffa1f76267094268dd8809db3b01b937cdabb7982ee4a665e351bda002b01454b45d4ca6c03c60c39dbcb37fa27b94aab0a7e1bb23e7d1a77d708dbdf896ac726f5ffe707e596f8a99f7f82cbead078f03ca5702c58ab2db83e", @typed={0x35, 0xb3, 0x0, 0x0, @binary="eee21bcb5def7f65fdf84c5491da535323c0113519f4198d873f3e6813b370e476e31b42d5bf46add4a56d163acac1e912"}, @typed={0x6, 0x10f, 0x0, 0x0, @str='@\\'}]}, @nested={0x10f9, 0x117, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x4b}, @generic="483c8043becdaa8f59993048c7a229a0a505d4f5a0bc0098195e2cdae3be9eb7524f2ee04c5d8d91efc87fd196862d749530ee18d2949830d17ce86cc647c8dc55835885956bd2e637a59b622011c1ede30218e5bbe08457cf7db4a3e85a56dbe592f0becaf31f8d96bc3bc7833e192ae0a6ba6523909094627ae40dec90f1eb8b", @generic="0f7db3edb1782b21367b3ab5c4fe39d38e5ff9c658e266dc0913535599e0aa2fa42c56c01e86c7163e590648f078419d6e9631e72d6106998f915ae3a0aa291820e136ef64fa52ca5b15e2a77290345a", @nested={0x4, 0x63}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r18}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r13}, @generic="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"]}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r23}]}, 0x11c0}, {&(0x7f0000005100)={0xc4, 0x13, 0x300, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x41, 0x0, 0x0, @fd=r19}, @nested={0x57, 0x12e, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @fd=r24}, @nested={0x4, 0x11b}, @generic="d9291ff584c818fa5f31ef6939741a5fe0fe41f29311b08ea124c7041faba9d9a927dae86580d68e50c3c4622ba9f8291fa1d24f9c229ce93debee06ba5d745eb47011f8f93c74"]}, @generic="5a961c6a850cd534c90ccebc193cb84d681d25dddfdbd497eeac96826bad98be9a41d53c02f16f697c307bbaf7ab092d39454b1127a355db075a3e65632651dbb531ae7625221b1b6f799e", @typed={0x8, 0x65, 0x0, 0x0, @fd}]}, 0xc4}, {&(0x7f0000005200)={0x22c, 0x42, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0xbd, 0x0, 0x0, @uid=r17}, @nested={0xbe, 0x11a, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x6e}, @generic="9bc587716e30182dfd3759c27e0afa231ca5bc191ffcccf69b2e2bb66fc8d805858b526551acc07c656d315dc4c6b359dfe4ea2acd6375851ef6ebb4e18ee3d6c89beaf5fa0a17a91c0e770882bfede63c5db83c2c319cc05c7aa413638ed4b4065b4a76a1b60332367ccc16a00928cf6e06b6cb431716463c18ae9d9439fdc15b8968ce532c23e0a54d65e4cce54c3d0e080b06dce98773d8bc", @nested={0x4, 0x133}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r15}, @typed={0x4, 0x6b}]}, @generic="ce70577a3407046a5e34b2bc96b204b8ca86e85ff1e988d06efaddc505c387cc7a3be7f4ca8ec3af32a269f6c73138aa3272c74788c721065416f9541840e9d3a41b703b660fe496f79dbe11b5790cdcb9675151f50c87e56d6dbfdd38baa4a0b5de6a878c6a6c041adb51f1d33c04fcd19aba4c182cc6f1b047907dbe9d6d3824141d76d8ce606a224b90ac5a10653197769879923369e1743c4136e80e684bbf30223bac4990222cc88ad750b7465e2041602992854356607206f2f8e4", @typed={0xc, 0xb0, 0x0, 0x0, @u64=0x1}, @nested={0x88, 0x82, 0x0, 0x1, [@generic="a9eab31dbfa8ab427f9acd0c8b572f8c8e03c270f345666b00dbb16d6a3f14a98dd67bb6e55eb1f76d05cb583d67978a9a20fa0cac20ca3c7e4c15f64803119f91e19fbd21676dd98bc15b039acd4735f3f9ebff8bc8cc06a695", @generic="ac3994c1dbdd68cabf2dd5e9dbf2e1e5296aeca7730dc1e324579bbcbbff8a61131f", @typed={0x8, 0xba, 0x0, 0x0, @pid=r21}]}]}, 0x22c}, {&(0x7f0000005440)={0xc0, 0x2a, 0x4, 0x70bd2d, 0x25dfdbff, "", [@nested={0xa6, 0xd1, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @uid=r22}, @generic="71a7e6c8c0c91d0e289d864ac17088fd33626d9df8f569bf505ab58cecdee38b8f1ce203876c65c99ff4a07ec8a6e1a699747358874756bc6906cce7692039af38d5daf3", @generic="3f8275740ce18e56f2b3ec6534f80a3c8386eb7c4c240b18c5bf2c815ed21efbc37e19078941255966ab09e3452417eda9ef5c9d6a136de71433a6a388e4d62792658166394aef415514edf45d51c27b4031cbb5d0d9"]}, @typed={0x5, 0x35, 0x0, 0x0, @str='\x00'}]}, 0xc0}], 0x4, &(0x7f0000005540)=[@cred={{0x18, 0x1, 0x2, {r21, r13, r25}}}, @rights={{0x18, 0x1, 0x1, [r20, r0, r20]}}, @cred={{0x18, 0x1, 0x2, {r16, r6, r14}}}], 0x48, 0x800}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005780)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x8800400}, 0xc, &(0x7f0000005740)={&(0x7f0000005680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 1.120889973s ago: executing program 0 (id=1343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xf, 0x6, 0x2, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x8040) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000280)={0x3}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c4d65676ef5e471f638742a51030c07d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "75fa56921124448eaf4e9c531efa8b4e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "64b5b4729412e1fb00dc5ee9ec6c6f08"}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c080}, 0x800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc1224228}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000580)={0x2, 'veth1_to_hsr\x00', 0x3}, 0x18) syz_io_uring_setup(0x5f7a, &(0x7f00000005c0)={0x0, 0xa1e8, 0x200, 0x0, 0x69, 0x0, r1}, &(0x7f0000000640), &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, 0x9757, 0xa, 0xceb8, 0x2, 0x80, 0x7, 0x7f}, &(0x7f0000000780)=0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000007c0)={r3, 0x5, 0x1, 0x40}, 0x10) getpeername$netlink(r1, &(0x7f0000000800), &(0x7f0000000840)=0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = inotify_init1(0x80000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) fstat64(r4, &(0x7f00000008c0)) openat$cgroup_procs(r5, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000980)=0x5, &(0x7f00000009c0)=0x4) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a00)="d9fff2aaba2100b80000eff30f129d00009a0070250166b9620001c066b8d882000066ba000000000f300f20c06635000000800f22c09a09004800660f3881360000baf80c66b8daea6a8266efbafc0cb80040ef", 0x54}], 0x1, 0x8, &(0x7f0000000ac0)=[@vmwrite={0x8, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x1, 0x0, 0x4}, @vmwrite={0x8, 0x0, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf934}], 0x2) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r2, 0x508, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000c00)={0x1, 0xfff}, 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) ioctl$CDROMRESET(r1, 0x5312) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x80000000, 0x7, 0x3, 0x90202, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x8, @void, @value, @value=r1}, 0x50) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x2) socket(0x21, 0x80000, 0xd) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x1) syz_io_uring_complete(0x0) 1.120335465s ago: executing program 8 (id=1334): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x30}, 0xc) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000480)='h', 0x1, 0x4000005, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x54}}, 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.120071192s ago: executing program 0 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x108000) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500), 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r8, 0x201, 0xfffffffe, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) listen(r2, 0x10001) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000140)={'macsec0\x00', @random="010000201000"}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000040)=0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 820.55589ms ago: executing program 7 (id=1345): openat$rdma_cm(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120010000000000000000000ffffffff00000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x0, 0x2, {0x5, 0x3, 0xffffffffefffffff, 0x3bb, 0x5}}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x4, 0x7, 0x4, 0x7}, {0x2, 0x6, 0x98, 0xf}, {0x3, 0x40, 0xf, 0x3}, {0xd, 0x2, 0x3, 0xff}, {0x37d, 0x2, 0xa, 0xd62}, {0xffff, 0x9, 0x1, 0x8001}]}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x100, 0x9, 0x5, 0x8, 0x10}}]}, {0x0, 0x6, "8c000fb575ecb063d6dbb28a5c2c9dbe86abcd15d9b5695c05dfd22b71b4111e7f578059510923e0445ab4346e9b78d9b3711b62b53444b5f0e71d89813c2e6f6526"}, {}, {0x0, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f00000023c0)={0xf8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x8, 0x2, 0x5, 0x0, 0x7ff]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x5) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mount$pvfs2(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x1, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/fib_trie\x00') read$FUSE(r5, &(0x7f00000025c0)={0x2020}, 0xfffffffffffffdf6) syz_emit_ethernet(0x85, &(0x7f0000000180)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4f, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x4f, 0x0, @wg=@data={0x4, 0x8a92, 0x6, "647efa470c31fd9de777370f8c6637acdfb5a4efa8ff519a745e3e41976d710f2d7c7e821d3a0802fcd25760947bc9f60bed50db66692a"}}}}}}}, 0x0) symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00') setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) 335.69602ms ago: executing program 4 (id=1346): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'wg2\x00', {0x3}, 0x6e4}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x28, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x21c3, 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 202.795315ms ago: executing program 8 (id=1347): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0xffffffffffffff5e) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="161290a68c0fa652c005d8b5f0c879e819b7638ddbcab6f5db04514b81c338cd33ea06a9b915229c6c37bba40c9852df5e99dbbe1c874a65b702a14ea6079f7c48e3804678603eba81f9eebd5467167ba8a117955c811ab25d887acbd94ab186e89db3c3ad9d95655d3eeda992f9b163c11a2359fbd6786d171bb9301e3b2d53058fd44a939a8891eae9256a6aee5495b8fccc6acc44205910e09848b46bda302f1e7df5841cdeba843576f7990f09cada9cce42608b17025ddc461b4c2ee2acba8f9c9354399a6ef654b44a0b7694d9b477ec156c7a3291bb14532ecc823e9688251d", 0xe3, r2) io_setup(0x10000, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000240)) 145.337084ms ago: executing program 0 (id=1348): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x362, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r1 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x3f6a, 0x0, 0x0, 0x8000ff}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r2, &(0x7f0000021040)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x319480, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) lstat(&(0x7f0000000100)='./file2\x00', 0x0) r5 = socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mp\x00l=bind:0-N3/7N\x00']) sendmsg$unix(r5, &(0x7f0000001600)={&(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000004c0)="7b9c952a8bd76b5fea6cde847b64a7d9b823745b5ca7fd2479d84cd6af615be2d6436fb578", 0x25}], 0x1, 0x0, 0x0, 0x4000000}, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x0, 0x1}, 0x20) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60040207000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendfile64(r6, r6, 0x0, 0x72ba) socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) 133.798232ms ago: executing program 4 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 60.40341ms ago: executing program 4 (id=1350): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0xc, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}}) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x1, 0x4000102b, r5, 0x0) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="17d409f1", 0x4}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffd, 0x500000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000000, 0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffff, 0x1000000000000, 0x0, 0x6], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x5, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0x0, 0xf000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 8 (id=1351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) syz_open_dev$I2C(&(0x7f0000000040), 0xffffffff, 0x40) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0xfffffffffffffe4f) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, 0x0) kernel console output (not intermixed with test programs): cutor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 106.063475][ T39] audit: type=1326 audit(1737007106.739:66441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 106.071793][ T39] audit: type=1326 audit(1737007106.739:66442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 106.111952][ T8448] delete_channel: no stack [ 106.532977][ T8481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.801806][ T8485] 9pnet_virtio: no channels available for device syz [ 107.152051][ T8506] delete_channel: no stack [ 107.160867][ T8505] delete_channel: no stack [ 107.891742][ T8539] delete_channel: no stack [ 107.894732][ T8538] delete_channel: no stack [ 107.939293][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 107.977632][ T8544] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 107.996715][ T8544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.000344][ T8544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.002925][ T8544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.005692][ T8544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.009455][ T8544] bond1: (slave geneve2): making interface the new active one [ 108.012463][ T8544] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.223078][ T8560] random: crng reseeded on system resumption [ 108.239029][ T58] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.391080][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.395091][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.399056][ T58] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 108.402643][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.407372][ T58] usb 5-1: config 0 descriptor?? [ 108.410162][ T8546] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.747712][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 108.749433][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.752608][ T58] usb 5-1: USB disconnect, device number 5 [ 109.130491][ T8571] delete_channel: no stack [ 109.133410][ T8570] delete_channel: no stack [ 109.519694][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 109.554813][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 110.110801][ T8615] netlink: 'syz.1.659': attribute type 9 has an invalid length. [ 110.117186][ T8612] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 110.831705][ T8648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.669'. [ 111.641217][ T8676] delete_channel: no stack [ 111.707662][ T8670] syz.2.677 (8670): drop_caches: 2 [ 112.107966][ T8694] syz.2.686: attempt to access beyond end of device [ 112.107966][ T8694] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 112.113696][ T8694] syz.2.686: attempt to access beyond end of device [ 112.113696][ T8694] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 112.117492][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 112.123660][ T8694] syz.2.686: attempt to access beyond end of device [ 112.123660][ T8694] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 112.128378][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 112.132048][ T8694] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 112.134285][ T8694] UDF-fs: Scanning with blocksize 1024 failed [ 112.137250][ T8694] syz.2.686: attempt to access beyond end of device [ 112.137250][ T8694] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 112.141298][ T8694] syz.2.686: attempt to access beyond end of device [ 112.141298][ T8694] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 112.145168][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 112.148089][ T8694] syz.2.686: attempt to access beyond end of device [ 112.148089][ T8694] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 112.152068][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 112.154810][ T8694] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 112.157006][ T8694] UDF-fs: Scanning with blocksize 2048 failed [ 112.160032][ T8694] syz.2.686: attempt to access beyond end of device [ 112.160032][ T8694] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 112.163766][ T8694] syz.2.686: attempt to access beyond end of device [ 112.163766][ T8694] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 112.167465][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 112.170287][ T8694] syz.2.686: attempt to access beyond end of device [ 112.170287][ T8694] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 112.173985][ T8694] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 