last executing test programs: 15m7.745333914s ago: executing program 1 (id=2575): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) socket$inet6(0xa, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_enter(r5, 0x68be, 0x5002, 0x4, 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x3b7, 0x0, 0x0}) 15m5.582362625s ago: executing program 1 (id=2578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) close(r0) 15m5.249254035s ago: executing program 1 (id=2580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4ea3, 0xc54, @ipv4={'\x00', '\xff\xff', @remote}, 0x59d5}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x189082) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x9, 0x0, 0x0, 0x4c69, 0x8, 0x3, 0x6}, &(0x7f0000000380)={0xfffffffffffffffb, 0x8, 0x86, 0x101, 0x80000001, 0x3db, 0x401c, 0x3}, &(0x7f00000004c0)={0x8000000000000001, 0x9, 0x1ff, 0x6, 0x3, 0x8, 0x7}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={0x0}) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x7e, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffc}}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40048c1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) 15m3.562376247s ago: executing program 1 (id=2587): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2001}) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000000f0ff00bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7e38e52c997b03b72b3d0ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da00000080f24bf901115e17392ac66ad029d1c00000614600d53daeacea799a22812a1b3cab4d785c908c54f7a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b48610e9eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c2815df09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa9a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a62ec45c3af97a8f17da954aff3ec8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac70af2df2c772b0031fe13cab6692402a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cac8b4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf1301800000ff14a99202d9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ec7966130b547dbd8b0000f0a77fbcf2cd1d0000002000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf90040662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f64293091c989f72dcbbad3fdcd6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d506d7a59a3ad09e8802e8f4f535447cc0fc9d5f89a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd11642d5577fb9030036bce9c764c714c9402c21d181aa0820d89f235a3f1c5fc853e59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa809000008e1d41e1dcf6e6879545b92bd49000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84937e859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af40fffe0000000000749efd3763655500344bae34137f5ab0d534b8d43e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b00cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe44dc87c92332af00f191b66b6a6f7323e8faffc0886f4af7fc100dcb39c77a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a437367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85cff7f000000002c331fca0e541b7ca211c28ed61c5257080f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce4616d42b07199de8b99231ace58c77819ee2b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e604bae6b13df468ad87a6c769f952283a1f4e3842edb3d40c68a2001000006dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa671e934e94d1eb3de6a5f99f301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe6e6e79900369c17b0ed16acdce1b12b70000000000f4e8cdbadbec962a7edc91c6b80f53e3b19c372e40e2139ff4c1180365eb5b71d834eb0293e252b96e6c90ec4d23cc42e88d262c1fdc317c7c000000acbc1248f2389d7fbcc10a377cc4e28460c0516534bdb3ff372bfd94efa0d32b214b39cea885557d39265a1c5e08c29914db042aa4fe23a92f387ae6d7565d3ca6ceb040f859de2e47f6c04bc55f3b81249faf3a505ac0d29e053b9c1832e8a25a54ae433e43036b032518200e2875736fc139a344bf3bf4d8f6f57e5c4b7f62a23758cb30e43f1974b14d4f3e1a8ce71995ce28564a50f418af2b6f22a7c70c2213ec629288604aa1a9f418487c864af9368a08bd37eecb0a810c5c24d7a82c07a8e68caa7ff2eaf100f6fd4c3af07d7a86b34f2f4d34abf2f92f1a41a330a4e8fbb4876393b38f79573cb53c263090d620a37ea25cde9445ccb74ebc22156465f4871436b44981455eccc221a8251f71c047203ac4d62b0012cab329a5d9003ceff42b007aa61880da20b0ad83ae368a19d2827840b8d00f92745508e63cddaac6d2d3c6cb03d512c5be9e7fd86e461e1e6a228e630029dbeddf37a6990c75ff6dcb6f32f61e59e3bf97f48954fd7908ab05e74815d909548b277bf5c4570eaeb265f4ffeacc3a4ec2edb261d53d09ebb6bdf811e2a4ef0be6392d86a5285a7fd2e4345e14786abafdd4852d3d62c334760c05e1bba37d0f0742c53242596e13bc22682ae15694aaaadef41bbd7185b74feaf59dea096a23a48c9eb3be5c546eda0f4b07916ab14e12839318e953f15fab94c9ba783015ebb6983d514e3b1f246f0a63c5a58cc2be0cb179791ec1b9a3e7e62c165ae39855182266b36ce9d2943c49a7f9a2a89a948b37f2bb830ea790a2b2c2fcd06bc499434dda842cfa91b2df4368f07eb2410aa387d146bccd22698f8f322fbdf4cddf11fd3b85325af8df473c8f156833e5488f31165e6a56d4c1c661bcbefcefd10f47b2e593b836be67bdc15c3b7fb497ecbca1506a577e81947505553dfdfe963c20c12575c4abc45cf9229af181317fde5262a73600f90e7457280ff4229507178c5df9acc273a7be76f6596b2ac36a2d28627e0012f989d7f7a20f2b38eef5efc339b8784ad5fe6fac77926d83a73e3647a6351c23d7e51cf459e5d169d42566b012193338f67612c22eab89fb14a40edd2694696048f9d51d26fa256eede4a9b5dd3508f9308883194ab3b0661d51b18dbdca9b5f70a91db8fc9b19291664eccc8274340eef00c743588b0ae4e7280db3b7bce3041a5bb9fced08059a2518eaf35df7388a518965a9b4c6ee27872be887b37319370a4587e50f28060b963a6e4d73b338f4e8929bc5ada66b6920c633119d17c090e72daa679c6e5bb155710679660004705fd8d4cac660fc32554a20feb5d74cafe562aff12fe126abf5927205867d5fca4a4ff8c7d0933cdfaf5864f4dae435d1ab9e711f48cd03f4cc130b54e18428341e675968ac19509fe7bff5ef0e55d71987e44027e29d02ac36f3c486bcf22f86170cbeeee2a5eb3adadb7d906f25c73df5cd22a8d1ca00b027a1ab966ab4799e631a21042685fc8c05d5e04ab21a66c5f221dabdac52b43a5980b1efb49d9e03d05f4d1a8756085d0305ff3c4cec8500000000000000000000924f7fdfa25a3331d13a50233f70742f16f6e13bd716905299ab21864ec9d3a93b1de03592b73b327348427508a2dcb953dd23e42adfc18fc891a247ba5c7ebd7fa6da7e3ef3d11d4b1bb534b48064aed03c5850c12abf87240b65221a64ec331c31ce394dad6142619893bff5c810f53dbd875837705ad5139a31ff058aacd51eed21216e0bd179cb00bf02af8dc25be8f318bca707c05a0235b86f37606e1cfbc9ee5cd9741c7648713b24107697039cc40aa538c24e8934cd88238237b21f0a901c488c55178984597ef91e7a8d60081cf34081b5df32ef9a89a25203093b8cbb5cd416d189cffcbdb6a336e3adefa39ea04e2c425864c766283829db5c2beb709da87edcee6b682f18abcac4fb9d785beb2f840079b54dfb9a8ab1a6bf4eea20bb51804ec3d3848bfd11ba6a42bc2823559b70eaed4c673e0e834611b6fec4816ee94c62e88b13037d02cffd561f9bb97d6569114d0e6a7170e229ab9e938c18a568184bd6759e5c3526fbcb46da794c5bcb6303f8a4abfe0d37a0d757c686b0b5171892f867020778fcc567a21b04e684e9da29e86c3e392564f93b38d7bec00e82cd32e2a521a715ae603c12ff286ca67757d74553ce8607a1c5c4856e50094904bf08ecde97b7c513bf64252e839439b65ae0125fd8e9c6d142ee7a6af20cd5370396db6f616fb9e5a2824a5cd9c10000000000000000000000000000fd6a689d6779abe81e6aa2c63fce0faf9531a700c8cc02ea5d83f57fbfaee919668e9ba4776f2d5a1d544ea17288de3895fc39713fe150efeb27d43fcc1b53c00a4ade36652ecdb7fab04afa69e2b6611c0233670808a206578c5a7d0266ccf6c80ec69b22c8c71c6d8a057b71d39b18f15311dd7149a75f91ce676516532c0b89e0a2d4323080444686a790eca0390eea32e6fb0bd40b79e2c86d01435be3ba1224970c7e10e4bc54323decb110fb66f25477e309041ce13c8d8b077ead176bc45c5050a88acae7f8aaf962a990e6269de74cb1a915b85c01019066f2858cf322a21ebec7e060da478e31f943e7c31bbdb43c26702a0257e7103b4d532336dc6f0bd5d33a6f7d1134872859afb35a4e0731b38d3a914ed3aa376917b0bc84f5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) close(r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 15m0.083151792s ago: executing program 1 (id=2594): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x7323, 0x0, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ff1fb0374ca9"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xffffffffffffff0b, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r6 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 14m58.988967202s ago: executing program 1 (id=2597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0xe8, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x6a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 14m43.610434828s ago: executing program 32 (id=2597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0xe8, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x6a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 14m32.029394445s ago: executing program 3 (id=2664): r0 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000002b40)=""/4082, 0x1, 0x1037}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x3d, 0x4}) 14m31.908429849s ago: executing program 3 (id=2665): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0xf691, 0x10100, 0x0, 0x1e9, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r4, 0x0, r5, 0x0, 0x408cd, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x3, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7ffb, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x5, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x40000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x1, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0), 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d21f06600000000000010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="9bde5e7cfc642d333702cbd4078132f7e6eb3fa1ddfbc46febd16f901c5be36d7621ca9292207ea2240e0c146bb9b6947447720c75d958a6fb8f023f5268269bb70d4d02c047db2c851592401adff668015c0917c23e56b2dcbd840a574950b948064fba741626b337b7b98e9d5e7b11d9d27b3ecb583008de163d51b5d3ac9a72cf530060bcbf4bd2b6f599b646a706be56fe4c54a044866db431fec66380dda1df480f2664593918a93da2c744cac09466821b9aa5cc8100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8755c1a14991ae703000010", @ANYBLOB="bd86ae1ed996149bf8ef913e3b7388c89bc9d204d06fde1ef693f85250ed399cb865e99c3901b5ef158cba8e4dc88a4618d7726b", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r8}, 0x18) memfd_create(0x0, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000240)={0x0, 0x9142, 0x8000, 0x1}, &(0x7f0000000300), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14m28.37706995s ago: executing program 3 (id=2668): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[], 0x24}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011c1800000000000000000000000000000003000000005f00"], 0x0, 0x1b, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0xf, @empty, 0x9}}, 0x0, 0x7, 0xc, 0x100, 0x8, 0x8, 0x6c}, &(0x7f0000000180)=0x9c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000021000420000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006c6b500010000000a438000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', r11, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xbaa45dc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r12}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880040"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 14m18.995841652s ago: executing program 3 (id=2672): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e406697fa0347aea283d69d110b69426350517c3657afe7b4bb97d36762a4247f9a802dd08c69499f57ad2271b8a70f37372bd38e3d30d02c26051ef7e1e2cc644294e43325957e3d154010b0f5dfdb045f9738208e8cd0a885b9eb4407f1469705714c03576f4c4faa3d45d74e264ee5f65ac495fcd5ae126b5f1d7c5ee011501cc0d52582e351e0b21ec35952e7ea27ac5cd37b21ebe605b33545ad10cf3a9675b4f9ef616712df79419b6c02322e02f253eac9f2ff05f142aa0c746d3cbaee54910a46ee9"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4}, 0x38) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 14m18.697699099s ago: executing program 3 (id=2674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r1, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_setup(0x81f, 0x0, &(0x7f00000002c0), 0x0) r4 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r6, 0xfffffff8}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r6, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r7, 0x22, 0x0, 0x1) 14m18.06258515s ago: executing program 3 (id=2675): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0xf691, 0x10100, 0x0, 0x1e9, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r4, 0x0, r5, 0x0, 0x408cd, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x3, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7ffb, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x5, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x40000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x1, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0), 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d21f06600000000000010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="9bde5e7cfc642d333702cbd4078132f7e6eb3fa1ddfbc46febd16f901c5be36d7621ca9292207ea2240e0c146bb9b6947447720c75d958a6fb8f023f5268269bb70d4d02c047db2c851592401adff668015c0917c23e56b2dcbd840a574950b948064fba741626b337b7b98e9d5e7b11d9d27b3ecb583008de163d51b5d3ac9a72cf530060bcbf4bd2b6f599b646a706be56fe4c54a044866db431fec66380dda1df480f2664593918a93da2c744cac09466821b9aa5cc8100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8755c1a14991ae703000010", @ANYBLOB="bd86ae1ed996149bf8ef913e3b7388c89bc9d204d06fde1ef693f85250ed399cb865e99c3901b5ef158cba8e4dc88a4618d7726b", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r8}, 0x18) memfd_create(0x0, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000240)={0x0, 0x9142, 0x8000, 0x1}, &(0x7f0000000300), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14m17.069170996s ago: executing program 33 (id=2675): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0xf691, 0x10100, 0x0, 0x1e9, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r4, 0x0, r5, 0x0, 0x408cd, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x3, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7ffb, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x5, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x40000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x1, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0), 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d21f06600000000000010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="9bde5e7cfc642d333702cbd4078132f7e6eb3fa1ddfbc46febd16f901c5be36d7621ca9292207ea2240e0c146bb9b6947447720c75d958a6fb8f023f5268269bb70d4d02c047db2c851592401adff668015c0917c23e56b2dcbd840a574950b948064fba741626b337b7b98e9d5e7b11d9d27b3ecb583008de163d51b5d3ac9a72cf530060bcbf4bd2b6f599b646a706be56fe4c54a044866db431fec66380dda1df480f2664593918a93da2c744cac09466821b9aa5cc8100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8755c1a14991ae703000010", @ANYBLOB="bd86ae1ed996149bf8ef913e3b7388c89bc9d204d06fde1ef693f85250ed399cb865e99c3901b5ef158cba8e4dc88a4618d7726b", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r8}, 0x18) memfd_create(0x0, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000240)={0x0, 