last executing test programs: 3m37.482218538s ago: executing program 2 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) 3m37.418730198s ago: executing program 2 (id=1194): socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) capset(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0xe, 0x2) socket(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r6, r6, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020}, 0xffffff0a) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 3m37.210276322s ago: executing program 2 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="c168d205b56052709d322247a7f2c93f8e1746fef09b63611d7ba24ec260ae3d78b522ad4033d2b3e83a9aa25efb30961ff6d9b5e7391720b035a6cd8286e563ff6d6b4bb235569fc2a5e90627bb1c6aea8378298f0e7613e0d537fad5ffe3dce44539b2be53b9d8ff8094aa70645d16f411493e56056e618a746f645cb54e6c70b7d50e7a529a0fc0b4b59044a08e040aa4bde6ea25f176bcefdc290bc7e11df8e77b062ea134142cf02e4d652a67409760e6a80774ac686180b4b5ef33bf54d56eee341f17"], &(0x7f0000000000)='GPL\x00', 0x3, 0xe9, &(0x7f0000000700)=""/233, 0x0, 0x1}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f000000000000020003"], 0x78) (async) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) unshare(0x62040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$uinput(0xffffff9c, &(0x7f0000000b40), 0x802, 0x0) 3m37.204740528s ago: executing program 2 (id=1198): r0 = socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) unshare(0x2a020400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000020000008500000085000000b700000000000000950000000000ffffffffffffffed000000006712ea80852624ae6f9985b66a4441d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {0x0}, {&(0x7f00000001c0)="ee641681c41fd678a13a3a40", 0xc}], 0x3) r5 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x800, 0x0, 0x3, 0x1}, 0x20) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 3m36.270248064s ago: executing program 2 (id=1202): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0xd, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = syz_usb_connect(0x6, 0xb22, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x6d, 0xaa, 0x28, 0x40, 0x12d1, 0xb4d5, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb10, 0x2, 0xb, 0x6, 0x50, 0x3, [{{0x9, 0x4, 0x31, 0x40, 0xa, 0xff, 0x3, 0x36, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfffb, 0x5}, [@mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "74a8cf055d"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x1, 0x3, [0x9, 0x77648638d89c0dcc, 0x4], 0x3}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0xfe, "9b4d63393b29"}]}], [{{0x9, 0x5, 0xc, 0xa, 0x20, 0x80, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0xff, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xd}]}}, {{0x9, 0x5, 0x86, 0x10, 0x40, 0x0, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x4645}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x2c, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x3}]}}, {{0x9, 0x5, 0xf760948a7cc4f363, 0x10, 0x10, 0x80, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x6}, @generic={0xc9, 0x9, "f010f24b2de15f246c74f4f360c0f146a5b53fd8322c4b8dc220bd6bf059cb64ad1390208c089d5da3e9075b694b67bf9bc4eafa3f751f65db3787e2819646edf92e0fd3f97e2bdf6dc6fa55c862726959c433244b35bbc0f3ca8cd080b0d93db8cae9e360ca3095bf10fd8068b5ce4c5866a4f065e89bcf6bc8a02f9075517834d0eecf9c235226f3fa3ef97a1a7e423e4f59de085111becb9edd35dd1dd1977e1f4959d07f8fbb731e6f8ca0d265ec74ed5d5c4e4df5b5b5f6705116e0001117c47fb1e1dbd3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x26, 0x6, 0x5, [@generic={0x9f, 0x7, "2c3d7d3e317da3687e1f801510f3cfcc22e47a2957aed9483a7f92655d9c80b54bf3b5609c28e23b6091857f4466192c602bcd0518ad62672a07b1b561c113ab51fcfe894460d94adf58a4eac1dc25312a65160e1faaebd2f30c56f40563b84d64af7843ce65b652422fc40c270d6c8d6d7ff1f48b96a75c39b080b9c932b3420f97325cfdf89a17a00c4c570df3ab4fa2576eabf8c51f4075bb24173c"}, @generic={0xfd, 0x5, "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"}]}}, {{0x9, 0x5, 0xe, 0x11, 0x20, 0x5, 0xf5, 0x7, [@generic={0xde, 0x22, "ec72224e712c3afea50e9574859ff6dafbe2ac17c3bf9ca6174ec41990c54a25cf46e446be681c903c5dfe93ff0e57c202fd13d362f2d97ff76b8d7cabf26a352560d5a30a9ff109994abb2bc266de665c72e87417f55a598f33d76d66d47bc9f5ae489df00de1f729815072932e001f9053b2698374846263a53fb625120b9aeabb4b568e6acef229833c2fbdc41024c7404c7e1f7979f0e96f7b041d1d8037bfdd4f8761233e949bf05665e2ab7f073642ebfe5c9136fc1075b9229797994860f91c64de450b3299e13a3a9f04ec32f0a09a64413f49d8f880c427"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0xc, 0x9, 0x6, [@generic={0xdf, 0x23, "5672e75ad1dd3fcb86e96eccb287d45283a47f4c69c7519fb15aec81784a457d5350570f88dedc1cd273dc558eef254d7ca6dbc8b6b9386a8655ecba011d764468de8483d07d0e7939f696811e5e2c7e371837f426e4356e780f4a241cf90b4427dd406bcca7c083d859d4185c134b5dc337e0cbb1ad1ba3968d648b5cb6e3b4217755e924639dde20859343255a4e9ef648cbfe3e33981e99d2839e9881b0a74fe3557b1db95fd2a220580e96fb4d7f4ab597e9a76ce412b7e3c3ffca6e6c14c8ee7d39d9c32735b1ebc384a488e7ce713a678ab26cedff269926335c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xca}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0xa, 0x3, 0x4, [@generic={0x17, 0x1, "96c75fe0866b59c7f2483e92b1f4742b1a6f9b97bc"}]}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xa, 0xf9, 0x76, 0x50, 0x5, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, 'fbTw/'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@obex={0x5, 0x24, 0x15, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x9bc, 0xf8, 0xc0d}, @acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}, @mdlm_detail={0xd0, 0x24, 0x13, 0x3, "2c8a5ff0fcc7e8a6a5cb9e9565622a76f100e9fec0c63171f2bd3c26cd756810d6903e73a31ac8c8d159a595713b5557eb4480662f4eafae0eb3b894094eeca90b59cd273c695ee549bc17b0bdcf18d2c70780859933e077e53b257e35d1d465282ab4d3e81987fa4e9d57d999028b6430348541cc0a92c0c338b27b6f3604471693db41da919ea20c23a7fcaa9f3b1ad8332cb3f6816e7ebeda3c917f327e002cc48a1d4a691f92e998a52eda619d0928f0e7b3cd421fd2f32b7fc43b9ef06e0c346073493d494e28dee48f"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x7f, 0x4, 0x2, [@generic={0xc4, 0x24, "e4dad8b6c7aa8e784f26b545f124e9b1e3884305ffcf2ec6f296fa21ec7e28e240d5bdb333a7b35752e7422cf3c7b5d3a7e49e1f371c1b96565b1a475208ab3530dfdd69ebe5c70605f1c32e44bff3ef6df428b512a32bcbc8128a3729a6fb3f06a74c72f200488cb5a02968a092179d3574944d87b11951a8635b302095580ab0128245228012adba8b56ff3229bfc0cf2387715aa0cc896ed28662fb24dddd7ff2f6185eb71c2521ef20af9bbbc393278a749511d474a72d9a54434dc30f6c9eb3"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x1, 0x7f, 0x8, [@generic={0xf9, 0x11, "1c774185f65062e725208b76371c2a2f07f21a218831c0e785519a58d707df0c1a484cd1766b31b02e78793c510ebc9dd96ab931860d04a8d97535449fcf353ab2a54213d6178b632367ffbd29ef9a9a3d60e456803b99f260c566141164de39b16485e3838f5990af8e50033d50b84ed2d49df3d9a970ee4b16b7780cee004210a63547afd3859ff7a3135b98a5142b4b068c921784188733355b7ff9a3d78dcf30d098316be94923b59c0deb526b5250fd92548a1403413652d62108ae7f4103dcd44fa52f36aba72e5f774301d83cd2acefc76e82cb13ac23a87688b9afcdaccf2617b2eb3a20719ca0c862c14e0e02ea6f0b04be19"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5ef, 0x4, 0x58, 0x9, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x1, 0x2, 0x8, [@generic={0x3d, 0x24, "1c8ed6f2ba47af2e733b0eccf3568184b28dbb2aaf5645648702d37333696656fb91b69fde0317c6c1dc8b8cf932511587a7d3e1973c3292b37092"}]}}, {{0x9, 0x5, 0x15, 0xc, 0x20, 0x3, 0x0, 0x4b, [@generic={0xee, 0x10, "167e4151487981f769ec64794cd47692cc3a057b4ae435def71a205fbfcfb779653a4d82df0bb740a8faab598fda621329dcefbc70bd9b4ca3b6bf20da0f7cda65011c99cbc58e3c6a2c43024098f81be654844b827c7fa4d62ecd8ab57cc523081c63d24034f60e03312d756e9d2491bc04d3e8a88f53a9d145372d6aa1eaeff2bb9538cf39187870454a81a8bcbc542c026cf1c8a567d6a516d74a8ed33acb910ac91fb6be35c635befad739b906f9ac61d1b6a4fcf65245f1d95cb96cc845f8a217dbf23383a2abe2a3a70a4d547848bd494ccfe034666e6795b557dd0d933d7e4668cbfcf537c25c6801"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x2, 0x2, 0xb, [@generic={0xa, 0x9, "380181b54ecf842d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xc, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x81, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xc, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x5}, @generic={0xfd, 0x31, "d89d64d1e68ac50a885ad5340d463ef63a06271ff0fcb5fcdadcd160b2ac722195726c4441f7744ea687b29a1e24a90c434ae552bacbb5f247622ae0d859c684a9fecf697b7945154f33f4b83fe27b1333f5991048c7d3b988c4212d4ba3c29a9ccaa3794b18489f202fc670b1f3ba9a202752a735fd37ee0eb0971f40f49565e043071ed21d7ac2dd0c4cf09cdd043790923193ad509f8c446e2f537b0592e8a96b9315eef6fb915e852586ffa5d5f8f1030b0302629f2988701e5cab120165aab3e5c3c4f57ac79ee44850020f4c268cf1c1ddcd53b9a383bd4319415a2e15650749e3bed0db5b2c93c7bd2ceae7246faa99b6b9fa43308f47e7"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x5, 0x5, 0x4, [@generic={0x49, 0x21, "a3f862024b1fc208d7a82f5d7f7d4356547d6fe9ebb5018b43432fdaee2101b4da00e950dd22d0003380ee3d99ec3d405a712e33342bbb4af2d3f62dbfb744a861578bfca0303e"}, @generic={0x40, 0x22, "db829527dcf4d42cbd33435888fcd592166423e837ae8ba8b7b285be93dd192ab6ad9b39dc46870f9e8281ba70f8c2f41681019ef8c3768d2271c7e64b2c"}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x16, &(0x7f0000001780)={0x5, 0xf, 0xfffffffffffffe14, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x7, 0x92d}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x9, 0x8}]}, 0xa, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x861}}, {0xfffffffffffffe2d, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3, &(0x7f0000002080)=ANY=[@ANYBLOB="eb005feade8287c21b1ccbc3a5b0e1f6b7fd322b675c0b81ef12ab91dbb71657b204b3b223"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x9a, &(0x7f0000001900)=@string={0x9a, 0x3, "264b9c15f18fd712361e612d97f9880136aeff4be028cd6ed33c59e37b61a7f6e11d1ea0359842b32d70a2f05d5b2448e0dcc0b3b1b4b571e64857416aa9422251ce68ca36d787b0436bc9b920e975fde70f6e6a6ecf4659aeff1df430edac4b5a497038dd2d1acc946c96b43ed05de93dba211ed78bdf0099a69a06a98a4576b32329c85ca82204c850ed9a9e759ad4719eab10ad989843"}}, {0x3d, &(0x7f00000019c0)=@string={0x3d, 0x3, "caa55aa465add4665172d446680609008d085b181d50ae78d14e9bafbb2a77dccf31ae95580b68b07e85507024c65a571e9df72bbba03aff8a82ff"}}, {0xc9, &(0x7f0000001080)=@string={0xc9, 0x3, "19545cd88b20105939d5669c3875f941d1729eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5834c5347f35fce5dec7374fcff5106000000d2a9ee491a48b76ecf96e1b0454fc1d4d7f8d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37ab0d8ba7d8c12605f54c42458291dbc9a6166f08d655bdd0d205aff4dd57d88577172279eb594c2e800d67e966c81c33bbe04cbf129e6acf9c1524251"}}, {0x27, &(0x7f0000001ac0)=@string={0x27, 0x3, "6f2a0156ff34c7e1dd049a12752b811a000a76d3aadc534fcc38aec188ff2673e65adaaf92"}}, {0x69, &(0x7f0000001b00)=@string={0x69, 0x3, "90e02b4aed8bfbd6a93df567e42c23ed2d8225863c27af055220bcac6536cc4a9d4aa6256e568462990315436e620681952bcb9b861c09c04a8fef1bdc53bf2679c48e3b31f178fcfb78d4dde7b81d717e411592ca0e667839736e41d041f71ca4265adb95655b"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001d80)={0x14, &(0x7f0000001c00)={0x20, 0xf, 0x91, {0x91, 0x2, "cee4f3c612189edf462db618820ba5f95b7127669c501303c9d83ebf52609a9828559cf73e2614db432e7f20bcf611fdab8ce6f71bab240be9618a7324a309458a0835a34a71e0bc850401771ded0b16cb0a9ee2ca8e12f0e630e0dcb3ea337e6d9b837362dfb1b0964f91122be0e347b2b1996bfe8102c77998fa849aeb88d051d081a9fa4880b9e5f91cd1705f50"}}, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="00220a0000000228bea1b8551eeb69fd"], &(0x7f0000001d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x7a3}}}}, &(0x7f0000002040)={0x18, &(0x7f0000001dc0)={0x0, 0x9, 0xa9, "8f075e95eda22dd76e9d32bfe5fe8ae393072b9915ba9b52167cd065e6fbb799d939754eef1689245add38b472ccad2159ed08e38b3dcad18fe73a754351d7d467a98eb82de52a92e1cfa4316f66881170eecd9d98be5661e245a4094a59f00a5b44e38a7abaed9aa7d934f87b011da656d58e8de20452d2a2600e99f61044d47cd88b89f7049c8b35c351970c40d4e34ecfea1c9272096c70723299b45df78b6b16f710e2621b3dbd"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f00)={0x20, 0x1, 0xc7, "3ff969a7ede8a785e7cfe2b55ef92c39eebd9f86d961fcffb4492d558586fab8b7bbef57d6190c04745a4cdf30d505d3ad4a98de1a71a8cedc23a44d5cd27fe878cf58bc42dd35e2b109da274ee42d5a1fca3687b6138740fe0cbc2b4cc36fc8b314954c381205bb3748cad376366060c1c06c0033feea10fb083b40f7e41ae224ab77e6f9fe02bcc8feacac2f5d50cc0502815f3670bc26b4bb20c700376efabd5df0361d6be2d5c9e1b1e6e942be1832f647a01cc15847faa691df9e3a13f5ba7922779a0949"}, &(0x7f0000002000)={0x20, 0x3, 0x1, 0x2}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5c3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5ec}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async, rerun: 64) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x9000000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 3m35.99237243s ago: executing program 2 (id=1210): fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="aefdda9d24030e005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a5a2e9ae19427a7a04a9e6a16d34fc5f59dc910d74f7fdd91cb1c9b30eff0b5f45f9ea4fa0f49743bd04bd09903ce", 0x58}, {&(0x7f0000000040)}], 0x2) r3 = syz_io_uring_setup(0x38ff, &(0x7f0000000240)={0x0, 0x3e34, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000200)) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r11}, &(0x7f0000000180), &(0x7f00000001c0)) 