112.176699][ T8694] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 112.178964][ T8694] UDF-fs: Scanning with blocksize 4096 failed [ 112.180750][ T8694] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 112.257836][ T8667] delete_channel: no stack [ 112.322328][ T8701] nfs4: Unknown parameter '»»»»»»' [ 112.388981][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 112.540636][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.543692][ T35] usb 8-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 112.546583][ T35] usb 8-1: config 1 interface 0 has no altsetting 0 [ 112.550577][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.553213][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.555512][ T35] usb 8-1: Product: syz [ 112.556766][ T35] usb 8-1: Manufacturer: syz [ 112.558119][ T35] usb 8-1: SerialNumber: syz [ 112.562957][ T8697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.863083][ T35] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 112.867137][ T35] usb 8-1: USB disconnect, device number 13 [ 113.672301][ T8759] delete_channel: no stack [ 114.390353][ T8753] delete_channel: no stack [ 115.818971][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.972338][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.975417][ T57] usb 5-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 115.978351][ T57] usb 5-1: config 1 interface 0 has no altsetting 0 [ 115.982016][ T57] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.984642][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.987026][ T57] usb 5-1: Product: syz [ 115.988272][ T57] usb 5-1: Manufacturer: syz [ 115.991511][ T57] usb 5-1: SerialNumber: syz [ 115.996440][ T8773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.226134][ T57] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 116.232418][ T57] usb 5-1: USB disconnect, device number 6 [ 117.596302][ T8779] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 117.598341][ T8779] PKCS7: Only support pkcs7_signedData type [ 118.819096][ T8791] net_ratelimit: 679 callbacks suppressed [ 118.819145][ T8791] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.228981][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.379012][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'. [ 125.390616][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.393496][ T35] usb 5-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 125.396366][ T35] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.399845][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.402451][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.404721][ T35] usb 5-1: Product: syz [ 125.405926][ T35] usb 5-1: Manufacturer: syz [ 125.407277][ T35] usb 5-1: SerialNumber: syz [ 125.415265][ T8800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.583292][ T8807] bond0: option ad_select: unable to set because the bond device is up [ 125.655135][ T35] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 125.670354][ T35] usb 5-1: USB disconnect, device number 7 [ 126.196844][ T5955] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 126.822529][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 126.834578][ T8821] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 126.838515][ T8820] IPVS: stopping master sync thread 8821 ... [ 127.518919][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.673339][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.676732][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.680236][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.682907][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.695023][ T8834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.700124][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.952859][ T8832] input: syz0 as /devices/virtual/input/input13 [ 127.987367][ T57] usb 5-1: USB disconnect, device number 8 [ 128.323405][ T5297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.326743][ T5297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.329531][ T5297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.332577][ T5297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.334926][ T5297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.337063][ T5297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.400580][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.407505][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.410385][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.413121][ T5958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.415941][ T5958] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.418087][ T5958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.458099][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 128.560107][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.562341][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.564508][ T8845] bridge_slave_0: entered allmulticast mode [ 128.566642][ T8845] bridge_slave_0: entered promiscuous mode [ 128.581848][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.584013][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.586052][ T8845] bridge_slave_1: entered allmulticast mode [ 128.588154][ T8845] bridge_slave_1: entered promiscuous mode [ 128.609988][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.613814][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.647912][ T8845] team0: Port device team_slave_0 added [ 128.651817][ T8845] team0: Port device team_slave_1 added [ 128.658938][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.682375][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.684987][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.693792][ T8845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.698612][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.700746][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.708098][ T8845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.711486][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 128.779839][ T8845] hsr_slave_0: entered promiscuous mode [ 128.783233][ T8845] hsr_slave_1: entered promiscuous mode [ 128.785443][ T8845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.787646][ T8845] Cannot create hsr debugfs directory [ 128.799237][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.801357][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.803715][ T8842] bridge_slave_0: entered allmulticast mode [ 128.806679][ T8842] bridge_slave_0: entered promiscuous mode [ 128.810157][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.812320][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.812844][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 128.814409][ T8842] bridge_slave_1: entered allmulticast mode [ 128.817007][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.817954][ T8842] bridge_slave_1: entered promiscuous mode [ 128.820566][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.825021][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.828733][ T58] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.834716][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.841323][ T58] hub 5-1:1.0: bad descriptor, ignoring hub [ 128.844150][ T58] hub 5-1:1.0: probe with driver hub failed with error -5 [ 128.846629][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 128.848171][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 128.849844][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 128.887520][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.891349][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.932060][ T8842] team0: Port device team_slave_0 added [ 128.936417][ T8842] team0: Port device team_slave_1 added [ 128.968810][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.971002][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.978600][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.985297][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.987348][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.994886][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.004190][ T8845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.008413][ T8845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.024360][ T8845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.037946][ T8842] hsr_slave_0: entered promiscuous mode [ 129.042149][ T8842] hsr_slave_1: entered promiscuous mode [ 129.044148][ T8842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.046628][ T8842] Cannot create hsr debugfs directory [ 129.048350][ T8845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.086335][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.088468][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.091096][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.093138][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.136518][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.143936][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.147112][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.209053][ T57] usb 5-1: USB disconnect, device number 9 [ 129.539023][ T5982] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.689047][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 129.693509][ T5982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.697275][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.700856][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.704713][ T5982] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.708111][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.716784][ T5982] hub 5-1:1.0: bad descriptor, ignoring hub [ 129.719267][ T5982] hub 5-1:1.0: probe with driver hub failed with error -5 [ 129.722284][ T5982] cdc_wdm 5-1:1.0: skipping garbage [ 129.724213][ T5982] cdc_wdm 5-1:1.0: skipping garbage [ 129.726188][ T5982] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 129.993799][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.006075][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.008169][ T8369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.010964][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.013066][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.067135][ T8842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.099281][ T8842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.103762][ T8842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.108264][ T8842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.148544][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.163695][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.174736][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.179974][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.182009][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.191624][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.193680][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.206551][ T8842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.210150][ T8842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.276677][ T8845] veth0_vlan: entered promiscuous mode [ 130.285967][ T8845] veth1_vlan: entered promiscuous mode [ 130.297324][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.310044][ T8845] veth0_macvtap: entered promiscuous mode [ 130.313636][ T8845] veth1_macvtap: entered promiscuous mode [ 130.323465][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.326534][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.330155][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.333208][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.336592][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.341725][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.344761][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.347591][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.353698][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.357717][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.363080][ T8845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.365757][ T8845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.368195][ T8845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.375573][ T8845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.394338][ T5958] Bluetooth: hci5: command tx timeout [ 130.423404][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.425777][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.445570][ T8842] veth0_vlan: entered promiscuous mode [ 130.454592][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.458688][ T8842] veth1_vlan: entered promiscuous mode [ 130.459510][ T5958] Bluetooth: hci4: command tx timeout [ 130.462605][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.477156][ T8842] veth0_macvtap: entered promiscuous mode [ 130.481200][ T8842] veth1_macvtap: entered promiscuous mode [ 130.488490][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.492145][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.495469][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.498448][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.501508][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.505019][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.509006][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.514498][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.517489][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.520659][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.523776][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.526828][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.531096][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.534414][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.539178][ T8842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.541687][ T8842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.544212][ T8842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.546694][ T8842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.458962][ T5958] Bluetooth: hci5: command tx timeout [ 132.538954][ T5958] Bluetooth: hci4: command tx timeout [ 133.909076][ T30] usb 5-1: USB disconnect, device number 10 [ 133.972264][ T8368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.974623][ T8368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.992027][ T8374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.994374][ T8374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.445960][ T8906] random: crng reseeded on system resumption [ 134.548978][ T5958] Bluetooth: hci5: command tx timeout [ 134.616611][ T8904] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 134.619115][ T5958] Bluetooth: hci4: command tx timeout [ 134.673230][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.764146][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.832305][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.854997][ T8918] tmpfs: Bad value for 'mpol' [ 134.960401][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.455853][ T1135] bridge_slave_1: left allmulticast mode [ 135.457703][ T1135] bridge_slave_1: left promiscuous mode [ 135.462678][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.486708][ T1135] bridge_slave_0: left allmulticast mode [ 135.488395][ T1135] bridge_slave_0: left promiscuous mode [ 135.490481][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.763783][ T8949] netfs: Couldn't get user pages (rc=-14) [ 135.797710][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.798914][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 135.803915][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.807693][ T1135] bond0 (unregistering): Released all slaves [ 135.941761][ T8970] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 135.944343][ T8970] PKCS7: Only support pkcs7_signedData type [ 135.969028][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 135.972136][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.975631][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.980856][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.986478][ T25] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.990048][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.993800][ T25] usb 9-1: config 0 descriptor?? [ 136.341856][ T1135] hsr_slave_0: left promiscuous mode [ 136.344115][ T1135] hsr_slave_1: left promiscuous mode [ 