0x9142, 0x8000, 0x1}, &(0x7f0000000300), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 11m52.93609065s ago: executing program 4 (id=3044): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ff1fb0374ca93cdbdf250204000000000001000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xffffffffffffff0b, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 11m51.434354524s ago: executing program 4 (id=3046): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x140c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000c3c000/0x3000)=nil, &(0x7f0000de9000/0x3000)=nil, 0x3000}) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 11m51.30133459s ago: executing program 4 (id=3047): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332568aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2, @ANYRESOCT=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m48.497214217s ago: executing program 4 (id=3051): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xd, 0xc, "41a0a18ef515814e914ddb349f24d2d4fdf2029d4ea0d5c318c72a7f44575de5928931313688f80c00e226d5f9de71854d921504681829ab9aea7bb39083bd3e", "b52d2e8698032804ba481f878cc65fac11ec880364f7acb23df30827152197f46a9f88676e0b06b603b41a00352efa0e1e53c5153c1a7cc757f3186cc14548be", "8b65cc03d13d051bee0900000006000800f15bc5104e6a8500000055b2a07060", [0x895, 0xcbd]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newlink={0x10c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xdc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xcc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xa}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0x9}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x10c}, 0x1, 0xba01}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000200000000a14000000000a010100000000000000000100000438000000030a01080000000000000000010000000900030073797a32000000000c00048008000140000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 11m48.199070405s ago: executing program 4 (id=3052): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xffffffffffffff0b, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 11m45.620367178s ago: executing program 4 (id=3059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100074ec6"}) 11m30.587332118s ago: executing program 34 (id=3059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100074ec6"}) 1m7.901790811s ago: executing program 2 (id=5305): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "00ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x9, 0x27, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x3, r6}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x290, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x106}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8c0}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf667}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x45) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r12) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x30000080) sendto$packet(r9, &(0x7f0000000080)="33031600", 0x4, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x62}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1m7.901243003s ago: executing program 2 (id=5306): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "00ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x9, 0x27, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x290, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x106}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8c0}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf667}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x45) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0x0, 0x0}]}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r13) sendmsg$NLBL_MGMT_C_REMOVEDEF(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r14, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x30000080) sendto$packet(r10, &(0x7f0000000080)="33031600", 0x4, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r12, 0x1, 0x62}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1m7.831030362s ago: executing program 2 (id=5307): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) 1m6.911273285s ago: executing program 2 (id=5310): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x80, 0xfffffffe, @local, 0x4}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x1}], 0x1) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffff, 0x101002) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) socket$inet6(0xa, 0x800, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x6, 0x0, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @private=0xa010100}, 0x0, 0x3, 0x3, 0x4}}, {&(0x7f00000002c0)=""/183, 0xb7}, &(0x7f0000000000), 0x1}, 0xa0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {0x6}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x1000, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000029d1d5f308f6652f459bf9a1"], 0x10}}], 0x1, 0x4800) 1m6.55564108s ago: executing program 2 (id=5314): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x1000, @private2, 0x5}, 0x17, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x10, 0x29, 0x43, 0x6}}], 0x10}}], 0x1, 0x4800) 1m6.210196592s ago: executing program 2 (id=5316): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "00ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x9, 0x27, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x3, r6}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x290, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x106}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8c0}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf667}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x45) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r12) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x30000080) sendto$packet(r9, &(0x7f0000000080)="33031600", 0x4, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x62}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1m6.14655459s ago: executing program 35 (id=5316): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "00ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x9, 0x27, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x3, r6}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x290, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x106}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8c0}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf667}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x45) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r12) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x30000080) sendto$packet(r9, &(0x7f0000000080)="33031600", 0x4, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x62}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 10.787332133s ago: executing program 0 (id=5493): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000080100000000550000000a00000200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000cb030096b037a380144f32a7f26dbd9c00000000d7ff78f20000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070000000000"], 0x3c}, 0x1, 0xba01}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) 9.730508902s ago: executing program 0 (id=5494): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0xf691, 0x10100, 0x0, 0x1e9, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r4, 0x0, r5, 0x0, 0x408cd, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x3, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7ffb, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x5, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x40000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x1, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0), 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d21f06600000000000010902"], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="9bde5e7cfc642d333702cbd4078132f7e6eb3fa1ddfbc46febd16f901c5be36d7621ca9292207ea2240e0c146bb9b6947447720c75d958a6fb8f023f5268269bb70d4d02c047db2c851592401adff668015c0917c23e56b2dcbd840a574950b948064fba741626b337b7b98e9d5e7b11d9d27b3ecb583008de163d51b5d3ac9a72cf530060bcbf4bd2b6f599b646a706be56fe4c54a044866db431fec66380dda1df480f2664593918a93da2c744cac09466821b9aa5cc8100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8755c1a14991ae703000010", @ANYBLOB="bd86ae1ed996149bf8ef913e3b7388c89bc9d204d06fde1ef693f85250ed399cb865e99c3901b5ef158cba8e4dc88a4618d772", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r9}, 0x18) memfd_create(0x0, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000240)={0x0, 0x9142, 0x8000, 0x1}, &(0x7f0000000300), &(0x7f0000000140)) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r10, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.622264709s ago: executing program 0 (id=5499): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 6.160703769s ago: executing program 6 (id=5501): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 6.070855672s ago: executing program 6 (id=5502): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @SEQ_CONTROLLER=0xfe, 0x8, 0x7, 0x6e}) (fail_nth: 4) 5.79688587s ago: executing program 7 (id=5503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 5.350294167s ago: executing program 5 (id=5505): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x8009, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x61, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xd4}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd", 0x302}], 0x1}}], 0x1, 0x40000d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 5.334116334s ago: executing program 0 (id=5506): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ff1fb0374ca93cdbdf2502040000000000010000000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xffffffffffffff0b, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.070951454s ago: executing program 6 (id=5507): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 4.675349581s ago: executing program 7 (id=5508): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x6014}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x19) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0x4, 0x3, 0x1, {0xfffffffbffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d614, 0x3fb, 0x80000001, 0x6, 0x1000, 0x5, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000280), 0x31008, 0x0) 4.310593711s ago: executing program 5 (id=5509): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000001800000090000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003b020f85eb9eda8b614615b18ccdaf4515a9064c129e58981d406cf72b6ac9f49ebf409b04176ad4f3e029975ad122341d7b528a8738ea6b11bc6006d4745d18dacf3b0bcb5de643a4b17fe85a13d1d36c69654bc6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r5, 0xfffffe38}, 0x10) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0xa7, 0xd4b}, &(0x7f00000005c0)=0x8) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000002c0), &(0x7f0000000480)=ANY=[@ANYBLOB="02b39100ff4e2accdd8db1e501cc4953744ca27c735f68e917f91437e114518ce7ed18755606bac3575d91074b97d415180f716001cab29f5e7c2d33804e29da32760568fd0180c3493182314b82ed4558b00cc81d61487248d98b35895fa9fee4ee82871b645c6c8a73a49c1bca6260787842675571f120ddb6b834392db2950b161c0321ff60e3948e00d3a4674a24277eb1b1d5c26f97fa668d5de14cb395dca55964c8fd6f16500c02a7103e494d81430307c1ba61bd798d4f693e70b4dc875414fc2d0f7dfc8619fe50f1c21a2822598f8647207877db3ea89c67f562de"], 0x91, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0xff, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x9, 0x5, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x1, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@null, @null, @bcast, @bcast, @netrom, @default, @default, @bcast]}, &(0x7f0000000140)=0x48, 0x800) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x2, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0xb, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.857083858s ago: executing program 6 (id=5510): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$dri(0x0, 0x4, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f015, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r3, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c892edda55948fc95472faf24df297a8e4228b32dcc11a0a004c287b035078ffffffffffeffffdfc5955de", 0xfffffffffffffd0b, 0x800, 0x0, 0x0) 3.751909619s ago: executing program 0 (id=5511): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ff1fb0374ca93cdbdf2502040000000000010000000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xffffffffffffff0b, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.400610256s ago: executing program 5 (id=5512): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0xffffffffffffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x9c}}, 0x24000040) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000080100000000550000000a00000200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000cb030096b037a380144f32a7f26dbd9c00000000d7ff78f20000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070000000000"], 0x3c}, 0x1, 0xba01}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) 3.054851698s ago: executing program 7 (id=5513): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "00ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x4, 0x4, 0x34759c29, 0x7fffffff, 0x8, 0x8a20, "5991678525efcc08f977cfc28131f78e", 0x10, 0x9, 0xf7, 0x7, 0x2, 0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x9, 0x27, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x290, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x106}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf8c0}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf667}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x45) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r13) sendmsg$NLBL_MGMT_C_REMOVEDEF(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r14, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x30000080) sendto$packet(r10, &(0x7f0000000080), 0x0, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r12, 0x1, 0x62}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2.488857314s ago: executing program 5 (id=5514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r6, &(0x7f00000004c0)="01", 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x5000000) socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.487113226s ago: executing program 7 (id=5522): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0xffffffffffffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x9c}}, 0x24000040) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000080100000000550000000a00000200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000cb030096b037a380144f32a7f26dbd9c00000000d7ff78f20000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070000000000"], 