3m35.919648119s ago: executing program 32 (id=1210): fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="aefdda9d24030e005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a5a2e9ae19427a7a04a9e6a16d34fc5f59dc910d74f7fdd91cb1c9b30eff0b5f45f9ea4fa0f49743bd04bd09903ce", 0x58}, {&(0x7f0000000040)}], 0x2) r3 = syz_io_uring_setup(0x38ff, &(0x7f0000000240)={0x0, 0x3e34, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000200)) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r11}, &(0x7f0000000180), &(0x7f00000001c0)) 6.998662982s ago: executing program 3 (id=2738): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) 6.129898849s ago: executing program 4 (id=2744): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000007c0)={'sit0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x5}, 0x18) get_robust_list(0x0, 0x0, &(0x7f0000000400)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x3) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000030605000000000000000000070000010900020073797a30000000000900020073797a32000000000900020073797a30000000000900020073797a30000000000960020073797a31000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="0198001a000000002000128008000100677265001400028008000700ac14140008000100c6"], 0x40}}, 0x6044850) sendto$packet(r6, &(0x7f0000000000)='1', 0x44, 0x40, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) 5.290134329s ago: executing program 3 (id=2747): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$evdev(0x0, 0xba5a, 0x600100) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close(r7) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="57b2bc53ccabd070875ddc64f413b786d4bed838be2595c14fc3bbc2c1b5ad73db", @ANYRES64, @ANYRES8=r0], 0x15) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x48, {0x2, 0x4e22, @empty}, 'tunl0\x00'}) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x306, @multicast}, 0x18, {0x2, 0x4e20, @local}, 'veth1_to_bridge\x00'}) r10 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080050) 5.072498625s ago: executing program 4 (id=2748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19d", 0xf}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) read(r2, 0x0, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xc07b0000, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0x8}, {0x0, 0x10}, {0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4.366972016s ago: executing program 3 (id=2756): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_conn_req={{0x2, 0x86, 0x4}, {0x3ff, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0xfffffc5b}, {0x81}}]}}, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(0x0, 0x80242, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000001300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 4.17817531s ago: executing program 4 (id=2757): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_conn_req={{0x2, 0x86, 0x4}, {0x3ff, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0xfffffc5b}, {0x81}}]}}, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(0x0, 0x80242, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.389621298s ago: executing program 0 (id=2763): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000500), 0x1ff, 0x4500) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0x1, 0xa, 0xffffffffffff8005, 0x3], 0x1, 0x0, 0x0, [{0x0, 0x600}]}, 0x88) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000000540)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "f76f0722"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x14b37e, 0x40) r9 = openat$vcs(0xffffff9c, &(0x7f0000001a40), 0x200001, 0x0) fgetxattr(r9, &(0x7f0000001a80)=@random={'user.', '\xc2\x00'}, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r11, &(0x7f0000000e40)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x3, 0x3, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x7, 0x0, r13}) write$FUSE_INIT(r7, &(0x7f00000006c0)={0x50, 0x0, r12, {0x7, 0x29, 0x9, 0x22911c0, 0x1, 0xc36, 0x4, 0xffffbe9e, 0x0, 0x0, 0x2, 0xe}}, 0x50) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r14) sendmsg$TIPC_NL_NET_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd700a04000000000000000c0007800800020004000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r15, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x1, 0x80, 0x7, 0x2002, {{0x6, 0x4, 0x3, 0x20, 0x18, 0x64, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123c000000000061134c0000000000bf1000000000000015000200071b60013d020100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000070600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586f9305ab24fede751b184bcf3a2da2873ad8cfdbaf16b96c57de9f771c0a3e92a1a595965c5106b49611bf32e3af18e578870c7cd59be5d4881f1280fc1103e421e93c5929cfcf841ae7a045b81ab18504a0409446fffea9a428c477fb4ab5c8c3b309f6585e7070db5048c0231d9519be44d8dcad428c60de7163450a6c2a131170267d2abc76189ccefea343fdeb77dc0af2b14748e05bdcfcf535b90d0ea8ce64d148bb2ab0650c346cb9492242d13ea3eac49e6c7c43beaa0"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', r16, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.243918887s ago: executing program 0 (id=2764): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ioperm(0x8, 0x4, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x800b}, {0x4c, 0x18, {0xff, @link='syz1\x00'}}}}, 0x68}}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x8) (async) r3 = socket$inet6(0xa, 0x2, 0xc77) sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x64a2f9d4, @private0, 0xffffffff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r4 = creat(&(0x7f0000019080)='./file0\x00', 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x202, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x9}}}, 0x32) (async) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 3.161163676s ago: executing program 0 (id=2765): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x4000000) 3.16040389s ago: executing program 0 (id=2766): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0xc09, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 40) 3.099655455s ago: executing program 0 (id=2768): syz_emit_ethernet(0x85, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x8890) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) move_pages(0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x6], &(0x7f0000001400), 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x2, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 2.186903161s ago: executing program 0 (id=2772): epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2e, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040094}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x54) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r5, 0x12, 0x0, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xa000000a}) finit_module(r7, 0x0, 0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x0, 0x1}, 0x20) 1.500277045s ago: executing program 1 (id=2775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0x10, 0x65}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) prctl$PR_SET_DUMPABLE(0x4, 0x0) 1.400846452s ago: executing program 1 (id=2776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000000)=""/208, 0xd0, 0x40010040, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x1, 0x2, 0x3}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb0}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x36}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setresuid(0x0, 0xee01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x50, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x23, 0x2, @thr={0x0, 0x0}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r6, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="680200000105010400000000000000000700000a540201000000000005000000fd0d00"], 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x51, 0x5, 0x0, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x65, 0x0, 0xfd, 0x2f, 0x0, @multicast2, @multicast2, {[@end]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x22c, 0x2c, 0x100, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x200, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8d}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x1}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x93f}]}, @TCA_U32_SEL={0x1c4, 0x5, {0xd, 0x3, 0x1, 0x6, 0xf020, 0x3, 0xedf, 0x403c24b2, [{0x5, 0x4, 0x0, 0x5}, {0x6, 0x9, 0x6, 0x9}, {0x9, 0x4, 0x4, 0x100}, {0x3, 0x1, 0x10000, 0xfffffff8}, {0x7, 0x5, 0x800, 0x5}, {0x3, 0x1, 0xffffffa0, 0x1}, {0x6f5, 0x0, 0x2, 0x2}, {0x24e9a7fb, 0x10001, 0x7, 0x6}, {0x3, 0x37c0, 0x401, 0x8}, {0xdde, 0x80000000, 0x1, 0x9}, {0x2, 0x2, 0x2, 0xfffffffd}, {0x8, 0x0, 0xbc3, 0x7ff}, {0x2, 0x3ff, 0x6, 0xf9}, {0xcdb, 0x0, 0x3}, {0x10, 0x8, 0xfffffbff, 0xd}, {0x7fffffff, 0xc00000, 0x8, 0x3}, {0x8000, 0x9, 0x7, 0xb}, {0x6, 0x7fffffff}, {0x0, 0x196, 0x2, 0xdf}, {0xfffffff9, 0x8000, 0x80, 0x2}, {0x6740000, 0x31, 0x8, 0x7ff}, {0x6, 0x8, 0x4, 0x6}, {0xc4, 0x1, 0x1000000, 0x1000000}, {0x7ae, 0xfffffffa, 0x1000, 0x200}, {0x3ff, 0x3f, 0x401, 0xfffffffc}, {0x10, 0x3ff, 0xafe, 0x4}, {0x6, 0x5, 0x1, 0x4}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x24020000}, 0x44010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0xa0, 0x7a00, 0x2, 0x5, {{0x1f, 0x4, 0x1, 0x8, 0x7c, 0x66, 0x0, 0x69, 0x29, 0x0, @broadcast, @remote, {[@noop, @ssrr={0x89, 0xf, 0x1b, [@rand_addr=0x64010101, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x56, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x65d}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@empty, 0x81}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x9c, [@empty, @remote, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x1a, [@empty]}]}}}}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01d90000000000001c0012000c00010062"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) 1.378895019s ago: executing program 1 (id=2777): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x2900, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@end]}}}}}) 1.310350576s ago: executing program 1 (id=2778): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{r1, r2+60000000}, {0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 1.304823363s ago: executing program 1 (id=2779): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xfffffda0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) (async) lremovexattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='b\x00']) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000) (async) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x20385655, 0x32525942, 0xc, [{0x0, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {}, {}, {0xfffffffc}, {0x200}], 0x3, 0xfc, 0x0, 0x0, 0x5}}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x2, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0x7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffe, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x8003, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xfffffffb, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffff], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfff, 0x1ffffffe, 0xfffffffd, 0x5, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x7f, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0x8], [0x80000000, 0x0, 0x8, 0x0, 0x0, 0x2, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x802, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfa, 0xff, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x20000003, 0x0, 0xa, 0x0, 0x100000]}, 0x45c) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x40408c0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) 1.238127609s ago: executing program 1 (id=2780): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x1b, 0x21, 0x10, 0x12, 0xb, 0x1, 0x0, 0x14, 0x1}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0), &(0x7f0000000440)) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(0x0, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x81, 0xfffffffb, 0x4000000}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="1c001d8001"], 0x38}}, 0x4040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) 1.210566956s ago: executing program 3 (id=2781): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000180)=0xc9, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x87, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.082387246s ago: executing program 4 (id=2782): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) io_uring_setup(0x2cee, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141800) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x200900) socket(0xa, 0x1, 0x0) 140.506637ms ago: executing program 3 (id=2783): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012fbd7000000000001400000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x440) 121.575219ms ago: executing program 3 (id=2784): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x5, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0x4, [{}, {0x10}, {}, {}, {0x6}, {}, {0x0, 0x100}, {0x200}]}}) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xb79cd000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000180)=0x80000000000806, 0x6}], 0x1, 0x0, 0x0, 0x1) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x7fff, r0, 