last executing test programs: 2m20.223869351s ago: executing program 1 (id=709): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m15.842809455s ago: executing program 1 (id=715): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400009e54000000000000000000000000000000000000008b3809aec0701768a9e301b130c68899b2bd025ee9da974e70692c0602c81a60d2b1c3feab59a6c3d5d3eb295cbc68e3575b75aba3c18af19a36a04ab1bafd555731ea5a55d1fa48d5e4dd8407516b7b33e6fd5f51de202adbefd458e00fe7657e3c5829581b8a26a71a01da68420f4aa921765e587a2d1453"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x38fe, &(0x7f0000000600)={0x0, 0x5d3e, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[], 0x1a3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ff00001414200000000033000000000000000000000000000000000000000000000000000001000000000000000000000000000000004432b295000000000000000000000000f1ffffffffffffff030000000000000000000000000000000000000000000000000000feffffffff"], 0xf8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) write$binfmt_misc(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r7, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) read$nci(r6, &(0x7f0000000800)=""/4096, 0x1000) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m15.046265325s ago: executing program 0 (id=718): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 2m14.947294751s ago: executing program 1 (id=719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) close(r0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tkill(r5, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 2m14.031275694s ago: executing program 0 (id=722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025ffff0000002020207b1af8ff000000c94d5a9201cee82c91984438010300bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x61) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r5, 0x0, 0x2000000}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x2, r5, 0x0, 0x0, 0x1}}, 0x20) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f809d3af1ed2a674fa5000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 2m13.587131156s ago: executing program 2 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$video(0x0, 0x7, 0x40580) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000008, 0x80010, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r3}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600e000000140600fe8000000000000000000000000000bbfc0100"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="506f00004f4589a1"], 0x0) openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x699, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="6d74af2a", 0x4}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x400454a4, &(0x7f0000000200)={{0x1}}) openat$sysctl(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200, 0x0, 0x4, 0x8, 0x65}}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) 2m11.92232046s ago: executing program 1 (id=724): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r2, 0x6, 0x5, 0x0, 0x2000e881) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0x4000}) splice(r2, &(0x7f0000000340)=0xe, r2, &(0x7f00000003c0)=0x3, 0x2, 0xa) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000240)={0x0, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x100}]}}}]}, 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'tunl0\x00'}) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) recvmsg(r5, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000180)=""/208, 0xd0}], 0x2, &(0x7f0000000280)=""/122, 0x7a}, 0x10001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 2m9.888067457s ago: executing program 0 (id=725): socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x2, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000140)="8b", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000d80)="b2a81072ca54e8ddf5c784037718c5452715d372717af013d2f26610ef717c735bdb9f8c86db8b1cfc312aa94b1d6e5f84d3d2d25d74ffc9bb6ca1146953892f33508d8f312f4a115dc998d98838dd5cf6756a5e0228536e4f99221fb9fc99bc0e147877f247494b682df984ccdbd34f88e45e3f566f90f2de51bdca7657d8eb4e33043826899a54cabc9ccff91f86455981ef740e73c42c098a681b714cfe42457d262a61372219404a7400c6d0cc01fbef39bc2a17bc79f7005bae5bab2998b49f7f88ec1e6b090f7bf3b9de144e7fbe7ccc92cec04d218f1435fa7ade16e433d44ead7fcf43c92f6ec1f15818df965636378f3078d86df41cb02bbb97a935f937c152691582a944ff281b58b53f71aeddd99b0a7e2801b5388e15176ca4cfb4423969b105552073e10aefa1ff4d160b7429ea419e9f80e77b0b09d3c1b5044f2c9f15c2597333293644b332b595b5be3e66f63069c48e1d5bef1dcf4d30765eb2af3d61c7fed33f57713b3d2f75e72550b4ed414e16b1f055632e710771aa5b82abf402ea9e8aa6cbed91c072e70e5378672e279a41f9045d63e9d89f77bc663b62c7be81b1e84b35ddbe497936733aea23339768150edb204e96f6ff23536bf20c01a126771644bb51d27822d2c92bea5cbb6364e580fdd970611f89a867da983b187de716f62586740b5fcd4c5ce124cb7ac22ab875fd6f98b87a3d05e8eda5e070278d7924d8ee2cdc0ea62f4eb7d6055324b13cfee16ca5f552d62dae9cdc25ab34fb2e4ce6b903d7b316a86013f5505709fe3d5c3d89e53245a4d11c002887abc8780e894d611b03636205cae25e0bcea5854ab2459eceacf99866475ecfb0314a1846ba55a15f66369592588c312520b752dad0c5a56761adb9a3d1c2c4dc3ac9cd6b13e21affae4ce066f57d2d54086801b35af748df57e54aa11b5ee108995d71ab9fc39c36ec22b5fc6e32d19965f011ef01816d5496bbe3354487b261157ae0b47e3cd5a51b71ca4fab38c9316371321955670285c829510d20fc30228344feb9b03c99a86a80a6cf02e8ca0d498b41141f808da2e5575e0f91da084e2cb1e543f8c071705f88473e00d727610a87e4067125339d8887373fe4ed375ef2718fba4c7ad5268409a155eb2b696ff46b811cbd601cb37eb5cafbdc3562a3d0264dc86dcaff7a3e4b253b275337b8b823a0e502a6fe8dd79b0c98ff02a4b175e4272f8fb16eba276138091425376abbaf731afcf3e4b776d2da64479ac59bd6250d734eb1d0950861fad0af45ecaf1ed9694e528eed24d37001e5b6221c421762dc34dd903bfb120c7aff6059c5d739022200c8fbb2b90639522c5a20e10efb2ceee52f58f3a991c630ca5b943ca0a3649092a4d49f031622e274aa2ee3bd334d10bcbf205593453a115f6199635e491d86f7bd0da083800af862353d4a92cbcb3d295f545e4beb5f8dd14a7cfd3be595c6f41f190e07675eac9ba9f3e4290330fefa4b2d760515aa5a006ace4af2c256570fb726eb36460eb10830846682ecdc81774144d527134b0227dc0100dc66fadfc3c5dc63b7f57b500d28cd33a8e0459dc5bef1d2db9b7eca5a4fd507f7d626212611fb57630dfe8fe6a6f04ae39fb6ddbf00b5f6bb6a8d7a3a783ceb1ca5d56369b1d79703daac3217d1d7cd977896e7f39cb3aaf0873576ccc8152debe79dac8e797c5fe8f5aa72c25e2f0af6225249dc556a5a18ef9cccabb98b4501c54e06bfabd4c054574b69028c2071776a70cfa474bed34e4ff789d8f1d883ec2635016ab407ffad7890dc2cbe42a2fcbcbbc925ba59448ca53606669407d7af82ddbb3fabcda9f506ce95d259fddd13b6c6494530f4be297931ae58d37324479a354954624db23e2f67b87bfc9af0cd36c00f074c50ce55b7ecddb3f0fb91b00e2ef0a1f8cfe6bb7e715b9301e54f2c8d4b3ed783374dc2403cba51e5502e3d30c44c0febf28f5a62d3bdae488634f96965e16da0e622dc6cae547b1110603f4e20d39a201d6974713489576fdadfbb43f29dd033b052d64f00e8596a088f86ba187bea999a40828b94ce76ce6c", 0x5c1) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6}) keyctl$restrict_keyring(0x1d, r5, &(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000380)='-)(\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r4) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000180), &(0x7f0000000300)="0680ef1ccb948875bdf8eb542789db6378f7f3d86eab1ebde82da397ae02ade500089cd5da3810932d06c5f9b6736fec0f5095c95be9cc57a2c775adcac67185544fc7efd84dedc667", 0x49, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r8 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m9.467855447s ago: executing program 3 (id=726): openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r6, 0xae7e, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2m9.407638882s ago: executing program 1 (id=727): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(0x0, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x20000000, 0x2) 2m9.377110605s ago: executing program 2 (id=728): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x0, 0x0, 0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x4d4, 0xffffffff, 0x0, 0x344, 0x0, 0xffffffff, 0xffffffff, 0x40c, 0x40c, 0x40c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'nr0\x00', 'veth0_vlan\x00', {}, {}, 0x2f}, 0x203, 0xa4, 0xec, 0x8502}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, '\x00', {0x7ff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xff000000, 0xff, 0xff, 0xff], 'dvmrp1\x00', 'dummy0\x00', {}, {}, 0x6c, 0x80, 0x4, 0x2c}, 0x0, 0x130, 0x258, 0x0, {}, [@common=@srh1={{0x8c}, {0x29, 0x0, 0x3, 0x9, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0xff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 0x10}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) r7 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000002c0)={'wg0\x00', {0x2, 0x4e24, @broadcast}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x9, 0x1800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r1, 0x0}) listen(r2, 0x0) 2m8.765722176s ago: executing program 0 (id=729): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2005, 0x0, 0xffffffffffffff70}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB='\x00'], 0x7) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2m8.549999923s ago: executing program 3 (id=730): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x5ffa, &(0x7f0000000380)={0x0, 0x4096, 0x2, 0x2, 0x100004, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) lseek(0xffffffffffffffff, 0xae7e, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4000, 0x47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) write$dsp(r5, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x102, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r7, 0x19f23}], 0x1, 0x2000000) 2m8.026902154s ago: executing program 2 (id=731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x40084503, &(0x7f0000001500)=""/4103) ioctl$KVM_RUN(r5, 0x8004ae98, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6000"], 0xbf}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, 0x0, 0x0}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) socket$nl_generic(0x10, 0x3, 0x10) 2m7.674852677s ago: executing program 3 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x20008045) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') getsockname(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000200), 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x351}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2m7.375081944s ago: executing program 0 (id=733): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0xffffffffffffffff, 0x9, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0xffffffffffffff0e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) timer_create(0x3, 0x0, &(0x7f0000006bc0)) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xfa, {0x9, 0x21, 0xa8, 0x5, 0x1, {0x22, 0xba5}}, {{{0x9, 0x5, 0x81, 0x3, 0x38f, 0x80, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x7f, 0x21, 0x40, 0x8}, 0xc, &(0x7f0000002440)=ANY=[@ANYBLOB="050f0c00011b10021a1609000cc249d8753111b1b55d83da175682fafcd05c53da7e4176c76cb16bda22713be3357c7c818655eac24e47968c847935dd4dec4e6754939236bb9a35adfa74dd8fe0a8957ab893f363d19cb3d83d31b51066f489f1652f9cb9e1296e8868ccbe648eafae8614f4838ff409f6bf0af59ea249382a66862369da4ff96297be8b0807b03177d7692701ca9eedeec3549cfee22de02e0115c76c024caede6b6e1002c7bcc184fafb824c2b80d2876e8ffc958fbda49cbd58eb1f67b3ff3f7cbbf84a1867b5bef4a3997621bdcc1bdcf6"], 0x2, [{0xc4, &(0x7f00000000c0)=@string={0xc4, 0x3, "b8f60d793b565c9f8732e474924a403a4d0ce320e9ef6205d110ec3a27d5613e61700a49ec6b462d1a1a57f86b7de1e4edf9e49abb46fbf3339a247d5785326247c5461c631b544662c86ab1f88cf851ae2f02df3cafaf3800bcdfcb6e6dd62df11bec97ffbd05805c076556d953db550da2bdbf82b8305a2f97bb794fdc44d6f10c32c14c0e4766d1ae64b7584f4ddd1b895ba89b9e0e25e6f8bffd0b634963243b17f56378c9625acc1991a006c66766d1ab00ab0b74d1941a4e8ce6d8ae158130"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}]}) 2m3.298403438s ago: executing program 2 (id=734): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfba, 0x2, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_clone(0x10000000, &(0x7f0000019300)="28cb1c5496b9edc3897fed72dc6709be3fa5a80b2e5159cef876b7cc156b6ab9ede22034cd484e6e48383c6df38137576382ffe9e30ce7f392654d2a9e6d2123ca42b525ff713e943ccf2de9fcd76cef0b203c2fcaa2d58da282f67447033a0dc86ad871a7e862edd9eb2bb1d1acd6a03e61148458", 0x75, &(0x7f0000019180), &(0x7f00000191c0), &(0x7f0000019540)="5980e924cf5f7668a43956092d6bfbacc74e18c9a4298fe9d9cbb150690667cf1e9ff42ca0e32dc8b82abfc3d633d1b5ea2e4671f6a86dbaf7301b2988a748538ecf4aa905244d45ab14288fad0e6d0efd1077015ffc14f248be4550cd1f290d290545d9ddca76dfb7370e4743792159483ef3e32529220160d6db2cafe1a4bbd3d7b77a8d1f00345f627aafc7bff024c71a3923e27d1d75f68100ffafcb77e7975ae8f7c4ea5f383f1fb2a636efeb") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) read$midi(r1, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 2m3.2727072s ago: executing program 1 (id=735): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x2}, {}, {}, {0x0, 0x1000}, {0xff7ffffc, 0x3ff}, {0x400020, 0x7ffffffe}], 0x0, 0x4, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/132, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045731, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) lseek(r7, 0x1003ff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x1) 2m3.135920865s ago: executing program 0 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r3, @ANYBLOB="18000000000000000000000000000000850000000700000018110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200070220f2e47300b3c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce5b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5cb42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x20}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000000000000070000000703ec4414"], 0x28}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r14, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000010c00078008000800000000100900020073797a30000000000500040003000000050005000a000000050001000600004011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40050) mmap(&(0x7f0000384000/0x400000)=nil, 0x400000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x3000) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r7, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 2m2.986999983s ago: executing program 3 (id=737): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x6112, &(0x7f00000008c0)={0x0, 0x9e9, 0x829, 0x0, 0x234}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r7, &(0x7f00000000c0)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}) dup3(r6, r7, 0x80000) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 2m1.845658373s ago: executing program 2 (id=738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x100000000) r3 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x5) socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private=0xa010100}}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000540)="7ead453160d0d92beef26240f2bf067871d143060851788fb0908eea037a542de11804d7fcaf5aa7467da0bcac667759ce18e29133444da25fc0ac80b2bf1c4da8efa56261929eddbfb74244220559f506d0e852a6f162cf8bed44996c10a0fbecbfea4ad8cde555520069ab732f6e6607cfebc5f3fcfb3f78d3661f486ed15eef0ee63eb38685e2e94f5063abe7da78e044b3fe9d7c79316f7b6f7454b3a1d06990e8277103295800", 0xa9}, {&(0x7f0000000280)="7237b39b07b4e55e8c922c0f2bcd54efe2815bf5abc6844813fc79f8420beccc9b", 0x21}, {&(0x7f00000003c0)="fc514c73c8981b33cee7c88a8e39ad638bd575ffb632b8b7b252314c2c16a835405c0fc6b12dbfb420239241ad", 0x2d}, {&(0x7f0000000600)="793799dd5fb474845dcbe6724ed4d2d9217b033cdc9c0224cddc7a64cd374a6c6d533d9caac8070caf4e7f13965b405134e23d44b89ea90bbed3033362dde4c075bf706799b40ed839c93fab06d5ebeaca4f5df7e2606512bc167bdfb2386fbff6ffac2a72d7dfef5e03468c7de89413c16638f0e0d77886af04ce0277cebf9d1e4aa071387d59e6814a2ac5be22fbd810a78ac55260c738d82b9e91d2f417658129e206c804335408114c853e4360c4ede429098b68dd8d1557b2c6000b1efe0ea931da5e4b75982ba9359e72b4fb243e9fa9cf28995a7d889338d5a94bd061f7f5c0e23f51b34e913fdbffb517bfbe8d83eaca493bcae8", 0xf8}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="fd529438effcff593f9dee6cb9cddfcfcf1603663a9a7c51b76739bdaf20248afdf9cdb63ad50329ca49a42128b26ff5aa95476fb7b1f8a800514358e35f676ba8c5b8d1fee9b9812aaa0b624dd3d48c5b5689d5f360dc87bed59a98d76d57da87b4482860308acbc3a715218ca058e12eb4b8030e1cef2524e9ec08b19fe59b4d5e59cadf58307f8323a5e8", 0x8c}], 0x7, &(0x7f0000000980)=ANY=[@ANYRES64=r2], 0xe0}, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="64bc050e88657b1b4417f4e6de026ff54abb1ce4b87edeea01b4437b09534ebe68d7550c3aae1e5d3f6435e1772f703e2edef9b4b6ed28afc4224ebbe17e355526f162c6ff73584958b304c64542d6aa9fad2a7b092c65ba4a9d15f58fe7cc3e4b3d9bf2706cee732b15dee132183920f41a5705996fc01190a85341eb0101ed52135b21269ec948d698b6088326a83037319f9a56c43a", 0x97}], 0x1}}], 0x1, 0x0) 1m58.465537707s ago: executing program 3 (id=739): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r2) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000f"], 0x76}}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x2000) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) 1m47.797142441s ago: executing program 32 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r3, @ANYBLOB="18000000000000000000000000000000850000000700000018110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200070220f2e47300b3c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce5b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5cb42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x20}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000000000000070000000703ec4414"], 0x28}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r14, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000010c00078008000800000000100900020073797a30000000000500040003000000050005000a000000050001000600004011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40050) mmap(&(0x7f0000384000/0x400000)=nil, 0x400000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x3000) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r7, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 