last executing test programs: 7m0.592616898s ago: executing program 32 (id=459): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = syz_open_dev$sg(&(0x7f0000001600), 0xfffffffe, 0x40042) write$binfmt_aout(r1, 0x0, 0x125) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0xfffffffffffffefd, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="aa1aea424b14c5958be8fcbbb48d3ab78dbe14e55bdfc03b94a740548f574633fcd7e4ef36afe78eb2d2970b537df9b708cb5c8ebb279f5c8ad8fc8c751602be7e64797f009e1bfed40ce8dd2049efa4604c37081d984854e3561e984c40c8e1b5e2cf3732fd3f9d8c38a0d7307be6f60a84345e426b29265bec406a7b32ecf4148828f352c69b2b6bfa0d130df8544aa075fbbddc4c55a308a7d30b7e605d3168e6d479dea859c02898cbbdfa73768d34e8596e5f2caa51247e4d00"/202, @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x428003, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xc0800, 0x2, 0x36}, 0xffffffffffffff8a) 6m17.870928227s ago: executing program 33 (id=858): r0 = socket(0xa, 0x5, 0x0) inotify_init1(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$get_persistent(0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r6, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0xfd, 0x0, 0x2}, 'syz0\x00', 0x11}) ioctl$UI_DEV_CREATE(r7, 0x5501) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x10, 0x84, 0x7, @local}], 0x10, 0x40048d5}, 0x8050) 6m14.519700756s ago: executing program 34 (id=883): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x28) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f000000000000000000000000000020"], 0x128}}, 0x0) 6m11.521051322s ago: executing program 35 (id=895): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 6m8.0044147s ago: executing program 36 (id=918): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5250, 0x8a0) ioctl$BLKRAGET(r0, 0x1263, 0x0) 5m55.636065454s ago: executing program 37 (id=1014): r0 = socket$unix(0x1, 0x2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) pwrite64(r1, 0x0, 0x0, 0x8) r2 = semget$private(0x0, 0x3, 0x603) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x135, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="f4a415445ec518d7e569b0753778f1be91b889d08fb8359b94a2c274c05a6acda4ee7eec7e4230f74f5aebfe8e91653ae728b513ff196936cb0b5ce3ed4705475f01fa2d142100da5203b4750eeebf867e9c", @ANYRES64=0x0], 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x104, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_skbedit={0xec, 0x8, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe8, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xfff3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x40000000, 0x3, 0xb33b, 0xdc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffee, 0xfff3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x7e, 0x6, "c44da608000000000000000c055eb74fcb9876d5e1e153fd9f38aa4729603452ecc9a546320eed444ba893b8102f785410c90f4c73c627af740cb8cff62b3222b70f92204d816384ada1c0a10734347a446bcca90d512da76b01858fa7fb2ed6416b1308dd7d04248bb90a27e2453516a2e8e30ac2b23475605c"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x104}}, 0x0) semctl$SETVAL(r2, 0x4, 0x10, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r8, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/81, 0x51}], 0x6, &(0x7f00000004c0)=""/226, 0xe2}, 0x6}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/107, 0x6b}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/186, 0xba}], 0x3, &(0x7f0000000840)=""/37, 0x25}, 0xb2}, {{&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/120, 0x78}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000ac0)=""/220, 0xdc}], 0x4, &(0x7f0000000c00)=""/136, 0x88}}], 0x3, 0x2, 0x0) 5m40.769032012s ago: executing program 38 (id=1135): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x50a80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x0, 0x6, 0x6, r1}) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000180)=0x3000000, 0x4) (async) r4 = dup(r2) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80044121, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='/dev/ttyS3\x00', &(0x7f0000000240)='/dev/ttyS3\x00', 0x0) (async) r5 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000280)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x627}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={r6, 0x0, 0x1000, 0x6, 0xe, 0x200}, 0x14) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) (async) r7 = openat$vmci(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000400)=0x4) (async) r8 = epoll_create1(0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r7, 0x40109441, &(0x7f0000000440)={0x3c, 0x4, 0x7f}) (async) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000480)=""/64, &(0x7f00000004c0)=0x40) (async) socket$key(0xf, 0x3, 0x2) (async) socket(0x2b, 0x6, 0xd1) (async) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000001500)={0x28, 0x0, 0x0, r5, &(0x7f0000000500)="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", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r8, 0x4}}, 0x1) (async) fcntl$addseals(r7, 0x409, 0x3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001580)={'veth1_to_team\x00', &(0x7f0000001540)=@ethtool_link_settings={0x4d, 0x50e48ba9, 0x6, 0x6, 0x12, 0x10, 0x9, 0xd, 0x8, 0x88, [0x6, 0x4f, 0x3, 0x9, 0x3, 0x3, 0x3, 0x2], [0x35cb, 0x8]}}) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) (async) r10 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001600), 0x2042, 0x0) getsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000001640)={@private, @empty, @private}, &(0x7f0000001680)=0xc) (async) io_uring_enter(r9, 0x63f3, 0x415a, 0x62, &(0x7f00000016c0)={[0x8, 0xfffffff7]}, 0x8) 4m56.063118655s ago: executing program 39 (id=1337): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f00000d2000/0x1000)=nil, 0x1000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/163, 0x9c}], 0x42, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0x1, 0x10000, 0x14000, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2f}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xfffffffffeffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffeff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x4080000}, 0x4004) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0000002ba8", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000001900)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a49767cf5a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459", 0x55}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x3204}}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, &(0x7f0000000180)=""/223, 0xdf) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4900, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) fspick(r8, &(0x7f00000000c0)='.\x00', 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30000000000800034000000007"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2414}]}}]}, 0x3c}}, 0x2000400c) 4m42.179980141s ago: executing program 40 (id=1505): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000b80)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) 4m40.889621612s ago: executing program 41 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) 4m40.843377649s ago: executing program 42 (id=1520): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48002}, 0x404a840) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) 4m22.184471457s ago: executing program 4 (id=1621): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x51}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x3, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0xe, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70000, 0x50000, 0xc, 0x3, 0x0, 0x6, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m21.716150016s ago: executing program 4 (id=1623): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0xfffffffd}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 4m21.232884652s ago: executing program 4 (id=1624): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 4m21.123881658s ago: executing program 4 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x1]}}) 4m20.286155339s ago: executing program 4 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 4m19.931311433s ago: executing program 4 (id=1630): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x51}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x3, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0xe, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70000, 0x50000, 0xc, 0x3, 0x0, 0x6, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m19.781478101s ago: executing program 43 (id=1630): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x51}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x3, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0xe, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70000, 0x50000, 0xc, 0x3, 0x0, 0x6, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m57.64842668s ago: executing program 3 (id=1777): r0 = socket$inet6(0xa, 0x80000, 0x2000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newtfilter={0x8a4, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r2, {0xfffd, 0x2}, {0x0, 0xfff3}, {0xfff1, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x878, 0x2, [@TCA_BPF_POLICE={0x860, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0xf, 0x1, 0x6, {0x2, 0x0, 0x0, 0x3, 0xc342, 0x4}, {0xff, 0x1, 0x7, 0x4, 0x266f, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x564c21b7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x7fffffff, 0x2, 0x218, 0x1, 0x7f, 0x6, 0x19, 0x200, 0x9, 0x3049, 0x8001, 0x5, 0x5, 0x61c, 0x80, 0x10001, 0x2, 0x78, 0xfffffffd, 0x4, 0x61a, 0x2, 0x8, 0x2, 0x9, 0x6, 0x1, 0x9, 0x6, 0x5, 0x2, 0x40, 0x6, 0x8, 0x5, 0x4, 0x8, 0x5, 0xfff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0xffffffff, 0x1, 0x3, 0x8, 0xffff, 0x8, 0x1, 0x2, 0x2, 0x1, 0xfffffffe, 0x5, 0x77, 0x3, 0x95f5, 0x81, 0x9, 0x2, 0x81, 0x3, 0x0, 0x4, 0x2, 0x10, 0x1, 0x3, 0x0, 0x3, 0x9, 0x10, 0x6, 0x2, 0x0, 0x5, 0x7f, 0x1, 0x5, 0x8000, 0x6, 0x2, 0x80, 0x7, 0x3, 0x2, 0x3, 0x3, 0x2, 0xe, 0x7fff, 0x401, 0xe74, 0xfff, 0x1, 0x0, 0x9, 0x5, 0x300000, 0x1, 0x6, 0x2, 0x0, 0x8001, 0x2, 0x97, 0x1, 0xf, 0x4a, 0xc68, 0xdd, 0x908b, 0x6, 0x0, 0x5, 0x7, 0x80, 0x6, 0x8, 0x2, 0x6, 0xfffffff8, 0x6, 0x9, 0x3, 0x10, 0x7, 0x2, 0x5, 0xfffffff8, 0x7, 0xf6a, 0x7f, 0xc, 0xe39, 0x80, 0x7, 0xf, 0x7, 0xb306, 0x3ff, 0x2, 0x8910182, 0x2, 0x8, 0x9, 0x7, 0x7, 0x300000, 0x5, 0x7fffffff, 0x9, 0x9, 0x78000000, 0x7fffffff, 0x9, 0x1, 0x3ff, 0x8, 0x6, 0x80000000, 0x5, 0x8000, 0xdab6, 0x7, 0xb2, 0x1, 0x0, 0x101, 0xa6a3, 0x101, 0x10000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x0, 0x2, 0x5, 0x9, 0x8, 0x0, 0x180, 0x6, 0x9, 0x2, 0xffff, 0x40, 0x9, 0x5, 0x2, 0x8, 0x7, 0x8, 0x5, 0x3, 0x8, 0x1, 0x2, 0x80000001, 0x8, 0x9, 0x10001, 0x0, 0x7fffffff, 0xc2, 0x1, 0x12d49b0f, 0x8, 0x4, 0xf, 0x7f, 0x6, 0x9311, 0x8, 0x300, 0x8001, 0x4, 0x2, 0x80, 0x5, 0x64, 0x8, 0x7, 0x1ca, 0x7, 0x0, 0x7, 0x2, 0x7fff, 0x0, 0x6, 0x0, 0x766, 0x5, 0x5, 0x1, 0x80000001, 0x8, 0x0, 0x6, 0xffff, 0x332c, 0x0, 0x80000001, 0x1, 0x9, 0x0, 0x3ff, 0xfffffffc, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0xe3ac, 0x200, 0x7, 0x5, 0x0, 0x80000000, 0x1, 0x1, 0x7, 0xffff0000, 0x1, 0x3, 0x200, 0x7, 0x5, 0x0, 0x6, 0x9ea, 0x1, 0x3b7, 0x9f7, 0xffffffff, 0x2, 0x7ff, 0x1, 0x80000001, 0x4, 0x0, 0x4ec0, 0x6, 0x8c, 0x3, 0xa0, 0x2, 0x2, 0x6, 0x3, 0x200, 0x3, 0x9, 0x6, 0xd, 0x6be, 0xd, 0x0, 0xfffffbff, 0x3, 0x400, 0x2, 0x1000, 0x6, 0x4, 0x1, 0x950, 0xfffe0000, 0x7, 0x3, 0x8, 0x3d69e574, 0xfffffffb, 0x8, 0x1, 0x9, 0x6, 0x0, 0x94, 0x1ff, 0x5, 0x30, 0x1, 0x1, 0x8, 0x429, 0x3ff, 0x3, 0x2a22, 0x9, 0x2, 0x2, 0x2, 0x4, 0x4, 0xffffffdf, 0x3ff, 0x9, 0x6, 0x3, 0x2, 0xfffffffb, 0x801d, 0x7fffffff, 0x3, 0x5, 0x8, 0xb, 0x6, 0xacc, 0xeed, 0x80000001, 0x0, 0x80000001, 0xfff, 0x80000001, 0xb6f4, 0x1000, 0x3, 0x6, 0x8, 0x5, 0x46800000, 0x0, 0x330000, 0x8, 0xffffffff, 0x1, 0x95, 0x1, 0x3, 0x771e, 0x9, 0x78, 0x7ba5, 0x47b, 0x3, 0x1, 0xe3f, 0x7, 0x2, 0x7fff, 0x92, 0x1b93, 0x10001, 0x575, 0x1ff, 0x5, 0x1, 0x3, 0x376a, 0x9b, 0x6, 0x8, 0x3, 0x6, 0x40, 0x6, 0x2, 0xfffffffc, 0x5, 0x1, 0x401, 0x2, 0x9, 0xe3c, 0x6974, 0x10000, 0x0, 0x1, 0x4, 0x2, 0x23afe203, 0x6, 0x9, 0x7fffffff, 0x1, 0x7f, 0x6, 0xa, 0x8001, 0x6, 0xfffffff9, 0x5, 0xb, 0x0, 0x77, 0x401, 0xffff6edf, 0x7, 0x20000, 0x8, 0x4b, 0x5, 0x80000001, 0x3, 0xf231, 0x1, 0x81, 0xffff, 0xe3, 0x6, 0xab, 0x4, 0xee5e, 0x5fe, 0x10000, 0x401, 0x8, 0xfffffff7, 0x1, 0x80, 0xffff8001, 0x2, 0x81, 0x9, 0x1d0, 0x3f3, 0x6, 0x8e, 0xfe, 0x3, 0x5, 0x2, 0x4, 0x65, 0x9, 0x1, 0x4, 0x80, 0x6, 0x8, 0x5, 0x2, 0xee, 0x8000, 0xb35c, 0x0, 0x80000001, 0x50, 0x3, 0x200, 0x2, 0x80000001, 0x17, 0x5, 0x6, 0x5, 0x0, 0x81, 0x9, 0x9, 0xe9f7, 0xfffffffe, 0x5be5, 0x1ff, 0xffffffff, 0xfffffe01, 0xc57, 0x5, 0x0, 0xc7, 0x9, 0x4, 0x8, 0x6, 0x9, 0x9]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x9, 0x4}]}}]}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x24045005}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r4 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740200004200000829bd7000fbdbdf250a00000008004700e000000108000800010000000c0017800700f4002a21000008000a00", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="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"/730], 0x274}, 0x1, 0x0, 0x0, 0x24000040}, 0x805) r5 = fsopen(&(0x7f0000000600)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f00000001c0)) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setattr(r7, &(0x7f00000002c0)={0x38, 0x5, 0x28, 0x8, 0x1, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x4, 0x3, 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timerfd_create(0x2, 0x800) 3m56.730960722s ago: executing program 3 (id=1778): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) userfaultfd(0x801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3m55.366389281s ago: executing program 3 (id=1784): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) alarm(0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="210329bd7000fbdb05000100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x9}], 0x5, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 3m55.043447732s ago: executing program 6 (id=1785): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006400000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) 3m54.330296228s ago: executing program 3 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(0x0, 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x1]}}) 3m53.667694216s ago: executing program 3 (id=1791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0xa, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 3m53.381191299s ago: executing program 3 (id=1792): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x2, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004580)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000004680)=0xe4) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r8, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000046c0)={0x1f8, 0xffffffffffffffda, r1, [{{0x1, 0x0, 0xfff, 0x8, 0x69, 0x8, {0x3, 0xee4, 0x3, 0x2, 0x100000000, 0x3, 0x1000, 0x8, 0x7ff, 0x2000, 0x2, r2, r3, 0x80000000, 0xffffffa7}}, {0x1, 0xc220, 0xa, 0x40, '/dev/vbi#\x00'}}, {{0x4, 0x1, 0xe, 0x10, 0x0, 0x2, {0x1, 0x1, 0x81, 0x1e, 0x7, 0x5, 0x10, 0x5b, 0x4, 0x0, 0xf0, r4, r5, 0xfffffff9, 0x8}}, {0x4, 0xa, 0x0, 0x9e1}}, {{0x1, 0x3, 0x5, 0x8, 0x8000, 0xfffffffe, {0x6, 0x9, 0xfffffffffffffba6, 0xffffffffffffd8ee, 0xd48, 0x7, 0x1, 0x100, 0x9, 0x2000, 0x1ff, r6, r8, 0x8, 0x6}}, {0x4, 0x8, 0xa, 0x2, '/dev/vbi#\x00'}}]}, 0x1f8) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r9, &(0x7f0000001840), 0x0) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000380)=0x20) 3m53.321290826s ago: executing program 6 (id=1793): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000480)={0x1, 0x6e, 0x5, 0x0}) 3m53.144515736s ago: executing program 44 (id=1792): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x2, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004580)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000004680)=0xe4) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r8, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000046c0)={0x1f8, 0xffffffffffffffda, r1, [{{0x1, 0x0, 0xfff, 0x8, 0x69, 0x8, {0x3, 0xee4, 0x3, 0x2, 0x100000000, 0x3, 0x1000, 0x8, 0x7ff, 0x2000, 0x2, r2, r3, 0x80000000, 0xffffffa7}}, {0x1, 0xc220, 0xa, 0x40, '/dev/vbi#\x00'}}, {{0x4, 0x1, 0xe, 0x10, 0x0, 0x2, {0x1, 0x1, 0x81, 0x1e, 0x7, 0x5, 0x10, 0x5b, 0x4, 0x0, 0xf0, r4, r5, 0xfffffff9, 0x8}}, {0x4, 0xa, 0x0, 0x9e1}}, {{0x1, 0x3, 0x5, 0x8, 0x8000, 0xfffffffe, {0x6, 0x9, 0xfffffffffffffba6, 0xffffffffffffd8ee, 0xd48, 0x7, 0x1, 0x100, 0x9, 0x2000, 0x1ff, r6, r8, 0x8, 0x6}}, {0x4, 0x8, 0xa, 0x2, '/dev/vbi#\x00'}}]}, 0x1f8) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r9, &(0x7f0000001840), 0x0) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000380)=0x20) 3m52.664819204s ago: executing program 6 (id=1795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)='3', 0x1}], 0x1) r2 = dup(r1) close$binfmt(r2) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0xb) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000440)) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 3m49.510962138s ago: executing program 6 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(0x0, 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x1]}}) 3m49.44010443s ago: executing program 1 (id=1809): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0xfffffffd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 3m48.847471976s ago: executing program 6 (id=1811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 3m48.502078618s ago: executing program 1 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendto$inet6(r1, 0x0, 0x0, 0x20048040, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000100)=0xc1, 0x4) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000240)) fsmount(r3, 0x1, 0x12) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5054e39c", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400040000000800010018000000080002000900000008000400050000000800040000040000"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0xfffffffffffffe85, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}}, 0x20}}, 0x54) socket$alg(0x26, 0x5, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x101) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0x0) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000776000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3m48.3019945s ago: executing program 6 (id=1814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = creat(&(0x7f0000000980)='./tracing/uprobe_events\x00', 0x2b) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0x9a437000) 3m48.230952087s ago: executing program 1 (id=1815): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1d, &(0x7f0000000080)="691ba0ff9f01d874195b0200cade4278fc42b738000000000094000000", 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 3m48.142753981s ago: executing program 45 (id=1814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = creat(&(0x7f0000000980)='./tracing/uprobe_events\x00', 0x2b) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0x9a437000) 3m48.121195137s ago: executing program 1 (id=1818): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) 3m47.333363764s ago: executing program 1 (id=1821): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) io_setup(0x5, &(0x7f0000000140)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x24, 0x38, 0x6, 0x13, 0xa, 0x1000ff, 0x2, 0x3d}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0xffff001f, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c00000001b0000082dbd7000ffdbdf25ac141441000000000000000000000000ac14141c0000000000000000000000004e2400044e2000040a0000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6dcc5f00000000040000000000000084a90000001f0000f7ffffffffffffff0108000000000000960800000000000005000000000000000500000000000000000001000000000000000000000000003609000000000000060000000000000006000000b06b6e000000010206000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000005500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELSETELEM={0x4650, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x768, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffff28}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "77346c70bfab4b36a644917fb1c06d480f9242926426d5ef63fa886978cdda815ba942d6a720011c99ab81bef15252cc2493bf120d66fefd915b7377750e94ff9c16c81c858e0b5cc7fe9b0821a78ea01dcd079a21d70f24e4be01cdf69f46e6bede78e15aee794a5ca1f6d1f030618f3c09e7cf07cfe6039095c8df8311a89d83e2dd6248c4cae12cf07dc8c336ef6540e86c6cbc536eda87f4b4230389ea1da8dd35c2b2d35e9db88d6e2c4f4d71db08ee24b269a4b2318a23ab4268f770fad908024e3e3d5d923ad7b6"}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "4d60c9c198062d287899024095fcae414e551425b0a7bdb35c72c3076a8946e8447bba3808831abbaddd91c7f9633e9f1c862a36d235f2e68199cd8ce7099657103e599f3960e483dec26bf6f4c0b7eddbaff694ecd2ae4f5c3d34c534f8f9830ff4749382c461c98cc76b0fe7467c8f2171e20c80434d22496ae4995f9b8c6b2042128c7d9dae5a8f06e33e7d357c23aeab186b70772daa099d0144a000292b40c9097fe5c7471a96ad1f3c16d3561d8fb07b7887dcdb3bb40e192d98eb82bf9b9ab4936aece6b0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "e22204b96efdb52f20a1f8d9daec62476c2ca8ee500e6b68c2b5915ac2616cfe394ebf2c0f186b35571ca35ebedaa860d27f05408ed62bd730f8e095fc9c081ec75247055a19c4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5, 0x1, '~'}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x318, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "557a90237de9fef46d7501773cff2f893a11089a92a014779f3ad5c9a696aee3cca8a209e73ab2db78c51e5099468e77fc12c433fdeb9ab9795fe2817272e3ce409f7d67dba2d4f207c68a544b11609c9fe8915ad4ca0fc2a515620b81970d82eabda4bb1852c534f0dfdeb64e53d42f72e5c8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "6185472d272cca09ba3f7555f2cd7561e40b5a612dccfe3fa48fe21e42e07fe36c3ce6adec8e0fdfe20f8908b5664a41d89a4af246bec8718c7836c317d42a1a87cff588821a695c5bf1217e867f998b07b1d4109f4a2f6ee39a1b7cbd6fe3aae2fd069ff7749218e2b57ac58c2792a9564c16ab41512a3f15439299fdce1a435118e686183da0ebcf1c6b96640ead7fe67846cdce8b99978793af694b6bf878709413b1f12db741fde9a82ad1dc93b1c167f65d92997705d9bb716efe0f213d5d4782bbe4111ef7a1b2dff6c4c33e0ba63ce9d5fbd5f43a036f1fe2f048df271897"}, @NFTA_DATA_VALUE={0xe7, 0x1, "c4a05b573d2b2f10e480fef535d4e373f8ecfcaa97ae2f1b1debf6be39b44d64299263b9e2acb3158db8c97c74094ecfc3283d2b85136e6d3abff7bca99af9a72ef59d4e870496113d2e9d52ab26ddce0bf128f43d0c83eda09774f252183dceb21b4f629b47cc0aaf846cfda7496cb162b60ae6f199256688d6a5c95931569e67ad0493fc4fa46afcb60fd8fcbb2f7f48c301838431348a46c3392c4beb9143ac17c26095efdd503599050442344b3cf828f343723cb9ec90efac07b6542bb9f8cb499b313aa018ed489225056af3e6918ca39aca94b146fae0c13ff17a9e7c3fd37f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "33bec29295582ade7a0f0e6ecee9870dabeca25b3308f605cb86b35f822f17221ee93ea92651"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "52e6c30e531348070b14e58316f3e78a999882d59b0b512fc25c3d0892118c03901bb9b3c0d16c7caebe01d48f9e75823d45cfd4a9d8398e2ba27433f2637ca6080fa6d5272441833071179d"}]}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "c2d0317d64931905469558d666"}, @NFTA_DATA_VALUE={0x42, 