'id1\x00'}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x83) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c28c60002004a6506f1afea59178ca1b50f9f4c9a70dd1344773328812b4be6ecf39fc05052523f7acf953e0f9c93503e29410ba4e4cff361cb21680124692a108341ef3c69e1b6935f544383ec00f571c82a4c346a07896d03b4b7f25013289af3b63f298f3324a42c1b570a76227b47309fb01bab694c8d84ea4262bd04338f2a807ff96a01e00d6a7e34aad37acf429791595642db6941d34ccdf1f3f52966a17682fedaf50d3cfd5a505c79b971b2b3ef102da478c61fe7424e548050f7", @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70098000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd26, 0xff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4e0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000004) (async) r9 = msgget$private(0x0, 0x3ac) msgrcv(r9, 0x0, 0x0, 0x1, 0x2000) (async) msgrcv(r9, 0x0, 0x0, 0x2, 0x2000) (async) msgsnd(r9, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$pagemap(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x0, 0x0) (async) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) 48.475394ms ago: executing program 4 (id=2785): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x95ff, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2786): r0 = syz_open_dev$dri(0x0, 0x1, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = gettid() sched_setscheduler(r1, 0x6, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001780), 0xa00, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x44003, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0xf, r0, 0x10, {0xc4, 0x1}, 0x83}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x3]}}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x8000, 0xe2, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x67, 0x0, 0xf7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x8, "301f8f8aa213"}, @rr={0x7, 0x7, 0x53, [@loopback]}, @cipso={0x86, 0x6, 0x3}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$inet(r8, 0x0, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53928' (ED25519) to the list of known hosts. [ 47.284416][ T5922] cgroup: Unknown subsys name 'net' [ 47.428341][ T5922] cgroup: Unknown subsys name 'cpuset' [ 47.432518][ T5922] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.523608][ T5922] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.917133][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.920247][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.922783][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.922933][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.925883][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.928620][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.930661][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.932889][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.934976][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.937771][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.938002][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.941351][ T5302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.943202][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.949724][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.951900][ T5302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.956338][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.956384][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.962045][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.962684][ T5302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.968610][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.228215][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.314907][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 53.370083][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.391748][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 53.439690][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.442334][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.445035][ T5937] bridge_slave_0: entered allmulticast mode [ 53.450597][ T5937] bridge_slave_0: entered promiscuous mode [ 53.546318][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.548631][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.550942][ T5937] bridge_slave_1: entered allmulticast mode [ 53.553648][ T5937] bridge_slave_1: entered promiscuous mode [ 53.585829][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.588423][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.591592][ T5946] bridge_slave_0: entered allmulticast mode [ 53.596004][ T5946] bridge_slave_0: entered promiscuous mode [ 53.599413][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.602276][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.605449][ T5946] bridge_slave_1: entered allmulticast mode [ 53.610768][ T5946] bridge_slave_1: entered promiscuous mode [ 53.676899][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.687761][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.815526][ T5937] team0: Port device team_slave_0 added [ 53.903753][ T5937] team0: Port device team_slave_1 added [ 53.922056][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.925033][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.927860][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.930249][ T5938] bridge_slave_0: entered allmulticast mode [ 53.932987][ T5938] bridge_slave_0: entered promiscuous mode [ 53.936556][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.939618][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.942758][ T5950] bridge_slave_0: entered allmulticast mode [ 53.948254][ T5950] bridge_slave_0: entered promiscuous mode [ 53.968367][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.971850][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.974254][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.976940][ T5938] bridge_slave_1: entered allmulticast mode [ 53.979664][ T5938] bridge_slave_1: entered promiscuous mode [ 53.995955][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.998171][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.000796][ T5950] bridge_slave_1: entered allmulticast mode [ 54.003515][ T5950] bridge_slave_1: entered promiscuous mode [ 54.018863][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.021828][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.032523][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.099192][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.124989][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.127844][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.138081][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.143636][ T5946] team0: Port device team_slave_0 added [ 54.147753][ T5946] team0: Port device team_slave_1 added [ 54.151187][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.213581][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.219905][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.268998][ T5938] team0: Port device team_slave_0 added [ 54.303846][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.306130][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.314732][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.369667][ T5938] team0: Port device team_slave_1 added [ 54.390219][ T5950] team0: Port device team_slave_0 added [ 54.392951][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.395384][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.404247][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.412552][ T5937] hsr_slave_0: entered promiscuous mode [ 54.417047][ T5937] hsr_slave_1: entered promiscuous mode [ 54.443675][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.446833][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.455147][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.461033][ T5950] team0: Port device team_slave_1 added [ 54.468650][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.471156][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.480532][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.520163][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.522282][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.530253][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.589936][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.592529][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.602340][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.636461][ T5946] hsr_slave_0: entered promiscuous mode [ 54.638858][ T5946] hsr_slave_1: entered promiscuous mode [ 54.641139][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 54.643072][ T5946] Cannot create hsr debugfs directory [ 54.686452][ T5950] hsr_slave_0: entered promiscuous mode [ 54.688868][ T5950] hsr_slave_1: entered promiscuous mode [ 54.691039][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 54.693097][ T5950] Cannot create hsr debugfs directory [ 54.735876][ T5938] hsr_slave_0: entered promiscuous mode [ 54.738180][ T5938] hsr_slave_1: entered promiscuous mode [ 54.740534][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 54.742532][ T5938] Cannot create hsr debugfs directory [ 54.996070][ T5953] Bluetooth: hci3: command tx timeout [ 54.996432][ T5945] Bluetooth: hci0: command tx timeout [ 54.998140][ T5949] Bluetooth: hci1: command tx timeout [ 55.000632][ T5302] Bluetooth: hci2: command tx timeout [ 55.097255][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.103076][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.109654][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.121302][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.157613][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.164108][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.168525][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.172883][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.221078][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.230340][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.240836][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.245220][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.322591][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.336643][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.344782][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.353012][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.360756][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.395479][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.418419][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.428912][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.431349][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.449082][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.451359][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.459588][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.473588][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.476640][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.502263][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.505992][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.533616][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.570108][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.591807][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.594352][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.609396][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.612941][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.629874][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.677443][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.692727][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.695049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.715577][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.719317][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.768634][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.811314][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.833285][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.872688][ T5937] veth0_vlan: entered promiscuous mode [ 55.884129][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.889004][ T5938] veth0_vlan: entered promiscuous mode [ 55.892511][ T5937] veth1_vlan: entered promiscuous mode [ 55.912340][ T5938] veth1_vlan: entered promiscuous mode [ 55.923303][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.936257][ T5937] veth0_macvtap: entered promiscuous mode [ 55.951319][ T5937] veth1_macvtap: entered promiscuous mode [ 55.969118][ T5950] veth0_vlan: entered promiscuous mode [ 55.974564][ T5938] veth0_macvtap: entered promiscuous mode [ 55.982511][ T5938] veth1_macvtap: entered promiscuous mode [ 55.988243][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.002830][ T5950] veth1_vlan: entered promiscuous mode [ 56.008657][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.020529][ T5946] veth0_vlan: entered promiscuous mode [ 56.029401][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.039094][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.041902][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.044677][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.050602][ T5946] veth1_vlan: entered promiscuous mode [ 56.057721][ T227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.066622][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.083563][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.087803][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.097566][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.101266][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.137346][ T5950] veth0_macvtap: entered promiscuous mode [ 56.151633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.152353][ T5946] veth0_macvtap: entered promiscuous mode [ 56.154053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.162395][ T5950] veth1_macvtap: entered promiscuous mode [ 56.176311][ T5946] veth1_macvtap: entered promiscuous mode [ 56.180689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.183847][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.197884][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.201155][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.204609][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.214174][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.220722][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.231023][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.232723][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.233472][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.246786][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.254604][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.260564][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.271899][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.273303][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.277059][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.288828][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.292322][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.302616][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.357352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.362398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.389170][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.392445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.430310][ T40] audit: type=1326 audit(1761058298.281:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 56.483917][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.487504][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.494435][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.497412][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.877207][ T845] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 57.005383][ T6055] input: syz0 as /devices/virtual/input/input5 [ 57.029916][ T845] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 57.039757][ T845] usb 6-1: config 0 has no interface number 0 [ 57.044709][ T845] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.061703][ T845] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 57.061732][ T845] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 57.061753][ T845] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 57.061776][ T845] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 57.061799][ T845] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 57.061837][ T845] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 57.061857][ T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.076421][ T5302] Bluetooth: hci2: command tx timeout [ 57.092930][ T5302] Bluetooth: hci0: command tx timeout [ 57.092963][ T5302] Bluetooth: hci1: command tx timeout [ 57.092990][ T5302] Bluetooth: hci3: command tx timeout [ 57.203392][ T845] usb 6-1: config 0 descriptor?? [ 57.209034][ T6038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.211599][ T6038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.220143][ T845] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 57.433308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 57.444460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.609891][ T6063] "syz.2.6" (6063) uses obsolete ecb(arc4) skcipher [ 58.015725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 58.146098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.176180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.193095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.226686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.299034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 58.355048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 58.457577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.155950][ T5945] Bluetooth: hci0: command tx timeout [ 59.156064][ T5953] Bluetooth: hci2: command tx timeout [ 59.160485][ T5302] Bluetooth: hci1: command tx timeout [ 59.162344][ T5949] Bluetooth: hci3: command tx timeout [ 59.171034][ T6097] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 59.174411][ T6097] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10'. [ 59.177811][ T6097] NCSI netlink: No device for ifindex 0 [ 59.244658][ T6098] vxfs: unable to read disk superblock at 1 [ 59.249474][ T6098] vxfs: unable to read disk superblock at 8 [ 59.251758][ T6098] vxfs: can't find superblock. [ 59.863273][ T75] usb 6-1: USB disconnect, device number 2 [ 59.960688][ T75] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 60.043069][ T6108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.775253][ T6127] "syz.0.15" (6127) uses obsolete ecb(arc4) skcipher [ 61.235898][ T5953] Bluetooth: hci3: command tx timeout [ 61.238082][ T5302] Bluetooth: hci2: command tx timeout [ 61.240090][ T5945] Bluetooth: hci1: command tx timeout [ 61.241874][ T5953] Bluetooth: hci0: command tx timeout [ 62.125887][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 62.125932][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.252278][ T6148] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.302921][ T6150] "syz.2.20" (6150) uses obsolete ecb(arc4) skcipher [ 63.212406][ T6171] "syz.1.26" (6171) uses obsolete ecb(arc4) skcipher [ 63.297727][ T40] audit: type=1326 audit(1761058305.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.306336][ T40] audit: type=1326 audit(1761058305.151:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.313439][ T40] audit: type=1326 audit(1761058305.151:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.321471][ T40] audit: type=1326 audit(1761058305.151:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.328616][ T40] audit: type=1326 audit(1761058305.151:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.335969][ T40] audit: type=1326 audit(1761058305.151:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.342786][ T40] audit: type=1326 audit(1761058305.151:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.349795][ T40] audit: type=1326 audit(1761058305.151:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.357540][ T40] audit: type=1326 audit(1761058305.151:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.364336][ T40] audit: type=1326 audit(1761058305.151:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 63.672231][ T6174] netfs: Couldn't get user pages (rc=-14) [ 64.041802][ T6184] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.078452][ T6186] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 64.080996][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'. [ 64.331383][ T6192] nbd0: detected capacity change from 0 to 8589934655 [ 64.341201][ T6199] input: syz1 as /devices/virtual/input/input6 [ 64.590397][ T6201] "syz.3.34" (6201) uses obsolete ecb(arc4) skcipher [ 64.595410][ T5949] block nbd0: Receive control failed (result -104) [ 65.677846][ T6216] netlink: 300 bytes leftover after parsing attributes in process `syz.0.36'. [ 65.713282][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 65.718280][ T6216] input: syz0 as /devices/virtual/input/input7 [ 65.865701][ T6219] netlink: 288 bytes leftover after parsing attributes in process `syz.0.36'. [ 65.868478][ T6219] openvswitch: netlink: Flow key attr not present in new flow. [ 66.106866][ T6225] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.233508][ T6230] "syz.0.41" (6230) uses obsolete ecb(arc4) skcipher [ 66.277302][ T6225] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.392584][ T6232] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 66.430627][ T6225] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.550078][ T6232] netlink: 'syz.2.39': attribute type 8 has an invalid length. [ 66.613229][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.914391][ T1149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917661][ T1149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.975153][ T1149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.238835][ T1149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.178716][ T6255] "syz.1.47" (6255) uses obsolete ecb(arc4) skcipher [ 69.400582][ T6265] "syz.3.50" (6265) uses obsolete ecb(arc4) skcipher [ 70.137734][ T6275] "syz.1.51" (6275) uses obsolete ecb(arc4) skcipher [ 70.956868][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.959493][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726931][ T6304] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 71.790241][ T6307] "syz.1.60" (6307) uses obsolete ecb(arc4) skcipher [ 71.832981][ T6311] "syz.3.62" (6311) uses obsolete ecb(arc4) skcipher [ 71.938891][ T6314] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 72.147356][ T6314] netlink: 'syz.0.58': attribute type 8 has an invalid length. [ 72.376049][ T35] block nbd0: Connection timed out, retrying (0/1 alive) [ 72.389276][ T35] block nbd0: Connection timed out, retrying (0/1 alive) [ 72.392376][ T35] block nbd0: Connection timed out, retrying (0/1 alive) [ 72.395379][ T35] block nbd0: Connection timed out, retrying (0/1 alive) [ 72.398942][ T35] block nbd0: Dead connection, failed to find a fallback [ 72.401732][ T35] block nbd0: shutting down sockets [ 72.403739][ T35] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.407538][ T35] Buffer I/O error on dev nbd0, logical block 3, async page read [ 72.410112][ T35] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.412950][ T35] Buffer I/O error on dev nbd0, logical block 2, async page read [ 72.415371][ T35] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.418354][ T35] Buffer I/O error on dev nbd0, logical block 1, async page read [ 72.421199][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.424288][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.428693][ T6029] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.431671][ T6029] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.434320][ T6029] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.437880][ T6029] Buffer I/O error on dev nbd0, logical block 1, async page read [ 72.448522][ T6029] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.452617][ T6029] Buffer I/O error on dev nbd0, logical block 2, async page read [ 72.462087][ T6029] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.464996][ T6029] Buffer I/O error on dev nbd0, logical block 3, async page read [ 72.515795][ T6029] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.519371][ T6029] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.522079][ T6029] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.525344][ T6029] Buffer I/O error on dev nbd0, logical block 1, async page read [ 72.547122][ T6029] ldm_validate_partition_table(): Disk read failed. [ 72.552823][ T6029] Dev nbd0: unable to read RDB block 0 [ 72.556727][ T6029] nbd0: unable to read partition table [ 72.576326][ T6320] input: syz1 as /devices/virtual/input/input8 [ 72.623520][ T6029] ldm_validate_partition_table(): Disk read failed. [ 72.633091][ T6029] Dev nbd0: unable to read RDB block 0 [ 72.637610][ T6029] nbd0: unable to read partition table [ 72.651766][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 73.007480][ T6338] "syz.2.71" (6338) uses obsolete ecb(arc4) skcipher [ 73.279254][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 73.351741][ T6335] tmpfs: Unknown parameter 'tmpfs' [ 73.951539][ T6352] netlink: 300 bytes leftover after parsing attributes in process `syz.3.73'. [ 73.956298][ T6352] input: syz0 as /devices/virtual/input/input9 [ 73.980206][ T6355] "syz.2.74" (6355) uses obsolete ecb(arc4) skcipher [ 74.091384][ T6366] netlink: 288 bytes leftover after parsing attributes in process `syz.3.73'. [ 74.095452][ T6366] openvswitch: netlink: Flow key attr not present in new flow. [ 74.426717][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 74.473384][ T6381] random: crng reseeded on system resumption [ 74.505655][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.508215][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.511097][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.513899][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.517084][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.520377][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.523432][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.531421][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.534378][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.537561][ T6013] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 74.543787][ T6013] hid-generic 0003:0003:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 74.585854][ T6386] 9pnet_fd: Insufficient options for proto=fd [ 74.590191][ T6386] Invalid source name [ 74.629182][ T6390] netlink: 'syz.2.85': attribute type 21 has an invalid length. [ 