136.346315][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.348652][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.360779][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.363047][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.388567][ T1135] veth1_macvtap: left promiscuous mode [ 136.391080][ T1135] veth0_macvtap: left promiscuous mode [ 136.392674][ T1135] veth1_vlan: left promiscuous mode [ 136.394306][ T1135] veth0_vlan: left promiscuous mode [ 136.415353][ T25] HID 045e:07da: Invalid code 65791 type 1 [ 136.419486][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0004/input/input14 [ 136.445349][ T25] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 136.666242][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 136.671229][ T5982] usb 9-1: USB disconnect, device number 2 [ 136.708976][ T5958] Bluetooth: hci4: command tx timeout [ 136.790295][ T8999] fuse: Bad value for 'group_id' [ 136.791815][ T8999] fuse: Bad value for 'group_id' [ 137.294670][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 137.386397][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 137.532053][ T9012] netlink: 'syz.5.750': attribute type 8 has an invalid length. [ 137.537026][ T9012] kAFS: unparsable volume name [ 137.697316][ T9020] syz.5.751[9020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.697561][ T9020] syz.5.751[9020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.978171][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 137.986507][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 138.231418][ T9042] mkiss: ax0: crc mode is auto. [ 138.317799][ T9047] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.321153][ T9047] batman_adv: batadv0: Adding interface: gretap1 [ 138.323015][ T9047] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.330251][ T9047] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 138.514296][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 138.518117][ T9060] netlink: 'syz.4.756': attribute type 14 has an invalid length. [ 138.556908][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.614712][ T9060] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.618521][ T9060] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.623194][ T9060] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.625735][ T9060] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.630034][ T9060] vxlan0: entered promiscuous mode [ 138.674011][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.680818][ T9071] netlink: 64 bytes leftover after parsing attributes in process `syz.5.757'. [ 138.763529][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.847407][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.017126][ T9083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.019483][ T9083] overlayfs: failed to set xattr on upper [ 139.021192][ T9083] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.024062][ T9083] overlayfs: ...falling back to index=off. [ 139.026364][ T9083] overlayfs: ...falling back to uuid=null. [ 139.089525][ T1135] bridge_slave_1: left allmulticast mode [ 139.091173][ T1135] bridge_slave_1: left promiscuous mode [ 139.092717][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.108459][ T1135] bridge_slave_0: left allmulticast mode [ 139.116424][ T1135] bridge_slave_0: left promiscuous mode [ 139.119241][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.291880][ T1135] bond1 (unregistering): (slave geneve2): Releasing active interface [ 139.326473][ T9095] netlink: 56 bytes leftover after parsing attributes in process `syz.4.761'. [ 139.516440][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.521607][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.533680][ T1135] bond0 (unregistering): Released all slaves [ 139.538140][ T1135] bond1 (unregistering): Released all slaves [ 139.550975][ T9094] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 139.553416][ T9094] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 139.555682][ T9094] netlink: 100 bytes leftover after parsing attributes in process `syz.4.761'. [ 139.610861][ T9104] qnx6: unable to read the first superblock [ 139.620020][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.762'. [ 139.856766][ T9120] veth0_to_team: entered promiscuous mode [ 139.858513][ T9120] veth0_to_team: entered allmulticast mode [ 139.860046][ T9121] syz.4.764: attempt to access beyond end of device [ 139.860046][ T9121] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 139.865411][ T9121] syz.4.764: attempt to access beyond end of device [ 139.865411][ T9121] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 139.904317][ T1135] hsr_slave_0: left promiscuous mode [ 139.907141][ T1135] hsr_slave_1: left promiscuous mode [ 139.912827][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.917261][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.859036][ T5982] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 141.040391][ T5982] usb 10-1: config 1 interface 0 has no altsetting 0 [ 141.043929][ T5982] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.046853][ T5982] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.051021][ T5982] usb 10-1: Product: syz [ 141.052342][ T5982] usb 10-1: Manufacturer: syz [ 141.053729][ T5982] usb 10-1: SerialNumber: syz [ 141.310401][ T9121] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 141.363963][ T5982] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 141.375055][ T5982] usb 10-1: USB disconnect, device number 2 [ 141.379386][ T5982] usblp0: removed [ 141.383692][ T9147] bridge0: port 3(netdevsim0) entered blocking state [ 141.386359][ T9147] bridge0: port 3(netdevsim0) entered disabled state [ 141.388570][ T9147] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 141.391804][ T9147] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 141.394847][ T9147] bridge0: port 3(netdevsim0) entered blocking state [ 141.396943][ T9147] bridge0: port 3(netdevsim0) entered forwarding state [ 142.531991][ T9217] bond_slave_0: mtu less than device minimum [ 142.648074][ T9226] vlan2: entered allmulticast mode [ 142.839528][ T9241] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 142.844654][ T9241] UDF-fs: Scanning with blocksize 2048 failed [ 142.853253][ T9241] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 142.857290][ T9241] UDF-fs: Scanning with blocksize 4096 failed [ 142.863522][ T9237] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 142.866258][ T9237] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 142.930949][ T1015] libceph: connect (1)[c::]:6789 error -101 [ 142.935614][ T1015] libceph: mon0 (1)[c::]:6789 connect error [ 142.958549][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 143.132398][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.135820][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.144355][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.149421][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.152108][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.175673][ T25] usb 8-1: config 0 descriptor?? [ 143.192075][ T1015] libceph: connect (1)[c::]:6789 error -101 [ 143.194661][ T1015] libceph: mon0 (1)[c::]:6789 connect error [ 143.387814][ T9229] ceph: No mds server is up or the cluster is laggy [ 143.574436][ T9318] can0: slcan on ttyS3. [ 143.604230][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 143.606371][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 143.610822][ T25] usb 8-1: USB disconnect, device number 14 [ 143.808082][ T9351] tmpfs: Bad value for 'size' [ 144.733155][ T9394] evm: overlay not supported [ 144.736837][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 144.741605][ T5955] Bluetooth: hci5: command 0x0405 tx timeout [ 145.165501][ T9408] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.299940][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.302643][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.445192][ T9416] devtmpfs: Too few inodes for current use [ 145.527790][ T9419] netlink: 696 bytes leftover after parsing attributes in process `syz.5.810'. [ 145.595567][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'. [ 146.684123][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 146.859035][ T9438] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 147.054344][ T9458] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 147.064805][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 147.067445][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 147.073060][ T9455] netlink: 'syz.0.821': attribute type 11 has an invalid length. [ 147.225128][ T9452] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 147.227849][ T9452] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 147.238634][ T9452] team0: Port device netdevsim0 removed [ 147.313754][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 147.391483][ T9461] can0 (unregistered): slcan off ttyS3. [ 147.399396][ T9466] can0: slcan on ttyS3. [ 147.422580][ T9470] block nbd4: NBD_DISCONNECT [ 147.424569][ T9464] block nbd4: Disconnected due to user request. [ 147.427207][ T9470] block nbd4: Send disconnect failed -32 [ 147.429158][ T9464] block nbd4: shutting down sockets [ 147.459074][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.626765][ T9476] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.631788][ T9476] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.637806][ T9476] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.642779][ T9476] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.892855][ T9476] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 147.892855][ T9476] program syz.4.824 not setting count and/or reply_len properly [ 148.875553][ T9521] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 148.939458][ T9528] qnx6: unable to read the first superblock [ 149.784617][ T9545] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.787418][ T9545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.789803][ T9545] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.797924][ T9545] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.806995][ T9545] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.808797][ T9545] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.814380][ T9545] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.831389][ T9545] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 149.833287][ T9545] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 149.839168][ T9545] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 149.878264][ T9557] bond_slave_0: mtu less than device minimum [ 149.977001][ T9561] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 150.001374][ T9561] netlink: 'syz.4.835': attribute type 4 has an invalid length. [ 150.512211][ T5958] Bluetooth: hci1: sending frame failed (-49) [ 150.514447][ T5955] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 150.524899][ T9571] Bluetooth: hci1: Frame reassembly failed (-90) [ 150.527023][ T9571] Bluetooth: hci1: Frame reassembly failed (-84) [ 150.741458][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 150.741473][ T39] audit: type=1326 audit(1737007152.466:66449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.759473][ T39] audit: type=1326 audit(1737007152.476:66450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.767957][ T39] audit: type=1326 audit(1737007152.476:66451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.779324][ T39] audit: type=1326 audit(1737007152.476:66452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.787590][ T39] audit: type=1326 audit(1737007152.476:66453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.807269][ T39] audit: type=1326 audit(1737007152.476:66454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.815503][ T39] audit: type=1326 audit(1737007152.476:66455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.824016][ T39] audit: type=1326 audit(1737007152.476:66456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.832078][ T39] audit: type=1326 audit(1737007152.476:66457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 150.840188][ T39] audit: type=1326 audit(1737007152.476:66458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.3.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 151.119841][ T9589] __nla_validate_parse: 4 callbacks suppressed [ 151.119858][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.842'. [ 151.303233][ T9593] bond_slave_0: mtu less than device minimum [ 151.794544][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 151.828968][ T5955] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.829005][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.908950][ T5958] Bluetooth: hci5: command 0x0405 tx timeout [ 151.949001][ T57] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 151.999413][ T25] libceph: connect (1)[c::]:6789 error -101 [ 152.000953][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 152.004181][ T25] libceph: connect (1)[c::]:6789 error -101 [ 152.005744][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 152.110180][ T57] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.113278][ T57] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.117107][ T57] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.120455][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 152.124559][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.130025][ T57] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.133491][ T57] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.136700][ T57] usb 8-1: Product: syz [ 152.138310][ T57] usb 8-1: Manufacturer: syz [ 152.149655][ T57] cdc_wdm 8-1:1.0: skipping garbage [ 152.151673][ T57] cdc_wdm 8-1:1.0: skipping garbage [ 152.165835][ T57] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 152.168067][ T57] cdc_wdm 8-1:1.0: Unknown control protocol [ 152.184473][ T9614] ceph: No mds server is up or the cluster is laggy [ 152.341952][ T9633] bond_slave_0: mtu less than device minimum [ 152.377508][ T5982] usb 8-1: USB disconnect, device number 15 [ 152.405568][ T9639] bond_slave_0: mtu less than device minimum [ 152.617677][ T9645] usb usb8: usbfs: process 9645 (syz.0.855) did not claim interface 0 before use [ 153.773767][ T9684] random: crng reseeded on system resumption [ 153.900804][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.908997][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.978966][ T5958] Bluetooth: hci5: command 0x0405 tx timeout [ 154.124175][ T9714] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 154.126258][ T9714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.132038][ T9714] vhci_hcd vhci_hcd.0: Device attached [ 154.138122][ T9714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.148046][ T9714] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 154.150010][ T9714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.155276][ T9714] vhci_hcd vhci_hcd.0: Device attached [ 154.158623][ T9714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.161872][ T9714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.309410][ T57] vhci_hcd: vhci_device speed not set [ 154.368989][ T57] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 154.512392][ T9682] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 154.904614][ T9727] vhci_hcd: connection closed [ 154.908986][ T9720] vhci_hcd: connection reset by peer [ 154.910267][ T1224] vhci_hcd: stop threads [ 154.920798][ T1224] vhci_hcd: release socket [ 154.923099][ T1224] vhci_hcd: disconnect device [ 154.925561][ T1224] vhci_hcd: stop threads [ 154.926831][ T1224] vhci_hcd: release socket [ 154.928184][ T1224] vhci_hcd: disconnect device [ 155.347099][ T9786] xt_CT: No such helper "syz0" [ 155.522579][ T9798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.869'. [ 155.537334][ T9798] 9pnet_fd: Insufficient options for proto=fd [ 155.989151][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.991534][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.069593][ T5955] Bluetooth: hci5: command 0x0405 tx timeout [ 156.501534][ T9822] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.518972][ T9756] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 156.692831][ T9756] usb 9-1: config 3 has an invalid interface number: 195 but max is 2 [ 156.695472][ T9756] usb 9-1: config 3 has an invalid interface number: 181 but max is 2 [ 156.698392][ T9756] usb 9-1: config 3 has an invalid interface number: 3 but max is 2 [ 156.701797][ T9756] usb 9-1: config 3 has an invalid descriptor of length 136, skipping remainder