0x1, "b7d9b73c5637e37f0449070aaaab720a4def90e7f40f733bbfcf6304082407a2baaef007be4dfcb7519389e264e918d16b1789f5fb015b97d27b1c13cdb5"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x80}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xc65f}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3eb8, 0x3, 0x0, 0x1, [{0x388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "5851aeecd756827778455558f7c033d515399724ee2b02b56fc8213cfb1ae80c71ec32269fa0c0846a9e6763691ec1cf34a89cc982c3344d8a6891ccd9d3c4d8fa757ad601b5bbfe8ebf3cf1dcd1e8f3a5568a82ea2f14dd7ede8f2d7d3964c9b1f48633e8ab2383aad6faf8baaa6a6d253d82ecc525a67aff134378ad4f3c7786ac9cb73baf7d1283750bcbea6ea573f1c921a105b2eabe217097a1aa2ab0340473bf3ac30d4a2f5bb19a21513a24b14ecb6a36b4000df2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "3061901bc0634730b0e2a516dfb692a52d6924ebbd19be421cb2e878cb87a353a0f7cc5ca2097fba5464a2deae34948b0989d159e91379e795e7a614d3ad2cd7440d3da47a41e9bdb54926c1514114f376cd1a0e6c79c596f659e920f9f3dbd18d6ed423beab9a89e34c833da733332091a8c5828635a74e0be99ff60228e6ee94bb34c710fd3dadd1bb9e31a6f3f9131391ca096cf66939d12a46a7f467df546a06d2917564a1cf01691086d00d1b949b78710c268140208f0596d63973762efb7c8dc25e1fb1f1d289912715f3ba0216b525c1beca7b3b007ccefd47d6d442bb4bd0af8452b28e957e0ddce8234dfa"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xc0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x3920, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x27bc, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x100}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}]}}}, {0x26c0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x26ac, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0x123c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "7a5b31f6ef42b5865722c96b8d615333d4f913ec74f6bf418ca4c005c2a263551a713a9748e73b6c02f4427a065c91de894d23595a2ef174f5ecbff68187f1349947a453349923ac1c47c20d1673768ea949bab7ac2ca619a7e560dd659945b04daa013756471f997a3e9283eedeb94b15b7d5e466ae2dbfe872cda1a08519c1fbb0542466f7d1047131a4c073745d19748f5e6ba7a811162a2e7f070e59e50b0e97a882df6a289a643de0e374dddd625ed89942ba1c66ae593f953894baa39658746bb2beb9b7b639a1a5ed8592b50f2a39281d670c08974e0ef394aa58929063187513ec58a7cbf96fe2d5b0cf4088524c608204a6709914bbb7f137bd0d3b297a00c457813aba46a8c597a5c4c38510d5fe9ccbee1c66b1d429b89172c74cdc0cb25a3897f2cc19e8f538be043b17722e3a28e7a1fff7dc86ea481274836be1b61c8b57b502bbb536b140eb9dfa4d8332a101cf21abe69e10fa4094838c7cad693f4fb0f4c8238472463d03c5e2cc51363e90c380b5e73c5d6fc89d3574211e51a0edcfdd108f9c118935c6059c93ca5688e3c8f8460ed33ac70c4d8ca65ef4590e1150c3cf00885a9444330433ef5158fb65dec90348fa11d600bc7477d2eaa4b2349f1bf2c2c28227e538994f1f794a7d34821aef25ff80fa6252ae696952429c9dbe53340d1959e235d044e5dc938ca6ccd03f18de833935fa2688b4e7ad8d150035f4b2a540039fd9dd79a9becf6d5ea65f323fbcda9c578faa81c0afe9b8c4ee5f6ef4e83ed8f3fe0050b69924f9efde4b002665cd793b9d1b8c6193daa617daf848d93ed0bf0378665fa6fb2928d699c11f86607e5e47a063a1c875a8b429914385a70209687b87a2e8b66176c056b345703655c7447709df671afc3e8bcd8778feedb7dc7ed775242f14fd6f41abfb1cc051057c5c080abdb73a35da6eaabd7ceba463559647de80c41b50a7af10bb3df7dc76e5e938f9dd79b58199529052adfe637e878c94c4de76c08c8abf8919e2ccdbda349023c76b515b4bd0cd6ee42c531e6056a3406dd7b0c7def9b1ae4445d0695e3b9860f18fb64ff3743c0e8637f9da7d1b641da9d803ea13c047d0d01c9ca20be5d53b3394801001323a201c5f17e8785e808adc215f91ebe912d62cfb670542f7326d9e5692e119b19a0ddc36f3cc20d5b04fec6d5b14b3df3a291c8168e1edf988b03a36749bcf7629ed2e1bfcdacc0843f5ed652626d84ba751f48060ec59d733200df96a34936d281b8f4b383c503dbd7d350e1b7e8d2b78b4b52878f5c93ec6c6eaeaa89af5b48bcd02b01e7c073c2d9df3a7b805bd677c707ade27d143734fd7dc610c40c9bae7ffc1b0061a60e92c263bbebf4506b8d8e353d262e59fdcf65432fa5298dede2aad59f6f25c77ecbdc5eacd07e525a159b136dc7361f29b1eb08efa7e0ebc3708c2ff0715d0f2b9cfdc94f6c3a5a04c6fa1ed4f3b42d48ef264da1e4fd6d5b8737b6fec0e5e648d0cbb74cde3a0894bb06fa2374f3ce7f858e2dc8a8ac9e32d86af957f2f751e9cd9673ee23b6f74a55767dd1b4fd14f5a0baa76752242c241f53a5e10330d22f198618eb4df326a3dd4d04c615ab8b46860d3a06f25d610910f96b06375482b32ca31205eb003598d5d066690729d0ac9795b98c16fae58334253acfd01b6c689413f2d4a90a4c31d8b258f22367ffa6584ce00946f2dad72900eb400862adbaceed77ac4186db689109b4531e65be2a5613505a3d9bc8492865f5c51bf1ac11eb46c79610e4f07208926c91948f8d8d4f5c783a2073cc0944c162d2181d6b789e2fc305215ceb56b48c300f6e38cb6dbf1c9ba0dab443ff3dcc24febb3bac96023b64250dedc6095418c5d3bc7e993f5b1d426c5292e7157ba949cf656b0928b39c6ba8c5168c395dccaf465e98eb0b7fccbf7f4322fe3b1b4dd9ed6f6ccedb377b483796035030911c657fbb33ff2f82dcbf50ec5e165a55df12f6349d31734f23cf4000010c022673b911768b8405da06988b33fcab5f39a393d595c9273ba1966c8f3d6238e935c5fd415dfefb04e3a7c75a2e55f1aed0aba408bfc03873e5a713427bb477954c3858e14ede0010eccfcd1e5f9acdbdfa4a0e77d6e3698a0229743202166e7fc473b88d446895888e59e5621fc040493ed8cd6e8964f340671e86f3ba7c5a33c05c7f555f3c44a0761bf5e3c93de899d6a0a7306114375e2012d877952b1fd17d62f94b2d15396c0b455b194e8bdba8b429b8350983fd650ba9ba12dab4fd0ca09f1701058494bb13bc7c0389a0ea0cb57dbd10935dc47809490c1ba99d27b5353a12dda18ca5adf1852d3d25036ee768481b2665a17ccfeb3a199d9af4f2c151500287e9f30cc7017cec67fc9e43e47d2fcbbc18c875419c5de4cc322b46f0d5a78558c2bacec7e6590dbea36986484cebb6f072202e048b0c83055d4509defbd571b9a44b16be711fbe159fdccd989ea73e8035d1813cc40ed5a81e9523a39e60b30591a780012fcbb59b3ce7a9a2a50f339898b0d1299c812e8e7c6bf2190b87cae0d6791b4b9d5717ddf685437344ab9c87c7fcf7039dfdc8377aa4a689938af3b5a61f3e8d61707d06035d7448377328054cc92714a2d2db7c0e4f0dd43b10cb5cb497013cb183d3da9696be31de13713f1e70fd22eae6c19d607507ae98f58d1b495ecb739494e9d6dfed8c65715a28de194e22a7d965aa3b2afb0cb3003e2bd7950ed0c7ed2d967c20720a7e7a9b2f67f2f32bc0536d15b18e88c791a11c662a54f3d3e50e5bcd27ef3056524eaf94f4b5819606433e8093c203aa1764a26b6224615fa0e14a5d7f53639f6fbe0edba646e5be65e2406fbe16abeef40c47c8b51bc9d76b335c8a0994c9e46d47223658ceb8e331a78c4af2fd65d0df689240919793b5b4c153eb5ce47e1ad2c4af907aa10efcf0f2b09983927e1a9fbbad9cdb55d81de3d35b0c27d2385290d39202daa91fa940a6d5b27f1c71cd38bbfff07c7dd241b57e9844fb3c4e884cacf88f44b1b7e7784b48879e56e0da8e8e5d78c06b6311734ed0da9acb490ede5f3035ee2f80bceb966d1c7f01ffbf09d87a9555e352aa2dfd348ee8c6f693b0ecb873355b8263ec71974071211d7eab0d81ac24ec87ae4f7ccf70af5268958d1f6e3d0988197bdd3e1a6766c516e59b8c618d36816b2f878b606bb5a720eb026f7fc8c113a1314aeafad7f8644634f0bfb096c5a953acbfd2cea86c4c5a906c13d803d18d810b73c91818cc24dbbaba04dc8af9138d80c98aa54afe5c73be1dcb2f92c2b1b59840b1546938a1ee4d06a8366934b5b7cd7e10b0c639605006a946fa2dd2bce704d1f2a8f32abcf5dbf0f186a794823910d90c6c70ef66b6147247ff88992d4f0bee36ad26b1672e6783c477e965cdcd0374cf53267e139a642f3a1ad530cd6276bf610718453f61c2a26942f5dc0d6e0e2e6c03731fdc7637f67cf07fe21f1a675d00c8a08d37c4caded1b80537cc6ccf25605571d707df4f4cce7eb0ca95e9ba89264e6cd1146a072e729c898668439d107217e14754517c66e5b53fa674a40308fd25ab96a0a3e3fb409b576dcfe4791e787166f86a6eb4af8bef2899b8c514002cf88036e513ec417889f268d5517619cf8640080c8b3e0969a9c1408aa983c3f81b490d01f68b12b02691b7340156798b1ec3bcac414dfb1583ecb02a741dafbe806eecd55f5402f10faf499c8452383e8cb297e4a153231337ef665d656ac855575f6e5537957d048881202ce303dd4211fa0b2f72013c3354f28a64bace062558e6b8ec3e3a1fccc6f63b08db464a0a7d2eea8d9202a6446c2d9efbb6beb5042e828f8199bef3e67d7cfdc460cfe5e545c3dcdbb00177d750fcb6efa3d50a7df7e3c8b7e25dddaa374f2c2db76cf95a00d9381a2338566eb88aa907152f338d8e96f337135b44d18b0b22f92ed1f03d7c1e628d4464d0a3b3c0b2f033c0fab5b8e29805e919c23138041511570490cf9da7e29f7aa10bafb5937a72513ea42436fd151ee216ba7af6d052abba210f3463c0e03dfd08fa9278f7a568754c317463073802d1320dbbbc498603c723f07e56ecbb3775bb67eb04e13cca97f81b505748d773af6b67ffae30f2f3de2ef56da055bbd2034550ac975b42d5c523c521ab5a9bf96c88b9629c99b8423228deb6fb824718e2e78109fa99a3121dbd38f30da7ebe05983043cebf0afc81c8fbb11750de945a60bf6e37f06aa4cc04f06831bf72b0b3343d5ffb0b6ba83f328a46d946607631c0197f87f681c8ea466ce0072461899ecc5a1a95494981715339b36f0ae63696f09d845516d2a3d608be2c8edf9463758233688b8eb9d1fbf693140378ffa675535d830e1f2a9fecbe03aef3c6ebc4ca6a92398293bfbbe0f61a0bc157e41669b58fc7faa9d54f6aeb31e34dffa719411e85985f9d6c799d183c4b2db5b7196c780cdecd446025b27c750f8fe9dd1df23b733f1dd6dc68e30b1c791a05f5562a1b8d501c0eebb9c87922700b6bd57b25d25f5873e5e8f543c3eaed3e567f6dd37679e3d5f4cc42c6fd1e75f15d867a66cf5e880b93436376445fbb5a5a59c8d338ca63c1c524e0532d4e51270d36310eb13108f749f238d40ad91287d1726ad0c6f873ae24b2b7541f94dfd444d4245ad3bde5efeaa70f7d4fe614b2f5cd3aa9c830a0dc6e3804ec5ca37b9c980300d1852e045c25f318b0d4671289cbac50648d00a87756fdb40f4b9d729340047ecc532d00f801e20515bb54a4bb86488ef850d07dc22d24310ed32ff3f5308a564c1e02a877acd9683d8aef09a433277c5f8f28c1d56acd70b6acc497da573615ab089b1f5f0f967695fc896ee90d12d5c702f56e98557e017ccd4d5fe9eb57e37896c23cbe2138a65cd96c68ac1a6eb44bb57c87e7ed3b704a07db301eb1d6ad80f45135a86e5508b5050404e4bc10fdd51d4d0ed71f60ede3f7fa6430e8d193bf8ab8c447d1f462c34284285682ca566563bbfa7dab764e8a115cf3c7309008325b5d213d49a8d5dae10a0398f9b66252d2e45d8f891cc8ea51de17ee31b3d2d3da0bfe60e76bb9cce80ebbcc7a2d5d6191f465f4c6c9bf1da03c98d2fb7c6084a1ecfcb3e3ff3ce6999277b9f4b6363ee5d3b4f779c9cc4c829b5bc81c10e65a526b65c60bae958547879efddb662146e9a358be4a50af70fbb67de839969dfe92f7b3508e3bc86649c1c710dafdac68088caa3f8aae823499aa7c34d5d2dd3f593c770157115ef897d90eb7cd01c099085dbde69371a3928ebcb9675433b0d2d14ddb255366d888865209e6d5cb43268dd31f7a099308852a1594edc1d90338485c6be5b38744f8ff71146a253ffbaf4cdad4d3328bbddbe5b28f932bfdf029c5bc2ee066a0b91275fe9b49479e647eac3f3316098b6ed2f857fc601e731c32b05bf0f1d2ec920d490d397147fa870b9d3dcdc385c8bee71a3935c802ac3b0f9299ebafe6fe9ec9f6b2c46a44664c277d159a20669b535c7b7866bc8d181109fccbc29f9f88471c33964e519557baaf8bf348d4ff0f9bf228c2233700dc38a775edff7db1620084d80e3f499589fb2aff3b6f0a4d434b1404bc55071458ca00950985ac218fc43e883d66037d63ca2e0fd6fea526891f32278ace3e41244dde9bb0d56ac0fcaf2d819761ed8fd0923ffb922345f2c41c854d1d2d601deb764cc2ac322e107f29050f98ffa20096a1062eb6f4c063b50411465f5a00c109b792718999f60bd9e896484d5fa902e049a5a54c"}, @NFTA_DATA_VALUE={0xc4, 0x1, "eda61d4c20f41e59d0e1e8a16c124174d7fc3cb9711c493a7fbf320f51bfd08a08ae3d2243dbb911c362849eb8e88b016b438fb89259119fca8d1796253588af26ea7af4fb4c98a8849e52e4c93b7535667e116072f06ae3ee5a5a4cbb677398fb4a857f04682a94bb89542f40b8db8300e38e9e645d3dca9bdbe2c5467180a1c070e03bc5f60d9d16fcef520a8a29e4a67c7549be4b96b0d34a01fe75eedb47dae306831364be1d99759d0954bb0e67bac688aaa5626a3782f46f1fba6f6dab"}, @NFTA_DATA_VALUE={0x30, 0x1, "cf2536afe2b180ba2b6647152d075ec9537fd86cecbcdd92b3c3b08ccdd574ddd5fa42a6b84cd1c2ae9beb54"}, @NFTA_DATA_VALUE={0xc4, 0x1, "ef2e702d67af6c765302b5b3ddb3b31af38071f882f45f7113f68cf318641aab2cef5bf13474976b8a6ce9fd9375549196eaa5e69796b8cffc1d1863623e8b06ec9735b72a75c370b3fbd6bbb58382d75bf96d7e37df47feaec133c29260cb44e8b7b55b6f380e6d8d63df2fd48f221b3ede4b2d384e75bca534bccd7a8c73c8d1894ddaf7fe9ff6bd36ac914a9f6cd064868ac8c3e53b765484da24a1121d8ab2b11d55ee5de6a45d0c380361cf54937b95e9a086bd0a0fde28349cdacd1349"}]}, @NFTA_IMMEDIATE_DATA={0x1130, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x1f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "66980ba68bef380c75c98919ab3b59580769ad58a87e9d134c55b79a73b3f1df55746702a3846b9e95618d5496305567af506eeb741c43c8af2446e47d25ba5ffda44fe2da4bf956e0c4ed613baf4783bbaf620a8af008602015dfa9999fda5bde34d41c05dc36fe1e7dc083d6cf01c7b3807aa7cc21b8f832a923238c4650e28c74e169a694a3b44698fd7a429973fc02790abf0dce497dab7a9aee3ff42a929c8673b86ea369242a9a1a65611aba02cfc4a2c714a1fe04b4400ccaf16a9dcccc9380e6cd97625fd20dd78a9b724d14edd9"}, @NFTA_DATA_VALUE={0x10, 0x1, "e001ed52ba760aa5174d4a7f"}, @NFTA_DATA_VALUE={0x3e, 0x1, "d6bad4451b09e0c6107eafe39ac284d1b17784e938276b0357b25f53c13e3fee1d16771219dc9ccfd6009c033a71d52e3526c788739262fc6f60"}, @NFTA_DATA_VALUE={0x79, 0x1, "7bdd9d4e7d9ca675d926d074333ffeeccbda8ea3c734aba0faaa24cf93cf25bdb75f609f43e9603cfc41970535d76c936daabc5d695cb464c4d30e96c3d88e8ef55621a4149a802a333b7d7ba674695c57422ab94045a174572f68388f2cf25e248f8203e23f15d3bf25f6a1cdae6acf8e2f27a524"}, @NFTA_DATA_VALUE={0x1c, 0x1, "a0fc25e12530fbc634eac415f1e9c2232414cf8bd257cb8c"}]}, @NFTA_IMMEDIATE_DATA={0x134, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x37, 0x1, "c6c2348a3856bfce601542581a1d2a8bc22bb3420395537c502301e17362c364358a7f3fbea3f8da05312f3c2653568c96018b"}, @NFTA_DATA_VALUE={0x9b, 0x1, "5a7bf7f3370f069bbdda754043c3fa7d3f019ad5307b2cda71aa826be28730d012aaa1f6ad19e616b670c562bc6d52aba90f2e462868091384690fe82cd7c0e8193bd6f7b0ed737f21ef960f5fcc4cab003f503943a1b43d62dfe464b69a71eff8ae725830c9de6f29dfe655f6fad920011d3bc0cfca9ba190c9f9ea0def9f5922334c4c562d9b8d644d79be9195f939e1ceac223b0aba"}]}]}}}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "01f567c8e25f171fdfe4e4821e1fd783bb1a509e5eb7577e6fe78e28b5b4343840ebd0bca2a1a32eb7e13b4edc2263f35b7270cbb6bef8c0c53380e6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "ffc321e8c9b9e6456fad9d52195af083855d80cf16118aaaec3ce6b14053b9073970ba1e858a636dcc4c8af5a3191ad6d56208cbbf2b5dfb0142bada289039e2a090cca24bb80656a7fad149e1185c665b0c78c2e9d539"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "4051f371eab4f038bfdcbd825db90b880085edec66d2f3a5dc378c36452fbf29fc55c199c396"}]}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VALUE={0x5, 0x1, "98"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x2f, 0x1, "730bbf8dc39127ce0d0900320946bac64a9481b4d4c836da7abd496b44d30365d404936d136742de87bcc0"}, @NFTA_DATA_VALUE={0xa6, 0x1, "ba7e2ce062c82347254a93c2934d58cd07f127fba1ce59985f6bdf73ab72aa7b6a77f388f7566a141abd1017d5d7e10fdf271c74f79818b4c450e444f2aecec97589f867cf29a1c00f0800e25d95e53998455fd778dae3cbc6bbf3f42c7e61c5f9f027553a61c53df5d1ea99adb458af43952da096d5267797f3e4501d711606fd9389e2cc6a1fcccf82cc9cf85c0a7f1ace09f344800be8757749dfd22d7ac2fd80"}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x66}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x46fc}}, 0x0) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00", "44ac00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00", "44ac00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)=ANY=[@ANYBLOB="f40000000001000000000000"]) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x9, 0x4, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]}) 3m47.102129401s ago: executing program 8 (id=1823): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000480)={0x1, 0x6e, 0x5, 0x0}) 3m46.60189928s ago: executing program 8 (id=1824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='ep0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0xe5d, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) write(r2, &(0x7f00000004c0)='blk0\n', 0x5) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='ep1\n', 0x4) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, &(0x7f00000006c0)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r8, &(0x7f00000007c0), 0x0) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r9, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3m45.970799047s ago: executing program 8 (id=1825): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1d, &(0x7f0000000080)="691ba0ff9f01d874195b0200cade4278fc42b738000000000094000000", 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 3m45.698118269s ago: executing program 8 (id=1828): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) 3m45.43051553s ago: executing program 1 (id=1830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, 0x1c) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x90) (async) r2 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x50180, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0xe, 0x2c}) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x58, 0x100000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001140)=[{{&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="9411b7c1daf92cf2741c3d0cf1a1f270ed9d48964626d29c84a0e9ee9bc6d112642eb6d8586cc27cc8a0e891169bcc4c3fb2556cd0c0e0577108de8e09d36e7df19017259101eefc326360503fd9420c8ab245b4acbe1ae6b1b7d52a0ff9bbe083e8cf86feb36463b2b78c6fe79b6ff47fcd92bd0ed3de32582fbd438ffa399ad34fc36c711c3811219a2ad219e06c3fcd10d4e88183026a49d65d88fc1215110ccabd751a58d5f83d9073feed30fe0cea622a20606d4da3484fdcf8567dfdc26ae607d632cb8dd3506d1518294dce1a8dd9f61a5a8eb7c9e185c1eb7347579600179ce9f514152f8612ef7152f2c690532e745ace631a", 0xf7}, {&(0x7f0000000380)="5b84b90d0200ceb3cbcafa6dd5070d26e986dfcb177336ff6efb7fa586712c68f44c458f4f981786dc6bdb589e0af8464379e3a54073e8bb9b3b05fc0afbf4fdf9a4f79a0a1e0087d43aac18f85f980c1cf2f0d00fde36887a119def924c2b5003ea4c8e59828b23b46f7d729f3293a91a68ba63ac9493bbcf0c2b99a50ffa7744", 0x81}, {&(0x7f0000000440)="880ee6c59a06b1d6bb076d14765a214824f530ca2dafa01a77e23855b894a516e4b78af86a8b8866c5dff8a7dc25ee8f4cdb67521efb1e9fe0afc91483b4849aa5c98b6ed8a3b58fbc7c80205a1a44bf7d9da8bad44a73424a81670b62eb6c50de64eb7d40ea8302ab6debfbb9c1bed70a33c377f136fb0a563dbcbb0100a205e2e09f787429676e8e072de110cd84bfe804b104d0fb0839aff0f4ba9b1bf9873dcada", 0xa3}], 0x3, &(0x7f0000000540)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f0000000580)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)="06a7d74f4ac5085a1650cf939444372e9e3f51c7a3f0ed4a550bc9e10669685df48c3efe4620d3bafa964f0e24d27c97b62e8c7511c349942878ed166eafe2095b2557efc8c03b316bc7912d2c104ba37f2d8fc5168647efbfb18f17a94599a5f76ee7226f6acfac164aa34d7697cdd1ec1fa96fcfc436d91daf8302936655846b50f38e25971e2ce67793c114ac3e64e9157e5a50ed6c264566ab536c1b91de7bcbd890ab75bf66c16e866df5434883b6d4d4e917fe81ec0c8fd10394cd30b9ef31a111cc42c9", 0xc7}, {&(0x7f00000006c0)="b512d7570ada664b828153eab9da02c6950dff5e09d2c468c7a1caa3d09c21e6403759560a9c5154221c7720bb30bd8b978524df85233f8a5ab16eb74928922be52ec75957878013aad81dfd91d3558425d6a0ba2ebe0d6956c5fea35ee9c9fb913a0e6e5eb4a283dcd615cdfc3e96533459076b16f67b5b6e005ecd5e84992482e80b6ba98700f52f75ef4f9575de84bff0c6382c3e94", 0x97}], 0x2, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000840)="c76aad931f3f2989ead5e020b2368b4fcc3e028b944304b75492fd0aabdf0e0ed80275ea3125ddbc339b2f29229886323a748a1a1b1cc760de8e8cc2d3268392b0901aa3df4bee283365669c1f6e714521b050691d7c0bab7080cca951e53d8ad66a9d3b1b6d4e64533192f7b1241e26c8202a0dbe034d451117740ac0f53e15472c8d48e4", 0x85}, {&(0x7f0000000900)="92ad23540fcc5b295f55e0ee12f22bc8e2d442e0e186c6456d3a51e72b728f00baec5b", 0x23}, {&(0x7f0000000940)="0b40fcae8a22ce8cdc8e3315cb5b564ab794a6219f8069b57237736183be4c6b8028fae5f6", 0x25}], 0x3}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="135ae40e33af2ed7447a3af8aaabc5ad175335fe67ca7ee517e05ee9e8566456904a45ab573e1030830d8a814d19d579980ea85cb8686417c5dd014b1fbcbbf1cec242df14060565fda0c3b01c9dec6eea60ac7acca1c616f850fbd10adbcd567787d32668cb946bb41ffaea50f6959175aafd346d0b8e1ab4f07487433b2b8fae03e7222ebc353118fc01bb6702e4e22668ddd05c9b3a9d80190d9633046af9997e3206e93cc017a5f2a14caea62aa69187f06bd7c6a02f13775461db1e81", 0xbf}], 0x1, &(0x7f0000000e00)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0xa, [{@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x2}]}, @cipso={0x86, 0x19, 0x2, [{0x7, 0xc, "84b80e63bc7534d5ab16"}, {0x6, 0x7, "9eb8a360fa"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xcb, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffff8}]}, @timestamp_addr={0x44, 0x1c, 0x6f, 0x1, 0x3, [{@multicast1, 0x3}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}]}, @cipso={0x86, 0x4a, 0xfffffffffffffffd, [{0x5, 0xb, "bf187d5591ff69e3cd"}, {0x6, 0x10, "6548872640062c6cce71a7bf9681"}, {0x5, 0x10, "10d9480cc1df63e171dde7caf17e"}, {0x0, 0x6, "d2f37598"}, {0x2, 0xf, "f58aa1f639adec5c57464a1665"}, {0x2, 0x4, "faab"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf0}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0x2c, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @empty, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x178}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000fc0)="18ce1020385b039cc48639c143648b229907a2c9aef73e03d0cdb3a9782ad05ea12ff9c5c40ddc3e048051ddd05b4ca9d1c1d78390a2aae6772e2f4408092b911c6863c0b254eb24ad097679f565bb4fb08d08748ad4afdd9a6cb08ac65476e690c53f7652bb82905cb143afe3bb1626708b84d5ed4d10674e56e340b650fef88efae6", 0x83}, {&(0x7f0000001080)="863b3725b5e859cf268f94b40c34e09dbb4dda9b29379d66af05edd22eb60f1f7c8116ab1a2a967424428060f3414cbabbb3780ff759900fa2b8a4d082682dd8ae81c2fad84175ed3a366ba5", 0x4c}], 0x2}}], 0x5, 0x1) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000001200)={0x40, 0x8, 0xd, 0x20, 0x101, 0xe6, 0x3ff, 0x9}) r5 = openat2$dir(0xffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0xa0883, 0x1}, 0x18) name_to_handle_at(r5, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x8}}, &(0x7f0000001380), 0x0) r6 = syz_open_dev$ndb(&(0x7f00000013c0), 0x0, 0x0) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000001400)=0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x1b4, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x80, 0x5, "0574a5df81b4023db65512f67467dc93161a2aa6f8d9798f64b4e226b5ff168a10db3ae389186c15932043f4ce995ed383d3eb8822d6eb939b385350a72a7aa50a12a7c1069d1661988a5b96c5a9edfafd2cd3b18ef8870dcb44efd3530f3da64d57d2649b98fb177bcb223da561cdfdb12692c62f4449334175d85d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004040}, 0x890) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) (async) r10 = openat$snapshot(0xffffff9c, &(0x7f0000001840), 0xc0000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r10, 0x330f, 0x4) bind$unix(r5, &(0x7f0000001880)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001900)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r11, 0x4008641a, &(0x7f0000001980)={0x9, &(0x7f0000001940)=[0xfffffffb, 0x1ee8, 0x6, 0x963, 0xfffffff3, 0x400, 0x2b20, 0x6f, 0x33130f5f]}) r12 = syz_open_dev$vcsa(&(0x7f00000019c0), 0xffffffff, 0x6600) ioctl$UI_SET_KEYBIT(r12, 0x40045565, 0x207) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r13 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$sock_int(r13, 0x1, 0xc, &(0x7f0000001a00), 0x4) (async) write$sndseq(r12, &(0x7f0000002b00)=[{0x0, 0x7, 0x9, 0x5, @time={0x80, 0x7fffffff}, {0x1, 0x4}, {0xa, 0x80}, @quote={{0x74, 0x5}, 0x0, &(0x7f0000001a40)={0x3, 0x2, 0x5, 0x2, @tick=0x495a, {0x2, 0x1}, {0x5, 0xf}, @raw32={[0x0, 0x9, 0x40]}}}}, {0x1, 0x0, 0xf, 0x9, @time={0x8dd}, {0x7, 0x70}, {0x92, 0xeb}, @queue={0xd, {0x3a, 0x100}}}, {0x5, 0xc3, 0x1, 0x79, @tick=0x5, {0x0, 0x40}, {0x3, 0xe}, @quote={{0x80}, 0x3}}, {0x80, 0xc, 0xe, 0x0, @time={0x5, 0xfffffffa}, {0x3, 0x4}, {0x1, 0x9}, @addr={0x5, 0x1}}, {0x6, 0xfd, 0xa, 0x9, @tick=0x2, {0x4, 0x5}, {0x7, 0xb}, @control={0x8, 0x5, 0x4}}, {0xc5, 0x13, 0x6, 0x9, @time={0x7fff, 0x1}, {0x5, 0x9}, {0x1}, @time=@time={0x6, 0x6d2}}, {0x0, 0x2, 0x0, 0x1, @tick=0x1, {0x3}, {0x9, 0x6}, @control={0x8, 0x7}}, {0x8, 0x4, 0x5, 0x81, @time={0x7, 0x6}, {0x5c, 0xe3}, {0x8, 0x4}, @ext={0x80, &(0x7f0000001a80)="83b7a2a91e348ad5c3b1035b7869cd8002e2aa16e367d33637f2ec167c4c0cc90d482c914614db05190b4ce60173f64332569ecbee884a4175a9b74a4a8c8ac152fe71af823168f7e760b75bcf6b15779da34fc4cd87e36c5872cbbda8474b05146c9587f6add94bbbf3499694e50aa2870fb96884f9a437cc66339dcdb55d81"}}, {0x1, 