74.675695][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 74.675707][ T40] audit: type=1326 audit(1761058316.501:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.684992][ T40] audit: type=1326 audit(1761058316.501:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.728895][ T40] audit: type=1326 audit(1761058316.501:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.737085][ T40] audit: type=1326 audit(1761058316.501:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.755191][ T40] audit: type=1326 audit(1761058316.501:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.757404][ T6388] fido_id[6388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.764164][ T40] audit: type=1326 audit(1761058316.501:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.776810][ T40] audit: type=1326 audit(1761058316.501:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.783893][ T40] audit: type=1326 audit(1761058316.501:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.790828][ T40] audit: type=1326 audit(1761058316.501:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 74.798058][ T40] audit: type=1326 audit(1761058316.501:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.3.84" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 75.592831][ T6427] overlayfs: statfs failed on './file0' [ 75.627315][ T6420] FAULT_INJECTION: forcing a failure. [ 75.627315][ T6420] name failslab, interval 1, probability 0, space 0, times 1 [ 75.631337][ T6420] CPU: 2 UID: 0 PID: 6420 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 75.631351][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.631358][ T6420] Call Trace: [ 75.631362][ T6420] [ 75.631366][ T6420] dump_stack_lvl+0x16c/0x1f0 [ 75.631384][ T6420] should_fail_ex+0x512/0x640 [ 75.631396][ T6420] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 75.631413][ T6420] should_failslab+0xc2/0x120 [ 75.631424][ T6420] kmem_cache_alloc_noprof+0x75/0x6e0 [ 75.631439][ T6420] ? fuse_request_alloc+0x22/0x200 [ 75.631456][ T6420] ? fuse_request_alloc+0x22/0x200 [ 75.631468][ T6420] ? __lock_acquire+0xb8a/0x1c90 [ 75.631479][ T6420] fuse_request_alloc+0x22/0x200 [ 75.631492][ T6420] fuse_get_req+0x748/0xfd0 [ 75.631509][ T6420] ? __pfx_fuse_get_req+0x10/0x10 [ 75.631522][ T6420] ? __pfx___schedule+0x10/0x10 [ 75.631537][ T6420] ? map_id_range_down+0x2bc/0x3b0 [ 75.631554][ T6420] __fuse_simple_request+0xb5/0xe10 [ 75.631572][ T6420] fuse_getxattr+0x255/0x420 [ 75.631585][ T6420] ? __pfx_fuse_getxattr+0x10/0x10 [ 75.631598][ T6420] ? find_held_lock+0x2b/0x80 [ 75.631613][ T6420] ? fuse_change_attributes_i+0x31e/0x920 [ 75.631632][ T6420] ? fuse_do_getattr+0x3d6/0x540 [ 75.631651][ T6420] ? __pfx_fuse_xattr_get+0x10/0x10 [ 75.631663][ T6420] fuse_xattr_get+0x7b/0xb0 [ 75.631676][ T6420] __vfs_getxattr+0x13d/0x1a0 [ 75.631691][ T6420] ? __pfx___vfs_getxattr+0x10/0x10 [ 75.631706][ T6420] ? __lock_acquire+0xb8a/0x1c90 [ 75.631723][ T6420] cap_inode_need_killpriv+0x40/0x60 [ 75.631735][ T6420] security_inode_need_killpriv+0x1b9/0x1e0 [ 75.631752][ T6420] file_remove_privs_flags+0x32d/0x580 [ 75.631771][ T6420] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 75.631790][ T6420] ? __pfx___might_resched+0x10/0x10 [ 75.631824][ T6420] ? generic_write_check_limits+0x1f1/0x290 [ 75.631841][ T6420] ? generic_write_checks+0x311/0x480 [ 75.631857][ T6420] ? __pfx_generic_write_checks+0x10/0x10 [ 75.631874][ T6420] kiocb_modified+0x8b/0x2c0 [ 75.631886][ T6420] fuse_file_write_iter+0x34d/0x990 [ 75.631903][ T6420] aio_write+0x3b9/0x910 [ 75.631920][ T6420] ? __pfx_aio_write+0x10/0x10 [ 75.631936][ T6420] ? __lock_acquire+0xb8a/0x1c90 [ 75.631955][ T6420] ? __might_fault+0xe3/0x190 [ 75.631969][ T6420] ? __might_fault+0x13b/0x190 [ 75.631987][ T6420] ? io_submit_one+0x1243/0x1df0 [ 75.632003][ T6420] io_submit_one+0x1243/0x1df0 [ 75.632021][ T6420] ? __lock_acquire+0xb8a/0x1c90 [ 75.632034][ T6420] ? __pfx_io_submit_one+0x10/0x10 [ 75.632055][ T6420] ? __might_fault+0xe3/0x190 [ 75.632069][ T6420] ? __might_fault+0x13b/0x190 [ 75.632086][ T6420] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 75.632103][ T6420] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 75.632122][ T6420] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 75.632140][ T6420] ? fput+0x9b/0xd0 [ 75.632155][ T6420] ? rcu_is_watching+0x12/0xc0 [ 75.632170][ T6420] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 75.632187][ T6420] __do_fast_syscall_32+0x7c/0x300 [ 75.632203][ T6420] do_fast_syscall_32+0x32/0x80 [ 75.632218][ T6420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.632232][ T6420] RIP: 0023:0xf703d579 [ 75.632241][ T6420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.632251][ T6420] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 75.632262][ T6420] RAX: ffffffffffffffda RBX: 00000000f73df000 RCX: 0000000000000001 [ 75.632269][ T6420] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.632275][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.632280][ T6420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.632286][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.632300][ T6420] [ 78.106816][ T6501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.177643][ T6504] blk_print_req_error: 123 callbacks suppressed [ 78.177661][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.184213][ T6504] buffer_io_error: 122 callbacks suppressed [ 78.184227][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.191063][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.194414][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.197735][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.201376][ T6504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 78.204736][ T6504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.215683][ T6504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 78.218556][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.222300][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.235719][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.239474][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.257353][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.261127][ T6504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 78.264369][ T6504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.272108][ T6504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 78.281261][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.285202][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.288896][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.291835][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.298483][ T6504] ldm_validate_partition_table(): Disk read failed. [ 78.302862][ T6504] Dev nbd0: unable to read RDB block 0 [ 78.309447][ T6504] nbd0: unable to read partition table [ 78.325768][ T6260] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.475647][ T6260] usb 6-1: Using ep0 maxpacket: 32 [ 78.480693][ T6260] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 78.483388][ T6260] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 78.487206][ T6260] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 78.490964][ T6260] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 78.494443][ T6260] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 78.498723][ T6260] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.504664][ T6260] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 78.507821][ T6260] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 78.511026][ T6260] usb 6-1: Product: syz [ 78.512824][ T6260] usb 6-1: Manufacturer: syz [ 78.514995][ T6260] usb 6-1: SerialNumber: syz [ 78.521954][ T6260] usb 6-1: config 0 descriptor?? [ 78.525508][ T6494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.533795][ T6260] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.541543][ T6260] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.799544][ T5985] usb 6-1: USB disconnect, device number 3 [ 78.807213][ T5985] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 78.820407][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 79.760863][ T6539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.934091][ T6545] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 79.948460][ T6545] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 80.348714][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 80.348731][ T40] audit: type=1326 audit(1761058322.031:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.363995][ T40] audit: type=1326 audit(1761058322.031:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.374480][ T40] audit: type=1326 audit(1761058322.041:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.382051][ T40] audit: type=1326 audit(1761058322.041:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.391031][ T40] audit: type=1326 audit(1761058322.041:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.401774][ T40] audit: type=1326 audit(1761058322.041:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.413761][ T40] audit: type=1326 audit(1761058322.051:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.424138][ T40] audit: type=1326 audit(1761058322.051:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.445864][ T40] audit: type=1326 audit(1761058322.051:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.466454][ T40] audit: type=1326 audit(1761058322.051:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.120" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 80.588577][ T6563] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 80.729493][ T6564] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 80.733229][ T6564] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 81.020602][ T6569] Zero length message leads to an empty skb [ 81.029577][ T6569] netlink: 'syz.2.126': attribute type 11 has an invalid length. [ 81.033247][ T6569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.126'. [ 81.090644][ T6571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'. [ 81.167531][ T2296] cfg80211: failed to load regulatory.db [ 81.379169][ T6579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.384348][ T6579] block device autoloading is deprecated and will be removed. [ 81.642520][ T6581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.646004][ T6581] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.659593][ T6581] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.673889][ T6581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.685126][ T6581] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.717265][ T6581] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.721644][ T6581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.724156][ T6581] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.731720][ T6581] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.736798][ T6581] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.739457][ T6581] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.745432][ T6581] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.754777][ T6596] ======================================================= [ 81.754777][ T6596] WARNING: The mand mount option has been deprecated and [ 81.754777][ T6596] and is ignored by this kernel. Remove the mand [ 81.754777][ T6596] option from the mount to silence this warning. [ 81.754777][ T6596] ======================================================= [ 81.771262][ T6596] random: crng reseeded on system resumption [ 81.785237][ T6596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.177874][ T6603] syz.0.138 (6603): /proc/6602/oom_adj is deprecated, please use /proc/6602/oom_score_adj instead. [ 82.183832][ T6603] tmpfs: Unknown parameter 'usrquotainiband/rdma_cm' [ 82.319779][ T6607] cgroup: fork rejected by pids controller in /syz2 [ 82.555168][ T6193] bond0: (slave syz_tun): Releasing backup interface [ 82.644100][ T6613] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 83.156851][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.161557][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.166382][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.170683][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.173585][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.368432][ T6623] chnl_net:caif_netlink_parms(): no params data found [ 83.523359][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.525832][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.528259][ T6623] bridge_slave_0: entered allmulticast mode [ 83.531362][ T6623] bridge_slave_0: entered promiscuous mode [ 83.534990][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.538180][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.540992][ T6623] bridge_slave_1: entered allmulticast mode [ 83.543716][ T6623] bridge_slave_1: entered promiscuous mode [ 83.555938][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.603265][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.614357][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.686469][ T6623] team0: Port device team_slave_0 added [ 83.692077][ T6623] team0: Port device team_slave_1 added [ 83.762414][ T6642] input: syz0 as /devices/virtual/input/input10 [ 