1m47.771778821s ago: executing program 33 (id=735): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x2}, {}, {}, {0x0, 0x1000}, {0xff7ffffc, 0x3ff}, {0x400020, 0x7ffffffe}], 0x0, 0x4, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/132, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045731, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) lseek(r7, 0x1003ff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x1) 1m47.693703273s ago: executing program 2 (id=742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="ffff28bd7000fedbdf250f0000001800018014000200776c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x44811}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x41090) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000100)=""/119) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)) read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2020) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c80)=ANY=[], 0x210) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x44}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061153000000000009500000000373c00"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m47.665271358s ago: executing program 3 (id=743): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x20000124, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x10) r4 = fsopen(0x0, 0x1) fsmount(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r4, 0x0) 1m32.737244721s ago: executing program 34 (id=742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="ffff28bd7000fedbdf250f0000001800018014000200776c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x44811}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x41090) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000100)=""/119) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)) read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2020) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c80)=ANY=[], 0x210) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x44}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061153000000000009500000000373c00"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m32.241615729s ago: executing program 35 (id=743): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x20000124, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x10) r4 = fsopen(0x0, 0x1) fsmount(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r4, 0x0) 53.291838422s ago: executing program 6 (id=816): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 53.220159992s ago: executing program 6 (id=817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @local, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @random="19f9f0170034", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0xc, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x7, 0x0, @void}}}}}}}}, 0x0) 53.143616133s ago: executing program 6 (id=818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440fdd544f9b0176aeeef844967f4cbb2a56842c683bd04fcb9b85331f3e5d78605f7e72a5dcdbd67196ca41d2aea01e4bb568a09730c70000000500674d363d207a4b9194175a14bc040ef5a5a34989b90decd8d5df4acf3b486829fadaf16d47268ec47f6e0c60c8cf5e4da2824c50185a2dc218846279", @ANYRES16=r0, @ANYRESDEC], 0x7c}}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) tkill(r5, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 52.088863387s ago: executing program 6 (id=824): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) 51.987793537s ago: executing program 6 (id=825): syz_emit_ethernet(0x1d4, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "acb4cb", 0x19e, 0x2f, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x66, 0x3, [0x2], "527923e8729987137fda9747922cdceaba7e25cc770fb5da9432135498453503d890bb5af935b38c0b41378bc9a6344740ba73b8deae84bfa261a6432d1ac82e44e0b3112ba89cfbf915e435b68ff081886a63cf50975244b2cc2d7ad9d99a553caa606ce6d3"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7, 0x6], "c5b90abcbcc691"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "0ef1061beef640ea39edf6505a2f2e137844bc0f1435293f3bd9457e0cf880d5afe8910757b571b65605f161bf26ff21fafe66e541670e16d30ac0ae846889c7ad9e"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x8, 0x2, 0x1, 0x1, 0x2, 0x6}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x1, 0x3, 0x0, 0x0, 0x4, 0x6}, 0x2, {0x1, 0x401, 0x3, 0xf, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "e05557e2097622bfd1ee13745ae3cb0a8569f1285b0cb0f406e41ee102f6d98d0fad783b4e657498662f3f8ea78bf9d9d65ab994a9492a008f1e385fbf0f110bca6fa798a190c9ccb1675850f26fbf4a58931e766d570f3793fd56a4a4dd3382089a6d83abd78d7bd89d4ad6e099ca3eba43332493f186472aa11e55b84f5e521971e299f4e8d8da53aa5ece35073f5cfd6d5790890890bb3d91c140917d8c4dcd056aec8b"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000ff07a030d3edac3a7c07f915a0a5480f6d87032b6f839d34e260e59ef721d98d503926f453c467f7e2bc0ecec07f98f0c9af7a5505120c0bca667c6d566d40796706ae247074380358e35ded8fc067e19d078eda3bbbb9346fbacf83841ce0e297fd45ccd4dbb2c6c6e93a19ed247cfd69dda3d76ce9f8ad65eca845f2e58300"/152], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x78, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000040)="0bbab5943069427e115d649869c6dc499dfff39b58af73235d3daf66b4916a072f95455507dfdf30054fb84a85037599beed58978b3b85430e9d6ec6b05811b44ad9fc49ced50b230b6f78a9a8310d0324faf93659f545a45c8a755fd12c529a52f5ac0b8d015b414499767a826fd78d85a3a72f5c42902cc7ba1f1d8bfafaaa8f280a96c45295bb75d4880719c48ffa59434adf3716f93225b92e1dbc1ca5004499de14e9d16ac51b2c65d28568b4397b1721", 0xffffffffffffffe0, 0x4000, &(0x7f0000000100), 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') socket$nl_rdma(0x10, 0x3, 0x14) 50.663363797s ago: executing program 6 (id=827): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0xff88) 35.170244711s ago: executing program 36 (id=827): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0xff88) 3.240372589s ago: executing program 8 (id=959): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.186151171s ago: executing program 4 (id=961): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x3, 0x0, 0x0, 0x800, {0x4, 0xffff, 0x3, 0x69, 0x200, 0x0, 0x5, 0x400, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00007413000000000000000caa000000090000000000000004b427180010"}}) 3.064893638s ago: executing program 4 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20008800) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), 0x0) r8 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r10 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r11, r9, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r10, 0x0, 0x0}) io_uring_enter(r8, 0x2003, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast1}, 0x0, 0x3, 0x4, 0x2}}, 0x26) r12 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$CDROM_MEDIA_CHANGED(r12, 0x5325, 0x0) 2.979848346s ago: executing program 8 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000b00), &(0x7f0000000200)=r1}, 0x20) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 2.933683559s ago: executing program 7 (id=964): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = fcntl$dupfd(r0, 0x0, r0) read$rfkill(r1, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.85911964s ago: executing program 8 (id=965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) 2.827412651s ago: executing program 7 (id=966): r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x46000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x2b}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20004810) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)={0xd4, r3, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x1c) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xe90cc4adc517528a, 0x1, 0x0, r9}, @alu={0x4, 0x0, 0x4, 0xe, 0xa, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x7, 0x4, 0x4, 0x8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @cipso={0x86, 0x3e, 0x1, [{0xe612a13f64736b17, 0xa, "e435ad80251b31e4"}, {0x1, 0x12, "2ef85f8b7f913a6167bf3b00000000e4"}, {0x7, 0xf, "6f8d5d439f625ab9f0668ee5a6"}, {0x5, 0xd, "aa33836f111f3a0b2e0d67"}]}, @timestamp_prespec={0x44, 0x4, 0xff}]}}}}}}}, 0x0) 2.174948346s ago: executing program 4 (id=970): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xe4ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.995766566s ago: executing program 4 (id=971): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/mnt\x00') 1.916105276s ago: executing program 8 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.270522949s ago: executing program 5 (id=974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfff}, @TCA_FW_CLASSID={0x8, 0x1, {0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) 1.26282454s ago: executing program 7 (id=975): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 1.261350353s ago: executing program 4 (id=976): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sync_file_range(0xffffffffffffffff, 0xc, 0x100, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@private=0xa010101, @in=@multicast2, 0x4e21, 0x0, 0x4e21, 0x81, 0xa, 0x20, 0xa0, 0x8}, {0x3, 0x7, 0xa, 0x7fff, 0xfffffffffffffff9, 0x7, 0x5a, 0x5}, {0x6, 0x81, 0x1, 0x5}, 0x5, 0x0, 0x51bd808320f434c2, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x10, 0x1000, 0xcb}}, 0xe4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',\x00']) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 1.253596368s ago: executing program 8 (id=977): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r1, &(0x7f0000000080)=""/153, 0x99) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x440802, 0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000440)={0xdf, 0x0, 0x9000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x9, 0x2, 0x40}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000840)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x20000280, 0x0, 0x0, 0x2000050c, 0x200007b8], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00000000"]}, 0xdd) 1.221328486s ago: executing program 7 (id=978): r0 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) 1.17598657s ago: executing program 7 (id=979): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xe4ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.173098964s ago: executing program 5 (id=980): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x40000000000000, 0x3ff, 0x0, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) 754.401899ms ago: executing program 7 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) msgsnd(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="02000000bc4b8e9205e5a1fc718b4242d0cee1aba4c45b4d09ec9e5174720367727d241d3c9e9481aabaf0ffda76010987d825835d18172fcb0a57f7cfedc8da12060d51c13d5621d1773978e007a882cfd0e193aa70ac56d0e514a16465c0f15987b653d4b3df0448fd75ca0896220d4afa4494e597e51ce08b127651adb7aa73d1b1bb002a89385e961de587ed88e5d7ed5ddee8d97aa0105455870c7ac68ecf9f7ab9f9c13dd9e7c68bc39f36e31f57e797379b4489bf18e081673785747fe5d33d03cb68f65d0ed253b5aba5e36f5622cf8741d61ad94cbe3070cc2cb2f074d6a9e8b75b5a7419688c392e38c4af4dbdc2d891c229b68fce51673d8a33b3fd11d5e052eacaebeedfe18832c12949337ddcac62aac8f23946cb5495872dd5d6a4afd2419d633c8f84c8fe36bb840bee450a3560cb5239f4891b3637f53934d1c7a110830bf9252866764cfc419ba83ded90b290606c35c5a978f5cc6c567cf3175f4ec5b030dc378086c9599546298b3b0a86b0dfd11a3fc09637e0f7c37915cffa3ec30efeb0334c5bf584f22e3b017398c15cea3126eb456ef0c846b7898b872b5d15f15babb40ad2d4d87fc38a60505a2b25d5bc3ff69459d999d0a01fc133f51b9d304bc4d4761d4147b52ae510dc02078144ddc51a73407b74a519f1ff6de8ef2fee304bbc1573a393b4f4a1786da19f8dc6edd742538864af783880d08022cd92bcd14252fe69baad91f067179f00270161c0ffc9224d5f63be70c621deb369d5224003126244e6906e7f9b9faebc0dd0d445cf0985656cbb9e1c41f2ae144324fd4009ea35c98d7b8ffb4acb41ddc01038930cc57283614688b54cfd1ef2711b67a5ea800eaf264bd4c2041320fd3ac8d5d2fa3c5cfdb8a7af59462544617cd530bf71aee2004b523b525856da3dc9bb8b432be24dcd40420ec45afeb30b039e24be4ef771c986596d1ad6cec1482b91c8ab363a99701d1117a42edf04d9053c6b5e6170bbddea1a06c7dab2834d2b50e6ed6feffe609db7c19802310a7d3c5b7551aedba3581768d18402ca790df84384753dc683a443430d6ded62b646886619898c0e2572e04b47afd3c45a3f3aae142409c7c67d4e8dea95bcd00efd0ef954176ba4ce91a3823246b29d3cb8002805920d30c453b9bd395636f6fa23d5766e0d7407cd34b22a7d76ad031c64a31276647d931ee8c69e506f4d35952ccca0f2c1c5cdefbcb7de223518f7c6112cb8e7bc3b71aee485cbfaa704a2765d8dbf90d409b6c068ebfeb1e5ba11787e5505f066f667e716d113f34bd66350ff663031d7406c7ef50b2ed2c054bb6ae8d1ad17198abb4eeebc9db9bcdf86ff9d80ac179205cc80c2fc581c9e540db11f19c5d3a33f583434f3b915448be9b1338177abdc71611d3961105082f5ec63316882c9651af4932ce49e942f99f42625c20216594ebc890d04939d3992c31ff53d1dbff2225cae45341341624d040f1e14b0cb566bbff1ac8d2b8ff21600add3557a1f4232dee42806499c23451f852be7ee59514f23a367e66db1dbcfa39899b09c633550c79032e42a62fe472d26eaf660e4b8b77cfcd896578fb887ed35bc2d2e60f18ae81a4e1f754fe956f6ab2fe74ff8ebce9eb69474f34a9646b25e842d610460de8f1b2d23891af3d86826bba35245f9512c307491610e3e17174111109fc33d9db3f0e03b93e31fbe73aedb043953019a996a74399060bdcf00843a66567f12ce62c9396aacb263c3996e2df44985445121597f862e0c6d9b66267aef0cbbd7bfbf2f5d7b70d5ab81a8f867d08d40185d8bbd198652b96afe5b3d52b78bae4d94e72da61f1c38cc18979c2532a87c2063dd3a985f3ada1c15d0513a6ffb9e3b45691f8f644fc49224217eea2ecacbce1ed537fc91d7cd9feebf2d7d6e6c649618d2c7e6abf4db9f3e85ea21ffc926ef437539707d2bda36c2a16d60980a84ee807df94b6680ec4b8895ea44b68146cb963879bed151bb018693afab58ede1061b93f16f51ae4a818d41d534fa8b6e7868abc4cd58a100c7f7f4cdc9ce19b7c38c6f15f613e2d05c73ad440eb10260880b8d6fa7bf5dc8fc168585da93ecf68f73487df03f3438655f455d11f9f72a89c88fcab4371c926c743b18c332e4b07cab38372a927a7ae2d1eb668dab20e4fb433db43a8b4e302a66eb91ca14e7a7cbd4ab797ab73f0e99f1fef9bdfecf1db31914a929ff3bba8dd9c9b6b6ea054bbb7997122d52757e6605c604d2b21ad70f9d62a381a0b4d2b97f8753e66df830e5c2b1021b9b2607679314e4ef7f85c6b253a1e0cc7a492d6e625d7b273ebebc484bf1bb6d83bf8e283ad1c081116461f0ad722a8776f673034c36693fbed6c478a97b617f076d7500210bbe969ab13e312abefad8dd028a192525da85d05dc0bf3ff8dda9f8ba9f48f41ddec32ab3d26e3f8948ab4ea29a5849a96a713d11f4eb7126db8e1c0e471ff3c1b46c298cd7c42d29dcf2e48aca7f17bdca8b73fd580818e3bcee3e510f6ad49af7bb1678de01a9dbacc98ba0b891fa13fc772c6e5d82ae341defce6f6def9e14c7950467e941643e20b30a18fcdd99763860137ee1ec15e24d14d6b19e7e2748f6aa0070499dddd216985c5fe219cc2c41f3de6df196ceccc01ff1765f536278ef2374ad118e7180cb886e549106c2d0669c7b2ed25a998148ffe8b2154505fe82add0bbdf1f26868a1ba85edba3f88b0b2f7caf9fa65acc018ed73a899724ca21980a8aa4e34ee077f257d50c63bf4f892d03ff475704f1a4a6cdb8a1c89f0f47da4ff64c033479695bd5d3f061e9617e77ceafa152ec39d4ae2c3bed23ee33ed20f383dc8a23ebe4ace0d710cdb2a26d0d590b93f2571f992ea12e0b57c0edf1c417e276c0b4dcb115903f18065ea164c6d5ce3b6a71bed1bfab5cfc2c3e3e21ad798cf7680f1ddbdc4d966b837423ef5a82faf65c89e22e60e7437d5c23f78831583d07aa7be0978530681e13ba3f0c298fb0ecf4d515fda912d641b40532b9ec14c26935d483064c6d22a0c63ff342030a1b79e53aeafb83c87ced8204bc8e656b99e2eb6f43aa483ba340ef0fbbb56db31c7658b738b4dc9026c4e16afd5ebe4a53bf3c08fd4ea243a9f4081f78b18e913b6f669550fc12195f3da077a43f09b2c9b19bf9e4be1feffa2604261b3786990c3f98f5f0e7ed1b63fb2b33a9e38fdb2f9f4ec417c04ba59f3e3a595773acf6b84418fb62e894fde4b925fc8605846bec1a55d832d9713807be983dbdb152f876312c48317d9b73c221d7a1b6b99286a9cf2f870d243d658f79a83d7bf4b9691f6246b546d6a8b05ebe6e77688eeaacf8eb94b65e44299019e759be248666d513eab1c2951aed83fb2fb0461f8d38cfd6d63fd2f3aeb2fb23a26db296d082df894acb683cc701a9e55a7144186af172d4bbda113fda0689466bf45cdd245a9d059bc55a87f83c1ca1e34d85f7cebd5781fada2167380666b5defcb9542bcdd1103b7240900dacf13c2b3cea8e08c81c3f18a3fd56800e9b253ba2c9e1e760d96a67aa650071dd40ba3785234b1c41e4a6d204402b03a9c80841782c661e7f0b8f4bf606f4b63fd8603e7ad5f91bc6a598862e3763047aef7e369a9c4a677d77c2c226b89781639e3c0706ef41af55f9c52ed3f4e841c475c2b86edbd63022ee5b7cc091716fa2b4343e1afb29b4c967955a5069a37ac4c9a3e29bf99a5373978cd0fc626900b236ea257a4b16441f947741f60982820cb29bdea670fbfc3f4d5f16ee4631941378d0f1ded82354a1428ae547f7a77ae9af237252da533546cec06b275d8663ca610b406250e6c053bb854918217e7f816e74dfeaf701d8664287e918eddba64430f666cbf18f692877e3e77d2645c3c69905ff9571be110f148962b9693c4ac312a640b58703cbe2e3a2e7552d6abcff42ab531971928fc78a204912f34fe7b8177b24b8d1e39ed25b9bb610d871f114fd22b3fdb7def76969e9427b3656dbb50880b9a601319b64909022ffc7303bc06c5105b9a1e8266d75e8c055d71b03784a0fcff806d0c6171009be78ebc41a52319063dd69bf4075140c35998ac3faed70bf5cde22fe1fbe60b1e2a82f3cda39baf5836238fd693c96c6a38928861df5ced3727f5c2a8d82e81d8f9efc6a6ffaa2f2792e59cddcbdc1a4d19a8dcd502a486e92eaba693ee23eb9542285a2aff3e34864ff87d74c9566a5370bad3c6b037c9d25250a8539a73c18c7bc0b9c8ea168d2641861c11148b1c1af50b9ee476dacf37644addbb084e3d06474f84442d3097e9a9d92ac5e69e87f6741dd26a7d9a026f9d8113f50e74884fa6b792b564e6ef578de0cfcb170e3970df6a1e51de351285e9e8bc0a713a9818c3fd1b76576db44238287e99175cef73a88ff380e7c7ba4d62905be2a0b1347ed0181dac4cc808b87fb5e254fd1a75c00c56ca203f3b2700a39d78586e60d9b3b6cfc8f3dea6ba759f829897c968122d89a40b09f7976c1fb73a4e7536202c4999871694b93b887414e568c4d7cde65de210f6b0d232ee00d74580d9644531cf43b3d079119ce2a098b850ddcd66e0fb6b78b8655e5de08c3b016cbf7e10da79c408d2f481e9e5b43952006c4870752070deda0af07725ab03c3cb56353d39708a6f734d8f6901f465198e3217e444ff7c2fa5b0ea3df4ae1eb8353ff19ee319789bf5ca7154e8010f0daeaa5926e329de8471f708645d4c0696d76242854cb15343c64acb6e851bed05d9dcfbc9d0b3bf67c1c7a781d1bf9ab8653cc7517b64c67f3bc385128cebd47bc9485b42c5d59e1516992dc48a54359dffdf8ab6c5d6cd8365eb70116666dc218ceeeefd04f1671c3d844466b254d5a29c5ed0c26a4229fcb7c710cca7b7a9d5bca54c84bc21a71b375e295a2877f481e1ca45d859cdecae62abe3eb392be77339982ab5189b67ffe38f502d82a092b8aa4cc3d8750b8e5f366c00fda616bfbae7f088da8b031c4c7ab2517f111dba0c0ae89ada596f003785d9b52f9eb890a09197325f8a5319574475e2064220900bad7c5603899717d65a94ff2ec444968c3d0e865bf253d45c52b6023b273a51a751492e2aa36eea984d5c1d958a9ed212b7ebfd6ea031bcf2383d159aa5f956bac0d21b38c0180333abfef84f7b7b88c57e4bdb4f47ef82a8d9a95d97721a7cf860c7bce3926c8d20da7b701d1c0835056906ddb427a530ebe5441092a7405f982bfe198715c8ee829294f1f8b8ea7d543bb3bbc03612c21d7d9f8ecb0a0a47f5b86d6670f38c39b4b784163212a83dd6d6eee4bb986624a6de91d70aebecc95fcba8090468cf6b30e3c2361a9312233b5063a4d605febf89693df36d0d6d40fe201e20a524148a32e123fdd9e335f312d0d2a671284b7006e8580ca33075fe117a05dc741ede06f9d06602c4b6dae8e0e97ad3370ef50fc03ba8f2dfbaff56034bab2f50c5b66ca750d49fe7ff609c6211ae170466c79b0bcf03a9c9934b243dc4a34dc333309e529d78ed2936df2aa1203fb796278f0b02e4ece8b650283c37a8f4963cfced8a33cdf56fdace68c08b78635afe459881181b92c9eea00d60f0ff27d2dfcd5912af0c67bb9c1a758af8f726a0a2a5ae8456296527b7fa4ac530b04a3a26c3b85392d290f31537250c91fde102b20bb6ee76014e13b02c568191404de548908648462da65195aa8265f98a924eb33d71c81e464ebaa50df5dfeb98b53828e86f78c4cf9a21261f182feb774089faab24b7430da36c92dcd6cb2fc18"], 