0x8, 0xdb, 0xf0, @time={0x6, 0x5}, {0x1, 0x8}, {0x2, 0xcc}, @ext={0x1000, &(0x7f0000001b00)="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"}}], 0xfc) 3m44.673461582s ago: executing program 46 (id=1830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, 0x1c) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x90) (async) r2 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x50180, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0xe, 0x2c}) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x58, 0x100000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001140)=[{{&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="9411b7c1daf92cf2741c3d0cf1a1f270ed9d48964626d29c84a0e9ee9bc6d112642eb6d8586cc27cc8a0e891169bcc4c3fb2556cd0c0e0577108de8e09d36e7df19017259101eefc326360503fd9420c8ab245b4acbe1ae6b1b7d52a0ff9bbe083e8cf86feb36463b2b78c6fe79b6ff47fcd92bd0ed3de32582fbd438ffa399ad34fc36c711c3811219a2ad219e06c3fcd10d4e88183026a49d65d88fc1215110ccabd751a58d5f83d9073feed30fe0cea622a20606d4da3484fdcf8567dfdc26ae607d632cb8dd3506d1518294dce1a8dd9f61a5a8eb7c9e185c1eb7347579600179ce9f514152f8612ef7152f2c690532e745ace631a", 0xf7}, {&(0x7f0000000380)="5b84b90d0200ceb3cbcafa6dd5070d26e986dfcb177336ff6efb7fa586712c68f44c458f4f981786dc6bdb589e0af8464379e3a54073e8bb9b3b05fc0afbf4fdf9a4f79a0a1e0087d43aac18f85f980c1cf2f0d00fde36887a119def924c2b5003ea4c8e59828b23b46f7d729f3293a91a68ba63ac9493bbcf0c2b99a50ffa7744", 0x81}, {&(0x7f0000000440)="880ee6c59a06b1d6bb076d14765a214824f530ca2dafa01a77e23855b894a516e4b78af86a8b8866c5dff8a7dc25ee8f4cdb67521efb1e9fe0afc91483b4849aa5c98b6ed8a3b58fbc7c80205a1a44bf7d9da8bad44a73424a81670b62eb6c50de64eb7d40ea8302ab6debfbb9c1bed70a33c377f136fb0a563dbcbb0100a205e2e09f787429676e8e072de110cd84bfe804b104d0fb0839aff0f4ba9b1bf9873dcada", 0xa3}], 0x3, &(0x7f0000000540)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f0000000580)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)="06a7d74f4ac5085a1650cf939444372e9e3f51c7a3f0ed4a550bc9e10669685df48c3efe4620d3bafa964f0e24d27c97b62e8c7511c349942878ed166eafe2095b2557efc8c03b316bc7912d2c104ba37f2d8fc5168647efbfb18f17a94599a5f76ee7226f6acfac164aa34d7697cdd1ec1fa96fcfc436d91daf8302936655846b50f38e25971e2ce67793c114ac3e64e9157e5a50ed6c264566ab536c1b91de7bcbd890ab75bf66c16e866df5434883b6d4d4e917fe81ec0c8fd10394cd30b9ef31a111cc42c9", 0xc7}, {&(0x7f00000006c0)="b512d7570ada664b828153eab9da02c6950dff5e09d2c468c7a1caa3d09c21e6403759560a9c5154221c7720bb30bd8b978524df85233f8a5ab16eb74928922be52ec75957878013aad81dfd91d3558425d6a0ba2ebe0d6956c5fea35ee9c9fb913a0e6e5eb4a283dcd615cdfc3e96533459076b16f67b5b6e005ecd5e84992482e80b6ba98700f52f75ef4f9575de84bff0c6382c3e94", 0x97}], 0x2, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000840)="c76aad931f3f2989ead5e020b2368b4fcc3e028b944304b75492fd0aabdf0e0ed80275ea3125ddbc339b2f29229886323a748a1a1b1cc760de8e8cc2d3268392b0901aa3df4bee283365669c1f6e714521b050691d7c0bab7080cca951e53d8ad66a9d3b1b6d4e64533192f7b1241e26c8202a0dbe034d451117740ac0f53e15472c8d48e4", 0x85}, {&(0x7f0000000900)="92ad23540fcc5b295f55e0ee12f22bc8e2d442e0e186c6456d3a51e72b728f00baec5b", 0x23}, {&(0x7f0000000940)="0b40fcae8a22ce8cdc8e3315cb5b564ab794a6219f8069b57237736183be4c6b8028fae5f6", 0x25}], 0x3}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="135ae40e33af2ed7447a3af8aaabc5ad175335fe67ca7ee517e05ee9e8566456904a45ab573e1030830d8a814d19d579980ea85cb8686417c5dd014b1fbcbbf1cec242df14060565fda0c3b01c9dec6eea60ac7acca1c616f850fbd10adbcd567787d32668cb946bb41ffaea50f6959175aafd346d0b8e1ab4f07487433b2b8fae03e7222ebc353118fc01bb6702e4e22668ddd05c9b3a9d80190d9633046af9997e3206e93cc017a5f2a14caea62aa69187f06bd7c6a02f13775461db1e81", 0xbf}], 0x1, &(0x7f0000000e00)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0xa, [{@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x2}]}, @cipso={0x86, 0x19, 0x2, [{0x7, 0xc, "84b80e63bc7534d5ab16"}, {0x6, 0x7, "9eb8a360fa"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xcb, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffff8}]}, @timestamp_addr={0x44, 0x1c, 0x6f, 0x1, 0x3, [{@multicast1, 0x3}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}]}, @cipso={0x86, 0x4a, 0xfffffffffffffffd, [{0x5, 0xb, "bf187d5591ff69e3cd"}, {0x6, 0x10, "6548872640062c6cce71a7bf9681"}, {0x5, 0x10, "10d9480cc1df63e171dde7caf17e"}, {0x0, 0x6, "d2f37598"}, {0x2, 0xf, "f58aa1f639adec5c57464a1665"}, {0x2, 0x4, "faab"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf0}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0x2c, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @empty, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x178}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000fc0)="18ce1020385b039cc48639c143648b229907a2c9aef73e03d0cdb3a9782ad05ea12ff9c5c40ddc3e048051ddd05b4ca9d1c1d78390a2aae6772e2f4408092b911c6863c0b254eb24ad097679f565bb4fb08d08748ad4afdd9a6cb08ac65476e690c53f7652bb82905cb143afe3bb1626708b84d5ed4d10674e56e340b650fef88efae6", 0x83}, {&(0x7f0000001080)="863b3725b5e859cf268f94b40c34e09dbb4dda9b29379d66af05edd22eb60f1f7c8116ab1a2a967424428060f3414cbabbb3780ff759900fa2b8a4d082682dd8ae81c2fad84175ed3a366ba5", 0x4c}], 0x2}}], 0x5, 0x1) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000001200)={0x40, 0x8, 0xd, 0x20, 0x101, 0xe6, 0x3ff, 0x9}) r5 = openat2$dir(0xffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0xa0883, 0x1}, 0x18) name_to_handle_at(r5, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x8}}, &(0x7f0000001380), 0x0) r6 = syz_open_dev$ndb(&(0x7f00000013c0), 0x0, 0x0) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000001400)=0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x1b4, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x80, 0x5, "0574a5df81b4023db65512f67467dc93161a2aa6f8d9798f64b4e226b5ff168a10db3ae389186c15932043f4ce995ed383d3eb8822d6eb939b385350a72a7aa50a12a7c1069d1661988a5b96c5a9edfafd2cd3b18ef8870dcb44efd3530f3da64d57d2649b98fb177bcb223da561cdfdb12692c62f4449334175d85d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004040}, 0x890) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) (async) r10 = openat$snapshot(0xffffff9c, &(0x7f0000001840), 0xc0000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r10, 0x330f, 0x4) bind$unix(r5, &(0x7f0000001880)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001900)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r11, 0x4008641a, &(0x7f0000001980)={0x9, &(0x7f0000001940)=[0xfffffffb, 0x1ee8, 0x6, 0x963, 0xfffffff3, 0x400, 0x2b20, 0x6f, 0x33130f5f]}) r12 = syz_open_dev$vcsa(&(0x7f00000019c0), 0xffffffff, 0x6600) ioctl$UI_SET_KEYBIT(r12, 0x40045565, 0x207) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r13 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$sock_int(r13, 0x1, 0xc, &(0x7f0000001a00), 0x4) (async) write$sndseq(r12, &(0x7f0000002b00)=[{0x0, 0x7, 0x9, 0x5, @time={0x80, 0x7fffffff}, {0x1, 0x4}, {0xa, 0x80}, @quote={{0x74, 0x5}, 0x0, &(0x7f0000001a40)={0x3, 0x2, 0x5, 0x2, @tick=0x495a, {0x2, 0x1}, {0x5, 0xf}, @raw32={[0x0, 0x9, 0x40]}}}}, {0x1, 0x0, 0xf, 0x9, @time={0x8dd}, {0x7, 0x70}, {0x92, 0xeb}, @queue={0xd, {0x3a, 0x100}}}, {0x5, 0xc3, 0x1, 0x79, @tick=0x5, {0x0, 0x40}, {0x3, 0xe}, @quote={{0x80}, 0x3}}, {0x80, 0xc, 0xe, 0x0, @time={0x5, 0xfffffffa}, {0x3, 0x4}, {0x1, 0x9}, @addr={0x5, 0x1}}, {0x6, 0xfd, 0xa, 0x9, @tick=0x2, {0x4, 0x5}, {0x7, 0xb}, @control={0x8, 0x5, 0x4}}, {0xc5, 0x13, 0x6, 0x9, @time={0x7fff, 0x1}, {0x5, 0x9}, {0x1}, @time=@time={0x6, 0x6d2}}, {0x0, 0x2, 0x0, 0x1, @tick=0x1, {0x3}, {0x9, 0x6}, @control={0x8, 0x7}}, {0x8, 0x4, 0x5, 0x81, @time={0x7, 0x6}, {0x5c, 0xe3}, {0x8, 0x4}, @ext={0x80, &(0x7f0000001a80)="83b7a2a91e348ad5c3b1035b7869cd8002e2aa16e367d33637f2ec167c4c0cc90d482c914614db05190b4ce60173f64332569ecbee884a4175a9b74a4a8c8ac152fe71af823168f7e760b75bcf6b15779da34fc4cd87e36c5872cbbda8474b05146c9587f6add94bbbf3499694e50aa2870fb96884f9a437cc66339dcdb55d81"}}, {0x1, 0x8, 0xdb, 0xf0, @time={0x6, 0x5}, {0x1, 0x8}, {0x2, 0xcc}, @ext={0x1000, &(0x7f0000001b00)="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"}}], 0xfc) 3m44.612277661s ago: executing program 8 (id=1832): socket$kcm(0x2, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(r0, 0x8008550e) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff0000/0x10000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="1c010000140001002dbd7000fcdbdf2509"], 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) io_uring_setup(0x1b21, &(0x7f0000000280)={0x0, 0xc8a0, 0x40000, 0x3, 0x12e}) read$char_usb(r4, &(0x7f0000000480)=""/74, 0x49) 3m44.612045915s ago: executing program 8 (id=1833): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 3m44.504200679s ago: executing program 47 (id=1833): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 3m44.159852409s ago: executing program 7 (id=1835): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1d, &(0x7f0000000080)="691ba0ff9f01d874195b0200cade4278fc42b738000000000094000000", 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 3m44.117695261s ago: executing program 7 (id=1836): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) 3m44.05480039s ago: executing program 7 (id=1837): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x1, 0x6e, 0x5, 0x0}) 3m43.432243114s ago: executing program 7 (id=1838): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) 3m42.842047398s ago: executing program 7 (id=1839): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3c5, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2a, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x309}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3m42.492104656s ago: executing program 7 (id=1840): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 3m42.4250995s ago: executing program 48 (id=1840): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 9.405643277s ago: executing program 9 (id=2526): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f00000006c0)=@ublk_get_dev_info_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x40, &(0x7f00000001c0)=@ublk_ctrl_dev_info_new=@any_dev}}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$unix(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x8, 0x6, 0x6, 0x30, 0x4}], &(0x7f0000000180)='GPL\x00', 0x6, 0x50, &(0x7f00000003c0)=""/80, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r3, r3], &(0x7f0000000540)=[{0x4, 0x2, 0x0, 0x1}], 0x10, 0x1ac}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 7.435575285s ago: executing program 9 (id=2531): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 6.278367183s ago: executing program 9 (id=2539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf2502000000080002000200000052474d2304cef72da39a1d95996550e0832deda87cf98aa7b5583c035788b9e771167e3d06e8110c14e1e1ec0f75ab9e26022c21191b8f1b061839e13e90cca65e585f4ec53772"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x22}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0)) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 5.681377511s ago: executing program 5 (id=2540): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 5.069699101s ago: executing program 9 (id=2544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)='3', 0x1}], 0x1) r2 = dup(r1) close$binfmt(r2) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0xb) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000440)) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100), 0x0, 0x4010) 4.276861936s ago: executing program 5 (id=2546): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 3.399792084s ago: executing program 5 (id=2550): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mkdir(&(0x7f00000001c0)='mysys\x00', 0x9f) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000900), 0x0) 3.340918571s ago: executing program 5 (id=2551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x4101, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1b4}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80180) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x0, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x14, 0x101, 0xfffe, 0x0, 0x4, 0x0}) ioprio_set$pid(0x3, 0x0, 0x0) 2.977844341s ago: executing program 0 (id=2552): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 2.851191655s ago: executing program 0 (id=2553): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x31424752, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x5, 0x400004}], 0x8, 0x8, 0x8, 0x0, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 2.812692212s ago: executing program 2 (id=2554): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 2.77713624s ago: executing program 0 (id=2555): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f00000006c0)=@ublk_get_dev_info_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x40, &(0x7f00000001c0)=@ublk_ctrl_dev_info_new=@any_dev}}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x8, 0x6, 0x6, 0x30, 0x4}], &(0x7f0000000180)='GPL\x00', 0x6, 0x50, &(0x7f00000003c0)=""/80, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r4, r4], &(0x7f0000000540)=[{0x4, 0x2, 0x0, 0x1}], 0x10, 0x1ac}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r5, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.881431456s ago: executing program 9 (id=2556): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 1.48304896s ago: executing program 0 (id=2557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="44ae79b63374ed380530ddcd087d2aaeb85c8c350fbf15e520090de26bfca8", 0x1f, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.48209138s ago: executing program 0 (id=2558): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 1.481720015s ago: executing program 2 (id=2559): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mkdir(&(0x7f00000001c0)='mysys\x00', 0x9f) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='QEMU00', 0x6) 1.40405779s ago: executing program 2 (id=2560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) fsopen(&(0x7f0000000140)='afs\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r3, 0x4}, &(0x7f00000000c0)=0x8) unshare(0x40000000) 1.250440906s ago: executing program 0 (id=2561): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) write(r2, &(0x7f0000000540)='dummy_udc.0', 0xb) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='\n', 0x1) 1.015669862s ago: executing program 2 (id=2562): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x8606, 0x2, 0xfffffffa, 0x4, 0x6, 0x0, 0x9, r1}, &(0x7f00000000c0)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x8606, 0x2, 0xfffffffa, 0x4, 0x6, 0x0, 0x9, r1}, &(0x7f00000000c0)=0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) 858.031916ms ago: executing program 2 (id=2563): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x31424752, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x5, 0x400004}], 0x8, 0x8, 0x8, 0x0, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 743.941067ms ago: executing program 2 (id=2564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf2502000000080002000200000052474d2304cef72da39a1d95996550e0832deda87cf98aa7b5583c035788b9e771167e3d06e8110c14e1e1ec0f75ab9e26022c21191b8f1b061839e13e90cca65e585f4ec53772"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) capget(&(0x7f0000000640)={0x20071026, r3}, &(0x7f0000000680)={0x1689, 0x2, 0x80000000, 0x1, 0x80, 0x7}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000a27000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0)) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 184.457018ms ago: executing program 9 (id=2565): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r2, r3) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/1024, 0x400) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 101.015863ms ago: executing program 5 (id=2566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="44ae79b63374ed380530ddcd087d2aaeb85c8c350fbf15e520090de26bfca8", 0x1f, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 0s ago: executing program 5 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r3, r4) kernel console output (not intermixed with test programs): uffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 389.796920][T14804] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 391.131738][T14804] Console: switching to colour frame buffer device 160x50 [ 391.198258][T14804] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 391.538998][ T42] audit: type=1326 audit(1786418668.592:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.5.2016" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x0 [ 391.648453][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2016'. [ 391.654973][T14837] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 391.790284][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 392.156643][T14845] FAULT_INJECTION: forcing a failure. [ 392.156643][T14845] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 392.161656][T14845] CPU: 3 UID: 0 PID: 14845 Comm: syz.2.2021 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.161676][T14845] Tainted: [L]=SOFTLOCKUP [ 392.161680][T14845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.161693][T14845] Call Trace: [ 392.161705][T14845] [ 392.161711][T14845] dump_stack_lvl+0x100/0x190 [ 392.161792][T14845] should_fail_ex.cold+0x5/0xa [ 392.161803][T14845] ? prepare_alloc_pages+0x16d/0x5f0 [ 392.161821][T14845] should_fail_alloc_page+0xeb/0x140 [ 392.161837][T14845] prepare_alloc_pages+0x1f0/0x5f0 [ 392.161856][T14845] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 392.161870][T14845] ? __lock_acquire+0x49f/0x1a40 [ 392.161881][T14845] ? find_held_lock+0x2b/0x80 [ 392.161895][T14845] ? is_bpf_text_address+0x8a/0x1a0 [ 392.161910][T14845] ? is_bpf_text_address+0x8a/0x1a0 [ 392.161927][T14845] ? look_up_lock_class+0x55/0x120 [ 392.161999][T14845] ? register_lock_class+0x40/0x560 [ 392.162010][T14845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.162026][T14845] ? __lock_acquire+0x49f/0x1a40 [ 392.162044][T14845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.162061][T14845] ? policy_nodemask+0xed/0x4f0 [ 392.162078][T14845] alloc_pages_mpol+0x1fb/0x540 [ 392.162095][T14845] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 392.162115][T14845] folio_alloc_mpol_noprof+0x36/0x260 [ 392.162127][T14845] vma_alloc_folio_noprof+0xed/0x1d0 [ 392.162138][T14845] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 392.162153][T14845] do_anonymous_page+0xb2b/0x2080 [ 392.162165][T14845] ? rcu_read_unlock+0x2d/0xb0 [ 392.162180][T14845] __handle_mm_fault+0x1d2c/0x2a00 [ 392.162193][T14845] ? mt_find+0x45e/0x8e0 [ 392.162204][T14845] ? __pfx___handle_mm_fault+0x10/0x10 [ 392.162215][T14845] ? __pfx_mt_find+0x10/0x10 [ 392.162232][T14845] ? find_vma+0xbf/0x140 [ 392.162245][T14845] ? __pfx_find_vma+0x10/0x10 [ 392.162260][T14845] handle_mm_fault+0x37b/0xa30 [ 392.162274][T14845] do_user_addr_fault+0x74c/0x12f0 [ 392.162293][T14845] exc_page_fault+0x6f/0xd0 [ 392.162308][T14845] asm_exc_page_fault+0x26/0x30 [ 392.162319][T14845] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 392.162362][T14845] Code: 89 ee 48 89 ef e8 61 38 ee fc 4d 85 ff 75 26 e8 77 3e ee fc 89 de 4c 89 e7 e8 bd d8 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 51 3e ee fc 48 89 d8 5b 5d 41 [ 392.162373][T14845] RSP: 0018:ffffc9000450fbe8 EFLAGS: 00050246 [ 392.162396][T14845] RAX: 0000000000000001 RBX: 0000000000000178 RCX: 0000000000000178 [ 392.162405][T14845] RDX: 0000000000000001 RSI: ffff88802aec4800 RDI: 0000000080000200 [ 392.162415][T14845] RBP: 0000000080000200 R08: 0000000000000000 R09: ffffed10055d892e [ 392.162425][T14845] R10: ffff88802aec4977 R11: 0000000000000000 R12: ffff88802aec4800 [ 392.162435][T14845] R13: 0000000080000378 R14: 00007ffffffff000 R15: 0000000000000000 [ 392.162459][T14845] ? _copy_to_user+0x93/0xd0 [ 392.162493][T14845] snd_ctl_ioctl+0xe29/0x11b0 [ 392.162553][T14845] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 392.162569][T14845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.162589][T14845] ? get_pid_task+0x106/0x250 [ 392.162607][T14845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.162623][T14845] ? do_vfs_ioctl+0x226/0x13e0 [ 392.162639][T14845] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 392.162656][T14845] snd_ctl_ioctl_compat+0x575/0xbb0 [ 392.162673][T14845] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 392.162689][T14845] ? find_held_lock+0x2b/0x80 [ 392.162702][T14845] ? __fget_files+0x215/0x3d0 [ 392.162711][T14845] ? hook_file_ioctl_common+0x140/0x440 [ 392.162730][T14845] ? __fget_files+0x215/0x3d0 [ 392.162742][T14845] ? __fget_files+0x21f/0x3d0 [ 392.162755][T14845] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 392.162771][T14845] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 392.162789][T14845] __do_fast_syscall_32+0xe7/0x970 [ 392.162806][T14845] ? lockdep_hardirqs_on+0x78/0x100 [ 392.162821][T14845] do_fast_syscall_32+0x32/0x70 [ 392.162837][T14845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.162857][T14845] RIP: 0023:0xf7f56fec [ 392.162870][T14845] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 392.162875][T14845] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 392.162885][T14845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000081785501 [ 392.162892][T14845] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.162898][T14845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.162904][T14845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 392.162910][T14845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.162923][T14845] [ 392.588865][ T9015] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 392.760578][ T9015] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.765756][ T9015] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.770663][ T9015] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.775008][ T9015] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.779103][ T9015] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.785911][ T9015] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.789518][ T9015] usb 7-1: Product: syz [ 392.791372][ T9015] usb 7-1: Manufacturer: syz [ 392.805083][ T9015] cdc_wdm 7-1:1.0: skipping garbage [ 392.807463][ T9015] cdc_wdm 7-1:1.0: skipping garbage [ 392.811895][ T9015] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 392.814504][ T9015] cdc_wdm 7-1:1.0: Unknown control protocol [ 392.934439][T14858] 9p: Bad value for 'rfdno' [ 393.119777][T14858] Console: switching to colour dummy device 80x25 [ 393.690202][T14859] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 393.716671][T14859] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 393.720320][T14859] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff] [ 393.723895][T14859] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 393.727205][T14859] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 393.743069][T14859] pci 0000:00:01.0: Adding to iommu group 1 [ 393.750466][T14859] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 393.752792][T14859] pci 0000:00:01.0: vgaarb: bridge control possible [ 