83.770716][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.774442][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.789105][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.795140][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.795154][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.795175][ T6623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.796116][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.805768][ T5953] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.893133][ T6623] hsr_slave_0: entered promiscuous mode [ 83.893578][ T6623] hsr_slave_1: entered promiscuous mode [ 83.893870][ T6623] debugfs: 'hsr0' already exists in 'hsr' [ 83.893882][ T6623] Cannot create hsr debugfs directory [ 84.010176][ T6623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.173039][ T6623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.247864][ T6623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.385314][ T6623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.538622][ T6623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.554640][ T6623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.568796][ T6623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.577762][ T6623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.654935][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.670963][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.681441][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.684426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.693315][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.696441][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.702630][ T6641] ubi31: attaching mtd0 [ 84.705282][ T6641] ubi31: scanning is finished [ 84.706897][ T6641] ubi31: empty MTD device detected [ 84.730830][ T6623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.765732][ T6024] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 84.844153][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.850448][ T6641] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 84.871841][ T6623] veth0_vlan: entered promiscuous mode [ 84.877649][ T6623] veth1_vlan: entered promiscuous mode [ 84.892517][ T6623] veth0_macvtap: entered promiscuous mode [ 84.896338][ T6623] veth1_macvtap: entered promiscuous mode [ 84.908691][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.926705][ T6024] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 84.932609][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.935311][ T6024] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.937780][ T6024] usb 6-1: can't read configurations, error -61 [ 84.943323][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.947814][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951656][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.955536][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.963701][ T6664] KVM: debugfs: duplicate directory 6664-5 [ 84.999737][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.002820][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.027458][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.031090][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.075693][ T6024] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 85.212814][ T6675] kvm: pic: level sensitive irq not supported [ 85.213302][ T6675] kvm: pic: non byte read [ 85.220716][ T6675] kvm: pic: level sensitive irq not supported [ 85.221063][ T6675] kvm: pic: non byte read [ 85.226890][ T6675] kvm: pic: level sensitive irq not supported [ 85.227145][ T6675] kvm: pic: non byte read [ 85.233392][ T6675] kvm: pic: level sensitive irq not supported [ 85.233787][ T6675] kvm: pic: non byte read [ 85.236353][ T6024] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 85.237080][ T5949] Bluetooth: hci1: command tx timeout [ 85.238420][ T6675] kvm: pic: level sensitive irq not supported [ 85.239610][ T6024] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.239632][ T6024] usb 6-1: can't read configurations, error -61 [ 85.239842][ T6024] usb usb6-port1: attempt power cycle [ 85.255804][ T6675] kvm: pic: non byte read [ 85.258082][ T6675] kvm: pic: level sensitive irq not supported [ 85.258325][ T6675] kvm: pic: non byte read [ 85.262911][ T6675] kvm: pic: level sensitive irq not supported [ 85.263230][ T6675] kvm: pic: non byte read [ 85.585854][ T6024] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 85.594176][ T6690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 85.606863][ T6024] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 85.615020][ T6024] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.619996][ T6024] usb 6-1: can't read configurations, error -61 [ 85.639224][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.755741][ T6024] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 85.779207][ T6024] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 85.785285][ T6024] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.788415][ T6024] usb 6-1: can't read configurations, error -61 [ 85.790997][ T6024] usb usb6-port1: unable to enumerate USB device [ 85.875731][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.875839][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.315800][ T5945] Bluetooth: hci1: command tx timeout [ 87.716313][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.955837][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.965834][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.165991][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 88.280472][ T6754] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 88.280514][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.285340][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 88.355627][ T6754] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 89.395725][ T5945] Bluetooth: hci1: command tx timeout [ 89.551496][ T6755] vhci_hcd: connection closed [ 89.566831][ T67] vhci_hcd: stop threads [ 89.571914][ T67] vhci_hcd: release socket [ 89.586157][ T67] vhci_hcd: disconnect device [ 89.635947][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 89.639658][ T24] usb 37-1: enqueue for inactive port 0 [ 89.752684][ T6788] overlayfs: missing 'lowerdir' [ 89.754976][ T6789] overlayfs: missing 'lowerdir' [ 89.758964][ T24] vhci_hcd: vhci_device speed not set [ 90.035883][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.204751][ T6805] overlayfs: missing 'workdir' [ 91.206636][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 91.206647][ T40] audit: type=1326 audit(1761058333.061:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 91.224960][ T40] audit: type=1326 audit(1761058333.071:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 91.234670][ T40] audit: type=1326 audit(1761058333.071:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 91.242557][ T40] audit: type=1326 audit(1761058333.071:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 91.255693][ T40] audit: type=1326 audit(1761058333.071:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 91.266856][ T40] audit: type=1326 audit(1761058333.071:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 91.276625][ T40] audit: type=1326 audit(1761058333.071:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 91.286832][ T40] audit: type=1326 audit(1761058333.071:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 91.288215][ T6767] syz.3.182 (6767) used greatest stack depth: 20088 bytes left [ 91.295213][ T40] audit: type=1326 audit(1761058333.071:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 91.295258][ T40] audit: type=1326 audit(1761058333.071:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 91.347769][ T6811] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 91.355128][ T6815] process 'syz.2.195' launched './file1' with NULL argv: empty string added [ 91.475821][ T5945] Bluetooth: hci1: command tx timeout [ 92.173242][ T6841] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 92.410063][ T6850] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.608951][ T6892] netlink: 300 bytes leftover after parsing attributes in process `syz.0.217'. [ 93.812742][ T6893] input: syz0 as /devices/virtual/input/input11 [ 94.189501][ T6896] netlink: 296 bytes leftover after parsing attributes in process `syz.0.217'. [ 94.192381][ T6896] openvswitch: netlink: Flow key attr not present in new flow. [ 94.551288][ T6909] dlm: no locking on control device [ 95.032993][ T6928] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 95.033020][ T6928] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.037778][ T6928] vhci_hcd vhci_hcd.0: Device attached [ 95.325820][ T53] usb 44-1: SetAddress Request (2) to port 0 [ 95.331831][ T53] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 95.372957][ T6940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.229'. [ 95.407914][ T6944] tmpfs: Bad value for 'mpol' [ 95.449350][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 95.455475][ T6947] gtp0: entered promiscuous mode [ 95.457711][ T6947] gtp0: entered allmulticast mode [ 95.528453][ T6949] netlink: 300 bytes leftover after parsing attributes in process `syz.0.233'. [ 95.534488][ T6949] input: syz0 as /devices/virtual/input/input12 [ 95.543799][ T6930] vhci_hcd: connection reset by peer [ 95.547368][ T13] vhci_hcd: stop threads [ 95.548725][ T13] vhci_hcd: release socket [ 95.550616][ T13] vhci_hcd: disconnect device [ 95.667609][ T6951] netlink: 296 bytes leftover after parsing attributes in process `syz.0.233'. [ 95.670549][ T6951] openvswitch: netlink: Flow key attr not present in new flow. [ 95.914878][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.917304][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 95.920539][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.922839][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 95.930350][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.932737][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 95.936353][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.939293][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 95.946988][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.949483][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 95.952174][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.954468][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 95.961741][ T6953] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 95.961741][ T6953] Ue[%#s' [ 95.963468][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.971814][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 95.975310][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.977962][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 95.983834][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.986356][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 95.988789][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.991102][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 95.998531][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.001010][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.004139][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.007002][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.012740][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.015111][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.017854][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.020402][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.026341][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.028795][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.031313][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.033573][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.042140][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.044606][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.047606][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.050056][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.056607][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.059093][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.065179][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.067530][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.075431][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.078952][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.081892][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.084201][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.089888][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.092280][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.094821][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.097527][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.103016][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.105330][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.110855][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.118673][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.129623][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.135397][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.138548][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.141253][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.147004][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.149332][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.151735][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