of the config [ 156.705893][ T9756] usb 9-1: config 3 has no interface number 0 [ 156.708330][ T9756] usb 9-1: config 3 has no interface number 1 [ 156.712545][ T9756] usb 9-1: config 3 has no interface number 2 [ 156.715089][ T9756] usb 9-1: config 3 interface 195 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 156.719129][ T9756] usb 9-1: config 3 interface 195 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 156.722636][ T9756] usb 9-1: config 3 interface 181 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 156.727059][ T9756] usb 9-1: config 3 interface 181 has no altsetting 0 [ 156.729758][ T9756] usb 9-1: config 3 interface 3 has no altsetting 0 [ 156.735946][ T9756] usb 9-1: Dual-Role OTG device on HNP port [ 156.739002][ T9756] usb 9-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 156.743793][ T9756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.746071][ T9756] usb 9-1: Product: ቟㶻佷ᵇꢀᜀ岧겡â¢æ²”â¢ê¾ƒÞ¹è—­æ²²æ¬²î¶á´§ë·Žæ½Ÿé¥·ï£¢îˆá”‘䋻ꧠꅊ霈묔潒網î¬àª¸ê¾ƒèžëŽ€à šíš£Ï—ꮅꥉ‿븪祽鄥çµê§æ™¼î¹¯æ™–帽廧è°à¿†á¹®îŸ’뤡礖钎䛬뽷ٛᳲ䪷볅è¸â¦æ«¨à²³ê´²ì·­é¯Œê´’æ’ෞꖟã„ê…¾âŠå”€ä´¥â€†â¿‘枌⃰ꖅᴆ胧䪢袛켛瑜굃刢䆥寚繲횶眾悙ꕱç¿ëƒ—嫓냹ꒅ䓱ꗹ [ 156.768974][ T9756] usb 9-1: Manufacturer: 麇̬႞㧩ᶤé’í“é‚ìŠâ¾›ä«ë¬½å‘‚棎䆉鑋꛿罧㖡屒ᷛå•ï‚‹Ü’èµ´æ î–ºç‹¸ë¬ è€­ç„£ç„ˆì…™êšªîŸŠî±æ«®á³ˆï‡¢ä½­ì…‚緟窒æˆã±»æ“†ã”ŽïŸ¤è·¾î°¿ê€ŒÐ­è½§ê†ªì…¡ç¨†ç …ⶴã¼ë—ˆâŸ½ä„암猣ᵤ [ 156.776225][ T9756] usb 9-1: SerialNumber: ﳿ [ 156.997311][ T9814] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 156.999257][ T9814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.003234][ T9814] vhci_hcd vhci_hcd.0: Device attached [ 157.014352][ T9814] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 157.016389][ T9814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.019095][ T9814] vhci_hcd vhci_hcd.0: Device attached [ 157.024985][ T9814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.033685][ T9814] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 157.035589][ T9814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.037640][ T9814] vhci_hcd vhci_hcd.0: Device attached [ 157.039744][ T9814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.042455][ T9814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.045184][ T9814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.047896][ T9814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.053179][ T9814] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 157.055128][ T9814] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 157.058432][ T9814] vhci_hcd vhci_hcd.0: Device attached [ 157.064653][ T9836] vhci_hcd: connection closed [ 157.065542][ T8370] vhci_hcd: stop threads [ 157.071890][ T9830] vhci_hcd: connection closed [ 157.072041][ T9828] vhci_hcd: connection closed [ 157.073815][ T9832] vhci_hcd: connection closed [ 157.078976][ T8370] vhci_hcd: release socket [ 157.079275][ T9756] usb-storage 9-1:3.195: USB Mass Storage device detected [ 157.080880][ T8370] vhci_hcd: disconnect device [ 157.091075][ T8370] vhci_hcd: stop threads [ 157.092353][ T8370] vhci_hcd: release socket [ 157.093842][ T8370] vhci_hcd: disconnect device [ 157.098497][ T9756] usb-storage 9-1:3.195: Quirks match for vid 066f pid 8000: 10 [ 157.101402][ T8370] vhci_hcd: stop threads [ 157.102988][ T8370] vhci_hcd: release socket [ 157.104682][ T8370] vhci_hcd: disconnect device [ 157.107583][ T8370] vhci_hcd: stop threads [ 157.110926][ T8370] vhci_hcd: release socket [ 157.112306][ T8370] vhci_hcd: disconnect device [ 157.187895][ T9756] usb-storage 9-1:3.181: USB Mass Storage device detected [ 157.192511][ T9756] usb-storage 9-1:3.181: Quirks match for vid 066f pid 8000: 10 [ 157.283974][ T9841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.286909][ T9841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.290848][ T9841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.296402][ T9841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 157.296933][ T9849] 9pnet_fd: Insufficient options for proto=fd [ 157.299029][ T9756] usb-storage 9-1:3.3: USB Mass Storage device detected [ 157.309779][ T9844] input: syz0 as /devices/virtual/input/input15 [ 157.318281][ T9756] usb-storage 9-1:3.3: Quirks match for vid 066f pid 8000: 10 [ 157.330303][ T9844] trusted_key: syz.0.880 sent an empty control message without MSG_MORE. [ 157.369208][ T9756] usb 9-1: USB disconnect, device number 3 [ 157.621807][ T9856] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 157.751432][ T35] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 157.899602][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 157.908136][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.912371][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.915769][ T35] usb 8-1: Product: syz [ 157.917466][ T35] usb 8-1: Manufacturer: syz [ 157.919720][ T35] usb 8-1: SerialNumber: syz [ 158.390846][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 158.416739][ T9889] bond1: entered promiscuous mode [ 158.418786][ T9889] bond1: entered allmulticast mode [ 158.423451][ T9889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.537918][ T9903] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 158.555081][ T9903] netlink: 228 bytes leftover after parsing attributes in process `syz.0.887'. [ 158.912480][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 158.912595][ T35] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 158.925523][ T35] usb 8-1: USB disconnect, device number 16 [ 158.928808][ T35] usblp0: removed [ 158.942409][ T9933] unsupported nlmsg_type 40 [ 159.338945][ T5955] Bluetooth: hci5: command 0x0405 tx timeout [ 159.338966][ T5297] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.343054][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.498991][ T57] vhci_hcd: vhci_device speed not set [ 159.619761][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 159.893282][ T9953] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.896033][ T9953] ata1.00: invalid transfer count 0 [ 160.180604][ T9956] syz.4.893: attempt to access beyond end of device [ 160.180604][ T9956] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 160.185237][ T9956] syz.4.893: attempt to access beyond end of device [ 160.185237][ T9956] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 160.510475][ T9974] can: request_module (can-proto-0) failed. [ 160.515215][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 160.515224][ T39] audit: type=1326 audit(1737007162.236:66482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.897" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 160.731694][ T9982] bond_slave_0: mtu less than device minimum [ 160.849236][ T9986] syzkaller1: entered promiscuous mode [ 160.857582][ T9986] syzkaller1: entered allmulticast mode [ 160.918605][ T9989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.901'. [ 161.248291][ T39] audit: type=1326 audit(1737007162.966:66483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.4.901" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 161.280722][T10006] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 161.319396][ T9990] can0 (unregistered): slcan off ttyS3. [ 161.674932][T10031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.677238][T10031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.685281][T10031] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 162.533093][ T5297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.539530][ T5297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.543607][ T5297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.547608][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.550235][ T5297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.552692][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.555153][T10055] bond_slave_0: mtu less than device minimum [ 162.600785][T10057] netlink: 72 bytes leftover after parsing attributes in process `syz.4.916'. [ 162.640246][T10062] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 162.660423][T10043] chnl_net:caif_netlink_parms(): no params data found [ 162.790805][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.798990][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.801147][T10043] bridge_slave_0: entered allmulticast mode [ 162.803307][T10043] bridge_slave_0: entered promiscuous mode [ 162.819637][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.821955][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.824119][T10043] bridge_slave_1: entered allmulticast mode [ 162.826363][T10043] bridge_slave_1: entered promiscuous mode [ 162.865168][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.871884][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.924105][T10043] team0: Port device team_slave_0 added [ 162.926978][T10043] team0: Port device team_slave_1 added [ 162.954100][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.956122][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.964107][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.967908][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.973829][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.981979][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.015719][T10043] hsr_slave_0: entered promiscuous mode [ 163.018566][T10043] hsr_slave_1: entered promiscuous mode [ 163.028753][T10043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.031472][T10043] Cannot create hsr debugfs directory [ 163.108047][T10043] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.112179][T10043] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.116134][T10043] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.120062][T10043] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.146068][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.148146][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.150278][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.152264][T10043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.176091][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.185083][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.192495][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.214628][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.223828][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.225849][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.231630][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.233910][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.365987][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.601654][T10043] veth0_vlan: entered promiscuous mode [ 163.613460][T10043] veth1_vlan: entered promiscuous mode [ 163.637744][T10043] veth0_macvtap: entered promiscuous mode [ 163.644842][T10043] veth1_macvtap: entered promiscuous mode [ 163.657947][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.663679][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.667478][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.671965][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.681327][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.688115][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.692782][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.696599][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.701081][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.704927][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.709991][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.714612][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.737778][T10043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.741594][T10043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.745025][T10043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.748506][T10043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.802783][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.804960][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.821691][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.825567][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.271561][T10113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.315040][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 164.328381][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 164.592072][T10124] netlink: 'syz.0.928': attribute type 14 has an invalid length. [ 164.618955][ T5958] Bluetooth: hci1: command tx timeout [ 164.742009][T10117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.957066][T10131] trusted_key: encrypted_key: keyword 'bew' not recognized [ 165.104928][T10143] bond_slave_0: mtu less than device minimum [ 165.560010][T10156] tmpfs: Bad value for 'mpol' [ 166.202943][T10168] netlink: 256 bytes leftover after parsing attributes in process `syz.6.941'. [ 166.205576][T10168] netlink: 'syz.6.941': attribute type 33 has an invalid length. [ 166.238059][T10171] netlink: 'syz.3.942': attribute type 21 has an invalid length. [ 166.244497][T10171] netlink: 128 bytes leftover after parsing attributes in process `syz.3.942'. [ 166.267063][T10171] netlink: 'syz.3.942': attribute type 5 has an invalid length. [ 166.271515][T10171] netlink: 'syz.3.942': attribute type 6 has an invalid length. [ 166.273783][T10171] netlink: 3 bytes leftover after parsing attributes in process `syz.3.942'. [ 166.311227][T10175] vlan0: entered allmulticast mode [ 166.313396][T10175] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 166.317453][T10175] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 166.709255][ T5958] Bluetooth: hci1: command tx timeout [ 167.367712][T10187] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.517114][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.521550][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.622221][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 167.625668][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 168.628712][T10236] netlink: 64 bytes leftover after parsing attributes in process `syz.4.959'. [ 168.711944][T10236] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 168.720527][ T39] audit: type=1326 audit(1737007170.446:66484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.959" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 168.789240][ T5958] Bluetooth: hci1: command tx timeout [ 168.824089][T10249] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 168.914981][T10253] Invalid ELF header type: 3 != 1 [ 168.979001][T10253] sg_write: data in/out 987/14 bytes for SCSI command 0x0-- guessing data in; [ 168.979001][T10253] program syz.3.964 not setting count and/or reply_len properly [ 169.039385][T10263] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 169.044727][T10262] hugetlbfs: syz.0.965 (10262): Using mlock ulimits for SHM_HUGETLB is obsolete [ 169.335264][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.971'. [ 169.339202][T10273] bridge_slave_1: left allmulticast mode [ 169.342206][T10273] bridge_slave_1: left promiscuous mode [ 169.347561][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.361656][T10273] bridge_slave_0: left allmulticast mode [ 169.371069][T10273] bridge_slave_0: left promiscuous mode [ 169.373122][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.635609][ T39] audit: type=1326 audit(1737007171.356:66485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10278 comm="syz.0.973" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 169.788970][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.977'. [ 169.854165][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'. [ 170.240369][T10309] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 170.296089][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.979'. [ 170.680634][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'. [ 170.737152][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 170.869011][ T5958] Bluetooth: hci1: command tx timeout [ 170.871950][T10303] netlink: 116 bytes leftover after parsing attributes in process `syz.3.978'. [ 171.612365][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 171.636331][T10352] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.734020][T10359] x_tables: duplicate underflow at hook 3 [ 171.754957][T10360] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 171.774186][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 174.602370][T10419] syz.3.1012: attempt to access beyond end of device [ 174.602370][T10419] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 174.606271][T10419] syz.3.1012: attempt to access beyond end of device [ 174.606271][T10419] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 