393.754950][T14859] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 393.765775][T14859] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 393.769565][T14859] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 393.772716][T14859] pci 0000:00:04.0: PCI bridge to [bus 01] [ 393.774659][T14859] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 393.778849][T14859] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 393.782897][T14859] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 393.789677][T14859] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 393.805029][T14859] [drm] Found bochs VGA, ID 0xb0c5. [ 393.807254][T14859] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 393.813450][T14859] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 393.970720][ T6584] usb 56-1: device descriptor read/8, error -110 [ 394.037019][T14881] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 394.373634][ T6584] usb usb56-port1: attempt power cycle [ 394.453118][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 394.455738][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 395.088932][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 395.285140][T14910] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 395.289364][T12660] e1000 0000:00:06.0 eth0: Reset adapter [ 395.328548][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 395.332445][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 395.365275][ T6584] usb usb56-port1: unable to enumerate USB device [ 395.368501][ T5814] usb 7-1: USB disconnect, device number 18 [ 395.382696][T14916] futex_wake_op: syz.0.2041 tries to shift op by -1; fix this program [ 395.445315][T14910] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 395.833938][T14929] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 395.916634][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 397.568955][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 397.572249][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 397.900124][T12660] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 405.852327][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2050'. [ 405.905497][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2050'. [ 412.783328][ T42] audit: type=1326 audit(1786418688.848:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.5.2052" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x0 [ 412.905832][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2052'. [ 412.910492][T15034] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 413.008864][T11456] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 413.146626][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 413.211910][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 413.300893][T11456] usb 14-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 413.373406][T11456] usb 14-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 413.377064][T11456] usb 14-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 413.381011][T11456] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 413.386047][T11456] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.389619][T11456] usb 14-1: Product: syz [ 413.391217][T11456] usb 14-1: Manufacturer: syz [ 413.392756][T11456] usb 14-1: SerialNumber: syz [ 413.779396][T15024] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 413.795286][T15024] qnx6: wrong signature (magic) in superblock #1. [ 413.797387][T15024] qnx6: unable to read the first superblock [ 413.798612][T15041] 9p: p9: multiple sources not supported [ 414.146454][T15057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.224752][T15057] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 414.228155][T15057] overlayfs: failed to look up (tracing) for ino (-66) [ 414.883347][T11456] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.885758][T11456] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 414.894475][T11456] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.896917][T11456] snd-usb-audio 14-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 414.904366][T11456] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.928093][T11456] snd-usb-audio 14-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 414.932779][T11456] usb 14-1: USB disconnect, device number 6 [ 414.946207][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.120135][ T5087] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 415.551079][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2063'. [ 415.571177][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2063'. [ 416.401892][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2066'. [ 416.812264][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2069'. [ 416.939024][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2069'. [ 416.981911][T15093] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 417.042625][T15094] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 417.045279][T15094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 417.048658][T15094] vhci_hcd vhci_hcd.0: Device attached [ 417.066133][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.071918][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.116663][T15094] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2068'. [ 417.170204][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 417.181623][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 417.308841][ T6584] usb 48-1: SetAddress Request (6) to port 0 [ 417.310839][ T6584] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 417.512014][T15095] vhci_hcd: connection reset by peer [ 417.512186][ T13] vhci_hcd vhci_hcd.5: stop threads [ 417.512204][ T13] vhci_hcd vhci_hcd.5: release socket [ 417.512237][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 417.514649][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 418.246328][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2074'. [ 418.289593][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2074'. [ 418.535850][T15121] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 418.608118][T15121] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 418.612431][T15121] overlayfs: failed to look up (tracing) for ino (-66) [ 418.749080][T10237] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 419.189154][ T42] audit: type=1326 audit(1786418695.228:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.9.2077" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 419.281538][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2077'. [ 419.287450][T15129] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 419.859639][T10237] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.869803][T10237] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.874700][T10237] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.884059][T10237] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.888268][T10237] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.895769][T10237] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.916435][T10237] usb 10-1: config 0 descriptor?? [ 420.489700][T10237] hid_parser_main: 28 callbacks suppressed [ 420.489729][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.494185][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.496622][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.499193][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.502897][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.505387][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.507804][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.511211][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.513732][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.516474][T10237] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 420.565115][T10237] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 420.730334][T15120] loop6: detected capacity change from 0 to 2640 [ 420.737160][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.741038][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.745907][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.753203][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.758321][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.763960][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.769472][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.775592][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.778593][T15120] ldm_validate_partition_table(): Disk read failed. [ 420.785616][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.791172][T15120] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.799457][T15120] Dev loop6: unable to read RDB block 0 [ 420.806316][T15120] loop6: unable to read partition table [ 420.813205][T15120] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 421.063727][T15143] 9p: Bad value for 'rfdno' [ 422.379661][ T6584] usb 48-1: device descriptor read/8, error -110 [ 422.779776][ T6584] usb usb48-port1: attempt power cycle [ 423.373133][ T6584] usb usb48-port1: unable to enumerate USB device [ 423.983702][ T42] audit: type=1326 audit(1786418700.048:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.5.2088" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x0 [ 424.055485][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'. [ 424.061215][T15171] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 424.195603][ T5814] usb 10-1: USB disconnect, device number 17 [ 424.200983][ T5821] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 424.400933][ T5821] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 424.407811][ T5821] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.438835][ T5821] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.471856][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.479122][ T5821] usb 7-1: Product: syz [ 424.480746][ T5821] usb 7-1: Manufacturer: syz [ 424.484452][ T5821] usb 7-1: SerialNumber: syz [ 424.660672][ T5821] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 424.749432][ T5821] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 424.754621][ T5821] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 425.486540][T15186] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 425.488691][T15186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.564859][T15186] vhci_hcd vhci_hcd.0: Device attached [ 425.717753][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 425.745298][T15186] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2090'. [ 425.868423][ T5814] usb 48-1: SetAddress Request (10) to port 0 [ 425.872248][ T5814] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 426.209126][T15167] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 426.430033][T15200] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2093'. [ 426.436342][T15192] vhci_hcd: connection reset by peer [ 426.439673][ T13] vhci_hcd vhci_hcd.5: stop threads [ 426.441640][ T13] vhci_hcd vhci_hcd.5: release socket [ 426.449258][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 426.554080][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2094'. [ 426.722843][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2094'. [ 426.760927][T15207] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 427.104536][ T60] usb 7-1: USB disconnect, device number 19 [ 427.115537][ T60] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 427.131336][ T60] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 427.138308][ T60] ti_usb_3410_5052 7-1:2.0: device disconnected [ 427.399868][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 427.574005][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 427.589284][T15215] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 427.989045][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 428.139149][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 428.143105][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 428.149045][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.152059][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.154080][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.164741][ T29] usb 5-1: config 0 descriptor?? [ 428.174544][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 429.130097][T15233] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 429.344716][T15237] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 429.347429][T15237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 429.352325][T15237] vhci_hcd vhci_hcd.0: Device attached [ 429.496319][T15237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2100'. [ 429.901586][T15238] vhci_hcd: connection closed [ 429.901750][T11842] vhci_hcd vhci_hcd.5: stop threads [ 429.906906][T11842] vhci_hcd vhci_hcd.5: release socket [ 429.909737][T11842] vhci_hcd vhci_hcd.5: disconnect device [ 430.582791][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2106'. [ 430.708622][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 430.790840][ T5838] usb 5-1: USB disconnect, device number 11 [ 430.819161][ T4195] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 430.944144][ T5814] usb 48-1: device descriptor read/8, error -110 [ 430.947022][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 430.993295][ T4195] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 431.014811][ T4195] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.033758][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 431.058936][ T4195] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.100683][T15261] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 431.108137][ T4195] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.115590][ T4195] usb 14-1: Product: syz [ 431.126207][ T4195] usb 14-1: Manufacturer: syz [ 431.139235][ T4195] usb 14-1: SerialNumber: syz [ 431.253659][ T4195] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 431.298145][ T4195] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 431.333510][ T4195] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 431.379537][ T5814] usb usb48-port1: attempt power cycle [ 431.991064][ T5814] usb usb48-port1: unable to enumerate USB device [ 432.188027][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 432.267149][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 432.288035][T15278] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 432.779217][T15249] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 432.876222][ T5814] usb 14-1: USB disconnect, device number 7 [ 433.142316][ T5814] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 433.216122][ T5814] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 433.226744][ T5814] ti_usb_3410_5052 14-1:2.0: device disconnected [ 433.529099][T10237] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 433.578840][ T4195] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 433.672402][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2118'. [ 433.701486][T10237] usb 5-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 433.712742][T10237] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 433.716552][T10237] usb 5-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 433.731276][T10237] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 433.744379][T10237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.748564][T10237] usb 5-1: Product: syz [ 433.752308][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2118'. [ 433.756158][T10237] usb 5-1: Manufacturer: syz [ 433.758312][T10237] usb 5-1: SerialNumber: syz [ 433.758799][ T4195] usb 10-1: Using ep0 maxpacket: 8 [ 433.763390][ T4195] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.767278][ T4195] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.770786][ T4195] usb 10-1: config 0 interface 0 has no altsetting 0 [ 433.773006][ T4195] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.780339][ T4195] usb 10-1: config 0 descriptor?? [ 433.793313][ T4195] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 433.916407][T15298] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 434.306661][T15299] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 434.311878][T15299] qnx6: wrong signature (magic) in superblock #1. [ 434.316917][T15299] qnx6: unable to read the first superblock [ 434.410436][T15287] 9p: p9: multiple sources not supported [ 434.825528][T10237] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.828647][T10237] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 434.833628][T10237] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.836167][T10237] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 434.841059][T10237] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.866385][T10237] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 434.873336][T10237] usb 5-1: USB disconnect, device number 12 [ 434.932441][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.008878][ T5821] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 435.159287][ T5821] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.163294][ T5821] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.166159][ T5821] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.169589][ T5821] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.173181][ T5821] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.177978][ T5821] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.181108][ T5821] usb 14-1: Product: syz [ 435.182550][ T5821] usb 14-1: Manufacturer: syz [ 435.187164][ T5821] cdc_wdm 14-1:1.0: skipping garbage [ 435.189420][ T5821] cdc_wdm 14-1:1.0: skipping garbage [ 435.192200][ T5821] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 435.194409][ T5821] cdc_wdm 14-1:1.0: Unknown control protocol [ 435.557932][T15312] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 435.560477][T15312] ALSA: mixer_oss: invalid OSS volume 'øÿ ' [ 435.562952][T15312] ALSA: mixer_oss: invalid OSS volume 'šö˜9: óˆœ$ªVñQ™úÐ' [ 435.565914][T15312] ALSA: mixer_oss: invalid OSS volume 'ù6' [ 435.568348][T15312] ALSA: mixer_oss: invalid OSS volume 'z^k`q0ÈŸÀÁ‹…ˆ' [ 435.572636][T15312] ALSA: mixer_oss: invalid OSS volume 'ÅÙº–ÿÿÿ' [ 435.575399][T15312] ALSA: mixer_oss: invalid OSS volume 'dÁ(^qµV[hîX–œAYR)ß¼­pû@!BŒéx' [ 435.579100][T15312] ALSA: mixer_oss: invalid OSS volume 'ÀiM¨[ÿŸ_Mù³ýòB¹…¿¹œœÀ­Wo˜_6' [ 435.582889][T15312] ALSA: mixer_oss: invalid OSS volume '?Â-×ä!Må”iÖɌѩûáç¯0#[’' [ 435.586352][T15312] ALSA: mixer_oss: invalid OSS volume '?z…ѲžXÇv…ïÀαÈårœfŸÀ:¡ˆTk:Ò' [ 435.590121][T15312] ALSA: mixer_oss: invalid OSS volume 'ªï„ˆØmÂÝ*;§EI.ñø¶\Ë=Í%a±R' [ 435.593610][T15312] ALSA: mixer_oss: invalid OSS volume '3(úwS¥ÍÞ¡¬ªåZè&?²„·¦«*ˆ&Á¹H' [ 435.596921][T15312] ALSA: mixer_oss: invalid OSS volume 'þÚÿ|A_ö‚¤K3Ì-ò‚xɦ‚LRŠ|ú½¢”’' [ 435.603775][T15312] ALSA: mixer_oss: invalid OSS volume 'oW@ó@·nÜÑ' [ 435.606566][T15312] ALSA: mixer_oss: invalid OSS volume 'òIÎqoEånÚãMr‰Ôá:°‘'î9Î&Er¸' [ 435.610391][T15312] ALSA: mixer_oss: invalid OSS volume 'îÓgÚØUüâñ§Ç"-Ó`êûKï}X¿ƒ6)0¯n?' [ 435.611310][T15314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2121'. [ 435.613870][T15312] ALSA: mixer_oss: invalid OSS volume '' [ 435.613905][T15312] ALSA: mixer_oss: invalid OSS volume '½…½¯' [ 435.622676][T15312] ALSA: mixer_oss: invalid OSS volume 'LÃÈø (p…¾ ‘ó$uèYG›sG'¯Áá«Ïô`' [ 435.626442][T15312] ALSA: mixer_oss: invalid OSS volume 'EŽå©$qæåoÚ¾ÆÇ<è˜?Æ |ÜÝæ2æõJb' [ 435.629623][T15312] ALSA: mixer_oss: invalid OSS volume '²1ÊѽÏ7@©]MÑÏàôòuI<ó;ÿÿ“ßÚ÷ë' [ 435.632260][T15312] ALSA: mixer_oss: invalid OSS volume '"†óôF±¹š¸:Ýø¡Àb”êÜ>³ã9Yý\' [ 435.634796][T15312] ALSA: mixer_oss: invalid OSS volume 'ì›Ô>n‹&' [ 435.636855][T15312] ALSA: mixer_oss: invalid OSS volume '8uð*‚‹ñÜ}ùÈåÚ"ß¹ÚËõRžN™A(Ø5øTe' [ 435.639800][T15312] ALSA: mixer_oss: invalid OSS volume '¶‚f.›,Ã&:Jºb¶<©:SÀô¿&|ÝÁ“c}ÙvF' [ 435.645258][T15312] ALSA: mixer_oss: invalid OSS volume 'øÿ ' [ 435.675188][T15312] ALSA: mixer_oss: invalid OSS volume 'šö˜9: óˆœ$ªVñQ™úÐ' [ 435.677595][T15312] ALSA: mixer_oss: invalid OSS volume 'ù6' [ 435.679669][T15312] ALSA: mixer_oss: invalid OSS volume 'z^k`q0ÈŸÀÁ‹…ˆ' [ 435.681945][T15312] ALSA: mixer_oss: invalid OSS volume 'ÅÙº–ÿÿÿ' [ 435.683958][T15312] ALSA: mixer_oss: invalid OSS volume 'dÁ(^qµV8hîX–œAYR)ß¼­pû@!BŒéx' [ 435.686587][T15312] ALSA: mixer_oss: invalid OSS volume 'ÀiM¨[ÿŸ_Mù³ýòB¹…¿¹œœÀ­Wo˜_6' [ 435.689520][T15312] ALSA: mixer_oss: invalid OSS volume '?Â-×ä!Må”iÖɌѩûáç¯0#[’' [ 435.692604][T15312] ALSA: mixer_oss: invalid OSS volume '?z…ѲžXÇv…ïÀαÈårœfŸÀ:¡ˆTk:Ò' [ 435.696047][T15312] ALSA: mixer_oss: invalid OSS volume 'ªï„ˆØmÂÝ*;§EI.ñø¶\Ë=Í%a±R' [ 435.699588][T15312] ALSA: mixer_oss: invalid OSS volume '3(úwS¥ÍÞ¡¬ªåZè&?