.154021][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.160330][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.162626][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.164969][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.167815][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.173205][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.175515][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.178915][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.181374][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.187124][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.189533][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.192018][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.194525][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.200727][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.203552][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.216458][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.218834][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.224338][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.226890][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.229431][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.231834][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.237542][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.240261][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.243250][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.245488][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.251317][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.253861][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.260105][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.262464][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.268031][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.283222][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.285939][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.288190][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.293263][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.295882][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.298330][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.300586][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.305376][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.307796][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.311189][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.313633][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.319403][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.321693][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.324112][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.326607][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.332291][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.334713][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.337266][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.339655][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.344512][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.347781][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.350461][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.353116][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.359023][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.361391][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.363834][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.366239][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.371142][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.373351][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.375855][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.378177][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.383138][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.385514][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.388355][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.390834][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.396355][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.398612][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.401070][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.403377][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 96.409669][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.412124][ T6954] UDF-fs: Scanning with blocksize 2048 failed [ 96.414592][ T6954] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 96.417096][ T6954] UDF-fs: Scanning with blocksize 4096 failed [ 97.193346][ T6978] netlink: 14 bytes leftover after parsing attributes in process `syz.3.244'. [ 97.294527][ T6978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.299903][ T6978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.303859][ T6978] bond0 (unregistering): Released all slaves [ 97.468800][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 97.517082][ T6991] 9pnet_fd: Insufficient options for proto=fd [ 97.568464][ T6986] bpf: Bad value for 'gid' [ 97.745511][ T7002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 97.747998][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.750882][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 97.778305][ T7002] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 97.786237][ T6967] comedi comedi0: reset error (fatal) [ 98.721261][ T7003] vhci_hcd: connection closed [ 98.793546][ T83] vhci_hcd: stop threads [ 98.796640][ T83] vhci_hcd: release socket [ 98.801762][ T83] vhci_hcd: disconnect device [ 99.188566][ T7018] loop5: detected capacity change from 0 to 7 [ 99.194756][ T6029] Dev loop5: unable to read RDB block 7 [ 99.201070][ T6029] loop5: AHDI p1 p2 [ 99.202374][ T6029] loop5: partition table partially beyond EOD, truncated [ 99.206337][ T6029] loop5: p1 start 1702000233 is beyond EOD, truncated [ 99.273981][ T7018] Dev loop5: unable to read RDB block 7 [ 99.276354][ T7018] loop5: AHDI p1 p2 [ 99.278000][ T7018] loop5: partition table partially beyond EOD, truncated [ 99.285170][ T7018] loop5: p1 start 1702000233 is beyond EOD, truncated [ 99.404105][ T7031] block nbd3: NBD_DISCONNECT [ 99.447342][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 99.447403][ T40] audit: type=1326 audit(1761058341.301:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.259" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 99.523514][ T7039] netlink: set zone limit has 8 unknown bytes [ 100.324038][ T7051] "syz.1.267" (7051) uses obsolete ecb(arc4) skcipher [ 100.436116][ T53] usb 44-1: device descriptor read/8, error -110 [ 100.643661][ T6024] vhci_hcd: vhci_device speed not set [ 100.650617][ T7063] openvswitch: netlink: Missing valid actions attribute. [ 100.653632][ T7063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.716890][ T7065] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.228583][ T7075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.347245][ T7075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.498639][ T7075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.580732][ T7075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.661096][ T7084] syz.1.275 uses obsolete (PF_INET,SOCK_PACKET) [ 253.992470][T10525] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1276'. [ 254.235794][ T6013] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 254.395658][ T6013] usb 9-1: Using ep0 maxpacket: 8 [ 254.401227][ T6013] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.405868][ T6013] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.411289][ T6013] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.411694][T10533] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1278'. [ 254.415349][ T6013] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.420940][T10533] input: syz0 as /devices/virtual/input/input36 [ 254.425753][ T6013] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.436330][ T6013] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.553536][T10535] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1278'. [ 254.556701][T10535] openvswitch: netlink: Flow key attr not present in new flow. [ 254.711734][ T6013] usb 9-1: usb_control_msg returned -71 [ 254.713534][ T6013] usbtmc 9-1:16.0: can't read capabilities [ 254.717360][T10522] tipc: Resetting bearer [ 254.718801][ T6013] usb 9-1: USB disconnect, device number 2 [ 254.731417][T10522] tipc: Disabling bearer [ 255.242481][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.152781][T10560] syz_tun: entered allmulticast mode [ 256.214005][T10559] syz_tun: left allmulticast mode [ 256.774316][T10574] netlink: 'syz.3.1293': attribute type 21 has an invalid length. [ 257.402965][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'. [ 258.257432][T10613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.328681][T10613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.422138][T10613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.428757][T10627] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 258.460898][T10627] bond0: (slave geneve4): making interface the new active one [ 258.465041][T10627] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 258.468457][ T9232] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 258.471223][ T9232] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 258.473779][T10627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1305'. [ 258.473804][ T9232] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 258.482347][ T9232] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 258.490603][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.505313][T10613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.612709][ T9239] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.620035][ T9239] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.648689][ T9239] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.662730][ T9239] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.754466][T10680] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1318'. [ 259.879950][T10686] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1318'. [ 259.884487][T10686] openvswitch: netlink: Flow key attr not present in new flow. [ 260.485473][T10697] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 260.508428][T10697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.546725][T10697] bond3: (slave veth7): Enslaving as an active interface with a down link [ 260.566645][T10697] bond3: (slave dummy0): making interface the new active one [ 260.571499][T10697] dummy0: entered promiscuous mode [ 260.577238][T10697] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 260.584689][T10697] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 260.589496][T10697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1323'. [ 260.594622][T10697] bond3: (slave dummy0): Releasing active interface [ 260.680190][T10708] random: crng reseeded on system resumption [ 261.013512][T10724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.017944][T10724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.020886][T10724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.023850][T10724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.026983][T10724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.030001][T10724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 261.032831][T10724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.036217][T10724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 261.039165][T10724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.042689][T10724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.046609][T10724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.049620][T10724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.052327][T10724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.055209][T10724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 261.057821][T10724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.060930][T10724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 261.064211][T10724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.067623][T10724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.070594][T10724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.073453][T10724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.077507][T10724] ldm_validate_partition_table(): Disk read failed. [ 261.080508][T10724] Dev nbd0: unable to read RDB block 0 [ 261.084068][T10724] nbd0: unable to read partition table [ 261.091704][T10726] ldm_validate_partition_table(): Disk read failed. [ 261.094870][T10726] Dev nbd0: unable to read RDB block 0 [ 261.097998][T10726] nbd0: unable to read partition table [ 261.103515][T10724] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 261.112290][T10720] input: syz0 as /devices/virtual/input/input38 [ 261.128368][T10728] ldm_validate_partition_table(): Disk read failed. [ 261.132151][T10728] Dev nbd0: unable to read RDB block 0 [ 261.133189][T10728] nbd0: unable to read partition table [ 261.415670][ T7005] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 261.419780][ T5351] ldm_validate_partition_table(): Disk read failed. [ 261.424155][ T5351] Dev nbd0: unable to read RDB block 0 [ 261.429037][ T5351] nbd0: unable to read partition table [ 261.446818][ T5351] ldm_validate_partition_table(): Disk