0x3c}, 0x1, 0xba01}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) 2.389800077s ago: executing program 6 (id=5515): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="72895c6e46143b903a9deca36da884c798bd943d4ace894140cff4e256df9f1f4373afa94afd56152645720910174e3e62883b202fe7"], 0x0, 0x44, 0xfe22}, 0xffffffffffffff1d) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x7, 0x46800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000540)=0xb3) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x80008, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) vmsplice(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500), 0x80000fc, 0xf00) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x143, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.371208922s ago: executing program 7 (id=5516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 1.370916155s ago: executing program 6 (id=5517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) creat(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 1.05294126s ago: executing program 5 (id=5518): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x8009, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x61, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xd4}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd", 0x302}], 0x1}}], 0x1, 0x40000d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 43.631968ms ago: executing program 5 (id=5519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 27.157864ms ago: executing program 7 (id=5520): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xb21818035e099335}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 0s ago: executing program 0 (id=5521): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x6014}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x19) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0x4, 0x3, 0x1, {0xfffffffbffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d614, 0x3fb, 0x80000001, 0x6, 0x1000, 0x5, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000280), 0x31008, 0x0) kernel console output (not intermixed with test programs): order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1386.113540][T26130] CPU: 1 UID: 0 PID: 26130 Comm: syz.6.4875 Not tainted syzkaller #0 PREEMPT(full) [ 1386.113579][T26130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1386.113591][T26130] Call Trace: [ 1386.113599][T26130] [ 1386.113608][T26130] dump_stack_lvl+0x16c/0x1f0 [ 1386.113642][T26130] warn_alloc+0x248/0x3a0 [ 1386.113675][T26130] ? __pfx_warn_alloc+0x10/0x10 [ 1386.113696][T26130] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1386.113744][T26130] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 1386.113778][T26130] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1386.113806][T26130] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1386.113828][T26130] ? stack_depot_save_flags+0x3de/0x9c0 [ 1386.113861][T26130] ? kasan_save_stack+0x33/0x60 [ 1386.113882][T26130] ? kasan_save_track+0x14/0x30 [ 1386.113901][T26130] ? __kasan_kmalloc+0xaa/0xb0 [ 1386.113920][T26130] ? __kmalloc_noprof+0x223/0x510 [ 1386.113939][T26130] ? comedi_isadma_alloc+0x10d/0x6e0 [ 1386.113965][T26130] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1386.114019][T26130] __alloc_pages_noprof+0xb/0x1b0 [ 1386.114041][T26130] __dma_direct_alloc_pages.constprop.0+0x624/0x990 [ 1386.114071][T26130] ? __pfx___dma_direct_alloc_pages.constprop.0+0x10/0x10 [ 1386.114096][T26130] ? dma_alloc_from_dev_coherent+0x2e4/0x570 [ 1386.114125][T26130] dma_direct_alloc+0x8f/0x580 [ 1386.114149][T26130] dma_alloc_attrs+0x185/0x2b0 [ 1386.114166][T26130] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 1386.114184][T26130] ? trace_kmalloc+0x2b/0xd0 [ 1386.114209][T26130] ? dma_direct_supported+0xca/0x220 [ 1386.114234][T26130] comedi_isadma_alloc+0x3de/0x6e0 [ 1386.114261][T26130] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 1386.114284][T26130] ? request_threaded_irq+0x2c8/0x3e0 [ 1386.114313][T26130] pcl818_attach+0x11e6/0x1660 [ 1386.114339][T26130] comedi_device_attach+0x3b0/0x900 [ 1386.114369][T26130] do_devconfig_ioctl+0x1b1/0x710 [ 1386.114387][T26130] ? __mutex_lock+0x1c5/0x1060 [ 1386.114411][T26130] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1386.114445][T26130] ? kasan_save_stack+0x42/0x60 [ 1386.114462][T26130] ? kasan_save_stack+0x33/0x60 [ 1386.114481][T26130] ? kasan_save_track+0x14/0x30 [ 1386.114497][T26130] ? kasan_save_free_info+0x3b/0x60 [ 1386.114509][T26130] ? __kasan_slab_free+0x60/0x70 [ 1386.114526][T26130] ? kfree+0x2b4/0x4d0 [ 1386.114538][T26130] ? tomoyo_path_number_perm+0x470/0x580 [ 1386.114564][T26130] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1386.114593][T26130] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1386.114628][T26130] ? kasan_quarantine_put+0x10a/0x240 [ 1386.114645][T26130] ? lockdep_hardirqs_on+0x7c/0x110 [ 1386.114680][T26130] ? find_held_lock+0x2b/0x80 [ 1386.114698][T26130] ? tomoyo_path_number_perm+0x295/0x580 [ 1386.114723][T26130] ? tomoyo_path_number_perm+0x18d/0x580 [ 1386.114747][T26130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1386.114774][T26130] comedi_compat_ioctl+0x1d0/0x990 [ 1386.114799][T26130] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1386.114826][T26130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1386.114855][T26130] ? do_vfs_ioctl+0x128/0x14f0 [ 1386.114881][T26130] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1386.114906][T26130] ? find_held_lock+0x2b/0x80 [ 1386.114918][T26130] ? hook_file_ioctl_common+0x145/0x410 [ 1386.114950][T26130] ? __fget_files+0x20e/0x3c0 [ 1386.114984][T26130] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1386.115008][T26130] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1386.115038][T26130] __do_fast_syscall_32+0x7c/0x300 [ 1386.115056][T26130] do_fast_syscall_32+0x32/0x80 [ 1386.115072][T26130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1386.115094][T26130] RIP: 0023:0xf7f84579 [ 1386.115108][T26130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1386.115126][T26130] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1386.115144][T26130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 1386.115155][T26130] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1386.115166][T26130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1386.115176][T26130] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1386.115186][T26130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1386.115209][T26130] [ 1386.115330][T26130] Mem-Info: [ 1386.338448][T26130] active_anon:1721 inactive_anon:1150 isolated_anon:0 [ 1386.338448][T26130] active_file:2193 inactive_file:20777 isolated_file:0 [ 1386.338448][T26130] unevictable:1768 dirty:300 writeback:0 [ 1386.338448][T26130] slab_reclaimable:6821 slab_unreclaimable:67848 [ 1386.338448][T26130] mapped:24698 shmem:1938 pagetables:1620 [ 1386.338448][T26130] sec_pagetables:333 bounce:0 [ 1386.338448][T26130] kernel_misc_reclaimable:0 [ 1386.338448][T26130] free:50438 free_pcp:14 free_cma:0 [ 1386.368154][T26130] Node 0 active_anon:12kB inactive_anon:232kB active_file:0kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4968kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7528kB pagetables:1272kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 1386.428045][T26130] Node 0 DMA free:2624kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 1386.522437][T26130] lowmem_reserve[]: 0 288 288 288 288 [ 1386.539543][T26130] Node 0 DMA: 36*4kB (UM) 26*8kB (UM) 10*16kB (UM) 12*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2624kB [ 1386.564808][T26130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.567922][T26130] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1386.570998][T26130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.602294][T26130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1386.618874][T26130] 25887 total pagecache pages [ 1386.620698][T26130] 976 pages in swap cache [ 1386.622817][T26130] Free swap = 82352kB [ 1386.641845][T26130] Total swap = 124996kB [ 1386.648411][T26130] 524155 pages RAM [ 1386.649886][T26130] 0 pages HighMem/MovableOnly [ 1386.651785][T26130] 209490 pages reserved [ 1386.662746][T26130] 0 pages cma reserved [ 1387.126385][T26146] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4879'. [ 1387.813200][T18574] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1387.868720][T26159] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1387.976479][T18574] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1387.979360][T18574] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1387.982738][T18574] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1387.986516][T18574] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.995826][T18574] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1387.998737][T18574] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1388.001813][T18574] usb 10-1: Product: syz [ 1388.003730][T18574] usb 10-1: Manufacturer: syz [ 1388.008697][T18574] cdc_wdm 10-1:1.0: skipping garbage [ 1388.010676][T18574] cdc_wdm 10-1:1.0: skipping garbage [ 1388.012518][T18574] cdc_wdm 10-1:1.0: skipping garbage [ 1388.014981][T18574] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1388.243073][T26166] input: syz1 as /devices/virtual/input/input239 [ 1388.553116][T18574] usb 11-1: new high-speed USB device number 58 using dummy_hcd [ 1388.702970][T18574] usb 11-1: Using ep0 maxpacket: 16 [ 1388.704821][T18574] usb 11-1: config 0 has no interfaces? [ 1388.704840][T18574] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1388.704852][T18574] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.705996][T18574] usb 11-1: config 0 descriptor?? [ 1388.747817][T22452] Bluetooth: Wrong link type (-57) [ 1389.725157][T26189] 9pnet_fd: Insufficient options for proto=fd [ 1390.000504][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 1390.000582][ T40] audit: type=1326 audit(1758476877.023:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.037969][ T40] audit: type=1326 audit(1758476877.023:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.046904][ T40] audit: type=1326 audit(1758476877.023:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.053180][ T40] audit: type=1326 audit(1758476877.023:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.060513][ T40] audit: type=1326 audit(1758476877.023:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.067160][ T40] audit: type=1326 audit(1758476877.023:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.073999][ T40] audit: type=1326 audit(1758476877.023:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.081303][ T40] audit: type=1326 audit(1758476877.023:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.088428][ T40] audit: type=1326 audit(1758476877.023:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.096142][ T40] audit: type=1326 audit(1758476877.023:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26190 comm="syz.2.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1390.575357][T18574] usb 10-1: USB disconnect, device number 72 [ 1390.922631][T26212] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1391.145257][T19230] usb 11-1: USB disconnect, device number 58 [ 1391.229320][T26216] securityfs: Unknown parameter 'pxJ׀LùފhX%N' [ 1391.595449][T22452] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1392.816615][T26237] FAULT_INJECTION: forcing a failure. [ 1392.816615][T26237] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.821827][T26237] CPU: 0 UID: 0 PID: 26237 Comm: syz.5.4901 Not tainted syzkaller #0 PREEMPT(full) [ 1392.821841][T26237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1392.821848][T26237] Call Trace: [ 1392.821852][T26237] [ 1392.821857][T26237] dump_stack_lvl+0x16c/0x1f0 [ 1392.821878][T26237] should_fail_ex+0x512/0x640 [ 1392.821897][T26237] should_failslab+0xc2/0x120 [ 1392.821937][T26237] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1392.821958][T26237] ? dst_alloc+0x99/0x1a0 [ 1392.821976][T26237] dst_alloc+0x99/0x1a0 [ 1392.821991][T26237] rt_dst_alloc+0x35/0x3a0 [ 1392.822004][T26237] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 1392.822022][T26237] ip_route_output_key_hash+0x137/0x2e0 [ 1392.822036][T26237] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1392.822050][T26237] ? lockdep_hardirqs_on+0x7c/0x110 [ 1392.822072][T26237] tcp_v4_connect+0x81c/0x1bb0 [ 1392.822090][T26237] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1392.822106][T26237] __inet_stream_connect+0x917/0xf60 [ 1392.822123][T26237] ? __pfx___inet_stream_connect+0x10/0x10 [ 1392.822143][T26237] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1392.822159][T26237] tcp_sendmsg_locked+0x23ff/0x42a0 [ 1392.822176][T26237] ? __lock_acquire+0xb97/0x1ce0 [ 1392.822196][T26237] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1392.822210][T26237] ? do_raw_spin_lock+0x12c/0x2b0 [ 1392.822226][T26237] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1392.822246][T26237] ? __local_bh_enable_ip+0xa4/0x120 [ 1392.822261][T26237] tcp_sendmsg+0x2e/0x50 [ 1392.822272][T26237] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1392.822283][T26237] inet_sendmsg+0xb9/0x140 [ 1392.822297][T26237] smc_sendmsg+0x224/0x520 [ 1392.822311][T26237] __sys_sendto+0x4a0/0x520 [ 1392.822330][T26237] ? __pfx___sys_sendto+0x10/0x10 [ 1392.822357][T26237] ? ksys_write+0x1ac/0x250 [ 1392.822371][T26237] ? __pfx_ksys_write+0x10/0x10 [ 1392.822385][T26237] __ia32_sys_sendto+0xdd/0x1b0 [ 1392.822400][T26237] ? lockdep_hardirqs_on+0x7c/0x110 [ 1392.822415][T26237] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1392.822432][T26237] __do_fast_syscall_32+0x7c/0x300 [ 1392.822444][T26237] do_fast_syscall_32+0x32/0x80 [ 1392.822454][T26237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1392.822467][T26237] RIP: 0023:0xf703e579 [ 1392.822477][T26237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1392.822487][T26237] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1392.822498][T26237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1392.822505][T26237] RDX: 000000000000004d RSI: 00000000200047ee RDI: 0000000080000080 [ 1392.822511][T26237] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1392.822517][T26237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1392.822523][T26237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.822536][T26237] [ 1393.083800][T26247] input: syz1 as /devices/virtual/input/input240 [ 