²„·¦«*ˆ&Á¹H' [ 435.702852][T15312] ALSA: mixer_oss: invalid OSS volume 'þÚÿ|A_ö‚¤K3Ì-ò‚xɦ‚LRŠ|ú½¢”’' [ 435.706264][T15312] ALSA: mixer_oss: invalid OSS volume 'oW@ó@·nÜÑõ9½C' [ 435.709214][T15312] ALSA: mixer_oss: invalid OSS volume 'òIÎqoEånÚãMr‰Ôá:°‘'î9Î&Er¸' [ 435.712606][T15312] ALSA: mixer_oss: invalid OSS volume 'îÓgÚØUüâñ§Ç"-Ó`êûKï}X¿ƒ6)0¯n?' [ 436.356877][ T5838] usb 10-1: USB disconnect, device number 18 [ 436.436267][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'. [ 436.612369][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 436.653506][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'. [ 436.673800][T15335] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 437.018879][ T4195] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 437.408903][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 437.629429][ T4195] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 437.633716][ T4195] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.637934][ T4195] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.643592][ T4195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.646193][ T4195] usb 7-1: Product: syz [ 437.647514][ T4195] usb 7-1: Manufacturer: syz [ 437.649372][ T4195] usb 7-1: SerialNumber: syz [ 437.653959][ T4195] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 437.662301][ T4195] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 437.667430][ T4195] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 437.783408][ T4195] usb 14-1: USB disconnect, device number 8 [ 437.914963][ T5838] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 437.950236][ T42] audit: type=1326 audit(1786418714.018:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.0.2131" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x0 [ 438.063761][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 438.068015][T15351] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 438.872088][ T5838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 438.878784][ T5838] usb 10-1: not running at top speed; connect to a high speed hub [ 438.885923][ T5838] usb 10-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 438.891010][ T5838] usb 10-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 438.896080][ T5838] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.900112][ T5838] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.905829][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 438.908015][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.914041][ T5838] usb 10-1: Product: syz [ 438.917311][ T5838] usb 10-1: Manufacturer: syz [ 438.921782][ T5838] usb 10-1: SerialNumber: syz [ 438.955790][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 438.975664][T15360] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 439.172941][T15331] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 439.183381][ T60] usb 7-1: USB disconnect, device number 20 [ 439.191855][ T60] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 439.201187][ T60] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 439.205372][ T60] ti_usb_3410_5052 7-1:2.0: device disconnected [ 439.577469][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.579587][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.192493][ T5838] usb 10-1: 0:2 : does not exist [ 440.249482][ T5838] usb 10-1: USB disconnect, device number 19 [ 440.765609][T15370] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 440.767739][T15370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 440.770892][T15370] vhci_hcd vhci_hcd.0: Device attached [ 440.800467][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.806231][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.824757][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 440.908421][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 440.931487][T15382] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 440.969525][ T4195] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 441.039137][ T5821] usb 38-1: SetAddress Request (30) to port 0 [ 441.043804][ T5821] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 441.141434][ T4195] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 441.149363][ T4195] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.157253][ T4195] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.174166][ T4195] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.177695][ T4195] usb 14-1: Product: syz [ 441.180089][ T4195] usb 14-1: Manufacturer: syz [ 441.182285][ T4195] usb 14-1: SerialNumber: syz [ 441.225747][ T4195] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 441.257330][ T4195] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 441.291100][ T4195] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 441.807425][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 441.808991][T15370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2136'. [ 441.849626][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 441.859974][T15392] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 441.941834][T15375] vhci_hcd: connection reset by peer [ 441.944641][ T13] vhci_hcd vhci_hcd.0: stop threads [ 441.946352][ T13] vhci_hcd vhci_hcd.0: release socket [ 441.948339][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 442.308883][T10237] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 442.786087][T15372] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 442.799839][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 442.843130][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 442.869368][T15400] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 443.328340][T10237] usb 10-1: unable to get BOS descriptor or descriptor too short [ 443.853804][T10237] usb 10-1: not running at top speed; connect to a high speed hub [ 443.858857][T10237] usb 10-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 443.871051][ T29] usb 14-1: USB disconnect, device number 9 [ 443.874968][T10237] usb 10-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 443.878012][T10237] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.880780][T10237] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.887597][T10237] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.890440][T10237] usb 10-1: Product: syz [ 443.891812][T10237] usb 10-1: Manufacturer: syz [ 443.893747][T10237] usb 10-1: SerialNumber: syz [ 443.899766][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 443.911984][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 443.916662][ T29] ti_usb_3410_5052 14-1:2.0: device disconnected [ 444.214183][T15415] /dev/nullb0: Can't open blockdev [ 444.353271][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 444.942195][T15432] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 444.945019][T15432] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 444.949895][T15432] vhci_hcd vhci_hcd.0: Device attached [ 445.019763][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.024296][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.124837][T10237] usb 10-1: 0:2 : does not exist [ 445.163823][T10237] usb 10-1: USB disconnect, device number 20 [ 445.218240][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.238978][ T29] usb 56-1: SetAddress Request (18) to port 0 [ 445.256423][ T29] usb 56-1: new SuperSpeed USB device number 18 using vhci_hcd [ 445.393622][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2149'. [ 445.949081][T15433] vhci_hcd: connection reset by peer [ 445.951115][ T13] vhci_hcd vhci_hcd.9: stop threads [ 445.953128][ T13] vhci_hcd vhci_hcd.9: release socket [ 445.957384][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 446.078145][ T224] Bluetooth: hci4: Frame reassembly failed (-84) [ 446.084503][T15441] netlink: 'syz.2.2152': attribute type 2 has an invalid length. [ 446.130270][ T5821] usb 38-1: device descriptor read/8, error -110 [ 446.331044][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2153'. [ 446.378128][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2153'. [ 446.388677][T15447] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 446.419338][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 446.441153][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 446.523526][ T5821] usb usb38-port1: attempt power cycle [ 447.155388][ T5821] usb usb38-port1: unable to enumerate USB device [ 447.312101][T15451] Bluetooth: MGMT ver 1.23 [ 447.375423][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2155'. [ 447.443841][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2155'. [ 447.691007][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 448.129854][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 448.140635][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 448.218004][ T42] audit: type=1326 audit(1786418723.229:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 448.226886][ T42] audit: type=1326 audit(1786418723.229:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff9017 code=0x7ffc0000 [ 448.244157][ T42] audit: type=1326 audit(1786418723.229:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 448.251014][ T42] audit: type=1326 audit(1786418723.229:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff9017 code=0x7ffc0000 [ 448.257344][ T42] audit: type=1326 audit(1786418723.229:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 448.274575][ T42] audit: type=1326 audit(1786418723.229:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff9017 code=0x7ffc0000 [ 448.281872][ T42] audit: type=1326 audit(1786418723.229:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 448.288321][ T42] audit: type=1326 audit(1786418723.229:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff9017 code=0x7ffc0000 [ 448.294707][ T42] audit: type=1326 audit(1786418723.229:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 448.300985][ T42] audit: type=1326 audit(1786418723.229:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.5.2158" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff9017 code=0x7ffc0000 [ 449.000044][T15478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 449.002752][T15478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 449.006602][T15478] vhci_hcd vhci_hcd.0: Device attached [ 449.018624][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.037738][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.064457][T15478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2163'. [ 449.190050][T15479] vhci_hcd: connection closed [ 449.190308][ T13] vhci_hcd vhci_hcd.2: stop threads [ 449.196423][ T13] vhci_hcd vhci_hcd.2: release socket [ 449.200142][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 450.182626][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 450.303031][ T29] usb 56-1: device descriptor read/8, error -110 [ 450.383516][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 450.579243][T15498] nbd: must specify at least one socket [ 450.719380][ T29] usb usb56-port1: attempt power cycle [ 451.480564][T15508] __nla_validate_parse: 2 callbacks suppressed [ 451.480780][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 451.620214][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 451.650185][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 451.836803][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 452.634065][ T29] usb usb56-port1: unable to enumerate USB device [ 453.526052][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2179'. [ 453.686630][T15525] configfs-gadget.g1 gadget.0: HOST MAC ae:51:39:29:13:38 [ 453.690989][T15525] configfs-gadget.g1 gadget.0: MAC 96:cc:f5:eb:17:3c [ 453.710034][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.723608][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.732336][T15542] netlink: 'syz.2.2181': attribute type 2 has an invalid length. [ 453.766343][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 453.940967][ T5821] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 453.968814][ T4195] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 454.089088][ T5821] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 454.093210][ T5821] usb 5-1: Dual-Role OTG device on HNP port [ 454.095748][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.131232][ T4195] usb 14-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 454.135291][ T4195] usb 14-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 454.138266][ T4195] usb 14-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 454.141463][ T5821] gspca_main: spca501-2.14.0 probing 0000:0000 [ 454.142288][ T4195] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 454.144575][ T5821] gspca_spca501: reg write: error -32 [ 454.149651][ T4195] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.150487][ T5821] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 454.153369][ T4195] usb 14-1: Product: syz [ 454.155546][ T5821] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 454.156982][ T4195] usb 14-1: Manufacturer: syz [ 454.161012][ T5821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.162429][ T4195] usb 14-1: SerialNumber: syz [ 454.334161][T15563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2183'. [ 454.381801][ T5821] usb 5-1: No union descriptors [ 454.509130][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2183'. [ 454.533568][T15565] /dev/nullb0: Can't open blockdev [ 454.623705][T15565] 9p: p9: multiple sources not supported [ 455.146461][ T4195] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.149428][ T4195] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 455.160793][ T4195] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.163589][ T4195] snd-usb-audio 14-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 455.175853][ T4195] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.202914][ T4195] snd-usb-audio 14-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 455.210037][ T4195] usb 14-1: USB disconnect, device number 10 [ 455.222178][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 455.809843][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 455.812464][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 456.869866][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2190'. [ 459.123724][T15600] syz.2.2193 (15600): drop_caches: 2 [ 459.395851][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.399670][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.483411][T15618] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 459.487075][T15618] qnx6: wrong signature (magic) in superblock #1. [ 459.499827][T15618] qnx6: unable to read the first superblock [ 459.558635][T15621] 9p: p9: multiple sources not supported [ 459.769801][T15623] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2199'. [ 459.773601][T15623] nbd: must specify at least one socket [ 460.541734][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 462.249166][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.588798][ T5838] usb 14-1: new full-speed USB device number 11 using dummy_hcd [ 462.845787][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.845864][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.845921][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.846044][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.846096][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.970112][ T5838] usb 14-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 462.975008][ T5838] usb 14-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 462.978802][ T5838] usb 14-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 462.983100][ T5838] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 462.989523][ T5838] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.992969][ T5838] usb 14-1: Product: syz [ 462.994765][ T5838] usb 14-1: Manufacturer: syz [ 462.996788][ T5838] usb 14-1: SerialNumber: syz [ 463.069661][T15636] netlink: 'syz.5.2202': attribute type 2 has an invalid length. [ 463.336798][T15631] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 463.345147][T15631] qnx6: wrong signature (magic) in superblock #1. [ 463.362192][T15645] 9p: p9: multiple sources not supported [ 463.368058][T15631] qnx6: unable to read the first superblock [ 463.509849][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.681272][T15658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2206'. [ 463.684305][T15658] nbd: must specify at least one socket [ 464.375366][ T5838] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 464.399144][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.403107][ T5838] snd-usb-audio 14-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 464.409439][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.442645][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 464.446475][ T5838] snd-usb-audio 14-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 464.454340][ T5838] usb 14-1: USB disconnect, device number 11 [ 464.473120][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 464.645432][T15671] FAULT_INJECTION: forcing a failure. [ 464.645432][T15671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.650472][T15671] CPU: 1 UID: 0 PID: 15671 Comm: syz.2.2211 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.650491][T15671] Tainted: [L]=SOFTLOCKUP [ 464.650496][T15671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.650510][T15671] Call Trace: [ 464.650522][T15671] [ 464.650527][T15671] dump_stack_lvl+0x100/0x190 [ 464.650603][T15671] should_fail_ex.cold+0x5/0xa [ 464.650616][T15671] _copy_from_iter+0x1f4/0x1690 [ 464.650675][T15671] ? __pfx__copy_from_iter+0x10/0x10 [ 464.650692][T15671] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 464.650711][T15671] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 464.650773][T15671] skb_copy_datagram_from_iter+0x11f/0x720 [ 464.650791][T15671] packet_sendmsg+0x224f/0x4eb0 [ 464.650826][T15671] ? __pfx___might_resched+0x10/0x10 [ 464.650846][T15671] ? aa_sk_perm+0x309/0xaa0 [ 464.650868][T15671] ? __pfx_aa_sk_perm+0x10/0x10 [ 464.650882][T15671] ? __pfx_packet_sendmsg+0x10/0x10 [ 464.650896][T15671] ? __might_fault+0xc5/0x140 [ 464.650912][T15671] ? apparmor_socket_sendmsg+0x15b/0x270 [ 464.650927][T15671] __sys_sendto+0x48b/0x4e0 [ 464.650940][T15671] ? __pfx_packet_sendmsg+0x10/0x10 [ 464.650955][T15671] ? __pfx___sys_sendto+0x10/0x10 [ 464.650979][T15671] ? fput+0x79/0x100 [ 464.650992][T15671] ? ksys_write+0x1ac/0x250 [ 464.651004][T15671] __ia32_sys_sendto+0xdd/0x1b0 [ 464.651018][T15671] ? __do_fast_syscall_32+0x98/0x970 [ 464.651071][T15671] ? lockdep_hardirqs_on+0x78/0x100 [ 464.651086][T15671] __do_fast_syscall_32+0xe7/0x970 [ 464.651102][T15671] ? lockdep_hardirqs_on+0x78/0x100 [ 464.651117][T15671] do_fast_syscall_32+0x32/0x70 [ 464.651134][T15671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.651148][T15671] RIP: 0023:0xf7f56fec [ 464.651162][T15671] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 464.651174][T15671] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 464.651191][T15671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 464.651197][T15671] RDX: 0000000000000028 RSI: 0000000000040880 RDI: 0000000080000200 [ 464.651204][T15671] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 464.651210][T15671] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.651216][T15671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.651230][T15671] [ 464.785687][T15678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 464.787773][T15678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 464.797477][T15678] vhci_hcd vhci_hcd.0: Device attached [ 464.813937][ T42] kauditd_printk_skb: 7323 callbacks suppressed [ 464.813956][ T42] audit: type=1326 audit(1786418737.871:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.9.2212" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 464.830715][T15678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2208'. [ 464.852834][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 464.862397][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 465.068987][ T40] usb 38-1: SetAddress Request (34) to port 0 [ 465.071111][ T40] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 465.478925][T15679] vhci_hcd: connection reset by peer [ 465.481172][ T13] vhci_hcd vhci_hcd.0: stop threads [ 465.483216][ T13] vhci_hcd vhci_hcd.0: release socket [ 465.485945][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 465.568805][ T29] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 465.742027][ T29] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 466.068788][ T5838] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 466.219256][ T5838] usb 7-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 466.223232][ T5838] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 466.226032][ T5838] usb 7-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 466.229292][ T5838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 466.234442][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.237018][ T5838] usb 7-1: Product: syz [ 466.238347][ T5838] usb 7-1: Manufacturer: syz [ 466.241005][ T5838] usb 7-1: SerialNumber: syz [ 466.377800][ T29] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.386513][ T29] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.399191][ T29] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.411163][ T29] usb 14-1: Product: syz [ 466.412652][ T29] usb 14-1: Manufacturer: syz [ 466.416321][ T29] usb 14-1: SerialNumber: syz [ 466.433235][ T29] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 466.440614][ T29] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 466.446112][T15707] tmpfs: Bad value for 'mpol' [ 466.449941][ T29] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 466.472504][T15705] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 466.494285][T15705] qnx6: wrong signature (magic) in superblock #1. [ 466.497433][T15705] qnx6: unable to read the first superblock [ 466.557446][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 466.558290][T15711] 9p: p9: multiple sources not supported [ 466.624028][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.626438][ T5838] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 466.634768][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.638491][ T5838] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 466.644003][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.655971][ T1135] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 466.660277][ T1135] sr 2:0:0:0: [sr0] tag#14 Sense Key : Illegal Request [current] [ 466.663590][ T1135] sr 2:0:0:0: [sr0] tag#14 Add. Sense: Invalid command operation code [ 466.666934][ T1135] sr 2:0:0:0: [sr0] tag#14 CDB: opcode=0xf0 (vendor) f0 76 8e 74 58 35 d2 b6 ed f9 3d dd [ 466.684844][ T5838] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 466.689918][ T5838] usb 7-1: USB disconnect, device number 21 [ 466.704158][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 466.901670][T15720] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2220'. [ 466.904686][T15720] nbd: must specify at least one socket [ 467.412383][ T5731] Bluetooth: hci0: command 0x0406 tx timeout [ 467.414423][T15692] Bluetooth: hci2: command 0x0406 tx timeout [ 467.743234][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2222'. [ 467.770772][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2222'. [ 467.969414][T15691] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 468.729216][ T59] usb 14-1: USB disconnect, device number 12 [ 468.741512][ T59] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 468.755763][ T59] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 468.768911][ T59] ti_usb_3410_5052 14-1:2.0: device disconnected [ 468.878764][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 469.028784][ T29] usb 7-1: device descriptor read/64, error -71 [ 469.058833][ T5838] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 469.282757][ T5838] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.298922][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 469.303065][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2226'. [ 469.449891][ T29] usb 7-1: device descriptor read/64, error -71 [ 469.569193][ T29] usb usb7-port1: attempt power cycle [ 469.655470][T15745] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 469.658095][T15745] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 469.667654][T15745] vhci_hcd vhci_hcd.0: Device attached [ 469.764704][T15745] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2227'. [ 469.928837][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 469.958814][ T6584] usb 56-1: SetAddress Request (22) to port 0 [ 469.960862][ T6584] usb 56-1: new SuperSpeed USB device number 22 using vhci_hcd [ 469.963805][ T29] usb 7-1: device descriptor read/8, error -71 [ 470.022509][ T5838] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.025228][ T5838] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.028264][ T5838] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.031140][ T5838] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.035712][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.038249][ T5838] usb 10-1: Product: syz [ 470.039682][ T5838] usb 10-1: Manufacturer: syz [ 470.047390][ T5838] cdc_wdm 10-1:1.0: skipping garbage [ 470.049175][ T5838] cdc_wdm 10-1:1.0: skipping garbage [ 470.064705][ T5838] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 470.067270][ T5838] cdc_wdm 10-1:1.0: Unknown control protocol [ 470.139117][ T40] usb 38-1: device descriptor read/8, error -110 [ 