174.610829][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.613753][T10419] syz.3.1012: attempt to access beyond end of device [ 174.613753][T10419] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 174.617454][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.623485][T10419] syz.3.1012: attempt to access beyond end of device [ 174.623485][T10419] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 174.627245][T10419] syz.3.1012: attempt to access beyond end of device [ 174.627245][T10419] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 174.632018][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.634903][T10419] syz.3.1012: attempt to access beyond end of device [ 174.634903][T10419] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 174.638710][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.642313][T10419] syz.3.1012: attempt to access beyond end of device [ 174.642313][T10419] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 174.646088][T10419] syz.3.1012: attempt to access beyond end of device [ 174.646088][T10419] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 174.651473][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.654375][T10419] syz.3.1012: attempt to access beyond end of device [ 174.654375][T10419] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 174.658148][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.661769][T10419] syz.3.1012: attempt to access beyond end of device [ 174.661769][T10419] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 174.666608][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.685884][T10419] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.688825][T10419] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 174.818915][T10425] delete_channel: no stack [ 174.859376][ T8370] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.931952][ T5297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.935535][ T5297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.951188][ T5297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.959550][ T8370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.962976][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.972878][ T5297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.975925][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.044497][ T8370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.066252][T10427] chnl_net:caif_netlink_parms(): no params data found [ 175.108762][ T8370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.123978][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.126081][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.128301][T10427] bridge_slave_0: entered allmulticast mode [ 175.131420][T10427] bridge_slave_0: entered promiscuous mode [ 175.134092][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.136322][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.138655][T10427] bridge_slave_1: entered allmulticast mode [ 175.141679][T10427] bridge_slave_1: entered promiscuous mode [ 175.148933][ T6070] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 175.172300][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.177631][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.203842][T10427] team0: Port device team_slave_0 added [ 175.208274][T10427] team0: Port device team_slave_1 added [ 175.251604][T10402] delete_channel: no stack [ 175.254321][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.256489][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.264953][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.289660][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.292330][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.306060][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.318941][ T6070] usb 8-1: Using ep0 maxpacket: 8 [ 175.321627][ T6070] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.324911][ T6070] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.327957][ T6070] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.333742][ T6070] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.338962][ T6070] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.341702][ T6070] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.353095][ T6070] usbtmc 8-1:16.0: bulk endpoints not found [ 175.754934][ T8370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.761455][ T8370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.768821][ T8370] bond0 (unregistering): Released all slaves [ 175.787418][T10427] hsr_slave_0: entered promiscuous mode [ 175.791347][T10427] hsr_slave_1: entered promiscuous mode [ 175.795117][T10427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.797332][T10427] Cannot create hsr debugfs directory [ 175.843554][T10451] fuse: Bad value for 'fd' [ 176.022453][T10427] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 176.032244][T10427] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 176.044960][T10427] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 176.051636][T10427] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 176.074429][ T8370] hsr_slave_0: left promiscuous mode [ 176.079283][ T8370] hsr_slave_1: left promiscuous mode [ 176.099702][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.101858][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.104392][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.106530][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.154936][ T8370] veth1_macvtap: left promiscuous mode [ 176.156638][ T8370] veth0_macvtap: left promiscuous mode [ 176.158373][ T8370] veth1_vlan: left promiscuous mode [ 176.160625][ T8370] veth0_vlan: left promiscuous mode [ 177.004448][ T8370] team0 (unregistering): Port device team_slave_1 removed [ 177.022114][ T5958] Bluetooth: hci1: command tx timeout [ 177.104733][ T8370] team0 (unregistering): Port device team_slave_0 removed [ 177.617673][ T9756] usb 8-1: USB disconnect, device number 17 [ 177.709398][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.725337][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.733363][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.736431][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.739713][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.742061][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.744604][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.745059][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.746907][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.748921][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.756751][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.758766][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.759437][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.761224][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.763309][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.767580][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.771728][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.773857][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.775973][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.778478][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.781623][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.783843][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.785943][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.788492][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.792147][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.795087][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.801912][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.808018][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.815328][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.825607][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.836834][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.842497][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.845007][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.848681][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.851159][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.853395][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.855709][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.857936][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 177.904759][ T35] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [sy] on syz0 [ 177.991627][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.196122][T10427] veth0_vlan: entered promiscuous mode [ 178.204152][T10427] veth1_vlan: entered promiscuous mode [ 178.212834][T10427] veth0_macvtap: entered promiscuous mode [ 178.215806][T10427] veth1_macvtap: entered promiscuous mode [ 178.221320][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.224376][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.227209][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.230282][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.233792][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.236966][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.240985][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.249263][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.253153][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.256225][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.259429][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.262804][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.272366][T10427] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.275619][T10427] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.278368][T10427] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.281836][T10427] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.357975][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.372091][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.407865][T10512] fuse: Bad value for 'fd' [ 178.421564][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.423866][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.675128][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 178.678287][T10528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1029'. [ 178.792338][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1014'. [ 178.850764][T10530] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.854298][T10530] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.857791][T10530] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.861396][T10530] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.865216][T10530] vxlan0: entered promiscuous mode [ 179.098920][ T5958] Bluetooth: hci1: command tx timeout [ 179.218995][ T5986] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.382839][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1031'. [ 179.387280][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1031'. [ 179.391021][T10560] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1031'. [ 179.753475][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.764284][ T5986] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.769278][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.776532][ T5986] usb 5-1: config 0 descriptor?? [ 179.986655][ T5986] usbhid 5-1:0.0: can't add hid device: -71 [ 179.992540][ T5986] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.004583][ T5986] usb 5-1: USB disconnect, device number 11 [ 180.077254][T10563] ceph: No mds server is up or the cluster is laggy [ 180.240085][T10593] fuse: Bad value for 'fd' [ 180.276857][T10595] veth0_to_bridge: entered promiscuous mode [ 180.318956][ T5986] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.459244][ T35] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 180.620953][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 180.623986][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 180.628577][ T35] usb 8-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 180.636512][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.641585][ T35] usb 8-1: Product: syz [ 180.642842][ T35] usb 8-1: Manufacturer: syz [ 180.644225][ T35] usb 8-1: SerialNumber: syz [ 180.645977][T10602] openvswitch: netlink: IP tunnel dst address not specified [ 180.657478][ T35] usb 8-1: config 0 descriptor?? [ 180.660150][T10591] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.665058][ T35] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.698973][ T5986] usb 5-1: device descriptor read/64, error -71 [ 180.864354][T10588] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 180.866994][T10588] syz_tun: entered promiscuous mode [ 180.873915][T10588] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 180.993671][ T30] usb 8-1: USB disconnect, device number 18 [ 181.124432][T10594] veth0_to_bridge: left promiscuous mode [ 181.159594][ T5986] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.182280][ T5958] Bluetooth: hci1: command tx timeout [ 181.302458][T10623] ptrace attach of "/syz-executor exec"[8842] was attempted by "/syz-executor exec"[10623] [ 181.362077][T10626] Unsupported ieee802154 address type: 0 [ 182.086845][T10645] bond_slave_0: mtu less than device minimum [ 182.550348][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 182.553733][T10678] fuse: Unknown parameter '¹*Éfî!Э"£fÎ<0x0000000000000004' [ 182.653922][T10681] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[10681] [ 182.890182][T10684] bond_slave_0: mtu less than device minimum [ 183.239439][T10691] delete_channel: no stack [ 183.269031][ T5958] Bluetooth: hci1: command tx timeout [ 183.510260][T10703] Invalid source name [ 183.518986][T10703] UBIFS error (pid: 10703): cannot open "./file0", error -22 [ 183.626683][T10708] netlink: 'syz.3.1061': attribute type 1 has an invalid length. [ 183.657107][T10708] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 183.765447][T10685] delete_channel: no stack [ 184.149777][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1063'. [ 184.843010][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1068'. [ 184.846835][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 185.770054][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1069'. [ 186.050749][T10762] usb usb4: usbfs: process 10762 (syz.0.1076) did not claim interface 0 before use [ 186.774936][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 187.089577][T10795] syz_tun: entered allmulticast mode [ 187.111931][T10795] syz_tun: left allmulticast mode [ 187.567052][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 188.885520][T10829] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.904424][T10829] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.320604][T10840] futex_wake_op: syz.0.1102 tries to shift op by -1; fix this program [ 189.361637][T10840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.461077][T10840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.537659][T10840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.622360][T10840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.844864][T10840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.851476][T10840] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.858425][T10840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.881591][T10840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.061093][T10916] erofs (device loop3): cannot find valid erofs superblock [ 191.150516][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'. [ 191.201358][T10924] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 191.203748][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.208291][T10924] vhci_hcd vhci_hcd.0: Device attached [ 191.213487][ T39] audit: type=1326 audit(1737007192.936:66486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10929 comm="syz.0.1110" exe="/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf70ce579 code=0x0 [ 191.225108][T10924] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 191.227510][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.231267][T10924] vhci_hcd vhci_hcd.0: Device attached [ 191.233955][T10924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.249062][T10924] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 191.251502][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.257536][T10924] vhci_hcd vhci_hcd.0: Device attached [ 191.260965][T10924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.271907][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1109'. [ 