1394.183191][T19230] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1394.344627][T19230] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1394.347291][T19230] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1394.350993][T19230] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1394.354074][T19230] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1394.359814][T19230] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1394.362542][T19230] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1394.365041][T19230] usb 7-1: Product: syz [ 1394.366346][T19230] usb 7-1: Manufacturer: syz [ 1394.375222][T19230] cdc_wdm 7-1:1.0: skipping garbage [ 1394.377363][T19230] cdc_wdm 7-1:1.0: skipping garbage [ 1394.379518][T19230] cdc_wdm 7-1:1.0: skipping garbage [ 1394.381706][T19230] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1394.563976][T26266] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1396.323937][T22452] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1397.010251][T18574] usb 7-1: USB disconnect, device number 108 [ 1397.137804][T26299] gfs2: path_lookup on returned error -2 [ 1397.197937][T26305] netlink: 'syz.2.4917': attribute type 39 has an invalid length. [ 1398.093132][T26324] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 1398.772429][T26336] input: syz1 as /devices/virtual/input/input241 [ 1399.619018][T26348] gfs2: path_lookup on returned error -2 [ 1399.654730][T22452] Bluetooth: Wrong link type (-57) [ 1400.821605][T26383] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1401.073178][T14370] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 1401.253366][T14370] usb 11-1: Using ep0 maxpacket: 32 [ 1401.262182][T14370] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 1401.272635][T14370] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1928, setting to 1024 [ 1401.295402][T14370] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1401.312983][T14370] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.323583][T14370] usb 11-1: config 0 descriptor?? [ 1401.325935][T26382] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1401.611671][T26390] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1401.775910][T14370] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1402.490565][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 1402.490582][ T40] audit: type=1326 audit(1758476889.513:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26399 comm="syz.2.4938" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa8579 code=0x0 [ 1403.205603][T22452] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1403.620142][T26417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4942'. [ 1403.667236][T26421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1403.705008][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1403.705421][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1403.769368][ T5260] usb 11-1: USB disconnect, device number 59 [ 1403.973767][T26430] input: syz1 as /devices/virtual/input/input242 [ 1404.343208][T19230] usb 11-1: new high-speed USB device number 60 using dummy_hcd [ 1404.503215][T19230] usb 11-1: Using ep0 maxpacket: 16 [ 1404.512153][T19230] usb 11-1: config 0 has no interfaces? [ 1404.514886][T19230] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1404.519170][T19230] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.524699][T19230] usb 11-1: config 0 descriptor?? [ 1404.761093][T18574] usb 11-1: USB disconnect, device number 60 [ 1405.252177][T26441] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1407.969294][T22452] Bluetooth: Wrong link type (-57) [ 1408.984469][T26489] input: syz1 as /devices/virtual/input/input243 [ 1409.413285][ T53] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1409.563064][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 1409.566996][ T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1409.571476][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1409.576052][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.580266][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.585888][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1409.589516][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.866655][T26502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.873934][T26502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.983169][T26502] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.986340][T26502] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1410.071277][T26502] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.076066][T26502] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1410.153259][T26502] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.156503][T26502] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1410.252782][T26502] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.257128][T26502] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1410.361631][ T1138] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.365330][ T1138] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1410.379792][ T1138] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.382614][ T1138] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1410.390045][ T1138] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.393035][ T1138] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1410.403258][T18565] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.406125][T18565] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1410.420970][ T53] usb 10-1: usb_control_msg returned -71 [ 1410.422878][ T53] usbtmc 10-1:16.0: can't read capabilities [ 1410.432022][ T53] usb 10-1: USB disconnect, device number 73 [ 1414.883663][T21187] udevd[21187]: symlink '../../loop8' '/dev/disk/by-diskseq/104.tmp-b7:8' failed: Read-only file system [ 1415.763176][ T29] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 1415.933028][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 1415.945912][ T29] usb 11-1: config 0 has no interfaces? [ 1415.954807][ T29] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1415.958294][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.960972][ T29] usb 11-1: Product: syz [ 1415.962763][ T29] usb 11-1: Manufacturer: syz [ 1415.983065][ T29] usb 11-1: SerialNumber: syz [ 1415.994998][ T29] usb 11-1: config 0 descriptor?? [ 1416.279463][T26593] input: syz1 as /devices/virtual/input/input244 [ 1416.554713][T26601] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1416.593116][ T53] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1416.752978][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 1416.756072][ T53] usb 10-1: config 0 has no interfaces? [ 1416.756090][ T53] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1416.756102][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.757216][ T53] usb 10-1: config 0 descriptor?? [ 1418.563666][ T53] usb 11-1: USB disconnect, device number 61 [ 1418.811330][T26625] input: syz1 as /devices/virtual/input/input245 [ 1419.194311][ T53] usb 10-1: USB disconnect, device number 74 [ 1420.624797][T26651] input: syz1 as /devices/virtual/input/input246 [ 1421.022985][ T5260] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1421.173074][ T5260] usb 10-1: Using ep0 maxpacket: 16 [ 1421.175932][ T5260] usb 10-1: config 0 has no interfaces? [ 1421.175952][ T5260] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1421.175964][ T5260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.177167][ T5260] usb 10-1: config 0 descriptor?? [ 1421.383869][T14370] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1421.394089][ T5260] usb 10-1: USB disconnect, device number 75 [ 1421.543111][T14370] usb 7-1: Using ep0 maxpacket: 16 [ 1421.547743][T14370] usb 7-1: config 0 has no interfaces? [ 1421.551350][T14370] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1421.554982][T14370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.557928][T14370] usb 7-1: Product: syz [ 1421.559305][T14370] usb 7-1: Manufacturer: syz [ 1421.560834][T14370] usb 7-1: SerialNumber: syz [ 1421.563842][T14370] usb 7-1: config 0 descriptor?? [ 1421.893011][T14370] usb 11-1: new high-speed USB device number 62 using dummy_hcd [ 1422.157581][T14370] usb 11-1: Using ep0 maxpacket: 16 [ 1422.254398][T14370] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1422.271133][T14370] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1422.271196][T14370] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.271207][T14370] usb 11-1: Product: syz [ 1422.271215][T14370] usb 11-1: Manufacturer: syz [ 1422.271223][T14370] usb 11-1: SerialNumber: syz [ 1422.286983][T14370] usb 11-1: config 0 descriptor?? [ 1422.292158][T14370] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1422.321049][T14370] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1423.003667][T14370] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1423.242612][ T40] audit: type=1326 audit(1758476910.263:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.243619][ T40] audit: type=1326 audit(1758476910.273:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268593][ T40] audit: type=1326 audit(1758476910.273:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268622][ T40] audit: type=1326 audit(1758476910.273:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268643][ T40] audit: type=1326 audit(1758476910.273:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268665][ T40] audit: type=1326 audit(1758476910.273:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268685][ T40] audit: type=1326 audit(1758476910.273:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268706][ T40] audit: type=1326 audit(1758476910.273:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268725][ T40] audit: type=1326 audit(1758476910.273:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.268745][ T40] audit: type=1326 audit(1758476910.273:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.0.5003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1423.407675][T14370] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1423.407694][T14370] em28xx 11-1:0.0: board has no eeprom [ 1424.162570][T13606] usb 7-1: USB disconnect, device number 109 [ 1424.583013][T14370] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1424.583081][T14370] em28xx 11-1:0.0: dvb set to bulk mode. [ 1424.603241][T14370] em28xx 11-1:0.0: Binding DVB extension [ 1424.689588][T13606] usb 11-1: USB disconnect, device number 62 [ 1424.692139][T13606] em28xx 11-1:0.0: Disconnecting em28xx [ 1424.808619][T26709] 9pnet_virtio: no channels available for device syz [ 1424.816881][T14370] em28xx 11-1:0.0: Registering input extension [ 1424.819608][T13606] em28xx 11-1:0.0: Closing input extension [ 1424.824189][T13606] em28xx 11-1:0.0: Freeing device [ 1426.262757][T26735] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 1426.797606][T13606] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1426.976452][T13606] usb 7-1: Using ep0 maxpacket: 16 [ 1427.016301][T13606] usb 7-1: config 0 has no interfaces? [ 1427.020767][T13606] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1427.025833][T13606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.029115][T13606] usb 7-1: Product: syz [ 1427.030573][T13606] usb 7-1: Manufacturer: syz [ 1427.032023][T13606] usb 7-1: SerialNumber: syz [ 1427.039430][T13606] usb 7-1: config 0 descriptor?? [ 1427.183412][T19230] usb 11-1: new high-speed USB device number 63 using dummy_hcd [ 1427.239986][T26751] netlink: 'syz.5.5017': attribute type 4 has an invalid length. [ 1427.343307][T19230] usb 11-1: Using ep0 maxpacket: 16 [ 1427.351208][T19230] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1427.361182][T19230] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1427.367087][T19230] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.369983][T19230] usb 11-1: Product: syz [ 1427.371846][T19230] usb 11-1: Manufacturer: syz [ 1427.377601][T19230] usb 11-1: SerialNumber: syz [ 1427.393579][T19230] usb 11-1: config 0 descriptor?? [ 1427.401325][T19230] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1427.406292][T19230] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1428.102632][T19230] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1428.510985][T19230] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1428.511003][T19230] em28xx 11-1:0.0: board has no eeprom [ 1428.590765][T26771] input: syz1 as /devices/virtual/input/input248 [ 1429.357123][T26778] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1429.548323][ T53] usb 7-1: USB disconnect, device number 110 [ 1429.693085][T19230] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1429.693105][T19230] em28xx 11-1:0.0: dvb set to bulk mode. [ 1429.695138][T13606] em28xx 11-1:0.0: Binding DVB extension [ 1429.724204][T26784] input: syz1 as /devices/virtual/input/input249 [ 1429.756388][T13606] em28xx 11-1:0.0: Registering input extension [ 1429.953851][T14370] usb 11-1: USB disconnect, device number 63 [ 1429.960070][T14370] em28xx 11-1:0.0: Disconnecting em28xx [ 1429.962209][T14370] em28xx 11-1:0.0: Closing input extension [ 1429.977643][T14370] em28xx 11-1:0.0: Freeing device [ 1430.053101][ T53] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1430.213052][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 1430.217507][ T53] usb 7-1: config 0 has no interfaces? [ 1430.219998][ T53] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1430.223858][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.229020][ T53] usb 7-1: config 0 descriptor?? [ 1430.490501][T19230] usb 7-1: USB disconnect, device number 111 [ 1430.491018][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1430.499836][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1430.506136][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1430.524919][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1430.527450][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1430.647942][ T1247] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.651946][ T1247] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1430.739987][ T1247] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.744145][ T1247] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1430.758913][T26790] chnl_net:caif_netlink_parms(): no params data found [ 1430.840717][ T1247] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.844867][ T1247] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1430.878704][T26790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.881243][T26790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.884235][T26790] bridge_slave_0: entered allmulticast mode [ 1430.887442][T26790] bridge_slave_0: entered promiscuous mode [ 1430.891063][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.894271][T26790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.897220][T26790] bridge_slave_1: entered allmulticast mode [ 1430.900848][T26790] bridge_slave_1: entered promiscuous mode [ 1430.955968][ T1247] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.956917][T26804] netlink: 'syz.6.5028': attribute type 4 has an invalid length. [ 1430.959807][ T1247] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1430.977379][T26790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.993590][T26790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.077728][T26790] team0: Port device team_slave_0 added [ 1431.081731][T26790] team0: Port device team_slave_1 added [ 1431.132158][T26790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.136349][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.146127][T26790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.150984][T26790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.153341][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.162155][T26790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.236050][T26790] hsr_slave_0: entered promiscuous mode [ 1431.238728][T26790] hsr_slave_1: entered promiscuous mode [ 1431.241460][T26790] debugfs: 'hsr0' already exists in 'hsr' [ 1431.243828][T26790] Cannot create hsr debugfs directory [ 1431.447180][ T1247] dvmrp0 (unregistering): left allmulticast mode [ 1431.482085][ T1247] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1431.528930][ T1247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.536593][ T1247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.543342][ T1247] bond0 (unregistering): Released all slaves [ 1431.554279][ T1247] bond1 (unregistering): Released all slaves [ 1431.717899][ T1247] tipc: Left network mode [ 1431.883046][T14370] usb 11-1: new high-speed USB device number 64 using dummy_hcd [ 1431.898574][ T29] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1432.043224][T14370] usb 11-1: Using ep0 maxpacket: 16 [ 1432.055234][T14370] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.060839][T14370] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1432.064883][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1432.067314][T14370] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.070653][T14370] usb 11-1: Product: syz [ 1432.072593][T14370] usb 11-1: Manufacturer: syz [ 1432.078083][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1432.083417][T14370] usb 11-1: SerialNumber: syz [ 1432.087020][ T29] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1432.090609][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.096380][T14370] usb 11-1: config 0 descriptor?? [ 1432.098691][ T29] usb 7-1: Product: syz [ 1432.100938][ T29] usb 7-1: Manufacturer: syz [ 1432.120082][ T29] usb 7-1: SerialNumber: syz [ 1432.132804][ T29] usb 7-1: config 0 descriptor?? [ 1432.140892][ T29] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1432.146414][ T29] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1432.148101][ T1247] hsr_slave_0: left promiscuous mode [ 1432.153055][ T1247] hsr_slave_1: left promiscuous mode [ 1432.156331][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.160807][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.586863][T22452] Bluetooth: hci4: command tx timeout [ 1432.943432][ T29] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1433.142342][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 1433.269900][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 1433.422696][ T29] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1433.422716][ T29] em28xx 7-1:0.0: board has no eeprom [ 1434.593298][ T29] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1434.593330][ T29] em28xx 7-1:0.0: dvb set to bulk mode. [ 1434.594064][T19435] em28xx 7-1:0.0: Binding DVB extension [ 1434.646166][T26790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1434.649643][T26790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1434.663292][T22452] Bluetooth: hci4: command tx timeout [ 1434.690498][T26790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1434.693677][ T5260] usb 7-1: USB disconnect, device number 112 [ 1434.696706][ T5260] em28xx 7-1:0.0: Disconnecting em28xx [ 1434.699737][T19435] em28xx 7-1:0.0: Registering input extension [ 1434.705575][T19435] usb 11-1: USB disconnect, device number 64 [ 1434.708720][ T5260] em28xx 7-1:0.0: Closing input extension [ 1434.716870][T26790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1434.735410][ T5260] em28xx 7-1:0.0: Freeing device [ 1435.194010][T26790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.246799][T26790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.266144][T18565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.268909][T18565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.294211][T18565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.297429][T18565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.444850][T26790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1435.647366][T26790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.052392][T26790] veth0_vlan: entered promiscuous mode [ 1436.104852][T26790] veth1_vlan: entered promiscuous mode [ 1436.413947][T26790] veth0_macvtap: entered promiscuous mode [ 1436.743074][T22452] Bluetooth: hci4: command tx timeout [ 1436.754852][T26790] veth1_macvtap: entered promiscuous mode [ 1437.007835][T26790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.033109][T26790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.138489][ T1170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.141280][ T1170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.163588][ T1170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.168465][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.223807][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.227324][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.303758][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.306746][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.317753][T26903] netlink: 'syz.0.5040': attribute type 4 has an invalid length. [ 1438.521362][T26925] input: syz1 as /devices/virtual/input/input252 [ 1438.702277][T26927] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1438.773023][ T24] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1438.835789][T22452] Bluetooth: hci4: command tx timeout [ 1438.943047][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1438.951811][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.970415][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1438.973446][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.975990][ T24] usb 7-1: Product: syz [ 1438.977326][ T24] usb 7-1: Manufacturer: syz [ 1438.978845][ T24] usb 7-1: SerialNumber: syz [ 1438.993341][ T24] usb 7-1: config 0 descriptor?? [ 1439.542067][T26933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5047'. [ 1439.885294][T26946] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1439.885948][T26945] IPVS: stopping backup sync thread 26946 ... [ 1440.128214][T26949] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1441.583352][ T24] usb 7-1: USB disconnect, device number 113 [ 1441.596941][T26975] input: syz1 as /devices/virtual/input/input253 [ 1441.983039][T22517] usb 11-1: new high-speed USB device number 65 using dummy_hcd [ 1442.153606][T22517] usb 11-1: Using ep0 maxpacket: 16 [ 1442.163378][T22517] usb 11-1: config 0 has no interfaces? [ 1442.169087][T22517] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1442.178517][T22517] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.185503][T22517] usb 11-1: config 0 descriptor?? [ 1442.517021][ T53] usb 11-1: USB disconnect, device number 65 [ 1442.616167][T26986] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1442.815672][T26991] netlink: 'syz.5.5061': attribute type 2 has an invalid length. [ 1442.819437][T26991] netlink: 119 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1443.753539][T27005] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1443.757507][T27003] IPVS: stopping backup sync thread 27005 ... [ 1443.776227][T27004] 9pnet_virtio: no channels available for device syz [ 1444.153868][T22517] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1444.189237][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1444.204915][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1444.209360][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1444.213252][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1444.216930][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1444.314159][T22517] usb 7-1: Using ep0 maxpacket: 16 [ 1444.320487][T22517] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.327333][T22517] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1444.331445][T22517] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.335274][T22517] usb 7-1: Product: syz [ 1444.337063][T22517] usb 7-1: Manufacturer: syz [ 1444.338974][T22517] usb 7-1: SerialNumber: syz [ 1444.344343][T22517] usb 7-1: config 0 descriptor?? [ 1444.450563][T27009] chnl_net:caif_netlink_parms(): no params data found [ 1444.608318][T27009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.615639][T27009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.617997][T27009] bridge_slave_0: entered allmulticast mode [ 1444.620729][T27009] bridge_slave_0: entered promiscuous mode [ 1444.633993][T27009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.637178][T27009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.639608][T27009] bridge_slave_1: entered allmulticast mode [ 1444.643750][T27009] bridge_slave_1: entered promiscuous mode [ 1444.702425][T27009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.728965][T27009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.789559][T27009] team0: Port device team_slave_0 added [ 1444.794630][T27009] team0: Port device team_slave_1 added [ 1444.867532][T27009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.870502][T27009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.881547][T27009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.890813][T27009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.896270][T27009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.907157][T27009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.005065][T27009] hsr_slave_0: entered promiscuous mode [ 1445.005575][T27009] hsr_slave_1: entered promiscuous mode [ 1445.005912][T27009] debugfs: 'hsr0' already exists in 'hsr' [ 1445.011927][T27009] Cannot create hsr debugfs directory [ 1445.168763][T27009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1445.168819][T27009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1445.258349][T27009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1445.258872][T27009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1445.394853][T27009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1445.394874][T27009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1445.464113][T27009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1445.464135][T27009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1445.676147][T27009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1445.697056][T27009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1445.715701][T27009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1445.734167][T27009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1445.919828][T27009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.926838][T27009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.929613][T16090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.932574][T16090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.939837][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.939884][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.037802][T27042] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1446.177022][T27009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.241118][T27009] veth0_vlan: entered promiscuous mode [ 1446.250910][T27009] veth1_vlan: entered promiscuous mode [ 1446.263223][T22452] Bluetooth: hci0: command tx timeout [ 1446.284218][T27009] veth0_macvtap: entered promiscuous mode [ 1446.289857][T27009] veth1_macvtap: entered promiscuous mode [ 1446.310692][T27009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.328859][T27009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.339542][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.339588][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.339618][ T1138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.339646][ T1138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.415020][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.415034][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.436533][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.436552][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.479559][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1446.482448][T27048] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1446.482465][T27048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1447.000233][T19435] usb 7-1: USB disconnect, device number 114 [ 1448.177189][T27075] 9pnet_virtio: no channels available for device syz [ 1448.343264][T22452] Bluetooth: hci0: command tx timeout [ 1448.443831][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 1448.447271][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 1448.764741][T27090] input: syz1 as /devices/virtual/input/input254 [ 1449.823157][T19435] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1449.973003][T19435] usb 7-1: Using ep0 maxpacket: 16 [ 1449.976889][T19435] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.980963][T19435] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.005213][T19435] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1450.009027][T19435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.012402][T19435] usb 7-1: Product: syz [ 1450.014279][T19435] usb 7-1: Manufacturer: syz [ 1450.020421][T19435] usb 7-1: SerialNumber: syz [ 1450.053536][T19435] usb 7-1: config 0 descriptor?? [ 1450.315446][T27108] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1450.423083][T22452] Bluetooth: hci0: command tx timeout [ 1450.880278][T27119] input: syz1 as /devices/virtual/input/input255 [ 1451.203062][ T5260] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1451.353199][ T5260] usb 10-1: Using ep0 maxpacket: 16 [ 1451.355142][ T5260] usb 10-1: config 0 has no interfaces? [ 1451.357386][ T5260] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1451.357408][ T5260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.364912][ T5260] usb 10-1: config 0 descriptor?? [ 1451.649341][ T5260] usb 10-1: USB disconnect, device number 76 [ 1452.262235][T27132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1452.262260][T27132] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1452.262460][T27132] vhci_hcd