470.174985][T15746] vhci_hcd: connection reset by peer [ 470.177331][T11842] vhci_hcd vhci_hcd.9: stop threads [ 470.180861][T11842] vhci_hcd vhci_hcd.9: release socket [ 470.183191][T11842] vhci_hcd vhci_hcd.9: disconnect device [ 470.198898][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 470.219908][ T29] usb 7-1: device descriptor read/8, error -71 [ 470.332353][ T29] usb usb7-port1: unable to enumerate USB device [ 470.498365][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'. [ 470.546241][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 471.178472][ T40] usb usb38-port1: attempt power cycle [ 471.210087][T15692] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 471.451062][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 471.458896][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 471.468959][T15761] netlink: 'syz.2.2231': attribute type 13 has an invalid length. [ 471.471478][T15761] netlink: 'syz.2.2231': attribute type 14 has an invalid length. [ 471.630604][T15692] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 471.931526][ T29] usb 10-1: USB disconnect, device number 21 [ 472.030074][ T40] usb usb38-port1: unable to enumerate USB device [ 472.225085][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2234'. [ 472.628321][T15782] netlink: 'syz.9.2235': attribute type 2 has an invalid length. [ 472.718986][T15781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.722890][T15781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.986620][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'. [ 473.039712][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 473.745767][T15791] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 473.747759][T15791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 473.752029][T15791] vhci_hcd vhci_hcd.0: Device attached [ 473.792083][T15791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2236'. [ 473.982886][T15792] vhci_hcd: connection closed [ 473.983388][T11842] vhci_hcd vhci_hcd.5: stop threads [ 473.987183][T11842] vhci_hcd vhci_hcd.5: release socket [ 473.989916][T11842] vhci_hcd vhci_hcd.5: disconnect device [ 474.018796][ T29] usb 48-1: enqueue for inactive port 0 [ 474.477862][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 474.525064][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 474.699120][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 475.066310][ T6584] usb 56-1: device descriptor read/8, error -110 [ 475.259887][ T29] usb usb48-port1: attempt power cycle [ 475.318767][ T5838] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 475.499305][ T5838] usb 14-1: Using ep0 maxpacket: 8 [ 475.504010][ T5838] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 475.511973][ T5838] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.517431][ T5838] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.521903][ T5838] usb 14-1: config 0 interface 0 has no altsetting 0 [ 475.526849][ T5838] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.556967][ T5838] usb 14-1: config 0 descriptor?? [ 475.714923][T15807] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 475.717476][T15807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 475.722362][T15807] vhci_hcd vhci_hcd.0: Device attached [ 475.778850][ T29] usb 48-1: SetAddress Request (17) to port 0 [ 475.781799][T15807] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2243'. [ 475.784950][ T29] usb 48-1: new SuperSpeed USB device number 17 using vhci_hcd [ 475.810354][ T6584] usb usb56-port1: attempt power cycle [ 476.274226][ T5838] usbhid 14-1:0.0: can't add hid device: -71 [ 476.276871][ T5838] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 476.299366][ T5838] usb 14-1: USB disconnect, device number 13 [ 476.317494][T15808] vhci_hcd: connection reset by peer [ 476.321714][ T5813] vhci_hcd vhci_hcd.5: stop threads [ 476.323432][ T5813] vhci_hcd vhci_hcd.5: release socket [ 476.334182][ T5813] vhci_hcd vhci_hcd.5: disconnect device [ 476.372233][ T6584] usb usb56-port1: unable to enumerate USB device [ 476.511561][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.516501][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.686854][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 476.712346][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 477.178809][ T59] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 477.330534][ T59] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 477.335455][ T59] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 477.341129][ T59] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 477.347434][ T59] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.351062][ T59] usb 14-1: Product: syz [ 477.352876][ T59] usb 14-1: Manufacturer: syz [ 477.354857][ T59] usb 14-1: SerialNumber: syz [ 477.362742][ T59] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 477.378362][ T59] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 477.388275][ T59] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 477.657788][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2249'. [ 477.693269][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 478.929220][T15824] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 479.009756][ T40] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 479.180485][ T40] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 479.186240][ T40] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.194601][ T40] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.214931][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.218634][ T40] usb 10-1: Product: syz [ 479.221926][ T40] usb 10-1: Manufacturer: syz [ 479.223997][ T40] usb 10-1: SerialNumber: syz [ 479.251806][ T40] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 479.282563][ T40] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 479.334631][ T40] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 479.484781][T15844] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 479.508807][T15844] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 479.531969][T15844] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 479.590578][T15844] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 479.876415][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'. [ 479.935578][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 479.964462][ T59] usb 14-1: USB disconnect, device number 14 [ 479.970065][ T59] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 479.981792][ T59] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 479.989801][ T59] ti_usb_3410_5052 14-1:2.0: device disconnected [ 480.248130][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 480.286704][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 480.848978][ T29] usb 48-1: device descriptor read/8, error -110 [ 480.959978][ T29] usb usb48-port1: unable to enumerate USB device [ 481.290485][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.481200][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.567319][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 481.645029][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 482.173934][ T5821] usb 10-1: USB disconnect, device number 22 [ 482.325302][ T5821] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 482.348445][ T5821] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 482.352546][ T5821] ti_usb_3410_5052 10-1:2.0: device disconnected [ 482.472668][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2261'. [ 482.525275][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2261'. [ 483.226642][T15881] netlink: 'syz.2.2262': attribute type 2 has an invalid length. [ 483.377750][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 483.398605][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2264'. [ 483.443813][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 485.328835][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 485.328871][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 485.511803][ T5838] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 485.517292][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 485.612850][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2270'. [ 485.678938][ T5838] usb 14-1: Using ep0 maxpacket: 8 [ 485.682367][ T5838] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 485.690181][ T5838] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.697423][ T5838] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.709377][ T5838] usb 14-1: config 0 interface 0 has no altsetting 0 [ 485.717224][ T5838] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.730475][ T5838] usb 14-1: config 0 descriptor?? [ 486.363095][ T5838] usbhid 14-1:0.0: can't add hid device: -71 [ 486.366694][ T5838] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 486.375170][ T5838] usb 14-1: USB disconnect, device number 15 [ 486.529645][T15919] netlink: 'syz.5.2274': attribute type 11 has an invalid length. [ 486.609136][T15919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.612342][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.617205][T15919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.655724][T15919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.676088][T15919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.720149][T15919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.734485][T15919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.752967][T15919] veth1_vlan: left promiscuous mode [ 486.758937][T15919] veth0_vlan: left promiscuous mode [ 486.770346][T15919] veth0_vlan: entered promiscuous mode [ 486.774600][T15919] veth1_vlan: entered promiscuous mode [ 486.786741][T15919] veth1_macvtap: left promiscuous mode [ 486.789628][T15919] veth0_macvtap: left promiscuous mode [ 486.791999][T15919] veth0_macvtap: entered promiscuous mode [ 486.794456][T15919] veth1_macvtap: entered promiscuous mode [ 486.799829][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.803408][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.806171][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.809930][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.825137][ T59] lo speed is unknown, defaulting to 1000 [ 486.834431][ T59] syz2: Port: 1 Link ACTIVE [ 486.845730][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.848834][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.439256][T11842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.449259][T11842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.465761][T11842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.475086][T11842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.541861][ T5743] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 490.779098][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2286'. [ 491.006490][T15977] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 491.457776][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2286'. [ 492.468502][ T42] audit: type=1326 audit(1786418763.520:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15998 comm="syz.5.2292" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x0 [ 492.634662][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 492.675036][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 492.689467][T16014] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 492.711815][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2297'. [ 492.800472][T16018] binder: 16017:16018 ioctl c00c6211 0 returned -14 [ 492.829411][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 492.874733][T16020] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 493.028832][ T60] usb 14-1: new full-speed USB device number 16 using dummy_hcd [ 493.188164][ T60] usb 14-1: unable to get BOS descriptor or descriptor too short [ 493.193240][ T60] usb 14-1: not running at top speed; connect to a high speed hub [ 493.198067][ T60] usb 14-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 493.208815][ T60] usb 14-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 493.215196][ T60] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 493.220746][ T60] usb 14-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.234143][ T60] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.237060][ T60] usb 14-1: Product: syz [ 493.240795][ T60] usb 14-1: Manufacturer: syz [ 493.243236][ T60] usb 14-1: SerialNumber: syz [ 495.470089][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2307'. [ 495.553515][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 495.584252][T16052] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 495.840417][ T5838] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 495.885248][ T5743] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 496.074914][ T60] usb 14-1: 0:2 : does not exist [ 496.354684][ T60] usb 14-1: USB disconnect, device number 16 [ 496.376246][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 496.499208][ T5838] usb 7-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 496.503187][ T5838] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 496.505987][ T5838] usb 7-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 496.509377][ T5838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 496.514610][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.517140][ T5838] usb 7-1: Product: syz [ 496.518447][ T5838] usb 7-1: Manufacturer: syz [ 496.520126][ T5838] usb 7-1: SerialNumber: syz [ 496.815490][T16044] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 496.845165][T16044] qnx6: wrong signature (magic) in superblock #1. [ 496.847796][T16044] qnx6: unable to read the first superblock [ 496.912926][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2316'. [ 496.938439][T16079] 9p: p9: multiple sources not supported [ 497.152572][T16082] netlink: 'syz.0.2313': attribute type 2 has an invalid length. [ 497.178967][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 497.391473][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.397615][ T5838] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 497.402441][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.404895][ T5838] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 497.410132][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.430561][ T5838] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 497.434514][ T5838] usb 7-1: USB disconnect, device number 26 [ 497.469443][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 497.743740][T16085] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2317'. [ 497.767117][T16085] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2317'. [ 497.873161][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 498.058216][ T5087] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 499.175586][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 499.389004][ T5821] usb 14-1: new full-speed USB device number 17 using dummy_hcd [ 499.540421][ T5821] usb 14-1: unable to get BOS descriptor or descriptor too short [ 499.543421][ T5821] usb 14-1: not running at top speed; connect to a high speed hub [ 499.546180][ T5821] usb 14-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 499.550552][ T5821] usb 14-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 499.553853][ T5821] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 499.556993][ T5821] usb 14-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.563461][ T5821] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.566075][ T5821] usb 14-1: Product: syz [ 499.567872][ T5821] usb 14-1: Manufacturer: syz [ 499.569926][ T5821] usb 14-1: SerialNumber: syz [ 500.889238][ T5821] usb 14-1: 0:2 : does not exist [ 501.060144][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.118928][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.205751][ T5821] usb 14-1: USB disconnect, device number 17 [ 501.246064][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.257432][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.271420][ T42] audit: type=1326 audit(1786418771.333:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.2.2333" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x0 [ 501.397972][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 501.402937][T16135] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 501.510898][T10237] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 501.667255][T10237] usb 10-1: unable to get BOS descriptor or descriptor too short [ 501.671322][T10237] usb 10-1: not running at top speed; connect to a high speed hub [ 501.674664][T10237] usb 10-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 501.681445][T10237] usb 10-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 501.688018][T10237] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 501.692617][T10237] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.703133][T10237] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.705888][T10237] usb 10-1: Product: syz [ 501.707600][T10237] usb 10-1: Manufacturer: syz [ 501.709470][T10237] usb 10-1: SerialNumber: syz [ 502.977730][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.986048][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.737709][T10237] usb 10-1: 0:2 : does not exist [ 503.792560][T10237] usb 10-1: USB disconnect, device number 23 [ 503.806075][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 503.917581][T16170] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 503.919707][T16170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.922806][T16170] vhci_hcd vhci_hcd.0: Device attached [ 503.934775][T16170] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2342'. [ 504.018830][ T40] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 504.181419][ T40] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 504.189926][ T6584] usb 56-1: SetAddress Request (26) to port 0 [ 504.195293][ T40] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.208507][ T6584] usb 56-1: new SuperSpeed USB device number 26 using vhci_hcd [ 504.229837][ T40] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.241702][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.252192][ T40] usb 7-1: Product: syz [ 504.257366][ T40] usb 7-1: Manufacturer: syz [ 504.263274][ T40] usb 7-1: SerialNumber: syz [ 504.312439][ T40] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 504.339113][ T40] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 504.349559][ T40] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 504.543445][T16171] vhci_hcd: connection reset by peer [ 504.547232][ T13] vhci_hcd vhci_hcd.9: stop threads [ 504.554293][ T13] vhci_hcd vhci_hcd.9: release socket [ 504.562816][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 505.008829][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 505.809763][T16166] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 505.941852][ T59] usb 7-1: USB disconnect, device number 27 [ 505.954020][ T59] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 505.971861][ T59] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 505.986149][ T59] ti_usb_3410_5052 7-1:2.0: device disconnected [ 506.031458][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 506.218781][T10237] usb 14-1: new full-speed USB device number 18 using dummy_hcd [ 506.264518][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 506.296694][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 506.390947][T10237] usb 14-1: unable to get BOS descriptor or descriptor too short [ 506.394886][T10237] usb 14-1: not running at top speed; connect to a high speed hub [ 506.397944][T10237] usb 14-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 506.405770][T10237] usb 14-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 506.410281][T10237] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.414581][T10237] usb 14-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.421724][T10237] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.425352][T10237] usb 14-1: Product: syz [ 506.426797][T10237] usb 14-1: Manufacturer: syz [ 506.428359][T10237] usb 14-1: SerialNumber: syz [ 506.837576][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'. [ 507.292976][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 507.371161][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2354'. [ 507.404295][T16206] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 507.908920][T10237] usb 14-1: 0:2 : does not exist [ 507.942588][T10237] usb 14-1: USB disconnect, device number 18 [ 507.966682][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 508.230508][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 508.334761][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 508.357385][T16213] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 509.268945][ T6584] usb 56-1: device descriptor read/8, error -110 [ 509.285974][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.290817][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.392561][T16223] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 509.404578][T16223] qnx6: wrong signature (magic) in superblock #1. [ 509.417598][T16223] qnx6: unable to read the first superblock [ 509.489999][ T59] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 509.649441][ T59] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.653939][ T59] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.656747][ T59] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.660179][ T59] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.663092][ T59] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.667674][ T59] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.670296][ T59] usb 14-1: Product: syz [ 509.671661][ T59] usb 14-1: Manufacturer: syz [ 509.677843][ T59] cdc_wdm 14-1:1.0: skipping garbage [ 509.680197][ T59] cdc_wdm 14-1:1.0: skipping garbage [ 509.683014][ T59] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 509.685056][ T59] cdc_wdm 14-1:1.0: Unknown control protocol [ 509.698763][ T34] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 509.727129][T16223] 9p: p9: multiple sources not supported [ 509.871768][ T34] usb 10-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 509.875529][ T34] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 509.879241][ T34] usb 10-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 509.883101][ T34] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 509.888378][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.891547][ T34] usb 10-1: Product: syz [ 509.892947][ T34] usb 10-1: Manufacturer: syz [ 509.894698][ T34] usb 10-1: SerialNumber: syz [ 510.147381][T16226] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 510.156935][T16226] qnx6: wrong signature (magic) in superblock #1. [ 510.168717][T16226] qnx6: unable to read the first superblock [ 510.183089][T16226] 9p: p9: multiple sources not supported [ 510.339664][ T6584] usb usb56-port1: attempt power cycle [ 510.533655][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 510.631806][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.655583][ T34] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 