191.306411][T10924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.310708][T10924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.314129][T10924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.328978][T10924] vhci_hcd vhci_hcd.0: port 0 already used [ 191.332582][T10936] vhci_hcd: connection closed [ 191.332760][T10934] vhci_hcd: connection closed [ 191.333609][ T9711] vhci_hcd: stop threads [ 191.333645][T10926] vhci_hcd: connection closed [ 191.378981][ T9756] vhci_hcd: vhci_device speed not set [ 191.430820][ T9711] vhci_hcd: release socket [ 191.432215][ T9711] vhci_hcd: disconnect device [ 191.437375][ T9711] vhci_hcd: stop threads [ 191.439222][ T9756] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 191.442399][ T9711] vhci_hcd: release socket [ 191.444175][ T9711] vhci_hcd: disconnect device [ 191.446053][ T9711] vhci_hcd: stop threads [ 191.449152][ T9711] vhci_hcd: release socket [ 191.451800][ T9711] vhci_hcd: disconnect device [ 191.696154][T10963] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.106974][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'. [ 192.117779][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'. [ 192.133401][T10975] /dev/nullb0: Can't open blockdev [ 192.792339][T10990] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 192.794653][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.800041][T10990] vhci_hcd vhci_hcd.0: Device attached [ 192.852501][T10994] bond_slave_0: mtu less than device minimum [ 193.074321][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 193.083292][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'. [ 193.108132][T10998] geneve0: entered allmulticast mode [ 194.273407][ T39] audit: type=1326 audit(1737007196.997:66487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.287633][ T39] audit: type=1326 audit(1737007196.997:66488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.296672][ T39] audit: type=1326 audit(1737007197.007:66489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.307311][ T39] audit: type=1326 audit(1737007197.007:66490): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.315788][ T39] audit: type=1326 audit(1737007197.007:66491): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.324586][ T39] audit: type=1326 audit(1737007197.007:66492): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 194.522594][T10991] vhci_hcd: connection reset by peer [ 194.545041][ T11] vhci_hcd: stop threads [ 194.547049][ T11] vhci_hcd: release socket [ 194.551180][ T11] vhci_hcd: disconnect device [ 195.152371][T11016] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.192332][ T39] audit: type=1326 audit(1737007197.837:66493): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 195.201437][ T39] audit: type=1326 audit(1737007197.837:66494): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.7.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 195.882421][T11037] ntfs3(nullb0): Primary boot signature is not NTFS. [ 195.892778][T11037] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 195.935180][ T39] audit: type=1326 audit(1737007198.657:66495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1132" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 195.945387][T11035] could not open pipe file descriptor [ 196.465345][T11048] overlay: Unknown parameter 'euid<00000000000000000000' [ 196.549099][ T9756] vhci_hcd: vhci_device speed not set [ 196.670242][T11051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.692123][ T57] IPVS: starting estimator thread 0... [ 196.737403][T11049] erofs (device loop7): cannot find valid erofs superblock [ 196.767690][T11061] fuse: Bad value for 'fd' [ 196.779131][T11058] IPVS: using max 40 ests per chain, 96000 per kthread [ 196.790867][T11051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.793306][T11051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.797225][T11051] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.801678][T11051] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 196.804115][T11051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.807302][T11051] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.834795][T11051] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.073371][T11075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.145350][T11075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.198746][T11081] 9pnet_virtio: no channels available for device syz [ 197.234452][T11075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.300851][T11075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.405346][T11075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.410734][T11075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.415194][T11075] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.419955][T11075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.561166][T11087] ufs: failed to set blocksize [ 197.565288][ T39] audit: type=1326 audit(1737007200.287:66496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 198.303208][ T39] audit: type=1326 audit(1737007201.027:66497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1147" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 198.309587][ T39] audit: type=1326 audit(1737007201.027:66498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 198.316624][ T39] audit: type=1326 audit(1737007201.027:66499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 198.323773][ T39] audit: type=1326 audit(1737007201.027:66500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 198.392662][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 198.730474][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'. [ 198.859211][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.859277][ T5297] Bluetooth: hci5: command 0x0405 tx timeout [ 198.861768][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.863278][ T5297] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.306957][T11106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 199.309681][T11106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.314174][T11106] vhci_hcd vhci_hcd.0: Device attached [ 199.489645][ T25] vhci_hcd: vhci_device speed not set [ 199.548953][ T9756] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 199.551275][ T25] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 199.701434][ T9756] usb 9-1: config 0 has no interfaces? [ 199.703703][ T9756] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.707475][ T9756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.712303][ T9756] usb 9-1: config 0 descriptor?? [ 199.919774][T11107] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 199.924865][ T1136] vhci_hcd: stop threads [ 199.925525][ T58] usb 9-1: USB disconnect, device number 4 [ 199.926036][ T1136] vhci_hcd: release socket [ 199.929907][ T1136] vhci_hcd: disconnect device [ 200.699765][ T58] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 200.849071][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 200.852068][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.855044][ T58] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.857452][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.863804][ T58] usb 9-1: config 0 descriptor?? [ 200.939028][ T5297] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.073581][ T58] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.497476][ T57] usb 9-1: USB disconnect, device number 5 [ 202.195096][T11123] netlink: 'syz.0.1157': attribute type 9 has an invalid length. [ 202.873971][ T9716] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.958765][T11131] random: crng reseeded on system resumption [ 202.976060][ T9716] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.019154][ T5297] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.119219][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.119558][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.123016][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.126386][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.129875][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.135785][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.139690][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.143125][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.146697][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.147837][ T9716] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.150201][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 203.160293][ T6070] kernel write not supported for file /snd/seq (pid: 6070 comm: kworker/0:4) [ 203.237084][ T9716] bridge0: port 3(netdevsim0) entered disabled state [ 203.300216][ T9716] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 203.302817][ T9716] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 203.316768][ T9716] bridge0: port 3(netdevsim0) entered disabled state [ 203.333557][ T9716] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.552021][ T9716] bridge_slave_1: left allmulticast mode [ 203.554099][ T9716] bridge_slave_1: left promiscuous mode [ 203.556267][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.560936][ T9716] bridge_slave_0: left allmulticast mode [ 203.562754][ T9716] bridge_slave_0: left promiscuous mode [ 203.564410][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.095568][ T9716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.103336][ T9716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.107112][ T9716] bond0 (unregistering): Released all slaves [ 204.472475][T11193] binder: 11177:11193 ioctl 4018620d 0 returned -22 [ 204.698968][ T25] vhci_hcd: vhci_device speed not set [ 204.709437][ T9716] hsr_slave_0: left promiscuous mode [ 204.722864][ T9716] hsr_slave_1: left promiscuous mode [ 204.730635][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.735151][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.737571][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 204.737824][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.743007][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.820108][ T9716] veth1_macvtap: left promiscuous mode [ 204.822096][ T9716] veth0_macvtap: left promiscuous mode [ 204.824376][ T9716] veth1_vlan: left promiscuous mode [ 204.827931][ T9716] veth0_vlan: left promiscuous mode [ 204.836670][T11200] input: syz1 as /devices/virtual/input/input18 [ 206.206718][ T9716] team0 (unregistering): Port device team_slave_1 removed [ 206.313815][ T9716] team0 (unregistering): Port device team_slave_0 removed [ 207.146944][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1183'. [ 207.150619][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1183'. [ 207.435668][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 207.484929][T11289] random: crng reseeded on system resumption [ 208.255997][T11339] tc_dump_action: action bad kind [ 208.257900][T11340] tc_dump_action: action bad kind [ 208.366595][T11344] netlink: 'syz.7.1196': attribute type 1 has an invalid length. [ 208.370551][T11344] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1196'. [ 208.396988][T11348] netlink: 'syz.7.1196': attribute type 1 has an invalid length. [ 208.403351][T11348] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1196'. [ 208.477171][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1197'. [ 208.536151][T11362] netlink: 'syz.7.1197': attribute type 1 has an invalid length. [ 208.840451][T11370] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.538936][T11389] random: crng reseeded on system resumption [ 209.690529][T11392] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 209.697065][T11392] xt_hashlimit: overflow, rate too high: 0 [ 209.701130][T11392] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 209.926460][T11398] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.176897][ T5297] Bluetooth: hci1: unexpected cc 0x0403 length: 9 > 1 [ 210.181375][ T5297] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 210.242213][T11403] block nbd7: shutting down sockets [ 210.262581][T11405] fuse: Unknown parameter 'group_<’' [ 210.331135][T11412] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 210.517406][T11420] bond_slave_0: mtu less than device minimum [ 210.519073][T10630] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 210.692251][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 210.759073][T10630] usb 12-1: Using ep0 maxpacket: 8 [ 210.766358][T10630] usb 12-1: unable to get BOS descriptor or descriptor too short [ 210.774357][T10630] usb 12-1: no configurations [ 210.778225][T10630] usb 12-1: can't read configurations, error -22 [ 210.831884][T11425] hsr_slave_1 (unregistering): left promiscuous mode [ 210.856865][T11427] delete_channel: no stack [ 211.024621][T11429] block nbd0: shutting down sockets [ 211.477962][T11422] delete_channel: no stack [ 212.203534][T11470] netlink: 'syz.0.1224': attribute type 5 has an invalid length. [ 212.233323][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 212.238187][T11473] macvtap1: entered promiscuous mode [ 212.240425][T11473] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 212.242501][T11473] macvtap1: entered allmulticast mode [ 212.244253][T11473] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 212.274388][T11480] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 212.308238][T11481] random: crng reseeded on system resumption [ 212.321370][T11484] overlayfs: failed to resolve './file0': -2 [ 212.357756][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 212.593994][T11496] netlink: 'syz.0.1227': attribute type 10 has an invalid length. [ 213.222650][T11509] misc userio: Invalid payload size [ 213.329495][ T9756] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 213.500859][ T9756] usb 8-1: config 0 has no interfaces? [ 213.502550][ T9756] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.505333][ T9756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.509965][ T9756] usb 8-1: config 0 descriptor?? [ 213.589108][ T5985] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 213.739010][ T5985] usb 9-1: Using ep0 maxpacket: 8 [ 213.742150][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1232'. [ 213.745055][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 213.747234][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 213.750695][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.764538][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 213.766776][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 213.770163][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.775222][ T5985] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 213.778351][ T5985] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 213.783405][ T5985] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.789022][ T5985] usb 9-1: string descriptor 0 read error: -22 [ 213.790880][ T5985] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 213.794092][ T5985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.820894][ T5985] adutux 9-1:168.0: interrupt endpoints not found [ 213.867481][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 213.871371][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 214.162611][ T9756] usb 8-1: USB disconnect, device number 19 [ 214.229181][ T5297] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 214.234330][ T5297] Bluetooth: hci1: Injecting HCI hardware error event [ 214.238639][ T5958] Bluetooth: hci1: hardware error 0x00 [ 214.292026][ T9] usb 9-1: USB disconnect, device number 6 [ 214.469304][T11555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1242'. [ 214.734169][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.735811][T11572] overlayfs: empty lowerdir [ 214.736348][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.745468][T11557] bond0: left promiscuous mode [ 214.747132][T11557] bond_slave_0: left promiscuous mode [ 214.748754][T11557] bond_slave_1: left promiscuous mode [ 214.804302][T11557] veth0_to_team: left promiscuous mode [ 214.806484][T11557] veth0_to_team: left allmulticast mode [ 214.882056][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.885519][T11582] ISOFS: Unable to identify CD-ROM format. [ 214.938569][T11557] geneve0: left allmulticast mode [ 214.944479][T11557] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.947118][T11557] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.949586][T11557] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.951984][T11557] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.969391][T11557] bond1: left promiscuous mode [ 214.970843][T11557] bond1: left allmulticast mode [ 214.977758][T11557] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 214.979883][T11557] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 214.982504][T11557] macvtap1: left promiscuous mode [ 214.984011][T11557] macvtap1: left allmulticast mode [ 214.986552][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 215.001827][T11586] tap0: tun_chr_ioctl cmd 2147767517 [ 215.006982][T11581] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 216.299053][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 216.351583][ T5958] bt_err_ratelimited: 55 callbacks suppressed [ 216.351599][ T5958] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 216.354098][ T5958] Bluetooth: hci3: Dropping invalid advertising data [ 216.358064][ T5958] Bluetooth: hci3: Malformed LE Event: 0x02 [ 216.364892][T11618] netlink: 'syz.4.1258': attribute type 21 has an invalid length. [ 216.786239][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1260'. [ 216.908023][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 216.912623][T11635] bridge_slave_1: left allmulticast mode [ 216.914286][T11635] bridge_slave_1: left promiscuous mode [ 216.916198][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.924948][T11635] bridge_slave_0: left allmulticast mode [ 216.927333][T11635] bridge_slave_0: left promiscuous mode [ 216.931231][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.158046][T11643] bond_slave_0: mtu less than device minimum [ 217.400906][T11648] netlink: 'syz.4.1265': attribute type 3 has an invalid length. [ 217.404069][T11648] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1265'. [ 217.470619][T11652] overlayfs: failed to resolve './file1': -2 [ 217.502244][T11653] delete_channel: no stack [ 217.731250][ T5958] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 217.735503][ T5958] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 217.735599][ T5958] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 217.738424][ T5958] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 218.030691][T11644] delete_channel: no stack [ 218.152096][T11678] IPVS: stopping backup sync thread 11680 ... [ 218.541807][T11662] block nbd7: shutting down sockets [ 218.592650][T11690] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 218.595020][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'. [ 219.335324][T11727] delete_channel: no stack [ 219.434259][T11728] mkiss: ax0: crc mode is auto. [ 219.440485][T11728] misc userio: Invalid payload size [ 219.442397][T11728] misc userio: No port type given on /dev/userio [ 219.525370][T11730] misc userio: The device must be registered before sending interrupts [ 219.532687][T11730] misc userio: The device must be registered before sending interrupts [ 219.835114][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1284'. [ 219.924606][T11710] delete_channel: no stack [ 219.925668][T11753] netlink: 'syz.7.1284': attribute type 4 has an invalid length. [ 219.929965][T11753] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1284'. [ 219.967596][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1284'. [ 221.411710][T11783] ax25_connect(): syz.0.1290 uses autobind, please contact jreuter@yaina.de [ 221.433812][T11786] ax25_connect(): syz.0.1290 uses autobind, please contact jreuter@yaina.de [ 221.805052][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 222.238098][ T5982] IPVS: starting estimator thread 0... [ 222.329141][T11818] IPVS: using max 40 ests per chain, 96000 per kthread [ 222.939004][T11565] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.099381][T11565] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 223.111608][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.114425][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.117621][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.120629][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.123287][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.126342][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.130908][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.135834][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.140191][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.143015][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.145676][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.150837][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.157154][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.161003][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.182761][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.197758][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.201016][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.206943][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.211830][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.215655][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.219650][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.226471][T11565] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.229966][T11565] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.235004][T11565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.245717][T11565] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 223.248338][T11565] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 223.251014][T11565] usb 5-1: Product: syz [ 223.252290][T11565] usb 5-1: Manufacturer: syz [ 223.253660][T11565] usb 5-1: SerialNumber: syz [ 223.259577][T11565] usb 5-1: config 0 descriptor?? [ 223.269116][T11565] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 223.740497][ T5985] usb 5-1: USB disconnect, device number 14 [ 223.748383][ T5985] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 223.888611][T11836] netlink: 'syz.4.1301': attribute type 21 has an invalid length. [ 223.891024][T11836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1301'. [ 223.917735][T11841] tipc: Enabling of bearer rejected, failed to enable media [ 224.344152][T11854] IPVS: stopping master sync thread 10263 ... [ 224.354695][T11856] dlm: no locking on control device [ 224.633184][T11860] block nbd0: shutting down sockets [ 224.700686][ T39] audit: type=1326 audit(1737007227.427:66501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.0.1305" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 225.234228][T11866] netlink: 'syz.4.1307': attribute type 12 has an invalid length. [ 225.352548][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1308'. [ 226.086181][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.099962][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.102970][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.105854][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.108786][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.114321][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.117284][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.121162][T11891] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 226.221669][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 227.466981][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 227.470097][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 227.563848][T11914] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 227.601850][T11914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.677617][T11934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.682111][T11934] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.818627][T11937] sd 0:0:0:0: PR command failed: 1026 [ 227.825490][T11937] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 227.827481][T11937] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 227.984371][T10630] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 228.348923][T10630] usb 12-1: Using ep0 maxpacket: 8 [ 228.353082][T10630] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 228.355758][T10630] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 228.358298][T10630] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 228.361126][T10630] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 228.364576][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 228.367766][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 228.371508][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.375362][T10630] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 228.378029][T10630] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 228.386056][T10630] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 228.389021][T10630] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 228.392518][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 228.395835][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 228.399332][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.403215][T10630] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 228.405872][T10630] usb 12-1: config 246 descriptor has 1 excess byte, ignoring [ 228.408288][T10630] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 228.414580][T10630] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 228.418152][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 228.421668][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 228.424887][T10630] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.431820][T10630] usb 12-1: string descriptor 0 read error: -22 [ 228.433814][T10630] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.436492][T10630] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.450321][T10630] adutux 12-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 229.297120][T11962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.602808][T11965] ptrace attach of "/syz-executor exec"[5950] was attempted by "/syz-executor exec"[11965] [ 229.668936][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.012889][T11983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1331'. [ 230.256658][T11988] overlay: Unknown parameter 'fowner>00000000000000003327' [ 231.077252][ T5297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.081459][ T5297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.128397][ T5297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.134986][ T5297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.135342][T10655] bond0: (slave syz_tun): Releasing backup interface [ 231.143367][ T5297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.145773][ T5297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.219262][ T5985] usb 12-1: USB disconnect, device number 4 [ 231.242199][T11997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.363829][T11993] chnl_net:caif_netlink_parms(): no params data found [ 231.497208][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.501029][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.503279][T11993] bridge_slave_0: entered allmulticast mode [ 231.505614][T11993] bridge_slave_0: entered promiscuous mode [ 231.508513][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.511123][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.513347][T11993] bridge_slave_1: entered allmulticast mode [ 231.515654][T11993] bridge_slave_1: entered promiscuous mode [ 231.534744][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.538822][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.561874][T11993] team0: Port device team_slave_0 added [ 231.565539][T11993] team0: Port device team_slave_1 added [ 231.601152][T11993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.603262][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.613037][T11993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.617319][T11993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.619554][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.626851][T11993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.648441][T12013] dvmrp0: entered allmulticast mode [ 231.664752][T11993] hsr_slave_0: entered promiscuous mode [ 231.667091][T11993] hsr_slave_1: entered promiscuous mode [ 231.670173][T11993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.672544][T11993] Cannot create hsr debugfs directory [ 231.730522][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1338'. [ 231.733961][T12013] validate_nla: 58 callbacks suppressed [ 231.733969][T12013] netlink: 'syz.7.1338': attribute type 1 has an invalid length. [ 231.780977][T11993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.788049][T11993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.805333][T11993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.808919][T11993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.842972][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.845029][T11993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.847315][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.849504][T11993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.861081][ T39] audit: type=1326 audit(1737007234.587:66502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.7.1339" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 [ 231.879092][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.890268][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.897777][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.922460][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.931148][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.933228][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.937515][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.939646][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.970954][T12018] can0: slcan on ttyS3. [ 232.046851][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.203099][T12037] random: crng reseeded on system resumption [ 232.245128][T11993] veth0_vlan: entered promiscuous mode [ 232.251454][T11993] veth1_vlan: entered promiscuous mode [ 232.265044][T11993] veth0_macvtap: entered promiscuous mode [ 232.268242][T11993] veth1_macvtap: entered promiscuous mode [ 232.284136][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.287333][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.290427][T12017] can0 (unregistered): slcan off ttyS3. [ 232.300839][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.305224][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.308780][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.317788][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.322328][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.331620][T11993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.334542][T11993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.337955][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.351450][T11993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.354846][T11993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.358138][T11993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.360893][T11993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.446365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.448794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.460738][ T9723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.463210][ T9723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.807742][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1334'. [ 233.189095][ T5297] Bluetooth: hci2: command tx timeout [ 233.331716][T12066] pim6reg: entered allmulticast mode [ 233.345803][T12066] pim6reg: left allmulticast mode [ 233.660972][T12081] ata1.00: invalid multi_count 1 ignored [ 233.695629][T12084] netlink: 'syz.0.1348': attribute type 7 has an invalid length. [ 233.698289][T12084] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.1348'. [ 233.718731][T11565] [ 233.719709][T11565] ====================================================== [ 233.722486][T11565] WARNING: possible circular locking dependency detected [ 233.724989][T11565] 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 Not tainted [ 233.728919][T11565] ------------------------------------------------------ [ 233.731998][T11565] kworker/2:9/11565 is trying to acquire lock: [ 233.734413][T11565] ffff8880222f00e0 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 233.738747][T11565] [ 233.738747][T11565] but task is already holding lock: [ 233.741717][T11565] ffff8880222f06f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 233.745796][T11565] [ 233.745796][T11565] which lock already depends on the new lock. [ 233.745796][T11565] [ 233.749768][T11565] [ 