read failed. [ 261.451174][ T5351] Dev nbd0: unable to read RDB block 0 [ 261.457101][ T5351] nbd0: unable to read partition table [ 261.485931][ T9238] bridge_slave_1: left allmulticast mode [ 261.489310][ T9238] bridge_slave_1: left promiscuous mode [ 261.493780][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.509930][ T9238] bridge_slave_0: left allmulticast mode [ 261.512880][ T9238] bridge_slave_0: left promiscuous mode [ 261.518574][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.566639][ T7005] usb 9-1: too many configurations: 120, using maximum allowed: 8 [ 261.571236][ T7005] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 261.573677][ T7005] usb 9-1: can't read configurations, error -61 [ 261.600262][T10739] overlayfs: failed to resolve './file1': -2 [ 261.711656][ T7005] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 261.853616][T10747] openvswitch: netlink: Missing key (keys=40, expected=100) [ 261.886505][ T7005] usb 9-1: too many configurations: 120, using maximum allowed: 8 [ 261.897050][ T7005] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 261.900250][ T7005] usb 9-1: can't read configurations, error -61 [ 261.903324][ T7005] usb usb9-port1: attempt power cycle [ 261.918930][ T9238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.923476][ T9238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.928688][ T9238] bond0 (unregistering): Released all slaves [ 262.280660][ T9238] hsr_slave_0: left promiscuous mode [ 262.284046][ T9238] hsr_slave_1: left promiscuous mode [ 262.287025][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.289783][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.294847][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.298029][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.335066][ T9238] veth1_macvtap: left promiscuous mode [ 262.355909][ T9238] veth0_macvtap: left promiscuous mode [ 262.445788][ T7005] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 262.475043][ T7005] usb 9-1: too many configurations: 120, using maximum allowed: 8 [ 262.492238][ T7005] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 262.495011][ T7005] usb 9-1: can't read configurations, error -61 [ 262.625843][ T7005] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 262.655913][ T7005] usb 9-1: too many configurations: 120, using maximum allowed: 8 [ 262.663803][ T7005] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 262.666614][ T7005] usb 9-1: can't read configurations, error -61 [ 262.669314][ T7005] usb usb9-port1: unable to enumerate USB device [ 262.952908][ T9238] team0 (unregistering): Port device team_slave_1 removed [ 263.026842][ T9238] team0 (unregistering): Port device team_slave_0 removed [ 264.976180][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 264.982028][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 264.985353][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 265.253613][T10812] tmpfs: Bad value for 'mpol' [ 265.269669][T10804] binder: 10795:10804 ioctl 0 80000040 returned -22 [ 265.329978][ T9209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.332452][ T9209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.480045][T10840] tmpfs: Bad value for 'mpol' [ 267.253882][T10846] 9pnet_fd: Insufficient options for proto=fd [ 267.610326][ T7005] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 267.618868][ T7005] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 267.644045][T10861] wireguard0: entered promiscuous mode [ 267.644062][T10861] wireguard0: entered allmulticast mode [ 268.135522][T10876] loop7: detected capacity change from 0 to 7 [ 268.139279][T10876] buffer_io_error: 310 callbacks suppressed [ 268.139290][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.144132][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.148536][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.151790][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.154888][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.159294][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.162227][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.164758][T10876] ldm_validate_partition_table(): Disk read failed. [ 268.167632][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.170379][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.173027][T10876] Buffer I/O error on dev loop7, logical block 0, async page read [ 268.175685][T10876] Dev loop7: unable to read RDB block 0 [ 268.178796][T10876] loop7: unable to read partition table [ 268.181432][T10876] loop7: partition table beyond EOD, truncated [ 268.184161][T10876] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 268.239113][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 268.266084][T10882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.272135][T10882] bond0: (slave rose0): Enslaving as an active interface with an up link [ 268.306622][T10885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.310049][T10889] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1383'. [ 268.316207][T10889] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 268.417457][T10885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.535956][T10885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.624004][T10885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.762505][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 268.766375][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 268.767869][T10911] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 268.867209][ T9232] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.870838][ T9232] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.874336][ T9232] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.886331][ T9232] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.489934][T10931] netlink: 'syz.3.1392': attribute type 29 has an invalid length. [ 269.493306][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 269.561240][T10937] syz.0.1394 (10937): attempted to duplicate a private mapping with mremap. This is not supported. [ 461.636918][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 461.639419][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 461.644539][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.648167][ C3] Call Trace: [ 461.649348][ C3] [ 461.650347][ C3] dump_stack_lvl+0x3d/0x1f0 [ 461.651878][ C3] vpanic+0x640/0x6f0 [ 461.653182][ C3] ? __queue_work+0xd03/0x1160 [ 461.654713][ C3] panic+0xca/0xd0 [ 461.655952][ C3] ? __pfx_panic+0x10/0x10 [ 461.657413][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 461.659053][ C3] check_panic_on_warn+0xab/0xb0 [ 461.660745][ C3] __warn+0xf6/0x3c0 [ 461.662013][ C3] ? __queue_work+0xd03/0x1160 [ 461.663560][ C3] report_bug+0x3c3/0x580 [ 461.664997][ C3] ? __queue_work+0xd03/0x1160 [ 461.666566][ C3] handle_bug+0x184/0x210 [ 461.667964][ C3] exc_invalid_op+0x17/0x50 [ 461.669457][ C3] asm_exc_invalid_op+0x1a/0x20 [ 461.671016][ C3] RIP: 0010:__queue_work+0xd03/0x1160 [ 461.672778][ C3] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 3e 42 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 6f bf 38 00 90 0f 0b 90 e9 b4 f5 ff [ 461.678769][ C3] RSP: 0018:ffffc900005e8be8 EFLAGS: 00010082 [ 461.680712][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3e58 [ 461.683203][ C3] RDX: ffff88801daf8000 RSI: ffffffff817b3e65 RDI: 0000000000000001 [ 461.685757][ C3] RBP: ffff88806ee80978 R08: 0000000000000001 R09: 0000000000000000 [ 461.688789][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000bd18f [ 461.691817][ C3] R13: 0000000000000101 R14: ffffffff81840be0 R15: ffff88804d748178 [ 461.694959][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.697403][ C3] ? __warn_printk+0x198/0x350 [ 461.699391][ C3] ? __warn_printk+0x1a5/0x350 [ 461.701263][ C3] ? __queue_work+0xd02/0x1160 [ 461.703122][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.705405][ C3] call_timer_fn+0x19a/0x620 [ 461.707202][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 461.709202][ C3] ? __run_timers+0x559/0x960 [ 461.711015][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.713268][ C3] __run_timers+0x569/0x960 [ 461.715003][ C3] ? __pfx___run_timers+0x10/0x10 [ 461.716881][ C3] run_timer_base+0x114/0x190 [ 461.718710][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 461.720735][ C3] ? rcu_is_watching+0x12/0xc0 [ 461.722589][ C3] run_timer_softirq+0x1a/0x40 [ 461.724448][ C3] handle_softirqs+0x219/0x8e0 [ 461.726351][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 461.728402][ C3] __irq_exit_rcu+0x109/0x170 [ 461.730228][ C3] irq_exit_rcu+0x9/0x30 [ 461.731888][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 461.734075][ C3] [ 461.735239][ C3] [ 461.736456][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.738764][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 461.741038][ C3] Code: 17 76 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 53 25 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 461.748382][ C3] RSP: 0018:ffffc9000048fde8 EFLAGS: 00000286 [ 461.750798][ C3] RAX: 000000000094194d RBX: 0000000000000003 RCX: ffffffff8b64d2a9 [ 461.753937][ C3] RDX: 0000000000000000 RSI: ffffffff8db035cd RDI: ffffffff8bf1e340 [ 461.757050][ C3] RBP: ffffed1003b5f000 R08: 0000000000000001 R09: ffffed10056a6655 [ 461.760237][ C3] R10: ffff88802b5332ab R11: 0000000000000001 R12: 0000000000000003 [ 461.763471][ C3] R13: ffff88801daf8000 R14: ffffffff908370d0 R15: 0000000000000000 [ 461.766481][ C3] ? ct_kernel_exit+0x139/0x190 [ 461.768108][ C3] default_idle+0x13/0x20 [ 461.769642][ C3] default_idle_call+0x6c/0xb0 [ 461.771277][ C3] do_idle+0x38d/0x500 [ 461.772655][ C3] ? __pfx_do_idle+0x10/0x10 [ 461.774295][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 461.776115][ C3] cpu_startup_entry+0x4f/0x60 [ 461.777750][ C3] start_secondary+0x21d/0x2b0 [ 461.779390][ C3] ? __pfx_start_secondary+0x10/0x10 [ 461.781102][ C3] common_startup_64+0x13e/0x148 [ 461.782747][ C3] [ 461.784664][ C3] Kernel Offset: disabled [ 461.786120][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:58:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ab8115 RBX=0000000000000000 RCX=ffffffff8b64d2a9 RDX=0000000000000000 RSI=ffffffff8db035cd RDI=ffffffff8bf1e340 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908370d0 R15=0000000000000000 RIP=ffffffff8b64bd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056de199c CR3=00000000569b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000110ef3d RBX=0000000000000001 RCX=ffffffff8b64d2a9 RDX=ffffed1005666656 RSI=ffffffff8db035cd RDI=ffffffff8bf1e340 RBP=ffffed1003b5b490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dada480 R14=ffffffff908370d0 R15=0000000000000000 RIP=ffffffff8b64bd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000567a999c CR3=000000006488b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=ffff8880416a0360 RCX=0000000000000002 RDX=ffff88802647c900 RSI=ffffc90000415134 RDI=0000000000000005 RBP=ffff888023129028 RSP=ffffc90003aff070 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000002 R11=0000000000000001 R12=ffffc90000415100 R13=ffff8880416a03bc R14=ffff8880416a0368 R15=0000000000000002 RIP=ffffffff863705ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8b02987300 ffffffff 00c00000 GS =0000 ffff8880979d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000565092e17f40 CR3=0000000050000000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=9ab9919f0b0ff84b 4c64a7ef3c1a0846 9ab9919f0b0ff84b 4c64a7ef3c1a0846 9ab9919f0b0ff84b 4c64a7ef3c1a0846 9ab9919f0b0ff84b 4c64a7ef3c1a0846 ZMM18=7037d2a0b977c079 64de1a91a70dbbfb 7037d2a0b977c079 64de1a91a70dbbfb 7037d2a0b977c079 64de1a91a70dbbfb 7037d2a0b977c079 64de1a91a70dbbfb ZMM19=0416000000000000 0000000000000004 0416000000000000 0000000000000003 0416000000000000 0000000000000002 0416000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8408001380020fff ffffff0200020a01 41f400703901ffff fffffffffffff908 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 138003007a797301 ffffffffffffffff f708000300080004 0800200800060171 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8800080004800201 c70800060140ee00 30656c69662f2e01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffff0409f0 030fffffffff0409 e00300080009d803 00080009d0030fff ZMM25=64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 64de1a9164de1a91 ZMM26=b977c079b977c079 b977c079b977c079 b977c079b977c079 b977c079b977c079 b977c079b977c079 b977c079b977c079 b977c079b977c079 b977c079b977c079 ZMM27=7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 7037d2a07037d2a0 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0116000001160000 0116000001160000 0116000001160000 0116000001160000 0116000001160000 0116000001160000 0116000001160000 0116000001160000 info registers vcpu 3 CPU#3 RAX=0000000000000045 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e2365 RDI=ffffffff9adfaec0 RBP=ffffffff9adfae80 RSP=ffffc900005e8428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000045 R14=ffffffff9adfae80 R15=ffffffff852e2300 RIP=ffffffff852e238f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ad8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ea0bff8 CR3=00000000569b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000