vhci_hcd.0: Device attached [ 1452.506733][T22452] Bluetooth: hci0: command tx timeout [ 1452.525490][ T34] usb 38-1: SetAddress Request (31) to port 0 [ 1452.525525][ T34] usb 38-1: new SuperSpeed USB device number 31 using vhci_hcd [ 1452.611977][T27137] vhci_hcd: connection reset by peer [ 1452.623468][ T46] vhci_hcd: stop threads [ 1452.625214][ T46] vhci_hcd: release socket [ 1452.626776][ T46] vhci_hcd: disconnect device [ 1452.631619][T22517] usb 7-1: USB disconnect, device number 115 [ 1453.696012][T27163] fuse: Bad value for 'rootmode' [ 1455.054436][T27186] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1455.792751][T27194] netlink: 'syz.2.5103': attribute type 1 has an invalid length. [ 1455.796287][T27194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1455.799229][T27194] netlink: 'syz.2.5103': attribute type 2 has an invalid length. [ 1455.801719][T27194] netlink: 'syz.2.5103': attribute type 1 has an invalid length. [ 1455.804429][T27194] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1456.684147][T27196] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1457.613552][T27213] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1457.623325][ T34] usb 38-1: device descriptor read/8, error -110 [ 1458.033156][ T34] usb usb38-port1: attempt power cycle [ 1458.265577][T27223] 9pnet_virtio: no channels available for device syz [ 1458.625848][ T34] usb usb38-port1: unable to enumerate USB device [ 1459.123214][ T34] usb 11-1: new high-speed USB device number 66 using dummy_hcd [ 1459.284087][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 1459.291460][ T34] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.298882][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1459.317747][ T34] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1459.322316][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.328809][ T34] usb 11-1: Product: syz [ 1459.332781][ T34] usb 11-1: Manufacturer: syz [ 1459.339057][ T34] usb 11-1: SerialNumber: syz [ 1459.379846][ T34] usb 11-1: config 0 descriptor?? [ 1459.632535][T27248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5122'. [ 1460.107725][T27262] netlink: 'syz.0.5126': attribute type 12 has an invalid length. [ 1460.107740][T27262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5126'. [ 1461.020810][T27281] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1461.509666][T27285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1461.912239][ T24] usb 11-1: USB disconnect, device number 66 [ 1462.051060][T27295] input: syz1 as /devices/virtual/input/input256 [ 1462.247510][T27303] input: syz1 as /devices/virtual/input/input257 [ 1462.382992][ T29] usb 11-1: new high-speed USB device number 67 using dummy_hcd [ 1462.533014][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 1462.537376][ T29] usb 11-1: config 0 has no interfaces? [ 1462.539163][ T29] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1462.541931][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.550905][ T29] usb 11-1: config 0 descriptor?? [ 1462.612990][ T24] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1462.763211][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1462.766571][ T839] usb 11-1: USB disconnect, device number 67 [ 1462.772039][ T24] usb 10-1: config 0 has no interfaces? [ 1462.784418][ T24] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1462.793247][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.804867][ T24] usb 10-1: config 0 descriptor?? [ 1463.021158][ T839] usb 10-1: USB disconnect, device number 77 [ 1463.574228][T27313] overlay: ./file0 is not a directory [ 1464.067391][T27322] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1465.100563][T27334] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1465.630094][T27343] input: syz1 as /devices/virtual/input/input258 [ 1465.963346][ T839] usb 11-1: new high-speed USB device number 68 using dummy_hcd [ 1466.113018][ T839] usb 11-1: Using ep0 maxpacket: 16 [ 1466.113065][T19435] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1466.116315][ T839] usb 11-1: config 0 has no interfaces? [ 1466.119199][ T839] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1466.122135][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.131289][ T839] usb 11-1: config 0 descriptor?? [ 1466.134898][T27357] netlink: 'syz.5.5152': attribute type 1 has an invalid length. [ 1466.137058][T27357] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5152'. [ 1466.139614][T27357] netlink: 'syz.5.5152': attribute type 2 has an invalid length. [ 1466.141852][T27357] netlink: 'syz.5.5152': attribute type 1 has an invalid length. [ 1466.144245][T27357] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5152'. [ 1466.353131][T19435] usb 7-1: device descriptor read/64, error -71 [ 1466.375459][ T53] usb 11-1: USB disconnect, device number 68 [ 1466.593085][T19435] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1466.723008][T19435] usb 7-1: device descriptor read/64, error -71 [ 1466.833128][T19435] usb usb7-port1: attempt power cycle [ 1466.925017][T27370] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1467.183371][T19435] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1467.223483][T19435] usb 7-1: device descriptor read/8, error -71 [ 1467.313902][T27383] netlink: 'syz.6.5161': attribute type 1 has an invalid length. [ 1467.316245][T27383] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5161'. [ 1467.318915][T27383] netlink: 'syz.6.5161': attribute type 2 has an invalid length. [ 1467.321198][T27383] netlink: 'syz.6.5161': attribute type 1 has an invalid length. [ 1467.324262][T27383] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5161'. [ 1467.483854][T19435] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1468.493030][T19435] usb 7-1: device descriptor read/8, error -71 [ 1468.603375][T19435] usb usb7-port1: unable to enumerate USB device [ 1468.883210][T19435] usb 11-1: new high-speed USB device number 69 using dummy_hcd [ 1469.033060][T19435] usb 11-1: Using ep0 maxpacket: 16 [ 1469.038966][T19435] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1469.046347][T19435] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1469.049316][T19435] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.051805][T19435] usb 11-1: Product: syz [ 1469.053956][T19435] usb 11-1: Manufacturer: syz [ 1469.055648][T19435] usb 11-1: SerialNumber: syz [ 1469.059111][T27400] 9pnet_virtio: no channels available for device syz [ 1469.062878][T19435] usb 11-1: config 0 descriptor?? [ 1469.858970][T27407] input: syz1 as /devices/virtual/input/input260 [ 1470.193089][T19435] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1470.343018][T19435] usb 10-1: Using ep0 maxpacket: 16 [ 1470.348901][T19435] usb 10-1: config 0 has no interfaces? [ 1470.348930][T19435] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1470.348949][T19435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.356340][T19435] usb 10-1: config 0 descriptor?? [ 1470.570756][T19435] usb 10-1: USB disconnect, device number 78 [ 1471.619683][T27436] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 1471.622400][T27436] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5173'. [ 1471.626378][T27436] netlink: 'syz.5.5173': attribute type 2 has an invalid length. [ 1471.629947][T27436] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 1471.633405][T27436] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5173'. [ 1471.684714][T27046] usb 11-1: USB disconnect, device number 69 [ 1471.695579][T27437] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 1472.353241][T19435] usb 11-1: new high-speed USB device number 70 using dummy_hcd [ 1472.493441][T19435] usb 11-1: device descriptor read/64, error -71 [ 1472.495886][T27451] md: md0 stopped. [ 1472.657501][T27459] 9pnet_virtio: no channels available for device syz [ 1472.793012][T19435] usb 11-1: new high-speed USB device number 71 using dummy_hcd [ 1472.923088][T19435] usb 11-1: device descriptor read/64, error -71 [ 1473.033359][T19435] usb usb11-port1: attempt power cycle [ 1473.393176][T19435] usb 11-1: new high-speed USB device number 72 using dummy_hcd [ 1473.413813][T19435] usb 11-1: device descriptor read/8, error -71 [ 1473.663019][T19435] usb 11-1: new high-speed USB device number 73 using dummy_hcd [ 1473.683047][T18574] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1473.683965][T19435] usb 11-1: device descriptor read/8, error -71 [ 1473.793569][T19435] usb usb11-port1: unable to enumerate USB device [ 1473.813029][T18574] usb 7-1: device descriptor read/64, error -71 [ 1474.053008][T18574] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1474.198637][T27476] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1474.203038][T18574] usb 7-1: device descriptor read/64, error -71 [ 1474.313363][T18574] usb usb7-port1: attempt power cycle [ 1474.666878][T18574] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1474.683855][T18574] usb 7-1: device descriptor read/8, error -71 [ 1474.933054][T18574] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1474.957339][T18574] usb 7-1: device descriptor read/8, error -71 [ 1475.076206][T18574] usb usb7-port1: unable to enumerate USB device [ 1475.351919][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1475.351933][ T40] audit: type=1326 audit(1758476962.373:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.363607][ T40] audit: type=1326 audit(1758476962.383:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.372643][ T40] audit: type=1326 audit(1758476962.383:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.382749][ T40] audit: type=1326 audit(1758476962.383:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.393438][ T40] audit: type=1326 audit(1758476962.393:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.400232][ T40] audit: type=1326 audit(1758476962.393:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.410235][ T40] audit: type=1326 audit(1758476962.393:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.418274][ T40] audit: type=1326 audit(1758476962.393:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.427148][ T40] audit: type=1326 audit(1758476962.393:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.435762][ T40] audit: type=1326 audit(1758476962.393:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.6.5190" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 1475.613558][T27506] 9pnet_virtio: no channels available for device syz [ 1476.440381][T27512] input: syz1 as /devices/virtual/input/input261 [ 1476.762391][T27519] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1476.883023][T27046] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1477.052995][T27046] usb 7-1: Using ep0 maxpacket: 16 [ 1477.065948][T27046] usb 7-1: config 0 has no interfaces? [ 1477.070334][T27046] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1477.073700][T27046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.082871][T27046] usb 7-1: config 0 descriptor?? [ 1477.346337][T18574] usb 7-1: USB disconnect, device number 124 [ 1477.643120][ T839] usb 11-1: new high-speed USB device number 74 using dummy_hcd [ 1477.773490][ T839] usb 11-1: device descriptor read/64, error -71 [ 1478.013056][ T839] usb 11-1: new high-speed USB device number 75 using dummy_hcd [ 1478.043541][T27540] syz_tun: entered allmulticast mode [ 1478.143524][ T839] usb 11-1: device descriptor read/64, error -71 [ 1478.253518][ T839] usb usb11-port1: attempt power cycle [ 1478.498243][T27544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5202'. [ 1478.535779][T27538] syz_tun: left allmulticast mode [ 1478.595267][ T839] usb 11-1: new high-speed USB device number 76 using dummy_hcd [ 1478.613885][ T839] usb 11-1: device descriptor read/8, error -71 [ 1479.013231][T27549] 9pnet_virtio: no channels available for device syz [ 1479.063057][ T839] usb 11-1: new high-speed USB device number 77 using dummy_hcd [ 1479.083687][ T839] usb 11-1: device descriptor read/8, error -71 [ 1479.193871][ T839] usb usb11-port1: unable to enumerate USB device [ 1481.843289][ T53] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1481.995023][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 1482.018885][ T53] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1482.026227][ T53] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1482.029989][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.037348][ T53] usb 10-1: Product: syz [ 1482.043427][ T53] usb 10-1: Manufacturer: syz [ 1482.045439][ T53] usb 10-1: SerialNumber: syz [ 1482.059397][ T53] usb 10-1: config 0 descriptor?? [ 1482.212844][ T24] IPVS: starting estimator thread 0... [ 1482.313191][T27584] IPVS: using max 46 ests per chain, 110400 per kthread [ 1482.463107][ T24] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1482.603124][ T24] usb 7-1: device descriptor read/64, error -71 [ 1482.863028][ T24] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1483.013002][ T24] usb 7-1: device descriptor read/64, error -71 [ 1483.133168][ T24] usb usb7-port1: attempt power cycle [ 1483.483041][ T24] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1483.503887][ T24] usb 7-1: device descriptor read/8, error -71 [ 1483.763230][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1483.787836][ T24] usb 7-1: device descriptor read/8, error -71 [ 1483.894030][ T24] usb usb7-port1: unable to enumerate USB device [ 1484.639626][T14370] usb 10-1: USB disconnect, device number 79 [ 1485.023021][T14370] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1485.153275][T14370] usb 10-1: device descriptor read/64, error -71 [ 1485.378983][T27610] syz_tun: entered allmulticast mode [ 1485.413019][T14370] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1485.543134][T14370] usb 10-1: device descriptor read/64, error -71 [ 1485.664253][T14370] usb usb10-port1: attempt power cycle [ 1485.883126][T27614] input: syz1 as /devices/virtual/input/input262 [ 1486.013186][T14370] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1486.034100][T14370] usb 10-1: device descriptor read/8, error -71 [ 1486.134818][T27608] syz_tun: left allmulticast mode [ 1486.210870][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 1486.210888][ T40] audit: type=1800 audit(1758476973.233:2108): pid=27618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5221" name="file0" dev="9p" ino=72614203 res=0 errno=0 [ 1486.223323][T22517] usb 11-1: new high-speed USB device number 78 using dummy_hcd [ 1486.293081][T14370] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1486.324496][T14370] usb 10-1: device descriptor read/8, error -71 [ 1486.373106][T22517] usb 11-1: Using ep0 maxpacket: 16 [ 1486.376747][T22517] usb 11-1: config 0 has