0x1004, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20048040}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x40000) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 751.927767ms ago: executing program 5 (id=982): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$snapshot(0xffffff9c, &(0x7f0000004080), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @dev, 0x45}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x10cf, 0x9, 0x9, 0x2, 0x7, 'syz1\x00'}) 686.035468ms ago: executing program 5 (id=983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) capset(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0xfebe}}, 0x200040d1) 685.503655ms ago: executing program 5 (id=984): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x401}) 615.886355ms ago: executing program 5 (id=985): socket$inet6(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 232.651741ms ago: executing program 8 (id=986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) flock(0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r4, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) 0s ago: executing program 4 (id=987): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r1) kernel console output (not intermixed with test programs): audit: type=1326 audit(1738338672.081:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.513625][ T39] audit: type=1326 audit(1738338672.081:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.522713][ T39] audit: type=1326 audit(1738338672.081:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.528678][ T39] audit: type=1326 audit(1738338672.081:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.536398][ T39] audit: type=1326 audit(1738338672.081:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.545126][ T39] audit: type=1326 audit(1738338672.081:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.551302][ T39] audit: type=1326 audit(1738338672.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.560053][ T39] audit: type=1326 audit(1738338672.091:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.566789][ T39] audit: type=1326 audit(1738338672.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.3.13" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 47.666672][ T5310] Bluetooth: hci3: command tx timeout [ 47.667917][ T5966] Bluetooth: hci1: command tx timeout [ 47.668244][ T5959] Bluetooth: hci0: command tx timeout [ 47.669746][ T5963] Bluetooth: hci2: command tx timeout [ 47.679711][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.701392][ T6086] block device autoloading is deprecated and will be removed. [ 47.814907][ T6077] md2: using deprecated bitmap file support [ 47.816717][ T6077] md2: error: bitmap file must open for write [ 48.816190][ T6109] tipc: Started in network mode [ 48.817623][ T6109] tipc: Node identity 4, cluster identity 4711 [ 48.819363][ T6109] tipc: Node number set to 4 getty: ttyS0: read error: Resource temporarily unavailable [ 49.745317][ T5963] Bluetooth: hci2: command tx timeout [ 49.745992][ T5959] Bluetooth: hci1: command tx timeout [ 49.746093][ T5966] Bluetooth: hci0: command tx timeout [ 49.746117][ T5966] Bluetooth: hci3: command tx timeout [ 51.207260][ T6159] syzkaller0: entered promiscuous mode [ 51.208955][ T6159] syzkaller0: entered allmulticast mode [ 51.679163][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'. [ 51.682412][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'. [ 51.826793][ T5959] Bluetooth: hci1: command tx timeout [ 51.836011][ T5959] Bluetooth: hci3: command tx timeout [ 51.836597][ T5310] Bluetooth: hci0: command tx timeout [ 51.837636][ T5959] Bluetooth: hci2: command tx timeout [ 52.064398][ T5957] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.224449][ T5957] usb 8-1: Using ep0 maxpacket: 8 [ 52.232376][ T5957] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.236419][ T5957] usb 8-1: config 179 has no interface number 0 [ 52.238518][ T5957] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.244326][ T5957] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.247630][ T5957] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.251242][ T5957] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.255499][ T5957] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.258172][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.263782][ T6167] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.492103][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 52.492151][ T1917] usb 8-1: USB disconnect, device number 2 [ 52.498788][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 53.384401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.386974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.394438][ T6017] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.478637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.504598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 53.544545][ T6017] usb 8-1: Using ep0 maxpacket: 32 [ 53.547334][ T6017] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 53.552512][ T6017] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 53.555280][ T6017] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 53.557631][ T6017] usb 8-1: Product: syz [ 53.559133][ T6017] usb 8-1: Manufacturer: syz [ 53.560654][ T6017] usb 8-1: SerialNumber: syz [ 53.563926][ T6017] usb 8-1: config 0 descriptor?? [ 53.567071][ T6183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.855183][ T6183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.858128][ T6183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.865016][ T6183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.873183][ T6183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.875666][ T6183] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.878940][ T6183] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.898800][ T6183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.900616][ T6183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.924993][ T6183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.935670][ T6183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.937472][ T6183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.942669][ T6183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.077707][ T6017] usb 8-1: USB disconnect, device number 3 [ 55.594448][ T6219] block nbd0: Device being setup by another task [ 55.646156][ T6217] block nbd0: shutting down sockets [ 55.904560][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.906803][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.914542][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.984573][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.984405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 57.986355][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.989151][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.989243][ T5963] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.064380][ T5310] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.086610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.837369][ T6267] tmpfs: Unknown parameter 'È·VJ¼ÇÓhu' [ 59.069536][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 59.069545][ T39] audit: type=1326 audit(1738338683.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.085260][ T39] audit: type=1326 audit(1738338683.651:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.105887][ T39] audit: type=1326 audit(1738338683.661:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.119692][ T39] audit: type=1326 audit(1738338683.661:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.126318][ T39] audit: type=1326 audit(1738338683.661:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.132396][ T39] audit: type=1326 audit(1738338683.661:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.139035][ T39] audit: type=1326 audit(1738338683.661:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.145474][ T39] audit: type=1326 audit(1738338683.661:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.151875][ T39] audit: type=1326 audit(1738338683.661:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.158146][ T39] audit: type=1326 audit(1738338683.661:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 59.194484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.213104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 59.444431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.483106][ T6278] block nbd3: NBD_DISCONNECT [ 59.484408][ T6275] block nbd3: shutting down sockets [ 59.491633][ T6278] block nbd3: Send disconnect failed -32 [ 59.683317][ T6291] netlink: 830 bytes leftover after parsing attributes in process `syz.3.69'. [ 59.834478][ T74] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.986900][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.991261][ T74] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.996394][ T74] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 59.999990][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.005186][ T74] usb 6-1: config 0 descriptor?? [ 60.064458][ T5310] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.064581][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.064595][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.144437][ T5963] Bluetooth: hci3: command 0x0c1a tx timeout syzkaller syzkaller login: [ 60.531265][ T6298] Bluetooth: MGMT ver 1.23 [ 60.578996][ T6312] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.581667][ T6312] overlayfs: failed to set xattr on upper [ 60.584096][ T6312] overlayfs: ...falling back to redirect_dir=nofollow. [ 60.584114][ T6312] overlayfs: ...falling back to index=off. [ 60.584121][ T6312] overlayfs: ...falling back to uuid=null. [ 61.109502][ T74] usbhid 6-1:0.0: can't add hid device: -71 [ 61.111503][ T74] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.117268][ T74] usb 6-1: USB disconnect, device number 2 [ 61.174414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.271192][ T6344] capability: warning: `syz.2.85' uses deprecated v2 capabilities in a way that may be insecure [ 62.546125][ T5963] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 62.546988][ T5310] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.318434][ T5310] Bluetooth: hci2: ACL packet too small [ 65.350184][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 65.355102][ T6394] team_slave_0: entered promiscuous mode [ 65.356943][ T6394] team_slave_1: entered promiscuous mode [ 65.358855][ T6394] macvtap1: entered promiscuous mode [ 65.360412][ T6394] team0: entered promiscuous mode [ 65.362147][ T6394] macvtap1: entered allmulticast mode [ 65.363730][ T6394] team0: entered allmulticast mode [ 65.365457][ T6394] team_slave_0: entered allmulticast mode [ 65.367240][ T6394] team_slave_1: entered allmulticast mode [ 65.370067][ T6394] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 65.376948][ T6394] team0: left allmulticast mode [ 65.378414][ T6394] team_slave_0: left allmulticast mode [ 65.380080][ T6394] team_slave_1: left allmulticast mode [ 65.381725][ T6394] team0: left promiscuous mode [ 65.383396][ T6394] team_slave_0: left promiscuous mode [ 65.385156][ T6394] team_slave_1: left promiscuous mode [ 66.379293][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 66.379304][ T39] audit: type=1326 audit(1738338690.961:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.385505][ T6414] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 66.388025][ T39] audit: type=1326 audit(1738338690.961:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.396639][ T39] audit: type=1326 audit(1738338690.961:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.403075][ T39] audit: type=1326 audit(1738338690.961:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.409320][ T39] audit: type=1326 audit(1738338690.961:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.416163][ T39] audit: type=1326 audit(1738338690.961:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.423562][ T39] audit: type=1326 audit(1738338690.961:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.430641][ T39] audit: type=1326 audit(1738338690.961:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.437052][ T39] audit: type=1326 audit(1738338690.961:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.443257][ T39] audit: type=1326 audit(1738338690.961:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 66.452215][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 66.458801][ T6417] vlan2: entered promiscuous mode [ 66.954329][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.117010][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 67.119701][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.122094][ T9] usb 5-1: Product: syz [ 67.123342][ T9] usb 5-1: Manufacturer: syz [ 67.124803][ T9] usb 5-1: SerialNumber: syz [ 67.128452][ T9] usb 5-1: config 0 descriptor?? [ 68.575100][ T6447] NILFS (nbd1): device size too small [ 69.804635][ T6032] usb 5-1: USB disconnect, device number 2 [ 70.484498][ T5957] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.651817][ T6478] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.662072][ T6478] kvm: pic: level sensitive irq not supported [ 70.662522][ T6478] kvm: pic: non byte read [ 70.668793][ T6478] kvm: pic: level sensitive irq not supported [ 70.669729][ T6478] kvm: pic: non byte read [ 70.673935][ T6478] kvm: pic: level sensitive irq not supported [ 70.674199][ T6478] kvm: pic: non byte read [ 70.681648][ T6478] kvm: pic: level sensitive irq not supported [ 70.682806][ T6478] kvm: pic: non byte read [ 70.787693][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.790142][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.079097][ T6501] NILFS (nbd2): device size too small [ 71.357669][ T6505] block device autoloading is deprecated and will be removed. [ 75.917856][ T834] cfg80211: failed to load regulatory.db [ 77.594049][ T6547] xt_CT: No such helper "syz1" [ 78.043376][ T6558] tipc: Started in network mode [ 78.045040][ T6558] tipc: Node identity 4, cluster identity 4711 [ 78.046865][ T6558] tipc: Node number set to 4 [ 78.805879][ T6561] NILFS (nbd0): device size too small [ 79.144902][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.384498][ T6590] random: crng reseeded on system resumption [ 79.466602][ T6596] JFS: discard option not supported on device [ 79.470127][ T6596] syz.0.139: attempt to access beyond end of device [ 79.470127][ T6596] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 79.474491][ T6596] syz.0.139: attempt to access beyond end of device [ 79.474491][ T6596] loop0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 79.479475][ T6596] Mount JFS Failure: -5 [ 79.481200][ T6596] jfs_mount failed w/return code = -5 getty: ttyS0: read error: Resource temporarily unavailable [ 85.990963][ T6636] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 86.005205][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.009117][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.104999][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.256828][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 87.260478][ T35] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 87.264815][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.269696][ T35] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 87.272873][ T35] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 87.276001][ T35] usb 7-1: Product: syz [ 87.277313][ T35] usb 7-1: Manufacturer: syz [ 87.278747][ T35] usb 7-1: SerialNumber: syz [ 87.281401][ T35] usb 7-1: config 0 descriptor?? [ 87.284331][ T35] ldusb 7-1:0.0: Interrupt in endpoint not found [ 87.730938][ T6664] sp0: Synchronizing with TNC [ 88.074387][ T5310] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.074412][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 88.293947][ T6676] NILFS (nbd3): device size too small [ 89.906816][ T1017] usb 7-1: USB disconnect, device number 2 syzkaller syzkaller login: [ 92.255862][ T6762] NILFS (nbd2): device size too small [ 93.511847][ T6790] syz.0.171: attempt to access beyond end of device [ 93.511847][ T6790] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 93.651163][ T6790] XFS (nbd0): SB validate failed with error -5. [ 93.673949][ T69] block nbd0: Attempted send on invalid socket [ 93.676043][ T69] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 98.664813][ T25] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 98.835644][ T25] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 98.839641][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 98.844013][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.846681][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.850849][ T25] usb 8-1: config 0 descriptor?? [ 98.853990][ T25] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 99.056137][ T6879] misc userio: No port type given on /dev/userio [ 99.058509][ T6879] misc userio: The device must be registered before sending interrupts [ 99.070186][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 99.070196][ T39] audit: type=1326 audit(1738338723.651:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.3.193" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x0 [ 99.136196][ T6883] vivid-001: disconnect [ 99.138242][ T6885] kernel profiling enabled (shift: 63) [ 99.139973][ T6885] profiling shift: 63 too large [ 99.142501][ T6883] vivid-001: reconnect [ 99.535269][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 99.918499][ T6908] bridge_slave_0: left allmulticast mode [ 99.920387][ T6908] bridge_slave_0: left promiscuous mode [ 99.923420][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.930032][ T6908] bridge_slave_1: left allmulticast mode [ 99.931712][ T6908] bridge_slave_1: left promiscuous mode [ 99.933382][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.958343][ T6908] bond0: (slave bond_slave_0): Releasing backup interface [ 99.963162][ T6908] bond0: (slave bond_slave_1): Releasing backup interface [ 100.016727][ T6908] team0: Port device team_slave_0 removed [ 100.036024][ T6908] team0: Port device team_slave_1 removed [ 100.042831][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.045994][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.060923][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.065746][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.767387][ T6927] ntfs3(nullb0): Primary boot signature is not NTFS. [ 100.769793][ T6927] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 101.526266][ T30] usb 8-1: USB disconnect, device number 4 [ 106.754408][ T6017] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.852427][ T6963] Cannot find add_set index 3 as target [ 106.914610][ T6017] usb 6-1: Using ep0 maxpacket: 32 [ 106.925954][ T6017] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.930628][ T6017] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.933627][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.936108][ T6017] usb 6-1: Product: syz [ 106.937340][ T6017] usb 6-1: Manufacturer: syz [ 106.938718][ T6017] usb 6-1: SerialNumber: syz [ 106.941152][ T6017] usb 6-1: config 0 descriptor?? [ 106.944212][ T6962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.205486][ T5993] usb 6-1: USB disconnect, device number 3 [ 107.367834][ T6974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.463613][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.214'. [ 108.330998][ T6992] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.333611][ T6992] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.337412][ T6992] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.339962][ T6992] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.344119][ T6992] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.347235][ T6992] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.349876][ T6992] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.352462][ T6992] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.355811][ T6992] geneve2: entered promiscuous mode [ 108.357374][ T6992] geneve2: entered allmulticast mode [ 108.914911][ T7004] Cannot find add_set index 3 as target [ 109.366035][ T5957] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 109.540986][ T7018] vivid-002: disconnect [ 109.543136][ T7018] vivid-002: reconnect [ 110.114873][ T7045] vxcan1: tx address claim with dlc 1 [ 110.305263][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.345007][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.385226][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.865076][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.425070][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.224762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.464665][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.504821][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.904899][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.544651][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.514556][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.594606][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.636493][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.920520][ T7065] overlay: ./file0 is not a directory [ 118.925521][ T39] audit: type=1800 audit(1738338743.511:88): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.231" name="bus" dev="9p" ino=37749243 res=0 errno=0 [ 119.011376][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.664502][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.085121][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.704618][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.150315][ T39] audit: type=1326 audit(1738338745.731:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.156781][ T39] audit: type=1326 audit(1738338745.731:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.162871][ T39] audit: type=1326 audit(1738338745.731:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.169418][ T39] audit: type=1326 audit(1738338745.731:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.175539][ T39] audit: type=1326 audit(1738338745.731:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.181667][ T39] audit: type=1326 audit(1738338745.731:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.187885][ T39] audit: type=1326 audit(1738338745.731:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.194015][ T39] audit: type=1326 audit(1738338745.731:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.200121][ T39] audit: type=1326 audit(1738338745.731:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 121.204385][ T5957] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 121.354625][ T5957] usb 8-1: Using ep0 maxpacket: 32 [ 121.361009][ T5957] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 121.367265][ T5957] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.374120][ T5957] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.382875][ T5957] usb 8-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 121.388563][ T5957] usb 8-1: config 0 interface 0 has no altsetting 0 [ 121.392806][ T5957] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.396962][ T5957] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.400148][ T5957] usb 8-1: Product: syz [ 121.402295][ T5957] usb 8-1: Manufacturer: syz [ 121.404552][ T5957] usb 8-1: SerialNumber: syz [ 121.407393][ T5957] usb 8-1: config 0 descriptor?? [ 121.410737][ T5957] ldusb 8-1:0.0: Interrupt in endpoint not found [ 121.744581][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.855643][ T5957] usb 8-1: USB disconnect, device number 5 [ 122.488833][ T7125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 122.491332][ T7125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.495886][ T7125] vhci_hcd vhci_hcd.0: Device attached [ 122.674427][ T6017] vhci_hcd: vhci_device speed not set [ 122.744431][ T6017] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 122.784552][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.141644][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.249317][ T7132] vxcan1: tx address claim with dlc 1 [ 123.824762][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.065648][ T7126] vhci_hcd: connection reset by peer [ 124.074538][ T4100] vhci_hcd: stop threads [ 124.076198][ T4100] vhci_hcd: release socket [ 124.084691][ T4100] vhci_hcd: disconnect device [ 124.138749][ T7140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.249'. [ 124.896457][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.252504][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 125.904594][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.147068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.944557][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.114506][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.898081][ T6017] vhci_hcd: vhci_device speed not set [ 127.984954][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.425743][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 129.025074][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.040953][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 129.184531][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.064744][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.580218][ T7245] netlink: 284 bytes leftover after parsing attributes in process `syz.2.276'. [ 130.586957][ T7243] ISOFS: Unable to identify CD-ROM format. [ 130.608691][ T7243] Process accounting resumed [ 131.172348][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.224768][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.227344][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.227756][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.231670][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.316532][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.321064][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.324214][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.327240][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.330160][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.334678][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.337884][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.340817][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.344219][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.964867][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 133.264653][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.690983][ T7338] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 133.697893][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.702553][ T7338] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 134.314531][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.264590][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.344480][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.384527][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.714511][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.426662][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.305667][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.474620][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.514541][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.544680][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.344712][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.584763][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.624636][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.969750][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.385609][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.404747][ T5310] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 144.410271][ T5310] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 145.028761][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.852021][ T35] IPVS: starting estimator thread 0... [ 145.935443][ T7425] IPVS: using max 38 ests per chain, 91200 per kthread [ 145.942281][ T5310] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 145.947504][ T5310] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 146.064427][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.304485][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.608365][ T7444] 9pnet_virtio: no channels available for device syz [ 146.613703][ T7444] vxcan1: tx address claim with different name [ 147.040485][ T7445] syz.3.311 (7445) used greatest stack depth: 20544 bytes left [ 147.106676][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.116883][ T5310] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 147.556803][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.783124][ T7468] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 148.057785][ T7476] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.466713][ T5310] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 148.469490][ T5310] Bluetooth: hci1: Injecting HCI hardware error event [ 148.474097][ T5963] Bluetooth: hci1: hardware error 0x00 [ 149.074558][ T7489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.268922][ T7518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 149.270872][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.273615][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 149.454412][ T25] vhci_hcd: vhci_device speed not set [ 149.525108][ T25] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 149.985987][ T5310] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 149.988593][ T5310] Bluetooth: hci3: Injecting HCI hardware error event [ 149.991874][ T5959] Bluetooth: hci3: hardware error 0x00 [ 150.561366][ T5963] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.485679][ T7524] vhci_hcd: connection reset by peer [ 151.491036][ T105] vhci_hcd: stop threads [ 151.495785][ T105] vhci_hcd: release socket [ 151.497949][ T105] vhci_hcd: disconnect device [ 151.524236][ T7580] __nla_validate_parse: 29 callbacks suppressed [ 151.527165][ T7580] netlink: 6 bytes leftover after parsing attributes in process `syz.1.333'. [ 152.074443][ T5959] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 152.694575][ T7604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.697406][ T7604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.089299][ T7634] bridge0: port 3(hsr_slave_1) entered blocking state [ 153.091555][ T7634] bridge0: port 3(hsr_slave_1) entered disabled state [ 153.094161][ T7634] hsr_slave_1: entered allmulticast mode [ 153.099390][ T7634] hsr_slave_1: left allmulticast mode [ 154.410680][ T7663] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 154.413215][ T7663] netlink: 224 bytes leftover after parsing attributes in process `syz.2.348'. [ 154.625172][ T25] vhci_hcd: vhci_device speed not set [ 154.704355][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.707052][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.986929][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.999527][ T7682] bond0: (slave rose0): Enslaving as an active interface with an up link [ 156.536720][ T7719] program syz.3.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.688606][ T7714] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 156.784361][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.427144][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 157.594459][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 157.611505][ T7737] syz.1.362: attempt to access beyond end of device [ 157.611505][ T7737] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 158.187944][ T7745] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 159.445539][ T835] IPVS: starting estimator thread 0... [ 159.534962][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 159.551511][ T7773] IPVS: using max 39 ests per chain, 93600 per kthread [ 159.571388][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 159.635827][ T7785] netlink: 192 bytes leftover after parsing attributes in process `syz.0.374'. [ 160.047653][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 160.242817][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 160.987655][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 161.330972][ T7814] usb 2-1: USB disconnect, device number 2 [ 161.427690][ T7828] hub 2-0:1.0: USB hub found [ 161.429231][ T7828] hub 2-0:1.0: 6 ports detected [ 161.594435][ T5993] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 161.781682][ T5993] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 161.784672][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 161.788050][ T5993] usb 2-1: Product: QEMU USB Tablet [ 161.790206][ T5993] usb 2-1: Manufacturer: QEMU [ 161.792117][ T5993] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 161.827179][ T5993] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 162.139222][ T5993] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 162.588225][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 162.775222][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 165.326652][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 165.931344][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 167.239047][ T7936] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 167.394814][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 168.867982][ T7980] cgroup: Bad value for 'name' [ 168.930946][ T7975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.421'. [ 168.933804][ T7975] gr: renamed from bridge0 (while UP) [ 169.052035][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 169.246369][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 169.285528][ T8001] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 169.338678][ T8001] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 169.451996][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.672603][ T8026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.687250][ T8026] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.980071][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 172.214345][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 172.214356][ T39] audit: type=1326 audit(1738338796.781:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.222558][ T39] audit: type=1326 audit(1738338796.781:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.229019][ T39] audit: type=1326 audit(1738338796.781:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.245296][ T39] audit: type=1326 audit(1738338796.791:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.251626][ T39] audit: type=1326 audit(1738338796.791:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.260729][ T39] audit: type=1326 audit(1738338796.791:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.267087][ T39] audit: type=1326 audit(1738338796.791:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.273634][ T39] audit: type=1326 audit(1738338796.791:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.280115][ T39] audit: type=1326 audit(1738338796.791:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.287731][ T39] audit: type=1326 audit(1738338796.791:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.848876][ T8066] input: syz0 as /devices/virtual/input/input6 [ 173.306231][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 175.491457][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.494077][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.496591][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.499671][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.501837][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.505248][ T8115] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.529405][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 176.219028][ T8117] orangefs_mount: mount request failed with -4 [ 176.521105][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.526953][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.531480][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.536001][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.539454][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.542757][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.545878][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.548889][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 176.551632][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 177.062294][ T8139] wireguard0: entered promiscuous mode [ 177.947976][ T8139] syz.3.459 (8139) used greatest stack depth: 19312 bytes left [ 177.964733][ T8167] cgroup: Bad value for 'name' [ 178.011581][ T8167] gr: renamed from ip6gretap0 (while UP) [ 179.556165][ T8204] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 179.656082][ T8207] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 179.658984][ T8207] overlayfs: missing 'lowerdir' [ 180.519824][ T8231] tipc: Enabled bearer , priority 0 [ 180.526761][ T8230] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.272006][ T8240] ceph: No mds server is up or the cluster is laggy [ 181.624453][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.630881][ T8250] __nla_validate_parse: 32 callbacks suppressed [ 181.630890][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 181.784440][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 181.943167][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.947268][ T35] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.950830][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.955850][ T35] usb 6-1: config 0 descriptor?? [ 181.958859][ T35] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 182.375761][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 182.890239][ T8282] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 183.012270][ T8285] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 183.106002][ T8282] team0: Device netdevsim0 failed to register rx_handler [ 183.780242][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 183.972144][ T8305] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 183.989880][ T8305] bond1: (slave ip6erspan0): making interface the new active one [ 183.992619][ T8305] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 184.448752][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 184.580494][ T1017] usb 6-1: USB disconnect, device number 4 [ 185.103689][ T8330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.557125][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 185.718286][ T8350] siw: device registration error -23 [ 185.836129][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 187.040410][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 187.102568][ T8384] syz.1.507 (8384): /proc/8370/oom_adj is deprecated, please use /proc/8370/oom_score_adj instead. [ 187.992433][ T8387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 187.997617][ T8387] batman_adv: batadv0: Adding interface: gretap1 [ 188.000393][ T8387] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.012577][ T8387] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 188.272713][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 189.078425][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 189.083233][ T8425] bridge0: port 1(hsr_slave_1) entered blocking state [ 189.085476][ T8425] bridge0: port 1(hsr_slave_1) entered disabled state [ 189.087851][ T8425] hsr_slave_1: entered allmulticast mode [ 189.092952][ T8425] hsr_slave_1: left allmulticast mode [ 189.137510][ T8428] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 189.146702][ T8428] team0: Port device netdevsim0 added [ 189.180446][ T8428] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 189.225491][ T8428] team0: Port device netdevsim0 removed [ 189.228438][ T8431] siw: device registration error -23 [ 189.228487][ T8428] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 189.272167][ T8428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.518'. [ 189.434399][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 189.437626][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 189.498904][ T8433] ceph: No mds server is up or the cluster is laggy [ 189.836251][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 189.846028][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 190.126781][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 190.142763][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 190.153387][ T8439] ceph: No mds server is up or the cluster is laggy [ 191.685263][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 191.737383][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 191.782773][ T8485] mmap: syz.0.532 (8485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.869777][ T8487] netlink: 164 bytes leftover after parsing attributes in process `syz.1.533'. [ 191.872470][ T8487] netlink: 164 bytes leftover after parsing attributes in process `syz.1.533'. [ 191.981869][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 191.984871][ T5310] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.985591][ T5959] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 191.998348][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 192.129956][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 192.226950][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 192.242583][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 192.590058][ T8520] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.539'. [ 192.593865][ T8520] netlink: zone id is out of range [ 192.597309][ T8520] netlink: zone id is out of range [ 193.184742][ T8532] ======================================================= [ 193.184742][ T8532] WARNING: The mand mount option has been deprecated and [ 193.184742][ T8532] and is ignored by this kernel. Remove the mand [ 193.184742][ T8532] option from the mount to silence this warning. [ 193.184742][ T8532] ======================================================= [ 193.270842][ T8534] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 193.665192][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.756530][ T8542] netlink: 168 bytes leftover after parsing attributes in process `syz.3.546'. [ 193.870228][ T8544] syzkaller0: entered allmulticast mode [ 193.873154][ T8544] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 193.900725][ T8544] syzkaller0: left allmulticast mode [ 194.095577][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 194.111046][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 195.744537][ T8580] ceph: No mds server is up or the cluster is laggy [ 195.748056][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 195.750119][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 195.848112][ T8594] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 196.279326][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 196.376016][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 197.573139][ T8629] IPVS: persistence engine module ip_vs_pe_& not found [ 198.415315][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 199.058783][ T8657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.571'. [ 199.067182][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 199.440451][ T8649] Set syz1 is full, maxelem 65536 reached [ 200.186814][ T8680] syzkaller0: entered allmulticast mode [ 200.220022][ T8680] syzkaller0 (unregistering): left allmulticast mode [ 201.634395][ T8708] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 204.792834][ T8753] orangefs_mount: mount request failed with -4 [ 205.346244][ T8784] netlink: 84 bytes leftover after parsing attributes in process `syz.1.600'. [ 206.164901][ T8798] bridge0: port 3(hsr_slave_1) entered blocking state [ 206.166984][ T8798] bridge0: port 3(hsr_slave_1) entered disabled state [ 206.169175][ T8798] hsr_slave_1: entered allmulticast mode [ 206.173578][ T8798] hsr_slave_1: left allmulticast mode [ 206.250761][ T8801] random: crng reseeded on system resumption [ 207.144898][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 207.641736][ T8826] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 207.644073][ T8826] netlink: 224 bytes leftover after parsing attributes in process `syz.1.610'. [ 208.546649][ T8833] vivid-003: disconnect [ 208.549078][ T8833] vivid-003: reconnect [ 209.197129][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 209.269226][ T8847] wireguard1: entered promiscuous mode [ 214.530057][ T8887] warning: `syz.2.619' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.354389][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 216.177041][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 217.194348][ T5310] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.769459][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 218.535270][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 220.354990][ T8960] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 220.399611][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.556785][ T8960] team0: Port device batadv0 added [ 221.236197][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 223.403762][ T8984] process 'syz.2.643' launched './file0' with NULL argv: empty string added [ 224.429844][ T8998] Process accounting resumed [ 224.487619][ T9001] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 224.497293][ T9001] bond2: entered promiscuous mode [ 224.498930][ T9001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.522187][ T9001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.525578][ T9001] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 224.529452][ T9001] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 224.675435][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 224.721562][ T9001] bond2: (slave ip6gre1): making interface the new active one [ 224.724500][ T9001] ip6gre1: entered promiscuous mode [ 224.733312][ T9001] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 225.169280][ T9022] can0: slcan on ttyS3. [ 225.885315][ T9014] can0 (unregistered): slcan off ttyS3. [ 226.925616][ T9068] overlayfs: failed to clone upperpath [ 227.108998][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 227.820077][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 230.077694][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 230.588409][ T9139] Illegal XDP return value 4294967274 on prog (id 119) dev N/A, expect packet loss! [ 231.354384][ T1017] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 231.774868][ T1017] usb 7-1: Using ep0 maxpacket: 8 [ 231.796733][ T1017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.801316][ T1017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.808753][ T1017] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.816119][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.832765][ T1017] usb 7-1: config 0 descriptor?? [ 232.171025][ T1017] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 232.533410][ T9153] input: syz1 as /devices/virtual/input/input7 [ 232.824940][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 234.666496][ T835] usb 7-1: USB disconnect, device number 3 [ 237.120574][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 237.464415][ T9185] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.682'. [ 238.271161][ T9194] overlayfs: failed to clone upperpath [ 239.286365][ T9196] program syz.2.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.723325][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 242.377143][ T9222] 9pnet_fd: Insufficient options for proto=fd [ 243.965064][ T9234] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 245.191646][ T9259] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 245.195658][ T9259] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 245.199045][ T9259] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 245.214150][ T9259] loop7: detected capacity change from 0 to 16384 [ 245.466134][ T9254] fuse: Unknown parameter '0x0000000000000007' [ 245.495963][ T9254] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 245.864743][ T9264] loop7: detected capacity change from 16384 to 16383 [ 246.029950][ T9270] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 246.032247][ T9270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.700'. [ 246.857079][ T9270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.860936][ T9270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.624396][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.864419][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.357295][ T9323] random: crng reseeded on system resumption [ 249.366825][ T9323] Restarting kernel threads ... done. [ 250.126909][ T9325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.704434][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.954878][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.779612][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 252.787323][ T9336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.715'. [ 253.018004][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 253.502949][ T39] kauditd_printk_skb: 158 callbacks suppressed [ 253.502966][ T39] audit: type=1326 audit(1738338878.079:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.3.717" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x0 [ 254.288929][ T9354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.347362][ T9354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.797877][ T9359] overlayfs: failed to clone upperpath [ 254.885268][ T9359] : entered promiscuous mode [ 255.117279][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.364618][ T9366] bond0: entered promiscuous mode [ 258.595307][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 258.598036][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 259.244454][ T9384] input: syz1 as /devices/virtual/input/input8 [ 259.250253][ T9386] xt_SECMARK: invalid mode: 0 [ 259.257298][ T39] audit: type=1326 audit(1738338883.829:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.273748][ T39] audit: type=1326 audit(1738338883.829:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.295064][ T39] audit: type=1326 audit(1738338883.829:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.302549][ T39] audit: type=1326 audit(1738338883.829:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.313918][ T39] audit: type=1326 audit(1738338883.829:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.324023][ T39] audit: type=1326 audit(1738338883.829:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.336003][ T39] audit: type=1326 audit(1738338883.829:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.344083][ T39] audit: type=1326 audit(1738338883.839:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.355101][ T39] audit: type=1326 audit(1738338883.839:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 259.363208][ T39] audit: type=1326 audit(1738338883.839:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 263.664653][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.615520][ T9423] netlink: 'syz.0.736': attribute type 21 has an invalid length. [ 265.619987][ T9423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.736'. [ 280.594301][ C1] sched: DL replenish lagged too much [ 281.098363][ T5310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.103139][ T5310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.108444][ T5310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.111358][ T5310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.113791][ T5310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.116789][ T5310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.150437][ T5959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.164164][ T5959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.170656][ T5959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.174372][ T5959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.178129][ T5959] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.182938][ T5959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.184423][ T5310] Bluetooth: hci4: command tx timeout [ 283.264426][ T5310] Bluetooth: hci5: command tx timeout [ 284.295803][ T9418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.264412][ T5310] Bluetooth: hci4: command tx timeout [ 285.344388][ T5310] Bluetooth: hci5: command tx timeout [ 287.346437][ T5310] Bluetooth: hci4: command tx timeout [ 287.424419][ T5310] Bluetooth: hci5: command tx timeout [ 287.736352][ T9418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.424523][ T5310] Bluetooth: hci4: command tx timeout [ 289.504402][ T5310] Bluetooth: hci5: command tx timeout [ 291.185500][ T9418] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 295.990873][ T5959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.998512][ T5959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.008356][ T5959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.011552][ T5959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.015268][ T5959] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.017558][ T5959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.787455][ T5959] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.791306][ T5959] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.794303][ T5959] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.797085][ T5959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.800436][ T5959] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.802665][ T5959] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.975660][ T9418] bond0 (unregistering): Released all slaves [ 298.074831][ T5310] Bluetooth: hci6: command tx timeout [ 298.525177][ T9456] chnl_net:caif_netlink_parms(): no params data found [ 298.654576][ T9463] chnl_net:caif_netlink_parms(): no params data found [ 298.691245][ T9452] chnl_net:caif_netlink_parms(): no params data found [ 298.864456][ T5310] Bluetooth: hci7: command tx timeout [ 298.919239][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.921363][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.923535][ T9456] bridge_slave_0: entered allmulticast mode [ 298.926416][ T9456] bridge_slave_0: entered promiscuous mode [ 298.928986][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.931037][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.933353][ T9456] bridge_slave_1: entered allmulticast mode [ 298.937024][ T9456] bridge_slave_1: entered promiscuous mode [ 298.970217][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.988879][ T9467] chnl_net:caif_netlink_parms(): no params data found [ 299.162853][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.179937][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.256589][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.259536][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.262521][ T9463] bridge_slave_0: entered allmulticast mode [ 299.267845][ T9463] bridge_slave_0: entered promiscuous mode [ 299.274663][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.373896][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.393473][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.397212][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.400249][ T9463] bridge_slave_1: entered allmulticast mode [ 299.405194][ T9463] bridge_slave_1: entered promiscuous mode [ 299.442508][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.444767][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.446924][ T9452] bridge_slave_0: entered allmulticast mode [ 299.449146][ T9452] bridge_slave_0: entered promiscuous mode [ 299.452225][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.454464][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.456588][ T9452] bridge_slave_1: entered allmulticast mode [ 299.458741][ T9452] bridge_slave_1: entered promiscuous mode [ 299.511650][ T9456] team0: Port device team_slave_0 added [ 299.519199][ T9456] team0: Port device team_slave_1 added [ 299.563797][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.627896][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.631645][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.644899][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.655011][ T9467] bridge_slave_0: entered allmulticast mode [ 299.659539][ T9467] bridge_slave_0: entered promiscuous mode [ 299.714830][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.722329][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.772092][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.774177][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.778544][ T9467] bridge_slave_1: entered allmulticast mode [ 299.780738][ T9467] bridge_slave_1: entered promiscuous mode [ 299.785030][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.787074][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.794656][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.800130][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.802161][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.809481][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.813638][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.863844][ T9463] team0: Port device team_slave_0 added [ 299.869077][ T9463] team0: Port device team_slave_1 added [ 299.926321][ T9452] team0: Port device team_slave_0 added [ 299.950262][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.954370][ T9452] team0: Port device team_slave_1 added [ 299.971058][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.973760][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.985666][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.992588][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.072952][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.075690][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.082941][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.102371][ T9467] team0: Port device team_slave_0 added [ 300.133908][ T9456] hsr_slave_0: entered promiscuous mode [ 300.137127][ T9456] hsr_slave_1: entered promiscuous mode [ 300.139495][ T9456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.141852][ T9456] Cannot create hsr debugfs directory [ 300.144793][ T5310] Bluetooth: hci6: command tx timeout [ 300.152440][ T9467] team0: Port device team_slave_1 added [ 300.169064][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.171111][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.179180][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.201801][ T42] bridge_slave_1: left allmulticast mode [ 300.203840][ T42] bridge_slave_1: left promiscuous mode [ 300.207850][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.215481][ T42] bridge_slave_0: left allmulticast mode [ 300.217148][ T42] bridge_slave_0: left promiscuous mode [ 300.218827][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.307099][ T42] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 300.330427][ T42] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 300.332872][ T42] ip6gre1 (unregistering): left promiscuous mode [ 300.593402][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.601339][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.605455][ T42] bond0 (unregistering): Released all slaves [ 300.610333][ T42] bond1 (unregistering): Released all slaves [ 300.705747][ T42] bond2 (unregistering): Released all slaves [ 300.720809][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.723493][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.731476][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.768300][ T9463] hsr_slave_0: entered promiscuous mode [ 300.771330][ T9463] hsr_slave_1: entered promiscuous mode [ 300.773371][ T9463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.775753][ T9463] Cannot create hsr debugfs directory [ 300.827778][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.829948][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.840927][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.845172][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.847263][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.855097][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.868112][ T42] : left promiscuous mode [ 300.920725][ T9452] hsr_slave_0: entered promiscuous mode [ 300.922750][ T9452] hsr_slave_1: entered promiscuous mode [ 300.924992][ T9452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.933054][ T9452] Cannot create hsr debugfs directory [ 300.944482][ T5310] Bluetooth: hci7: command tx timeout [ 300.966439][ T42] tipc: Left network mode [ 301.010841][ T9467] hsr_slave_0: entered promiscuous mode [ 301.013759][ T9467] hsr_slave_1: entered promiscuous mode [ 301.015972][ T9467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.018405][ T9467] Cannot create hsr debugfs directory [ 301.330805][ T9456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.351088][ T9456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.361396][ T9456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.369309][ T9456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.382578][ T42] hsr_slave_0: left promiscuous mode [ 301.386507][ T42] hsr_slave_1: left promiscuous mode [ 301.389686][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.392622][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.404888][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.407261][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.436108][ T42] veth1_macvtap: left promiscuous mode [ 301.438187][ T42] veth0_macvtap: left promiscuous mode [ 301.439853][ T42] veth1_vlan: left promiscuous mode [ 301.441477][ T42] veth0_vlan: left promiscuous mode [ 302.234411][ T5310] Bluetooth: hci6: command tx timeout [ 302.451923][ T42] team0 (unregistering): Port device team_slave_1 removed [ 302.561504][ T42] team0 (unregistering): Port device team_slave_0 removed [ 303.024685][ T5310] Bluetooth: hci7: command tx timeout [ 303.393612][ T9467] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.398047][ T9467] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.420600][ T9467] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.427429][ T9467] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.499292][ T9463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.507683][ T9463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.532918][ T9463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.546066][ T9463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.598923][ T9452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.604143][ T9452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.613496][ T9452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.619338][ T9452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.630613][ T9456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.635855][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.658503][ T9467] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.661754][ T9456] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.671162][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.674057][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.695221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.697379][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.707023][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.709191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.721222][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.723362][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.797203][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.809030][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.817477][ T9463] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.821134][ T9467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.841403][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.845356][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.847463][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.860550][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.862667][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.894612][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.896725][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.900832][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.902895][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.930798][ T9463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.934039][ T9463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.978814][ T9456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.007318][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.092685][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.096697][ T42] IPVS: stop unused estimator thread 0... [ 304.098719][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.161048][ T9456] veth0_vlan: entered promiscuous mode [ 304.166310][ T9456] veth1_vlan: entered promiscuous mode [ 304.199945][ T9467] veth0_vlan: entered promiscuous mode [ 304.203364][ T9467] veth1_vlan: entered promiscuous mode [ 304.206443][ T9456] veth0_macvtap: entered promiscuous mode [ 304.217216][ T9456] veth1_macvtap: entered promiscuous mode [ 304.239639][ T9467] veth0_macvtap: entered promiscuous mode [ 304.245046][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.248404][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.250977][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.255774][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.259314][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.268999][ T9467] veth1_macvtap: entered promiscuous mode [ 304.283781][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.287512][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.290347][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.293330][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.297631][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.300956][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.303917][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.307779][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.310782][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.313636][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.314593][ T5310] Bluetooth: hci6: command tx timeout [ 304.317961][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.323392][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.345462][ T9463] veth0_vlan: entered promiscuous mode [ 304.347883][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.350860][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.353651][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.358391][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.362351][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.366438][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.369818][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.372489][ T9456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.376094][ T9456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.379623][ T9456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.382443][ T9456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.401036][ T9467] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.404840][ T9467] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.407495][ T9467] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.409967][ T9467] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.417399][ T9463] veth1_vlan: entered promiscuous mode [ 304.425900][ T9452] veth0_vlan: entered promiscuous mode [ 304.443072][ T9452] veth1_vlan: entered promiscuous mode [ 304.449322][ T9463] veth0_macvtap: entered promiscuous mode [ 304.482106][ T9463] veth1_macvtap: entered promiscuous mode [ 304.509140][ T9452] veth0_macvtap: entered promiscuous mode [ 304.519577][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.522256][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.526688][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.530538][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.533389][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.537605][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.541173][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.544756][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.547877][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.550841][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.554743][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.573061][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.573519][ T9452] veth1_macvtap: entered promiscuous mode [ 304.577431][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.586263][ T4100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.589351][ T4100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.602753][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.606999][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.610392][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.613405][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.617587][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.621673][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.625680][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.629692][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.635042][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.640059][ T9463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.643588][ T9463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.647411][ T9463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.650847][ T9463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.661461][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.663836][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.679275][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.682299][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.687165][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.692779][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.700644][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.703664][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.707195][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.710254][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.713091][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.716322][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.720195][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.761165][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.765616][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.769512][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.772949][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.776599][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.779783][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.782525][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.788283][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.791196][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.794483][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.798385][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.802854][ T9452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.805571][ T9452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.808221][ T9452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.810741][ T9452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.863422][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.877178][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.908430][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.911118][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.913452][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.919027][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.936111][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.938468][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.116435][ T5310] Bluetooth: hci7: command tx timeout [ 305.537533][ T9612] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 305.539105][ T9609] IPVS: stopping backup sync thread 9612 ... [ 305.582857][ T9597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.643351][ T8] libceph: connect (1)[c::]:6789 error -101 [ 305.645699][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 305.711689][ T9585] ceph: No mds server is up or the cluster is laggy [ 306.055781][ T9623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.337890][ T9632] netlink: zone id is out of range [ 306.340054][ T9632] netlink: zone id is out of range [ 308.393347][ T5310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 308.396673][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: kworker/u33:1 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 308.396686][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.396693][ T5310] Workqueue: hci5 hci_rx_work [ 308.396779][ T5310] Call Trace: [ 308.396783][ T5310] [ 308.396787][ T5310] dump_stack_lvl+0x16c/0x1f0 [ 308.396805][ T5310] sysfs_warn_dup+0x7f/0xa0 [ 308.396821][ T5310] sysfs_create_dir_ns+0x24d/0x2b0 [ 308.396836][ T5310] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 308.396852][ T5310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.396867][ T5310] ? kobject_add_internal+0x12d/0x990 [ 308.396878][ T5310] ? do_raw_spin_unlock+0x172/0x230 [ 308.396891][ T5310] kobject_add_internal+0x2c8/0x990 [ 308.396902][ T5310] kobject_add+0x16f/0x240 [ 308.396912][ T5310] ? __pfx_kobject_add+0x10/0x10 [ 308.396922][ T5310] ? class_to_subsys+0x3e/0x160 [ 308.396957][ T5310] ? do_raw_spin_unlock+0x172/0x230 [ 308.396972][ T5310] ? kobject_put+0xab/0x5a0 [ 308.396986][ T5310] device_add+0x289/0x1a70 [ 308.396998][ T5310] ? __pfx_dev_set_name+0x10/0x10 [ 308.397014][ T5310] ? __pfx_device_add+0x10/0x10 [ 308.397027][ T5310] ? mgmt_send_event_skb+0x2f2/0x460 [ 308.397045][ T5310] hci_conn_add_sysfs+0x17e/0x230 [ 308.397057][ T5310] le_conn_complete_evt+0xfce/0x1d10 [ 308.397076][ T5310] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 308.397090][ T5310] ? trace_contention_end+0xee/0x140 [ 308.397101][ T5310] ? __mutex_lock+0x1cc/0xb10 [ 308.397119][ T5310] hci_le_conn_complete_evt+0x23c/0x370 [ 308.397136][ T5310] hci_le_meta_evt+0x2e2/0x5d0 [ 308.397145][ T5310] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 308.397162][ T5310] hci_event_packet+0x666/0x1190 [ 308.397176][ T5310] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 308.397186][ T5310] ? __pfx_hci_event_packet+0x10/0x10 [ 308.397199][ T5310] ? mark_held_locks+0x9f/0xe0 [ 308.397211][ T5310] ? kcov_remote_start+0x3cf/0x6e0 [ 308.397222][ T5310] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.397245][ T5310] hci_rx_work+0x2c5/0x16b0 [ 308.397256][ T5310] ? process_one_work+0x8bb/0x1b30 [ 308.397270][ T5310] process_one_work+0x958/0x1b30 [ 308.397286][ T5310] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 308.397298][ T5310] ? __pfx_process_one_work+0x10/0x10 [ 308.397313][ T5310] ? assign_work+0x1a0/0x250 [ 308.397326][ T5310] worker_thread+0x6c8/0xf00 [ 308.397341][ T5310] ? __pfx_worker_thread+0x10/0x10 [ 308.397354][ T5310] kthread+0x3af/0x750 [ 308.397365][ T5310] ? __pfx_kthread+0x10/0x10 [ 308.397374][ T5310] ? lock_acquire+0x2f/0xb0 [ 308.397386][ T5310] ? __pfx_kthread+0x10/0x10 [ 308.397396][ T5310] ret_from_fork+0x45/0x80 [ 308.397407][ T5310] ? __pfx_kthread+0x10/0x10 [ 308.397417][ T5310] ret_from_fork_asm+0x1a/0x30 [ 308.397433][ T5310] [ 308.397444][ T5310] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 308.464766][ T9643] serio: Serial port ptm0 [ 308.465377][ T5310] Bluetooth: hci5: failed to register connection device [ 309.586626][ T9669] geneve2: entered promiscuous mode [ 309.588245][ T9669] geneve2: entered allmulticast mode [ 309.812272][ T9681] fuse: Invalid rootmode [ 310.277424][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.761'. [ 310.617436][ T9634] IPVS: starting estimator thread 0... [ 310.746359][ T9696] IPVS: using max 38 ests per chain, 91200 per kthread [ 310.753051][ T9699] netlink: 92 bytes leftover after parsing attributes in process `syz.7.765'. [ 314.624736][ T5310] Bluetooth: hci5: command 0x0406 tx timeout [ 315.195865][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 316.553084][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.518819][ T1136] wlan1: Creating new IBSS network, BSSID 26:45:d5:31:60:7b [ 323.678382][ T9814] usb usb1: usbfs: process 9814 (syz.5.777) did not claim interface 0 before use [ 324.170791][ T9823] siw: device registration error -23 [ 324.771488][ T5310] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 325.162597][ T9846] random: crng reseeded on system resumption [ 325.203102][ T9844] 9pnet_fd: Insufficient options for proto=fd [ 325.447857][ T9841] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 326.548336][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.788'. [ 326.550936][ T9853] bridge_slave_1: left allmulticast mode [ 326.552623][ T9853] bridge_slave_1: left promiscuous mode [ 326.554437][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.596545][ T9853] bridge_slave_0: left allmulticast mode [ 326.598255][ T9853] bridge_slave_0: left promiscuous mode [ 326.601194][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.771183][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 326.773771][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 327.035453][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 327.037329][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 327.060292][ T9848] ceph: No mds server is up or the cluster is laggy [ 327.178985][ T9873] No control pipe specified [ 328.108253][ T9880] siw: device registration error -23 [ 329.517231][ T9895] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 330.249828][ T9906] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 331.261880][ T9916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.639065][ T9929] pim6reg: entered allmulticast mode [ 331.645147][ T9929] pim6reg: left allmulticast mode [ 331.652514][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.6.801'. [ 331.723619][ T9932] usb 2-1: USB disconnect, device number 3 [ 332.647485][ T9619] libceph: connect (1)[c::]:6789 error -101 [ 332.660289][ T9619] libceph: mon0 (1)[c::]:6789 connect error [ 332.795323][ T9943] ceph: No mds server is up or the cluster is laggy [ 333.823675][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.7.809'. [ 334.035435][ T5959] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 335.824406][ T5959] Bluetooth: hci7: command 0x0405 tx timeout [ 336.190131][ T834] libceph: connect (1)[c::]:6789 error -101 [ 336.192072][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 336.224917][ T9983] ceph: No mds server is up or the cluster is laggy [ 338.064413][ T5310] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 338.067281][ T5310] Bluetooth: hci5: Injecting HCI hardware error event [ 338.072179][ T5310] Bluetooth: hci5: hardware error 0x00 [ 338.293365][T10016] netlink: 148 bytes leftover after parsing attributes in process `syz.4.826'. [ 340.144438][ T5310] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 341.195644][T10048] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 344.450768][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.360228][T10081] syz_tun: entered allmulticast mode [ 345.362722][T10080] syz_tun: left allmulticast mode [ 345.524500][ T74] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 345.852016][ T74] usb 10-1: Using ep0 maxpacket: 8 [ 345.857350][ T74] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 345.860163][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.863440][ T74] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.867614][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.870820][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.875482][ T74] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 345.878503][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.881750][ T74] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.885658][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.889382][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.893716][ T74] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 345.896878][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.900410][ T74] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.903641][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.907889][ T74] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.913342][ T74] usb 10-1: string descriptor 0 read error: -22 [ 345.915709][ T74] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.918371][ T74] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.925578][ T74] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 346.204706][ T74] usb 10-1: USB disconnect, device number 2 [ 348.537448][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.849'. [ 352.712557][T10134] PKCS8: Unsupported PKCS#8 version [ 353.554129][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.558216][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.561428][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.567770][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.570414][ T5959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.572733][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.613623][ T1136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.667349][T10139] chnl_net:caif_netlink_parms(): no params data found [ 353.736723][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.739488][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.742209][T10139] bridge_slave_0: entered allmulticast mode [ 353.745123][T10139] bridge_slave_0: entered promiscuous mode [ 353.749109][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.751229][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.753604][T10139] bridge_slave_1: entered allmulticast mode [ 353.756488][T10139] bridge_slave_1: entered promiscuous mode [ 353.807492][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.812976][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.869993][T10139] team0: Port device team_slave_0 added [ 353.877602][T10139] team0: Port device team_slave_1 added [ 353.911616][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.913997][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.922122][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.926152][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.944476][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.953586][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.990659][T10139] hsr_slave_0: entered promiscuous mode [ 353.992717][T10139] hsr_slave_1: entered promiscuous mode [ 353.994747][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.997324][T10139] Cannot create hsr debugfs directory [ 354.119321][T10139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 354.129303][T10139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 354.141071][T10139] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 354.147458][T10139] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 354.162366][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.164491][T10139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.168086][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.170139][T10139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.191749][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.203361][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.209666][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.238371][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.248901][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.251062][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.258024][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.260086][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.388090][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.426093][T10161] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 354.438859][T10164] sp0: Synchronizing with TNC [ 354.577624][T10139] veth0_vlan: entered promiscuous mode [ 354.581684][T10139] veth1_vlan: entered promiscuous mode [ 354.596373][T10139] veth0_macvtap: entered promiscuous mode [ 354.599758][T10139] veth1_macvtap: entered promiscuous mode [ 354.607694][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.611559][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.615768][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.619587][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.623226][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.628141][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.633057][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.637429][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.641022][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.645676][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.649598][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.652986][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.657822][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.672552][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.676308][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.678706][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.679411][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.681111][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.684138][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.686920][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.690298][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.691953][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.695416][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.700251][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.702764][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.703339][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.705957][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.708887][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.710911][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.713957][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.716667][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.718968][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.721064][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.724143][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.726921][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.729151][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.731324][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.734704][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.737344][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.742276][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.743854][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.744728][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744741][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744751][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744761][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744771][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744787][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744797][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744807][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744817][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744827][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744837][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744847][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744857][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.744867][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.749812][T10139] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.751287][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.753444][T10139] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.758259][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.758444][T10139] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.760601][ T835] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 354.762729][T10139] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.771171][ T835] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 354.838271][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.850284][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.867188][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.870520][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.905038][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 355.057566][ T25] usb 9-1: config 0 has no interfaces? [ 355.059194][ T25] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 355.061767][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.072144][ T25] usb 9-1: config 0 descriptor?? [ 355.154343][ T74] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 355.301772][ T835] usb 9-1: USB disconnect, device number 2 [ 355.357416][ T74] usb 10-1: Using ep0 maxpacket: 8 [ 355.360881][ T74] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.363731][ T74] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.366745][ T74] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.369613][ T74] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.373363][ T74] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.376211][ T74] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.490459][T10198] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 355.606358][ T74] usb 10-1: GET_CAPABILITIES returned 0 [ 355.608578][ T74] usbtmc 10-1:16.0: can't read capabilities [ 355.664550][ T5310] Bluetooth: hci0: command tx timeout [ 355.744707][T10196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 355.827797][ T25] usb 10-1: USB disconnect, device number 3 [ 355.925767][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.874'. [ 356.728616][T10218] overlayfs: missing 'lowerdir' [ 357.650366][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 357.744412][ T5310] Bluetooth: hci0: command tx timeout [ 358.053262][T10214] netlink: 168 bytes leftover after parsing attributes in process `syz.8.876'. [ 359.824575][ T5310] Bluetooth: hci0: command tx timeout [ 360.511456][T10244] Process accounting resumed [ 360.984727][ T834] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 361.134634][ T834] usb 10-1: Using ep0 maxpacket: 8 [ 361.138644][ T834] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.141707][ T834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.145252][ T834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.148453][ T834] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.152482][ T834] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.156413][ T834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.272828][T10248] program syz.7.