510.722571][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.747672][ T34] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 510.811766][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.838194][ T34] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 510.845169][ T34] usb 10-1: USB disconnect, device number 24 [ 510.902236][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 510.942888][ T6584] usb usb56-port1: unable to enumerate USB device [ 511.467994][T10237] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 511.968851][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 512.143603][ T34] usb 14-1: USB disconnect, device number 19 [ 512.385481][T16259] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 512.387725][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 512.391040][T16259] vhci_hcd vhci_hcd.0: Device attached [ 512.416242][T16259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2371'. [ 512.421952][T16263] vhci_hcd: connection closed [ 512.422916][ T13] vhci_hcd vhci_hcd.5: stop threads [ 512.427616][ T13] vhci_hcd vhci_hcd.5: release socket [ 512.429878][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 512.676654][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 512.792711][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 512.826169][T16268] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 513.481866][T10237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 513.485430][T10237] usb 7-1: not running at top speed; connect to a high speed hub [ 513.488876][T10237] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 513.504062][T10237] usb 7-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 513.507186][T10237] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.510144][T10237] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.518173][T10237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.520959][T10237] usb 7-1: Product: syz [ 513.522434][T10237] usb 7-1: Manufacturer: syz [ 513.524262][T10237] usb 7-1: SerialNumber: syz [ 514.142410][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2375'. [ 514.674201][T16291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.678068][T16291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.738853][T10237] usb 7-1: 0:2 : does not exist [ 514.746611][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2379'. [ 514.769212][T10237] usb 7-1: USB disconnect, device number 28 [ 514.785013][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 514.830184][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2379'. [ 516.512399][ T5087] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 517.128563][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 517.159448][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 517.807630][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2390'. [ 517.909402][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2390'. [ 518.725551][ T5821] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 518.956254][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2396'. [ 519.034478][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2396'. [ 519.043688][T16345] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 519.371303][ T5821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 519.732230][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 519.932726][T16353] input: syz0 as /devices/virtual/input/input36 [ 520.046469][ T5821] usb 7-1: not running at top speed; connect to a high speed hub [ 520.084270][ T5821] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 520.088380][ T5821] usb 7-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 520.092724][ T5821] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 520.097638][ T5821] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.104091][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.106742][ T5821] usb 7-1: Product: syz [ 520.108096][ T5821] usb 7-1: Manufacturer: syz [ 520.110696][ T5821] usb 7-1: SerialNumber: syz [ 520.388714][T10237] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 520.539394][T10237] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.543210][T10237] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.546153][T10237] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.549746][T10237] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.552794][T10237] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.557998][T10237] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.560868][T10237] usb 10-1: Product: syz [ 520.562299][T10237] usb 10-1: Manufacturer: syz [ 520.571887][T10237] cdc_wdm 10-1:1.0: skipping garbage [ 520.573770][T10237] cdc_wdm 10-1:1.0: skipping garbage [ 520.577343][T10237] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 520.579345][T10237] cdc_wdm 10-1:1.0: Unknown control protocol [ 521.334862][ T5821] usb 7-1: 0:2 : does not exist [ 521.362005][ T5821] usb 7-1: USB disconnect, device number 29 [ 521.409170][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 521.766952][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 521.812673][T16379] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 522.872021][ T5087] Bluetooth: hci1: command 0x0405 tx timeout [ 523.184180][ T34] usb 10-1: USB disconnect, device number 25 [ 523.400198][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 523.512574][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2411'. [ 523.595395][ T42] audit: type=1326 audit(1786418793.643:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16403 comm="syz.2.2413" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x0 [ 523.611685][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 523.628574][T16407] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 523.724956][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 523.750034][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 524.557870][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 524.643939][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 525.372876][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2418'. [ 525.512661][T16431] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 525.718813][ T5838] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 525.870577][ T5838] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 525.876734][ T5838] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 525.879897][ T5838] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.883133][ T5838] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 525.886936][ T5838] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.892038][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.895128][ T5838] usb 10-1: Product: syz [ 525.896528][ T5838] usb 10-1: Manufacturer: syz [ 525.905035][ T5838] cdc_wdm 10-1:1.0: skipping garbage [ 525.907286][ T5838] cdc_wdm 10-1:1.0: skipping garbage [ 525.910913][ T5838] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 525.912920][ T5838] cdc_wdm 10-1:1.0: Unknown control protocol [ 527.400956][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2425'. [ 527.425363][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2425'. [ 528.289113][ T5743] Bluetooth: hci1: command 0x0405 tx timeout [ 528.499510][T10237] usb 10-1: USB disconnect, device number 26 [ 528.630395][ T6584] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 528.711064][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 528.799976][ T6584] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 528.806908][ T6584] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.815479][ T6584] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.837856][ T6584] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.841508][ T6584] usb 14-1: Product: syz [ 528.843445][ T6584] usb 14-1: Manufacturer: syz [ 528.845487][ T6584] usb 14-1: SerialNumber: syz [ 528.890143][ T6584] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 528.909765][ T6584] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 528.942996][ T6584] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 529.676188][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2431'. [ 529.797638][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2431'. [ 529.805622][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.808855][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.211376][T16478] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 530.220181][T16478] qnx6: wrong signature (magic) in superblock #1. [ 530.222367][T16478] qnx6: unable to read the first superblock [ 530.318338][T16478] 9p: p9: multiple sources not supported [ 530.381635][T16457] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 530.458163][T10237] usb 14-1: USB disconnect, device number 20 [ 530.552383][T10237] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 530.599681][T10237] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 530.623159][T10237] ti_usb_3410_5052 14-1:2.0: device disconnected [ 530.968694][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2434'. [ 531.252577][ T6584] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 531.843742][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2437'. [ 531.869191][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2437'. [ 532.039382][ T6584] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.044203][ T6584] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.047977][ T6584] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.052718][ T6584] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.056831][ T6584] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.063192][ T6584] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.070027][ T6584] usb 7-1: Product: syz [ 532.071913][ T6584] usb 7-1: Manufacturer: syz [ 532.080713][ T6584] cdc_wdm 7-1:1.0: skipping garbage [ 532.082933][ T6584] cdc_wdm 7-1:1.0: skipping garbage [ 532.089111][ T6584] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 532.168883][ T6584] cdc_wdm 7-1:1.0: Unknown control protocol [ 532.979307][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.979826][T16507] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 532.984023][T16507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.984063][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.986608][T16507] vhci_hcd vhci_hcd.0: Device attached [ 533.039585][T16507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2442'. [ 533.047719][T16510] vhci_hcd: connection closed [ 533.048143][T11842] vhci_hcd vhci_hcd.5: stop threads [ 533.057069][T11842] vhci_hcd vhci_hcd.5: release socket [ 533.065208][T11842] vhci_hcd vhci_hcd.5: disconnect device [ 533.480304][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2443'. [ 534.129573][T10237] usb 7-1: USB disconnect, device number 30 [ 535.405983][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2449'. [ 535.661783][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 536.192869][ T5743] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 536.770442][ T6584] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 536.778217][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2455'. [ 536.868388][T16562] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 536.979221][ T6584] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.988026][ T6584] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.995243][ T6584] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.008551][ T6584] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 537.023002][ T6584] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.039126][ T6584] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.047144][ T6584] usb 14-1: Product: syz [ 537.054517][ T6584] usb 14-1: Manufacturer: syz [ 537.079592][ T6584] cdc_wdm 14-1:1.0: skipping garbage [ 537.083356][ T6584] cdc_wdm 14-1:1.0: skipping garbage [ 537.128387][ T6584] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 537.130676][ T6584] cdc_wdm 14-1:1.0: Unknown control protocol [ 537.484590][T16570] netlink: 'syz.0.2457': attribute type 2 has an invalid length. [ 537.573926][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 537.978777][ T5838] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 538.132742][ T5838] usb 10-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 538.137738][ T5838] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 538.141524][ T5838] usb 10-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 538.145807][ T5838] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 538.152513][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.156022][ T5838] usb 10-1: Product: syz [ 538.157843][ T5838] usb 10-1: Manufacturer: syz [ 538.159940][ T5838] usb 10-1: SerialNumber: syz [ 538.482524][T16572] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 538.492167][T16572] qnx6: wrong signature (magic) in superblock #1. [ 538.495000][T16572] qnx6: unable to read the first superblock [ 538.556048][T16572] 9p: p9: multiple sources not supported [ 538.890447][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.409354][T15692] Bluetooth: hci1: command 0x0405 tx timeout [ 539.487480][ T5838] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 539.493756][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.496224][ T5838] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 539.503051][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.526890][ T5838] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 539.533276][ T5838] usb 10-1: USB disconnect, device number 27 [ 539.560304][ T5821] usb 14-1: USB disconnect, device number 21 [ 539.569810][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 539.569831][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 539.579880][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 540.572837][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 540.667200][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 541.564450][ T6584] usb 14-1: new full-speed USB device number 22 using dummy_hcd [ 541.734425][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 542.278135][ T6584] usb 14-1: unable to get BOS descriptor or descriptor too short [ 542.281359][ T6584] usb 14-1: not running at top speed; connect to a high speed hub [ 542.283725][ T6584] usb 14-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 542.287237][ T6584] usb 14-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 542.291232][ T6584] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 542.294075][ T6584] usb 14-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.299902][ T6584] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.302474][ T6584] usb 14-1: Product: syz [ 542.303825][ T6584] usb 14-1: Manufacturer: syz [ 542.305353][ T6584] usb 14-1: SerialNumber: syz [ 542.526918][T16621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.530252][T16621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.908724][ T34] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 543.059243][ T34] usb 10-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 543.063548][ T34] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.067071][ T34] usb 10-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 543.070896][ T34] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 543.076627][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.079948][ T34] usb 10-1: Product: syz [ 543.081467][ T34] usb 10-1: Manufacturer: syz [ 543.083368][ T34] usb 10-1: SerialNumber: syz [ 543.305683][T16624] /dev/nullb0: Can't open blockdev [ 543.310386][T16624] 9p: p9: multiple sources not supported [ 543.488335][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.490835][ T34] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 543.495276][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.497659][ T34] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 543.502355][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.524547][ T34] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 543.529265][ T34] usb 10-1: USB disconnect, device number 28 [ 543.540866][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 543.618423][ T6584] usb 14-1: 0:2 : does not exist [ 543.638690][ T6584] usb 14-1: USB disconnect, device number 22 [ 543.648693][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 543.648974][T15692] Bluetooth: hci4: command 0x1003 tx timeout [ 544.002867][T16629] netlink: 'syz.2.2472': attribute type 2 has an invalid length. [ 544.031698][ T224] Bluetooth: hci4: Frame reassembly failed (-84) [ 544.428547][ T42] audit: type=1326 audit(1786418810.487:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.9.2475" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 544.507519][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2475'. [ 544.514241][T16637] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 544.611123][T15692] Bluetooth: hci1: command 0x0405 tx timeout [ 546.049303][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 546.055367][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 546.146798][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'. [ 546.601942][T16653] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 547.199034][ T5838] usb 14-1: new full-speed USB device number 23 using dummy_hcd [ 547.529254][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 547.594197][T16674] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 548.169254][ T5838] usb 14-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 548.173291][ T5838] usb 14-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 548.176759][ T5838] usb 14-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 548.180399][ T5838] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 548.185680][ T5838] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.188309][ T5838] usb 14-1: Product: syz [ 548.189793][ T5838] usb 14-1: Manufacturer: syz [ 548.191312][ T5838] usb 14-1: SerialNumber: syz [ 548.390019][ T34] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 548.416301][T16662] /dev/nullb0: Can't open blockdev [ 548.421910][T16662] 9p: p9: multiple sources not supported [ 548.428713][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.434616][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.539518][ T34] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 548.544023][ T34] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 548.548728][ T34] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 548.555192][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.557877][ T34] usb 10-1: Product: syz [ 548.559486][ T34] usb 10-1: Manufacturer: syz [ 548.561367][ T34] usb 10-1: SerialNumber: syz [ 548.567819][ T34] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 548.568681][ T5821] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 548.572840][ T34] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 548.578856][ T34] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 548.581852][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.586853][ T5838] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 548.592065][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.595177][ T5838] snd-usb-audio 14-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 548.602968][ T5838] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.621878][ T5838] snd-usb-audio 14-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 548.625879][ T5838] usb 14-1: USB disconnect, device number 23 [ 548.637375][T15168] udevd[15168]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 548.719851][ T5821] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.724969][ T5821] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.728842][ T5821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.733131][ T5821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.736850][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.743422][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.746901][ T5821] usb 7-1: Product: syz [ 548.748874][ T5821] usb 7-1: Manufacturer: syz [ 548.757135][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 548.759930][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 548.764345][ T5821] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 548.767022][ T5821] cdc_wdm 7-1:1.0: Unknown control protocol [ 549.495715][T16688] netlink: 'syz.9.2488': attribute type 2 has an invalid length. [ 549.501708][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 550.049090][T16676] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 550.062558][ T5821] usb 10-1: USB disconnect, device number 29 [ 550.077533][ T5821] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 550.090609][ T5821] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 550.097192][ T5821] ti_usb_3410_5052 10-1:2.0: device disconnected [ 550.163814][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 550.179764][T16692] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 550.747564][T15692] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 551.017595][T16699] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 551.019680][T16699] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 551.031144][T16699] vhci_hcd vhci_hcd.0: Device attached [ 551.091651][T16699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2491'. [ 551.298755][ T5821] usb 38-1: SetAddress Request (38) to port 0 [ 551.301190][ T5821] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 551.355111][ T40] usb 7-1: USB disconnect, device number 31 [ 551.568741][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 551.578270][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 552.092408][T16700] vhci_hcd: connection reset by peer [ 552.095208][ T13] vhci_hcd vhci_hcd.0: stop threads [ 552.097837][ T13] vhci_hcd vhci_hcd.0: release socket [ 552.103131][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 553.434433][T16723] netlink: 'syz.9.2496': attribute type 2 has an invalid length. [ 553.491740][ T82] Bluetooth: hci4: Frame reassembly failed (-84) [ 553.738729][ T34] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 554.551107][ T34] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 554.556157][ T34] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 554.559886][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.563869][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 554.567955][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.574996][ T34] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 554.578037][ T34] usb 10-1: Product: syz [ 554.580295][ T34] usb 10-1: Manufacturer: syz [ 554.594713][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 554.596541][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 554.602243][ T34] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 554.605155][ T34] cdc_wdm 10-1:1.0: Unknown control protocol [ 555.488729][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 555.488818][T15692] Bluetooth: hci4: command 0x1003 tx timeout [ 555.735881][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2508'. [ 