233.749768][T11565] the existing dependency chain (in reverse order) is: [ 233.753312][T11565] [ 233.753312][T11565] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 233.756148][T11565] __mutex_lock+0x19b/0xa60 [ 233.758018][T11565] __nbd_set_size+0x2c0/0x730 [ 233.760041][T11565] nbd_start_device+0x8fd/0xd70 [ 233.762051][T11565] nbd_ioctl+0x21a/0xfd0 [ 233.763969][T11565] compat_blkdev_ioctl+0x2f7/0x750 [ 233.766185][T11565] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 233.768478][T11565] __do_fast_syscall_32+0x73/0x120 [ 233.770539][T11565] do_fast_syscall_32+0x32/0x80 [ 233.772079][T11565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.774050][T11565] [ 233.774050][T11565] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 233.776428][T11565] blk_mq_submit_bio+0x1fb6/0x24c0 [ 233.778038][T11565] __submit_bio+0x384/0x540 [ 233.779474][T11565] submit_bio_noacct_nocheck+0x698/0xd70 [ 233.781230][T11565] submit_bio_noacct+0x93a/0x1e20 [ 233.782809][T11565] block_read_full_folio+0x812/0xa50 [ 233.784475][T11565] filemap_read_folio+0xc6/0x2a0 [ 233.785995][T11565] filemap_get_pages+0x155f/0x1be0 [ 233.787586][T11565] filemap_read+0x3ca/0xd70 [ 233.789004][T11565] blkdev_read_iter+0x187/0x480 [ 233.790514][T11565] vfs_read+0x87f/0xbe0 [ 233.791865][T11565] ksys_read+0x12b/0x250 [ 233.793226][T11565] do_syscall_64+0xcd/0x250 [ 233.794630][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.796429][T11565] [ 233.796429][T11565] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 233.798806][T11565] down_read+0x9a/0x330 [ 233.800128][T11565] page_cache_ra_unbounded+0x173/0x750 [ 233.801805][T11565] page_cache_ra_order+0x8f2/0xc80 [ 233.803396][T11565] filemap_fault+0x14a5/0x2820 [ 233.804902][T11565] __do_fault+0x10a/0x490 [ 233.806285][T11565] do_pte_missing+0x1a8/0x3e00 [ 233.807773][T11565] __handle_mm_fault+0x103c/0x2a40 [ 233.809376][T11565] handle_mm_fault+0x3fa/0xaa0 [ 233.810903][T11565] __get_user_pages+0x8d9/0x3b50 [ 233.812490][T11565] get_user_pages_unlocked+0x1c2/0x780 [ 233.814222][T11565] hva_to_pfn+0x8be/0xc20 [ 233.815628][T11565] kvm_follow_pfn+0x29f/0x3f0 [ 233.817125][T11565] __kvm_faultin_pfn+0x11c/0x1a0 [ 233.818658][T11565] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 233.820250][T11565] kvm_tdp_page_fault+0x182/0x3d0 [ 233.821828][T11565] kvm_mmu_do_page_fault+0x58d/0x690 [ 233.823457][T11565] kvm_mmu_page_fault+0x20f/0x1bb0 [ 233.825036][T11565] handle_ept_violation+0x25a/0x640 [ 233.826632][T11565] vmx_handle_exit+0x733/0x1f70 [ 233.828129][T11565] vcpu_run+0x2aaf/0x4c00 [ 233.829510][T11565] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 233.831208][T11565] kvm_vcpu_ioctl+0x6ce/0x1520 [ 233.832679][T11565] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 233.834352][T11565] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 233.836024][T11565] __do_fast_syscall_32+0x73/0x120 [ 233.837631][T11565] do_fast_syscall_32+0x32/0x80 [ 233.839136][T11565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.841040][T11565] [ 233.841040][T11565] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 233.843187][T11565] __might_fault+0x11b/0x190 [ 233.844635][T11565] _copy_from_user+0x29/0xd0 [ 233.846081][T11565] __blk_trace_setup+0xa8/0x180 [ 233.847592][T11565] blk_trace_setup+0x47/0x70 [ 233.849029][T11565] sg_ioctl+0x7a3/0x26b0 [ 233.850395][T11565] compat_ptr_ioctl+0x6b/0xa0 [ 233.851901][T11565] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 233.853589][T11565] __do_fast_syscall_32+0x73/0x120 [ 233.855163][T11565] do_fast_syscall_32+0x32/0x80 [ 233.856686][T11565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.858618][T11565] [ 233.858618][T11565] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 233.860772][T11565] __mutex_lock+0x19b/0xa60 [ 233.862178][T11565] blk_mq_init_sched+0x42b/0x640 [ 233.863759][T11565] elevator_init_mq+0x2cd/0x420 [ 233.865291][T11565] add_disk_fwnode+0x113/0x1300 [ 233.866821][T11565] sd_probe+0xa66/0xfa0 [ 233.868140][T11565] really_probe+0x23e/0xa90 [ 233.869551][T11565] __driver_probe_device+0x1de/0x440 [ 233.871209][T11565] driver_probe_device+0x4c/0x1b0 [ 233.872796][T11565] __device_attach_driver+0x1df/0x310 [ 233.874483][T11565] bus_for_each_drv+0x157/0x1e0 [ 233.876027][T11565] __device_attach_async_helper+0x1d3/0x290 [ 233.877870][T11565] async_run_entry_fn+0x9c/0x530 [ 233.879436][T11565] process_one_work+0x958/0x1b30 [ 233.880984][T11565] worker_thread+0x6c8/0xf00 [ 233.882452][T11565] kthread+0x2c1/0x3a0 [ 233.883777][T11565] ret_from_fork+0x45/0x80 [ 233.885193][T11565] ret_from_fork_asm+0x1a/0x30 [ 233.886709][T11565] [ 233.886709][T11565] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 233.889214][T11565] __lock_acquire+0x249e/0x3c40 [ 233.890755][T11565] lock_acquire.part.0+0x11b/0x380 [ 233.892357][T11565] blk_queue_enter+0x50f/0x640 [ 233.893897][T11565] blk_mq_alloc_request+0x59b/0x950 [ 233.895543][T11565] scsi_execute_cmd+0x20a/0xf30 [ 233.897099][T11565] read_capacity_16+0x21a/0xe20 [ 233.898637][T11565] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 233.900449][T11565] scsi_rescan_device+0x243/0x340 [ 233.902042][T11565] ata_scsi_dev_rescan+0x1cb/0x470 [ 233.903665][T11565] process_one_work+0x958/0x1b30 [ 233.905220][T11565] worker_thread+0x6c8/0xf00 [ 233.906695][T11565] kthread+0x2c1/0x3a0 [ 233.908028][T11565] ret_from_fork+0x45/0x80 [ 233.909374][T11565] ret_from_fork_asm+0x1a/0x30 [ 233.910903][T11565] [ 233.910903][T11565] other info that might help us debug this: [ 233.910903][T11565] [ 233.913779][T11565] Chain exists of: [ 233.913779][T11565] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#51 --> &q->limits_lock [ 233.913779][T11565] [ 233.918039][T11565] Possible unsafe locking scenario: [ 233.918039][T11565] [ 233.920144][T11565] CPU0 CPU1 [ 233.921680][T11565] ---- ---- [ 233.923268][T11565] lock(&q->limits_lock); [ 233.924560][T11565] lock(&q->q_usage_counter(io)#51); [ 233.926810][T11565] lock(&q->limits_lock); [ 233.928723][T11565] rlock(&q->q_usage_counter(queue)#51); [ 233.930310][T11565] [ 233.930310][T11565] *** DEADLOCK *** [ 233.930310][T11565] [ 233.932596][T11565] 5 locks held by kworker/2:9/11565: [ 233.934085][T11565] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 233.937020][T11565] #1: ffffc90003b57d80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 233.940496][T11565] #2: ffff8880212ac358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 233.943384][T11565] #3: ffff8880222c4378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 233.946066][T11565] #4: ffff8880222f06f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 233.949065][T11565] [ 233.949065][T11565] stack backtrace: [ 233.950771][T11565] CPU: 2 UID: 0 PID: 11565 Comm: kworker/2:9 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 233.953833][T11565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.956842][T11565] Workqueue: events ata_scsi_dev_rescan [ 233.958433][T11565] Call Trace: [ 233.959397][T11565] [ 233.960212][T11565] dump_stack_lvl+0x116/0x1f0 [ 233.961508][T11565] print_circular_bug+0x41c/0x610 [ 233.962973][T11565] check_noncircular+0x31a/0x400 [ 233.964398][T11565] ? __pfx_check_noncircular+0x10/0x10 [ 233.965965][T11565] ? __pfx_try_to_wake_up+0x10/0x10 [ 233.967402][T11565] ? lockdep_lock+0xc6/0x200 [ 233.968717][T11565] ? __pfx_lockdep_lock+0x10/0x10 [ 233.970178][T11565] __lock_acquire+0x249e/0x3c40 [ 233.971576][T11565] ? __pfx___lock_acquire+0x10/0x10 [ 233.973089][T11565] lock_acquire.part.0+0x11b/0x380 [ 233.974571][T11565] ? blk_mq_alloc_request+0x59b/0x950 [ 233.976087][T11565] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 233.977674][T11565] ? rcu_is_watching+0x12/0xc0 [ 233.979068][T11565] ? trace_lock_acquire+0x14e/0x1f0 [ 233.980554][T11565] ? blk_mq_alloc_request+0x59b/0x950 [ 233.982095][T11565] ? lock_acquire+0x2f/0xb0 [ 233.983417][T11565] ? blk_mq_alloc_request+0x59b/0x950 [ 233.984962][T11565] blk_queue_enter+0x50f/0x640 [ 233.986339][T11565] ? blk_mq_alloc_request+0x59b/0x950 [ 233.987871][T11565] ? __pfx_blk_queue_enter+0x10/0x10 [ 233.989378][T11565] ? save_trace+0x42/0xa10 [ 233.990663][T11565] ? add_lock_to_list+0x17d/0x390 [ 233.992124][T11565] ? lockdep_unlock+0x11a/0x290 [ 233.993563][T11565] blk_mq_alloc_request+0x59b/0x950 [ 233.995071][T11565] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 233.996709][T11565] ? __pfx___lock_acquire+0x10/0x10 [ 233.998206][T11565] scsi_execute_cmd+0x20a/0xf30 [ 233.999610][T11565] ? lock_acquire.part.0+0x11b/0x380 [ 234.001138][T11565] ? __mutex_trylock_common+0xea/0x250 [ 234.002739][T11565] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 234.004279][T11565] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 234.005972][T11565] ? rcu_is_watching+0x12/0xc0 [ 234.007362][T11565] read_capacity_16+0x21a/0xe20 [ 234.008767][T11565] ? __pfx_read_capacity_16+0x10/0x10 [ 234.010307][T11565] ? __pfx___mutex_lock+0x10/0x10 [ 234.011763][T11565] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 234.013307][T11565] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 234.014987][T11565] ? find_held_lock+0x2d/0x110 [ 234.016365][T11565] ? mark_held_locks+0x9f/0xe0 [ 234.017761][T11565] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 234.019523][T11565] ? kasan_save_stack+0x42/0x60 [ 234.020927][T11565] ? kasan_save_stack+0x33/0x60 [ 234.022333][T11565] ? kasan_save_track+0x14/0x30 [ 234.023760][T11565] ? kasan_save_free_info+0x3b/0x60 [ 234.025247][T11565] ? __kasan_slab_free+0x51/0x70 [ 234.026681][T11565] ? kfree+0x14f/0x4b0 [ 234.027853][T11565] ? scsi_attach_vpd+0x4dc/0x580 [ 234.029270][T11565] ? scsi_rescan_device+0xf5/0x340 [ 234.030741][T11565] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 234.032249][T11565] ? process_one_work+0x958/0x1b30 [ 234.033753][T11565] ? worker_thread+0x6c8/0xf00 [ 234.035136][T11565] ? hlock_class+0x4e/0x130 [ 234.036448][T11565] ? mark_lock+0xb5/0xc60 [ 234.037688][T11565] ? mark_held_locks+0x9f/0xe0 [ 234.039097][T11565] ? kasan_quarantine_put+0x10a/0x240 [ 234.040649][T11565] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.042160][T11565] ? kfree+0x14f/0x4b0 [ 234.043358][T11565] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.044860][T11565] ? scsi_attach_vpd+0x4dc/0x580 [ 234.046328][T11565] ? scsi_attach_vpd+0x4dc/0x580 [ 234.047759][T11565] ? __pfx_sd_rescan+0x10/0x10 [ 234.049129][T11565] scsi_rescan_device+0x243/0x340 [ 234.050585][T11565] ata_scsi_dev_rescan+0x1cb/0x470 [ 234.052063][T11565] process_one_work+0x958/0x1b30 [ 234.053525][T11565] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 234.055153][T11565] ? __pfx_process_one_work+0x10/0x10 [ 234.056703][T11565] ? rcu_is_watching+0x12/0xc0 [ 234.058116][T11565] ? assign_work+0x1a0/0x250 [ 234.059508][T11565] worker_thread+0x6c8/0xf00 [ 234.060850][T11565] ? __pfx_worker_thread+0x10/0x10 [ 234.062333][T11565] kthread+0x2c1/0x3a0 [ 234.063538][T11565] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.065042][T11565] ? __pfx_kthread+0x10/0x10 [ 234.066395][T11565] ret_from_fork+0x45/0x80 [ 234.067685][T11565] ? __pfx_kthread+0x10/0x10 [ 234.069022][T11565] ret_from_fork_asm+0x1a/0x30 [ 234.070414][T11565] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.179556][T12083] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.181422][T12083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.199233][ T8077] ªªªªªª: left allmulticast mode [ 234.230991][T12083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.232886][T12083] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.259590][T12083] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.962575][ T1224] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.965527][ T1224] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.053227][ T1224] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.057288][ T1224] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.193660][ T1224] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.196415][ T1224] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.282773][ T1224] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.285737][ T1224] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.476398][ T1224] bridge_slave_1: left allmulticast mode [ 235.478080][ T1224] bridge_slave_1: left promiscuous mode [ 235.480555][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.483361][ T1224] bridge_slave_0: left allmulticast mode [ 235.484977][ T1224] bridge_slave_0: left promiscuous mode [ 235.486599][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.548990][ T1224] dvmrp0 (unregistering): left allmulticast mode [ 235.704647][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.708087][ T1224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.730562][ T1224] bond0 (unregistering): Released all slaves [ 235.733689][ T1224] bond1 (unregistering): Released all slaves [ 236.084023][ T1224] hsr_slave_0: left promiscuous mode [ 236.085952][ T1224] hsr_slave_1: left promiscuous mode [ 236.087799][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.090561][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.099903][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.102069][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.105599][ T1224] veth1_macvtap: left promiscuous mode [ 236.107179][ T1224] veth0_macvtap: left promiscuous mode [ 236.108724][ T1224] veth1_vlan: left promiscuous mode [ 236.110742][ T1224] veth0_vlan: left promiscuous mode [ 236.319366][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 236.415463][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 237.216339][ T1224] IPVS: stop unused estimator thread 0... [ 237.325771][ T8370] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.462039][ T8370] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.521679][ T8370] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.562046][ T8370] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.638009][ T8370] bridge_slave_1: left allmulticast mode [ 237.639715][ T8370] bridge_slave_1: left promiscuous mode [ 237.641399][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.644029][ T8370] bridge_slave_0: left allmulticast mode [ 237.645664][ T8370] bridge_slave_0: left promiscuous mode [ 237.647504][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.717108][ T8370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.720226][ T8370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.723037][ T8370] bond0 (unregistering): Released all slaves [ 237.945049][ T8370] hsr_slave_0: left promiscuous mode [ 237.947364][ T8370] hsr_slave_1: left promiscuous mode [ 237.949824][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.952482][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.955418][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.958133][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.962634][ T8370] veth1_macvtap: left promiscuous mode [ 237.964628][ T8370] veth0_macvtap: left promiscuous mode [ 237.966726][ T8370] veth1_vlan: left promiscuous mode [ 237.968702][ T8370] veth0_vlan: left promiscuous mode [ 238.149810][ T8370] team0 (unregistering): Port device team_slave_1 removed [ 238.192113][ T8370] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 06:00:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000520644 RBX=0000000000000000 RCX=ffffffff8b1a8889 RDX=ffffed1005686fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50ff880 CR3=0000000063a12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006b5b84 RBX=0000000000000001 RCX=ffffffff8b1a8889 RDX=ffffed10056a6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed1003a57910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2bc880 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3d93ca CR3=000000005935e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145e25 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90003b56a60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000064 R14=ffffffff85145dc0 R15=0000000000000000 RIP=ffffffff85145e4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4c5bda4 CR3=000000006a128000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000278db4 RBX=0000000000000003 RCX=ffffffff8b1a8889 RDX=ffffed10056e6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed1003a5a488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d2d2440 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ae557 CR3=000000006422e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000