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.373612][ T834] usb 10-1: usb_control_msg returned -32 [ 361.375672][ T834] usbtmc 10-1:16.0: can't read capabilities [ 361.512203][ T835] usb 10-1: USB disconnect, device number 4 [ 361.909536][ T5310] Bluetooth: hci0: command tx timeout [ 362.100300][T10254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.098688][T10263] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 363.101182][T10263] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 363.165485][T10263] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 363.167819][T10263] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 375.332863][ T1174] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.452578][ T1174] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.548296][ T1174] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.638148][ T1174] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.317642][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.331329][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.338128][ T1174] bond0 (unregistering): Released all slaves [ 377.177238][ T1174] hsr_slave_0: left promiscuous mode [ 377.183028][ T1174] hsr_slave_1: left promiscuous mode [ 377.185351][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.187532][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.193437][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.198303][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.242178][ T1174] veth1_macvtap: left promiscuous mode [ 377.244203][ T1174] veth0_macvtap: left promiscuous mode [ 377.248104][ T1174] veth1_vlan: left promiscuous mode [ 377.250054][ T1174] veth0_vlan: left promiscuous mode [ 377.740219][T10319] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 377.974377][ T35] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 377.986451][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.008975][T10327] fuse: Unknown parameter 'ÿ' [ 378.038621][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 378.138254][ T35] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 378.154092][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.159666][ T35] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 378.163325][ T35] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 378.166437][ T35] usb 9-1: Manufacturer: syz [ 378.171440][ T35] usb 9-1: config 0 descriptor?? [ 378.201649][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 378.211984][ T25] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 378.219465][ T25] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.222323][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.227413][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.231448][ T25] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.236166][ T25] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 378.238909][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.296906][ T35] rc_core: IR keymap rc-hauppauge not found [ 378.298690][ T35] Registered IR keymap rc-empty [ 378.300825][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 378.304242][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input11 [ 378.383558][ T834] usb 9-1: USB disconnect, device number 3 [ 378.454135][ T25] usb 10-1: usb_control_msg returned -32 [ 378.459538][ T25] usbtmc 10-1:16.0: can't read capabilities [ 378.605900][ T5996] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 378.655840][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 378.757225][ T5996] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.761145][ T5996] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 378.764127][ T5996] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.769859][ T5996] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.775023][T10342] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 378.776704][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 378.780233][ T5996] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.818831][T10343] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 378.823094][ T834] usb 10-1: USB disconnect, device number 5 [ 379.043953][ T8] IPVS: starting estimator thread 0... [ 379.134350][T10350] IPVS: using max 39 ests per chain, 93600 per kthread [ 379.234505][ T74] usb 12-1: USB disconnect, device number 2 [ 380.307106][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 380.307117][ T39] audit: type=1326 audit(1738339004.879:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.8.916" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf745e579 code=0x0 [ 380.774357][ T35] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 380.946118][ T35] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 380.950394][ T35] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.955398][ T35] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.959148][ T35] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 380.966700][ T35] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 380.969443][ T35] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 380.971906][ T35] usb 12-1: Manufacturer: syz [ 380.975915][ T35] usb 12-1: config 0 descriptor?? [ 381.288921][ T39] audit: type=1326 audit(1738339005.869:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.8.927" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 381.388650][ T35] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 381.392452][ T35] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 381.402349][ T35] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 381.484640][ T5996] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 381.654675][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 381.658484][ T5996] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.663611][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.668572][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.672920][ T5996] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.681059][ T834] usb 12-1: USB disconnect, device number 3 [ 381.684954][ T5996] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.690054][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.907564][ T5996] usb 9-1: GET_CAPABILITIES returned 0 [ 381.909273][ T5996] usbtmc 9-1:16.0: can't read capabilities [ 382.119464][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 382.123354][ T35] usb 9-1: USB disconnect, device number 4 [ 382.281617][T10441] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.707337][T10445] tracefs: Unknown parameter '0x0000000000000000' [ 383.246763][T10464] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 383.490754][T10475] netlink: 'syz.7.941': attribute type 11 has an invalid length. [ 384.331422][T10503] bond0: entered promiscuous mode [ 384.333385][T10503] bond_slave_0: entered promiscuous mode [ 384.335292][T10503] bond_slave_1: entered promiscuous mode [ 384.337203][T10503] macvlan2: entered allmulticast mode [ 384.338791][T10503] bond0: entered allmulticast mode [ 384.340295][T10503] bond_slave_0: entered allmulticast mode [ 384.342032][T10503] bond_slave_1: entered allmulticast mode [ 384.344439][T10503] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.538189][ T4100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.279535][T10510] wireguard0: entered promiscuous mode [ 385.329631][T10519] input: syz0 as /devices/virtual/input/input12 [ 386.439717][T10555] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 386.450531][T10555] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 387.433973][T10580] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 387.441503][T10580] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 387.859781][T10591] random: crng reseeded on system resumption [ 388.007670][T10600] tipc: Started in network mode [ 388.009135][T10600] tipc: Node identity 4, cluster identity 4711 [ 388.010928][T10600] tipc: Node number set to 4 [ 388.198162][T10586] tracefs: Unknown parameter '0x0000000000000000' [ 388.615347][T10607] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 388.619019][T10607] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 388.622868][T10607] CPU: 2 UID: 0 PID: 10607 Comm: syz.4.987 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 388.626076][T10607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 388.629134][T10607] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 388.630738][T10607] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d 3a 1d ca 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 f7 78 93 0f 84 [ 388.636163][T10607] RSP: 0018:ffffc90007ec7a08 EFLAGS: 00010006 [ 388.637850][T10607] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 388.640072][T10607] RDX: 0000000000000003 RSI: 1ffff92000fd8f53 RDI: 0000000000000018 [ 388.642342][T10607] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 388.644625][T10607] R10: ffffffff905fc517 R11: 0000000000000006 R12: 0000000000000018 [ 388.646879][T10607] R13: ffff8880219ac880 R14: 0000000000000000 R15: 0000000000000000 [ 388.648979][T10607] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5096b40 [ 388.651545][T10607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 388.653444][T10607] CR2: 00000000f71a3410 CR3: 0000000021eae000 CR4: 0000000000352ef0 [ 388.655741][T10607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.658010][T10607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 388.660209][T10607] Call Trace: [ 388.661157][T10607] [ 388.662028][T10607] ? die_addr+0x3b/0xa0 [ 388.663219][T10607] ? exc_general_protection+0x155/0x230 [ 388.664800][T10607] ? asm_exc_general_protection+0x26/0x30 [ 388.666472][T10607] ? __lock_acquire+0xe4/0x3c40 [ 388.667837][T10607] ? find_held_lock+0x2d/0x110 [ 388.669206][T10607] ? __pfx_mark_lock+0x10/0x10 [ 388.670538][T10607] ? __queue_work+0x431/0x1080 [ 388.671944][T10607] ? __pfx_lock_release+0x10/0x10 [ 388.673385][T10607] ? __pfx___lock_acquire+0x10/0x10 [ 388.674803][T10607] lock_acquire.part.0+0x11b/0x380 [ 388.676241][T10607] ? add_wait_queue+0x45/0x230 [ 388.677583][T10607] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 388.679154][T10607] ? rcu_is_watching+0x12/0xc0 [ 388.680502][T10607] ? trace_lock_acquire+0x14e/0x1f0 [ 388.681959][T10607] ? add_wait_queue+0x45/0x230 [ 388.683307][T10607] ? lock_acquire+0x2f/0xb0 [ 388.684600][T10607] ? add_wait_queue+0x45/0x230 [ 388.685967][T10607] _raw_spin_lock_irqsave+0x3a/0x60 [ 388.687386][T10607] ? add_wait_queue+0x45/0x230 [ 388.688725][T10607] add_wait_queue+0x45/0x230 [ 388.690021][T10607] virtio_transport_release+0x644/0xa40 [ 388.691602][T10607] ? find_held_lock+0x2d/0x110 [ 388.692954][T10607] ? __pfx_virtio_transport_release+0x10/0x10 [ 388.694673][T10607] ? __pfx_lock_release+0x10/0x10 [ 388.696102][T10607] ? __pfx_woken_wake_function+0x10/0x10 [ 388.697681][T10607] ? mark_held_locks+0x9f/0xe0 [ 388.699014][T10607] ? __local_bh_enable_ip+0xa4/0x120 [ 388.700517][T10607] __vsock_release+0x109/0x580 [ 388.701958][T10607] ? __pfx_down_write+0x10/0x10 [ 388.703586][T10607] vsock_release+0x99/0x130 [ 388.705202][T10607] __sock_release+0xb0/0x270 [ 388.706885][T10607] ? __pfx_sock_close+0x10/0x10 [ 388.708259][T10607] sock_close+0x1c/0x30 [ 388.709450][T10607] __fput+0x3ff/0xb70 [ 388.710608][T10607] __fput_sync+0xa1/0xc0 [ 388.711853][T10607] __ia32_sys_close+0x86/0x100 [ 388.713224][T10607] __do_fast_syscall_32+0x73/0x120 [ 388.714742][T10607] do_fast_syscall_32+0x32/0x80 [ 388.716135][T10607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.717929][T10607] RIP: 0023:0xf7f73579 [ 388.719136][T10607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 388.724673][T10607] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000006 [ 388.727099][T10607] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 388.729383][T10607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.731706][T10607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.733991][T10607] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 388.736281][T10607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.738584][T10607] [ 388.739523][T10607] Modules linked in: [ 388.740685][T10607] ---[ end trace 0000000000000000 ]--- [ 388.742272][T10607] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 388.743791][T10607] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d 3a 1d ca 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 f7 78 93 0f 84 [ 388.749156][T10607] RSP: 0018:ffffc90007ec7a08 EFLAGS: 00010006 [ 388.750952][T10607] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 388.753181][T10607] RDX: 0000000000000003 RSI: 1ffff92000fd8f53 RDI: 0000000000000018 [ 388.755410][T10607] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 388.757638][T10607] R10: ffffffff905fc517 R11: 0000000000000006 R12: 0000000000000018 [ 388.759880][T10607] R13: ffff8880219ac880 R14: 0000000000000000 R15: 0000000000000000 [ 388.762149][T10607] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5096b40 [ 388.764687][T10607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 388.766608][T10607] CR2: 00000000f71a3410 CR3: 0000000021eae000 CR4: 0000000000352ef0 [ 388.768868][T10607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.771128][T10607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 388.773416][T10607] Kernel panic - not syncing: Fatal exception [ 388.775595][T10607] Kernel Offset: disabled [ 388.776849][T10607] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:56:53 Registers: info registers vcpu 0 CPU#0 RAX=00000000005a1eac RBX=0000000000000000 RCX=ffffffff8b463e39 RDX=ffffed1005686f7e RSI=ffffffff8bd2c300 RDI=ffffffff818ff929 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f7d R10=ffff88802b437beb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff905fc510 R15=0000000000000000 RIP=ffffffff8b46521f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005823899c CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000030 RCX=ffffffff8986bd27 RDX=ffff888022604880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88804c590000 RSP=ffffc900005a05c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000002b9f R12=0000000000000000 R13=ffff88805861f154 R14=ffffc900005a0ab8 R15=ffff88804c590000 RIP=ffffffff81b8d538 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000324efffc CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d24269cfcb2a7221 5db81953506e38cb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ed1d6e5a58608c8 8f0a08accc27bf08 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2f9255a6c49aeb1 c2187a8afa9f0ce7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b71cf4fc2c030c1c 7b25bc640d86aff7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000200 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ec 0acad40757f6020a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ec00000000 000000ec00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000057d62752 0092efc7567b428e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ba2904857f79d00 000000ec0b087b72 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 818d5cb313e3e98d 3f2978c7077ac3da ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9a9bef6e51bf97b c222490d606cfcbf ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853824b5 RDI=ffffffff9aacfea0 RBP=ffffffff9aacfe60 RSP=ffffc90007ec7400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000000d R14=ffffffff9aacfe60 R15=0000000000000000 RIP=ffffffff853824df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71a3410 CR3=0000000021eae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000025f984 RBX=0000000000000003 RCX=ffffffff8b463e39 RDX=ffffed10056e6f7e RSI=ffffffff8bd2c300 RDI=ffffffff818ff929 RBP=ffffed1003ad8488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6f7d R10=ffff88802b737beb R11=0000000000000001 R12=0000000000000003 R13=ffff88801d6c2440 R14=ffffffff905fc510 R15=0000000000000000 RIP=ffffffff8b46521f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f733da50 CR3=00000000536cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000