555.773855][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2508'. [ 556.368823][ T5821] usb 38-1: device descriptor read/8, error -110 [ 556.928779][ T5743] Bluetooth: hci1: command 0x0405 tx timeout [ 557.437196][ T5838] usb 10-1: USB disconnect, device number 30 [ 557.522792][ T5821] usb usb38-port1: attempt power cycle [ 557.621215][ T42] audit: type=1326 audit(1786418821.680:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.0.2514" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x0 [ 557.844505][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2516'. [ 557.992194][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 558.062424][T16784] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 558.090294][T16790] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 558.115730][ T5821] usb usb38-port1: unable to enumerate USB device [ 558.494544][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2519'. [ 558.497893][T16792] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2519'. [ 558.674075][ T42] audit: type=1326 audit(1786418822.730:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16794 comm="syz.2.2518" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x0 [ 558.703076][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2517'. [ 558.742373][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2517'. [ 559.050099][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 559.076917][T16804] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 560.248676][ T34] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 560.843625][T16826] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 560.879942][ T34] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.885356][ T34] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.889517][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.893535][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.896781][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.906327][ T34] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.909424][ T34] usb 10-1: Product: syz [ 560.911016][ T34] usb 10-1: Manufacturer: syz [ 560.933883][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 560.937038][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 560.945871][ T34] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 560.947904][ T34] cdc_wdm 10-1:1.0: Unknown control protocol [ 561.385778][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'. [ 561.851054][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 562.562055][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.564906][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.857493][ T6584] usb 10-1: USB disconnect, device number 31 [ 562.945644][ T42] audit: type=1326 audit(1786418827.000:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16849 comm="syz.5.2536" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x0 [ 563.019955][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 563.026616][T16854] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d2f232f undefined [ 563.205852][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 563.251983][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 563.277102][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2539'. [ 563.317353][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2539'. [ 564.574738][T16879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.589795][T16879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.748907][ T34] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 564.795626][T16879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.799257][T16879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.899297][ T34] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.904112][ T34] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.907534][ T34] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.911166][ T34] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.914576][ T34] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.920919][ T34] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.924372][ T34] usb 14-1: Product: syz [ 564.926170][ T34] usb 14-1: Manufacturer: syz [ 564.932837][ T34] cdc_wdm 14-1:1.0: skipping garbage [ 564.938852][ T34] cdc_wdm 14-1:1.0: skipping garbage [ 564.942660][ T34] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 564.945219][ T34] cdc_wdm 14-1:1.0: Unknown control protocol [ 565.709346][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2549'. [ 566.398698][ T34] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 566.561738][ T34] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 566.568477][ T34] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.576830][ T34] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.585203][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.588530][ T34] usb 10-1: Product: syz [ 566.591861][ T34] usb 10-1: Manufacturer: syz [ 566.596249][ T34] usb 10-1: SerialNumber: syz [ 566.616203][ T34] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 566.628320][ T34] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 566.644189][ T34] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 567.248896][ T5743] Bluetooth: hci1: command 0x0405 tx timeout [ 567.547085][ T5838] usb 14-1: USB disconnect, device number 24 [ 568.182455][T16924] lo speed is unknown, defaulting to 1000 [ 568.194234][T16897] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 568.268562][ T5821] usb 5-1: USB disconnect, device number 13 [ 568.824387][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2564'. [ 569.350453][ T10] usb 10-1: USB disconnect, device number 32 [ 569.556067][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 569.607918][ T5821] ================================================================== [ 569.610495][ T5821] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 569.613050][ T5821] Write of size 8 at addr ffff88802157a350 by task kworker/0:4/5821 [ 569.616528][ T5821] [ 569.617845][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.617862][ T5821] Tainted: [L]=SOFTLOCKUP [ 569.617867][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.617884][ T5821] Workqueue: usb_hub_wq hub_event [ 569.617929][ T5821] Call Trace: [ 569.617934][ T5821] [ 569.617939][ T5821] dump_stack_lvl+0x100/0x190 [ 569.617953][ T5821] print_report+0x13d/0x4b0 [ 569.617970][ T5821] ? __virt_addr_valid+0x239/0x430 [ 569.617982][ T5821] ? snd_usb_midi_v2_free+0x52d/0x670 [ 569.617995][ T5821] kasan_report+0xdf/0x1c0 [ 569.618011][ T5821] ? snd_usb_midi_v2_free+0x52d/0x670 [ 569.618025][ T5821] snd_usb_midi_v2_free+0x52d/0x670 [ 569.618038][ T5821] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 569.618063][ T5821] snd_usb_midi_v2_free_all+0x85/0xe0 [ 569.618077][ T5821] snd_usb_audio_free+0x4e/0x120 [ 569.618099][ T5821] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 569.618119][ T5821] release_card_device+0xb2/0x1a0 [ 569.618130][ T5821] ? __pfx_release_card_device+0x10/0x10 [ 569.618142][ T5821] device_release+0xd2/0x270 [ 569.618161][ T5821] kobject_put+0x1f7/0x640 [ 569.618181][ T5821] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 569.618193][ T5821] put_device+0x1f/0x30 [ 569.618204][ T5821] snd_card_free_when_closed+0x2b/0x40 [ 569.618216][ T5821] usb_audio_disconnect+0x210/0x680 [ 569.618233][ T5821] usb_unbind_interface+0x1dd/0x9e0 [ 569.618251][ T5821] ? __pfx_usb_unbind_interface+0x10/0x10 [ 569.618267][ T5821] device_remove+0x12a/0x180 [ 569.618286][ T5821] device_release_driver_internal+0x44e/0x620 [ 569.618304][ T5821] bus_remove_device+0x2bc/0x560 [ 569.618317][ T5821] ? __pfx_bus_remove_device+0x10/0x10 [ 569.618330][ T5821] ? __pfx_device_remove_attrs+0x10/0x10 [ 569.618345][ T5821] device_del+0x376/0x9b0 [ 569.618359][ T5821] ? __pfx_device_del+0x10/0x10 [ 569.618372][ T5821] ? kobject_put+0xb9/0x640 [ 569.618383][ T5821] usb_disable_device+0x367/0x810 [ 569.618399][ T5821] usb_disconnect+0x2e2/0x9a0 [ 569.618413][ T5821] hub_event+0x1bb1/0x4420 [ 569.618431][ T5821] ? __lock_acquire+0x49f/0x1a40 [ 569.618441][ T5821] ? do_raw_spin_unlock+0x145/0x1e0 [ 569.618453][ T5821] ? __pfx_hub_event+0x10/0x10 [ 569.618467][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 569.618486][ T5821] ? rcu_is_watching+0x12/0xc0 [ 569.618500][ T5821] process_one_work+0xa23/0x1940 [ 569.618518][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 569.618535][ T5821] ? __pfx_hub_event+0x10/0x10 [ 569.618549][ T5821] worker_thread+0x5ef/0xe50 [ 569.618566][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 569.618581][ T5821] ? kthread+0x13a/0x450 [ 569.618595][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 569.618609][ T5821] kthread+0x370/0x450 [ 569.618623][ T5821] ? __pfx_kthread+0x10/0x10 [ 569.618637][ T5821] ret_from_fork+0x72b/0xd50 [ 569.618650][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 569.618664][ T5821] ? __switch_to+0x800/0x10f0 [ 569.618674][ T5821] ? __pfx_kthread+0x10/0x10 [ 569.618688][ T5821] ret_from_fork_asm+0x1a/0x30 [ 569.618705][ T5821] [ 569.618709][ T5821] [ 569.714639][ T5821] Allocated by task 5821: [ 569.716046][ T5821] kasan_save_stack+0x30/0x50 [ 569.717615][ T5821] kasan_save_track+0x14/0x30 [ 569.719074][ T5821] __kasan_kmalloc+0xaa/0xb0 [ 569.720548][ T5821] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 569.722208][ T5821] snd_ump_endpoint_new+0x93/0x470 [ 569.723807][ T5821] create_midi2_ump+0x2dd/0x920 [ 569.725414][ T5821] snd_usb_midi_v2_create+0x11fa/0x4070 [ 569.727243][ T5821] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 569.729087][ T5821] usb_audio_probe+0xf05/0x3b10 [ 569.730624][ T5821] usb_probe_interface+0x303/0x8f0 [ 569.732222][ T5821] really_probe+0x241/0xa60 [ 569.733765][ T5821] __driver_probe_device+0x20e/0x450 [ 569.735946][ T5821] driver_probe_device+0x4a/0x140 [ 569.737894][ T5821] __device_attach_driver+0x1df/0x320 [ 569.740031][ T5821] bus_for_each_drv+0x159/0x1e0 [ 569.742039][ T5821] __device_attach+0x1e4/0x4d0 [ 569.744048][ T5821] device_initial_probe+0xaf/0xd0 [ 569.746153][ T5821] bus_probe_device+0x64/0x160 [ 569.748145][ T5821] device_add+0x121d/0x1970 [ 569.750036][ T5821] usb_set_configuration+0xd97/0x1c60 [ 569.752275][ T5821] usb_generic_driver_probe+0xa1/0xe0 [ 569.754506][ T5821] usb_probe_device+0xef/0x400 [ 569.756512][ T5821] really_probe+0x241/0xa60 [ 569.758405][ T5821] __driver_probe_device+0x20e/0x450 [ 569.760593][ T5821] driver_probe_device+0x4a/0x140 [ 569.762698][ T5821] __device_attach_driver+0x1df/0x320 [ 569.764945][ T5821] bus_for_each_drv+0x159/0x1e0 [ 569.766996][ T5821] __device_attach+0x1e4/0x4d0 [ 569.769013][ T5821] device_initial_probe+0xaf/0xd0 [ 569.771106][ T5821] bus_probe_device+0x64/0x160 [ 569.773142][ T5821] device_add+0x121d/0x1970 [ 569.775035][ T5821] usb_new_device.part.0+0xcc2/0x1686 [ 569.777267][ T5821] hub_event.cold+0x1e3/0xe90 [ 569.779224][ T5821] process_one_work+0xa23/0x1940 [ 569.781284][ T5821] worker_thread+0x5ef/0xe50 [ 569.783212][ T5821] kthread+0x370/0x450 [ 569.784927][ T5821] ret_from_fork+0x72b/0xd50 [ 569.786888][ T5821] ret_from_fork_asm+0x1a/0x30 [ 569.788887][ T5821] [ 569.789903][ T5821] Freed by task 5821: [ 569.791579][ T5821] kasan_save_stack+0x30/0x50 [ 569.793540][ T5821] kasan_save_track+0x14/0x30 [ 569.795507][ T5821] kasan_save_free_info+0x3b/0x70 [ 569.797610][ T5821] __kasan_slab_free+0x5f/0x80 [ 569.799630][ T5821] kfree+0x22b/0x6c0 [ 569.801260][ T5821] snd_rawmidi_dev_free+0x3e/0x60 [ 569.803355][ T5821] __snd_device_free+0x1a3/0x300 [ 569.805441][ T5821] snd_device_free_all+0xf3/0x220 [ 569.807561][ T5821] release_card_device+0x77/0x1a0 [ 569.809614][ T5821] device_release+0xd2/0x270 [ 569.811462][ T5821] kobject_put+0x1f7/0x640 [ 569.813324][ T5821] put_device+0x1f/0x30 [ 569.815055][ T5821] snd_card_free_when_closed+0x2b/0x40 [ 569.817342][ T5821] usb_audio_disconnect+0x210/0x680 [ 569.819492][ T5821] usb_unbind_interface+0x1dd/0x9e0 [ 569.821640][ T5821] device_remove+0x12a/0x180 [ 569.823568][ T5821] device_release_driver_internal+0x44e/0x620 [ 569.826006][ T5821] bus_remove_device+0x2bc/0x560 [ 569.827971][ T5821] device_del+0x376/0x9b0 [ 569.829769][ T5821] usb_disable_device+0x367/0x810 [ 569.831854][ T5821] usb_disconnect+0x2e2/0x9a0 [ 569.833718][ T5821] hub_event+0x1bb1/0x4420 [ 569.835523][ T5821] process_one_work+0xa23/0x1940 [ 569.837562][ T5821] worker_thread+0x5ef/0xe50 [ 569.839490][ T5821] kthread+0x370/0x450 [ 569.841183][ T5821] ret_from_fork+0x72b/0xd50 [ 569.843102][ T5821] ret_from_fork_asm+0x1a/0x30 [ 569.845096][ T5821] [ 569.846067][ T5821] The buggy address belongs to the object at ffff88802157a000 [ 569.846067][ T5821] which belongs to the cache kmalloc-4k of size 4096 [ 569.851674][ T5821] The buggy address is located 848 bytes inside of [ 569.851674][ T5821] freed 4096-byte region [ffff88802157a000, ffff88802157b000) [ 569.857219][ T5821] [ 569.858228][ T5821] The buggy address belongs to the physical page: [ 569.860840][ T5821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21578 [ 569.864395][ T5821] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 569.867821][ T5821] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 569.870862][ T5821] page_type: f5(slab) [ 569.872516][ T5821] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 569.875986][ T5821] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 569.879428][ T5821] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 569.882895][ T5821] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 569.886405][ T5821] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 569.889916][ T5821] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 569.893428][ T5821] page dumped because: kasan: bad access detected [ 569.896065][ T5821] page_owner tracks the page as allocated [ 569.898372][ T5821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2853190726, free_ts 0 [ 569.906145][ T5821] post_alloc_hook+0xfd/0x120 [ 569.908076][ T5821] get_page_from_freelist+0xf48/0x3530 [ 569.910299][ T5821] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 569.912702][ T5821] new_slab+0xa2/0x640 [ 569.914406][ T5821] refill_objects+0xe3/0x410 [ 569.916337][ T5821] __pcs_replace_empty_main+0x376/0x680 [ 569.918604][ T5821] __kmalloc_cache_noprof+0x479/0x6c0 [ 569.920810][ T5821] kobject_uevent_env+0x263/0x18b0 [ 569.922923][ T5821] device_add+0x1173/0x1970 [ 569.924806][ T5821] pci_device_add+0xdae/0x1810 [ 569.926795][ T5821] pci_scan_single_device+0x1d0/0x240 [ 569.929007][ T5821] pci_scan_slot+0x1c9/0x7c0 [ 569.930908][ T5821] pci_scan_child_bus_extend+0x6b/0x7b0 [ 569.933183][ T5821] acpi_pci_root_create+0x6d6/0x8c0 [ 569.935330][ T5821] pci_acpi_scan_root+0x4ae/0x5c0 [ 569.937450][ T5821] acpi_pci_root_add.cold+0x839/0x1627 [ 569.939697][ T5821] page_owner free stack trace missing [ 569.941875][ T5821] [ 569.942883][ T5821] Memory state around the buggy address: [ 569.945200][ T5821] ffff88802157a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 569.948487][ T5821] ffff88802157a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 569.951735][ T5821] >ffff88802157a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 569.955000][ T5821] ^ [ 569.957727][ T5821] ffff88802157a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 569.960975][ T5821] ffff88802157a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 569.964214][ T5821] ================================================================== [ 569.972331][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 569.977532][ T10] ti_usb_3410_5052 10-1:2.0: device disconnected [ 569.989156][ T5821] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 569.992160][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.996589][ T5821] Tainted: [L]=SOFTLOCKUP [ 569.998361][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 570.002442][ T5821] Workqueue: usb_hub_wq hub_event [ 570.004544][ T5821] Call Trace: [ 570.005944][ T5821] [ 570.007187][ T5821] dump_stack_lvl+0x100/0x190 [ 570.009161][ T5821] vpanic+0x552/0x970 [ 570.010820][ T5821] ? __pfx_vpanic+0x10/0x10 [ 570.012696][ T5821] ? snd_usb_midi_v2_free+0x52d/0x670 [ 570.014899][ T5821] panic+0xd1/0xe0 [ 570.016479][ T5821] ? __pfx_panic+0x10/0x10 [ 570.018328][ T5821] ? snd_usb_midi_v2_free+0x52d/0x670 [ 570.020544][ T5821] ? preempt_schedule_common+0x42/0xc0 [ 570.022796][ T5821] ? check_panic_on_warn+0x1f/0x90 [ 570.024927][ T5821] check_panic_on_warn.cold+0x19/0x34 [ 570.027142][ T5821] end_report.part.0+0x3a/0x90 [ 570.029141][ T5821] kasan_report.cold+0xe/0x18 [ 570.031106][ T5821] ? snd_usb_midi_v2_free+0x52d/0x670 [ 570.033330][ T5821] snd_usb_midi_v2_free+0x52d/0x670 [ 570.035480][ T5821] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 570.037699][ T5821] snd_usb_midi_v2_free_all+0x85/0xe0 [ 570.039907][ T5821] snd_usb_audio_free+0x4e/0x120 [ 570.041926][ T5821] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 570.044203][ T5821] release_card_device+0xb2/0x1a0 [ 570.046297][ T5821] ? __pfx_release_card_device+0x10/0x10 [ 570.048602][ T5821] device_release+0xd2/0x270 [ 570.050528][ T5821] kobject_put+0x1f7/0x640 [ 570.052393][ T5821] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 570.054614][ T5821] put_device+0x1f/0x30 [ 570.056270][ T5821] snd_card_free_when_closed+0x2b/0x40 [ 570.058510][ T5821] usb_audio_disconnect+0x210/0x680 [ 570.060690][ T5821] usb_unbind_interface+0x1dd/0x9e0 [ 570.062859][ T5821] ? __pfx_usb_unbind_interface+0x10/0x10 [ 570.065243][ T5821] device_remove+0x12a/0x180 [ 570.067204][ T5821] device_release_driver_internal+0x44e/0x620 [ 570.069711][ T5821] bus_remove_device+0x2bc/0x560 [ 570.071783][ T5821] ? __pfx_bus_remove_device+0x10/0x10 [ 570.074032][ T5821] ? __pfx_device_remove_attrs+0x10/0x10 [ 570.076350][ T5821] device_del+0x376/0x9b0 [ 570.078147][ T5821] ? __pfx_device_del+0x10/0x10 [ 570.080165][ T5821] ? kobject_put+0xb9/0x640 [ 570.082045][ T5821] usb_disable_device+0x367/0x810 [ 570.083712][ T5821] usb_disconnect+0x2e2/0x9a0 [ 570.085214][ T5821] hub_event+0x1bb1/0x4420 [ 570.086651][ T5821] ? __lock_acquire+0x49f/0x1a40 [ 570.088220][ T5821] ? do_raw_spin_unlock+0x145/0x1e0 [ 570.089847][ T5821] ? __pfx_hub_event+0x10/0x10 [ 570.091413][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 570.093228][ T5821] ? rcu_is_watching+0x12/0xc0 [ 570.094776][ T5821] process_one_work+0xa23/0x1940 [ 570.096369][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 570.098054][ T5821] ? __pfx_hub_event+0x10/0x10 [ 570.099577][ T5821] worker_thread+0x5ef/0xe50 [ 570.101064][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 570.102719][ T5821] ? kthread+0x13a/0x450 [ 570.104058][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 570.105675][ T5821] kthread+0x370/0x450 [ 570.106993][ T5821] ? __pfx_kthread+0x10/0x10 [ 570.108450][ T5821] ret_from_fork+0x72b/0xd50 [ 570.109903][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 570.111563][ T5821] ? __switch_to+0x800/0x10f0 [ 570.113542][ T5821] ? __pfx_kthread+0x10/0x10 [ 570.115036][ T5821] ret_from_fork_asm+0x1a/0x30 [ 570.116606][ T5821] [ 570.118403][ T5821] Kernel Offset: disabled [ 570.119767][ T5821] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:27:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f545 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc90004c96f30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9b6e322e R15=ffffffff85a0f4e0 RIP=ffffffff85a0f56f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f43cf3e4 CR3=0000000029748000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000010000000 Opmask02=00000000ffff7fdf Opmask03=0000000000004104 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557261464500 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1be9f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1be9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752f302e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557261332750 0000557261332628 0000000000000041 000055726100312e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 103e162728bbee21 0000557736178591 0000000000000171 0000000000000031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c45422c44422c 43422c42422c4142 2c39422c38422c37 422c44412c43412c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36412c35412c3441 2c33412c46392c45 392c44392c43392c 42392c46382c4538 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c30382c46 372c45372c44372c 43372c42372c4137 2c39372c37372c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000009 RCX=0000000000000200 RDX=0000000000000000 RSI=ffff88801dbe5710 RDI=ffff88801dbe4a80 RBP=ffffc900060cf770 RSP=ffffc900060cf6d0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000006 R12=ffff88801dbe5710 R13=ffff88801dbe4a80 R14=0000000000000200 R15=0000000000000006 RIP=ffffffff81e556c3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e6b670238 CR3=00000000245fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000570 0000000000060a90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffffffff8bbb0662 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a2c8e RDI=ffffffff8c3fe580 RBP=0000000000000246 RSP=ffffc90003b4f6d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888023e52540 R13=ffffc90003b4f7f0 R14=ffff88802b4284c0 R15=dffffc0000000000 RIP=ffffffff8bb80e9f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3f3e7d2300 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3f3e1225d0 CR3=000000004c91e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ed0849e96fac2398 78526f104f809d4c ed0849e96fac2398 78526f104f809d4c ed0849e96fac2398 78526f104f809d4c ed0849e96fac2398 78526f104f809d4c ZMM18=47d719e7e652a9a9 5c6a6b2bfbc7ef04 47d719e7e652a9a9 5c6a6b2bfbc7ef04 47d719e7e652a9a9 5c6a6b2bfbc7ef04 47d719e7e652a9a9 5c6a6b2bfbc7ef04 ZMM19=5926000000000000 0000000000000005 5926000000000000 0000000000000004 5926000000000000 0000000000000003 5926000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffffffffff e70801b803010800 01b00306f4080001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003208082080001 9803408008000190 030c080001880300 04000408000fffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0201c7080008 004ecc0008000380 0201c70800060143 f00030656c69662f ZMM24=fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 fbc7ef04fbc7ef04 ZMM25=5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b 5c6a6b2b5c6a6b2b ZMM26=e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 e652a9a9e652a9a9 ZMM27=47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 47d719e747d719e7 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5826000058260000 5826000058260000 5826000058260000 5826000058260000 5826000058260000 5826000058260000 5826000058260000 5826000058260000 info registers vcpu 3 CPU#3 RAX=00000000009bb7bf RBX=ffff88801c7f2540 RCX=ffffffff8bb82335 RDX=0000000000000000 RSI=ffffffff8e1a2c56 RDI=ffffffff8c3fe580 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb808ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fea190 CR3=0000000073b2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017c00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000