no interfaces? [ 1486.379030][T22517] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1486.382670][T22517] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.387348][T22517] usb 11-1: config 0 descriptor?? [ 1486.433498][T14370] usb usb10-port1: unable to enumerate USB device [ 1486.543030][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1486.638066][T22517] usb 11-1: USB disconnect, device number 78 [ 1486.703213][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.708785][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1486.712275][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1486.733312][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.739232][ T24] usb 7-1: config 0 descriptor?? [ 1486.758359][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1486.775427][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1486.786955][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1486.791371][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1486.794346][ T24] usb 7-1: media controller created [ 1486.798784][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1486.826654][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1486.828749][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1486.840794][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input263 [ 1486.845849][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1486.848109][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1487.021362][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1487.024218][T27623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5223'. [ 1487.025335][ T24] dvb-usb: error while querying for an remote control event. [ 1487.052689][ T53] usb 7-1: USB disconnect, device number 3 [ 1487.074374][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1487.831420][T27642] netlink: 'syz.6.5229': attribute type 1 has an invalid length. [ 1487.834424][T27642] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5229'. [ 1487.837468][T27642] netlink: 'syz.6.5229': attribute type 2 has an invalid length. [ 1487.840118][T27642] netlink: 'syz.6.5229': attribute type 1 has an invalid length. [ 1487.842713][T27642] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5229'. [ 1487.878791][T27644] input: syz1 as /devices/virtual/input/input264 [ 1488.013113][T14370] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1488.253039][T14370] usb 7-1: Using ep0 maxpacket: 16 [ 1488.257689][T14370] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1488.274150][T14370] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1488.281111][T14370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.284006][T14370] usb 7-1: Product: syz [ 1488.285381][T14370] usb 7-1: Manufacturer: syz [ 1488.286827][T14370] usb 7-1: SerialNumber: syz [ 1488.293461][T14370] usb 7-1: config 0 descriptor?? [ 1488.373043][T27046] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1488.593072][T27046] usb 10-1: Using ep0 maxpacket: 16 [ 1488.611972][T27046] usb 10-1: config 0 has no interfaces? [ 1488.614598][T27046] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1488.617583][T27046] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.630813][T27046] usb 10-1: config 0 descriptor?? [ 1488.904688][T14370] usb 10-1: USB disconnect, device number 84 [ 1489.653100][T18574] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 1489.783519][T18574] usb 11-1: device descriptor read/64, error -71 [ 1490.033844][T18574] usb 11-1: new high-speed USB device number 80 using dummy_hcd [ 1490.173205][T18574] usb 11-1: device descriptor read/64, error -71 [ 1490.293212][T18574] usb usb11-port1: attempt power cycle [ 1490.642972][T18574] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 1490.673642][T18574] usb 11-1: device descriptor read/8, error -71 [ 1490.716001][ T24] usb 7-1: USB disconnect, device number 4 [ 1490.973119][T18574] usb 11-1: new high-speed USB device number 82 using dummy_hcd [ 1490.994005][T18574] usb 11-1: device descriptor read/8, error -71 [ 1491.115403][T18574] usb usb11-port1: unable to enumerate USB device [ 1492.157213][T27708] netlink: 'syz.0.5244': attribute type 1 has an invalid length. [ 1492.160370][T27708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1492.164804][T27708] netlink: 'syz.0.5244': attribute type 2 has an invalid length. [ 1492.168203][T27708] netlink: 'syz.0.5244': attribute type 1 has an invalid length. [ 1492.171758][T27708] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1492.201139][T27710] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1492.973017][T19435] usb 11-1: new high-speed USB device number 83 using dummy_hcd [ 1493.122994][T19435] usb 11-1: Using ep0 maxpacket: 16 [ 1493.127530][T19435] usb 11-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.134569][T19435] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1493.137455][T19435] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.148296][T19435] usb 11-1: Product: syz [ 1493.153699][T19435] usb 11-1: Manufacturer: syz [ 1493.161959][T19435] usb 11-1: SerialNumber: syz [ 1493.196320][T19435] usb 11-1: config 0 descriptor?? [ 1493.856588][T27740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.858220][T27740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.313034][T18141] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1494.453086][T18141] usb 7-1: device descriptor read/64, error -71 [ 1494.683074][T27753] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1494.703021][T18141] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1494.843188][T18141] usb 7-1: device descriptor read/64, error -71 [ 1494.953262][T18141] usb usb7-port1: attempt power cycle [ 1495.226229][T27759] netlink: 'syz.0.5256': attribute type 1 has an invalid length. [ 1495.226253][T27759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1495.226267][T27759] netlink: 'syz.0.5256': attribute type 2 has an invalid length. [ 1495.226282][T27759] netlink: 'syz.0.5256': attribute type 1 has an invalid length. [ 1495.226297][T27759] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1495.229301][T27759] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1495.293073][T18141] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1495.333077][T18141] usb 7-1: device descriptor read/8, error -71 [ 1495.603037][T18141] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1495.631701][T18141] usb 7-1: device descriptor read/8, error -71 [ 1495.638403][T19435] usb 11-1: USB disconnect, device number 83 [ 1495.743415][T18141] usb usb7-port1: unable to enumerate USB device [ 1495.959260][T22452] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1496.867519][T27786] 9pnet_virtio: no channels available for device syz [ 1496.915733][T27787] 9pnet_virtio: no channels available for device syz [ 1497.662015][T27795] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1498.853263][ T53] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 1499.004706][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1499.009732][ T53] usb 11-1: config 0 has no interfaces? [ 1499.017971][ T53] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1499.021804][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.026984][ T53] usb 11-1: Product: syz [ 1499.028945][ T53] usb 11-1: Manufacturer: syz [ 1499.031018][ T53] usb 11-1: SerialNumber: syz [ 1499.035382][ T53] usb 11-1: config 0 descriptor?? [ 1500.647740][T27854] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1501.690018][T22517] usb 11-1: USB disconnect, device number 84 [ 1502.089797][T27882] nfs: Unknown parameter 'ntext' [ 1502.858082][ T40] audit: type=1326 audit(1758476989.883:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.862576][T27886] binder: 27884:27886 ioctl c0306201 80000040 returned -14 [ 1502.870440][ T40] audit: type=1326 audit(1758476989.883:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.878248][ T40] audit: type=1326 audit(1758476989.883:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.884991][ T40] audit: type=1326 audit(1758476989.883:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.891640][ T40] audit: type=1326 audit(1758476989.883:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.899173][ T40] audit: type=1326 audit(1758476989.883:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.906682][ T40] audit: type=1326 audit(1758476989.883:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.915023][ T40] audit: type=1326 audit(1758476989.883:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.923702][ T40] audit: type=1326 audit(1758476989.883:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1502.930951][ T40] audit: type=1326 audit(1758476989.883:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27884 comm="syz.2.5287" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 1503.123663][ T53] usb 11-1: new high-speed USB device number 85 using dummy_hcd [ 1503.273639][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1503.278420][ T53] usb 11-1: config 0 has no interfaces? [ 1503.283047][ T53] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1503.286845][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.290106][ T53] usb 11-1: Product: syz [ 1503.291853][ T53] usb 11-1: Manufacturer: syz [ 1503.293931][ T53] usb 11-1: SerialNumber: syz [ 1503.298615][ T53] usb 11-1: config 0 descriptor?? [ 1503.860761][T27907] netlink: 'syz.2.5295': attribute type 1 has an invalid length. [ 1503.864050][T27907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5295'. [ 1503.867574][T27907] netlink: 'syz.2.5295': attribute type 2 has an invalid length. [ 1503.867622][T27907] netlink: 'syz.2.5295': attribute type 1 has an invalid length. [ 1503.874022][T27907] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5295'. [ 1503.894515][T27907] blktrace: Concurrent blktraces are not allowed on nbd2 [ 1504.392652][T27910] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 1506.005712][T18574] usb 11-1: USB disconnect, device number 85 [ 1506.449571][T27948] input: syz1 as /devices/virtual/input/input265 [ 1507.043011][T22517] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1507.213345][T22517] usb 10-1: Using ep0 maxpacket: 16 [ 1507.224744][T22517] usb 10-1: config 0 has no interfaces? [ 1507.226504][T22517] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1507.229382][T22517] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.243414][T22517] usb 10-1: config 0 descriptor?? [ 1507.453064][T22517] usb 10-1: USB disconnect, device number 85 [ 1508.264560][T27046] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 1508.413575][T27046] usb 11-1: Using ep0 maxpacket: 16 [ 1508.417531][T27046] usb 11-1: config 0 has no interfaces? [ 1508.421888][T27046] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1508.425951][T27046] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.429090][T27046] usb 11-1: Product: syz [ 1508.430735][T27046] usb 11-1: Manufacturer: syz [ 1508.432769][T27046] usb 11-1: SerialNumber: syz [ 1508.437512][T27046] usb 11-1: config 0 descriptor?? [ 1508.764440][ T5979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1508.770188][ T5979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1508.776533][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1508.779283][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1508.782240][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1508.971655][T27989] chnl_net:caif_netlink_parms(): no params data found [ 1509.086148][T27989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.086276][T27989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.086552][T27989] bridge_slave_0: entered allmulticast mode [ 1509.087290][T27989] bridge_slave_0: entered promiscuous mode [ 1509.098703][T27989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.098774][T27989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.098845][T27989] bridge_slave_1: entered allmulticast mode [ 1509.099577][T27989] bridge_slave_1: entered promiscuous mode [ 1509.190668][T27989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.204482][T27989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.343848][T27989] team0: Port device team_slave_0 added [ 1509.346703][T27989] team0: Port device team_slave_1 added [ 1509.387394][T27989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.387405][T27989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.387419][T27989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.388216][T27989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.403839][T27989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.411507][T27989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.456478][T27989] hsr_slave_0: entered promiscuous mode [ 1509.462245][T27989] hsr_slave_1: entered promiscuous mode [ 1509.471756][T27989] debugfs: 'hsr0' already exists in 'hsr' [ 1509.471840][T27989] Cannot create hsr debugfs directory [ 1509.711373][T27989] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1509.716880][T27989] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1509.723336][T27989] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1509.725957][T27989] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1509.818928][T27989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.838214][T27989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.841966][T18565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.842031][T18565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.846372][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.849170][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.985201][T27989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.141878][T27989] veth0_vlan: entered promiscuous mode [ 1510.146217][T27989] veth1_vlan: entered promiscuous mode [ 1510.163971][T27989] veth0_macvtap: entered promiscuous mode [ 1510.166634][T27989] veth1_macvtap: entered promiscuous mode [ 1510.175026][T27989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.192174][T27989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.198672][T25297] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.198703][T25297] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.198721][T25297] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.198742][T25297] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.251372][T18565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.251392][T18565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.269485][T18565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.269497][T18565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.298753][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/102.tmp-b7:7' failed: Read-only file system [ 1510.304671][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/102.tmp-b7:7' failed: Read-only file system [ 1510.309165][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1510.476870][ T5979] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1510.816042][T28044] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5322'. [ 1510.823135][ T5979] Bluetooth: hci1: command tx timeout [ 1511.047394][ T53] usb 11-1: USB disconnect, device number 86 [ 1511.178381][T28049] input: syz1 as /devices/virtual/input/input266 [ 1511.214829][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1511.463310][T14370] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1511.493310][ T53] usb 11-1: new high-speed USB device number 87 using dummy_hcd [ 1511.632969][T14370] usb 12-1: Using ep0 maxpacket: 16 [ 1511.636267][T14370] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1511.650152][T14370] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1511.653971][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1511.656439][T14370] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.659840][T14370] usb 12-1: Product: syz [ 1511.660313][ T53] usb 11-1: config 0 has no interfaces? [ 1511.661699][T14370] usb 12-1: Manufacturer: syz [ 1511.664759][ T53] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1511.667913][T14370] usb 12-1: SerialNumber: syz [ 1511.669429][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.673583][T14370] usb 12-1: config 0 descriptor?? [ 1511.677552][ T53] usb 11-1: config 0 descriptor?? [ 1511.680423][T14370] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1511.684563][T14370] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 1511.746958][T28064] netlink: 'syz.5.5327': attribute type 1 has an invalid length. [ 1511.750034][T28064] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5327'. [ 1511.753292][T28064] netlink: 'syz.5.5327': attribute type 2 has an invalid length. [ 1511.755753][T28064] netlink: 'syz.5.5327': attribute type 1 has an invalid length. [ 1511.758168][T28064] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5327'. [ 1511.950960][T19435] usb 11-1: USB disconnect, device number 87 [ 1512.456574][T14370] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 1512.913555][ T5979] Bluetooth: hci1: command tx timeout [ 1513.043976][T14370] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1513.044002][T14370] em28xx 12-1:0.0: board has no eeprom [ 1513.343041][T14370] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1513.343122][T14370] em28xx 12-1:0.0: dvb set to bulk mode. [ 1513.346298][ T6067] em28xx 12-1:0.0: Binding DVB extension [ 1513.762366][T28081] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1514.509575][T22517] usb 12-1: USB disconnect, device number 2 [ 1514.512106][T22517] em28xx 12-1:0.0: Disconnecting em28xx [ 1514.523558][ T6067] em28xx 12-1:0.0: Registering input extension [ 1514.532686][T22517] em28xx 12-1:0.0: Closing input extension [ 1514.540635][T22517] em28xx 12-1:0.0: Freeing device [ 1514.918031][T25231] udevd[25231]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1514.993267][ T5979] Bluetooth: hci1: command tx timeout [ 1515.566313][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1515.801645][T28110] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 1516.346431][T28114] netlink: 'syz.6.5339': attribute type 1 has an invalid length. [ 1516.349878][T28114] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5339'. [ 1516.354017][T28114] netlink: 'syz.6.5339': attribute type 2 has an invalid length. [ 1516.356558][T28114] netlink: 'syz.6.5339': attribute type 1 has an invalid length. [ 1516.359078][T28114] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5339'. [ 1516.837617][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1517.073236][ T5979] Bluetooth: hci1: command tx timeout [ 1517.674236][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1519.041784][T27046] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1519.203024][T27046] usb 12-1: Using ep0 maxpacket: 8 [ 1519.209528][T27046] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1519.212357][T27046] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1519.221633][T27046] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.232788][T27046] usb 12-1: config 0 descriptor?? [ 1519.533097][T14370] usb 11-1: new high-speed USB device number 88 using dummy_hcd [ 1519.659956][T27046] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1519.693099][T14370] usb 11-1: Using ep0 maxpacket: 16 [ 1519.694925][T14370] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.702644][T14370] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1519.702659][T14370] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.702669][T14370] usb 11-1: Product: syz [ 1519.702677][T14370] usb 11-1: Manufacturer: syz [ 1519.702685][T14370] usb 11-1: SerialNumber: syz [ 1519.704502][T14370] usb 11-1: config 0 descriptor?? [ 1519.856356][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5344'. [ 1519.865676][T22517] usb 12-1: USB disconnect, device number 3 [ 1520.084833][T28158] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 1520.222873][T28161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5352'. [ 1520.430321][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1521.355190][T28178] input: syz1 as /devices/virtual/input/input268 [ 1521.478545][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1522.569041][ T6067] usb 11-1: USB disconnect, device number 88 [ 1522.587471][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1523.928429][T28194] 9pnet_virtio: no channels available for device syz [ 1524.660630][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1525.867297][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/105.tmp-b7:7' failed: Read-only file system [ 1526.075186][T28235] netlink: 'syz.6.5369': attribute type 1 has an invalid length. [ 1526.077710][T28235] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5369'. [ 1526.080488][T28235] netlink: 'syz.6.5369': attribute type 2 has an invalid length. [ 1526.083096][T28235] netlink: 'syz.6.5369': attribute type 1 has an invalid length. [ 1526.085492][T28235] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5369'. [ 1526.099124][T28235] blktrace: Concurrent blktraces are not allowed on nbd6 [ 1526.935879][T28243] loop7: detected capacity change from 0 to 7 [ 1526.943440][ C2] blk_print_req_error: 2 callbacks suppressed [ 1526.943456][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.949354][ C2] buffer_io_error: 310 callbacks suppressed [ 1526.949362][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.958564][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.961392][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.965294][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.968970][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.986672][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.989499][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.993286][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.996072][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.999099][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.001805][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.006477][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.009367][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.011782][T28243] ldm_validate_partition_table(): Disk read failed. [ 1527.018190][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.021644][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.025221][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.028975][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.033848][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.036984][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.373118][T28243] Dev loop7: unable to read RDB block 0 [ 1527.417675][T28243] loop7: unable to read partition table [ 1527.419988][T28243] loop7: partition table beyond EOD, truncated [ 1527.422230][T28243] loop_reread_partitions: partition scan of loop7 (Wj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1527.472822][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system [ 1527.571349][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system [ 1527.615385][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system [ 1528.129160][T28263] netlink: 'syz.5.5374': attribute type 1 has an invalid length. [ 1528.131849][T28263] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1528.135836][T28263] netlink: 'syz.5.5374': attribute type 2 has an invalid length. [ 1528.138558][T28263] netlink: 'syz.5.5374': attribute type 1 has an invalid length. [ 1528.141496][T28263] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1528.151004][T28263] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1528.507090][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1528.660996][T28267] netlink: 'syz.7.5376': attribute type 1 has an invalid length. [ 1528.661045][T28267] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5376'. [ 1528.661058][T28267] netlink: 'syz.7.5376': attribute type 2 has an invalid length. [ 1528.661169][T28267] netlink: 'syz.7.5376': attribute type 1 has an invalid length. [ 1528.661321][T28267] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5376'. [ 1528.910818][T28273] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1528.913559][T28273] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1528.917310][T28273] vhci_hcd vhci_hcd.0: Device attached [ 1529.110416][T27046] vhci_hcd: vhci_device speed not set [ 1529.259160][T27046] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1529.706177][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1529.994759][ T5979] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1530.747044][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1530.753994][T28294] input: syz1 as /devices/virtual/input/input269 [ 1530.840450][ T5979] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1531.003040][T28274] vhci_hcd: connection reset by peer [ 1531.005499][T16090] vhci_hcd: stop threads [ 1531.006906][T16090] vhci_hcd: release socket [ 1531.008366][T16090] vhci_hcd: disconnect device [ 1531.200191][T28300] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 1531.539756][T28308] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1531.542395][T28308] binder: 28305:28308 ioctl 4018620d 80000040 returned -1 [ 1532.600144][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1532.733814][ T53] usb 11-1: new high-speed USB device number 89 using dummy_hcd [ 1532.833053][ T34] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1532.883374][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1532.888122][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1532.894706][ T53] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1532.898649][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.902089][ T53] usb 11-1: Product: syz [ 1532.904098][ T53] usb 11-1: Manufacturer: syz [ 1532.906031][ T53] usb 11-1: SerialNumber: syz [ 1532.910562][ T53] usb 11-1: config 0 descriptor?? [ 1532.919956][ T53] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1532.924051][ T53] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1532.983578][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 1532.988977][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1532.997215][ T34] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1533.001122][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.005260][ T34] usb 12-1: Product: syz [ 1533.007242][ T34] usb 12-1: Manufacturer: syz [ 1533.009345][ T34] usb 12-1: SerialNumber: syz [ 1533.014890][ T34] usb 12-1: config 0 descriptor?? [ 1533.023073][ T34] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1533.026997][ T34] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 1533.682471][ T53] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1533.697883][ T34] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 1534.090064][ T53] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1534.090081][ T53] em28xx 11-1:0.0: board has no eeprom [ 1534.104797][ T34] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1534.108069][ T34] em28xx 12-1:0.0: board has no eeprom [ 1534.333030][T27046] vhci_hcd: vhci_device speed not set [ 1534.382991][ T53] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1534.383010][ T53] em28xx 11-1:0.0: dvb set to bulk mode. [ 1534.383477][T18574] em28xx 11-1:0.0: Binding DVB extension [ 1534.403756][ T34] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1534.403773][ T34] em28xx 12-1:0.0: dvb set to bulk mode. [ 1534.905824][T28331] kexec: Could not allocate control_code_buffer [ 1535.139545][T14370] usb 12-1: USB disconnect, device number 4 [ 1535.143582][T14370] em28xx 12-1:0.0: Disconnecting em28xx [ 1535.193244][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1535.289979][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1535.517481][T18574] em28xx 11-1:0.0: Registering input extension [ 1535.517577][ T53] em28xx 12-1:0.0: Binding DVB extension [ 1535.546497][ T839] usb 11-1: USB disconnect, device number 89 [ 1535.549037][ T839] em28xx 11-1:0.0: Disconnecting em28xx [ 1535.563468][ T53] em28xx 12-1:0.0: Registering input extension [ 1535.565866][T14370] em28xx 12-1:0.0: Closing input extension [ 1535.567891][ T839] em28xx 11-1:0.0: Closing input extension [ 1535.574810][ T839] em28xx 11-1:0.0: Freeing device [ 1535.593978][T14370] em28xx 12-1:0.0: Freeing device [ 1536.523594][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/107.tmp-b7:7' failed: Read-only file system [ 1536.667602][T28367] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1537.190860][T28373] loop7: detected capacity change from 0 to 7 [ 1537.217039][ C2] blk_print_req_error: 10 callbacks suppressed [ 1537.217051][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.221417][ C2] buffer_io_error: 10 callbacks suppressed [ 1537.221425][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.226087][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.228784][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.231417][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.234046][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.237256][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.239910][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.243970][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.247319][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.251199][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.254606][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.258546][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.261893][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.264859][T28373] ldm_validate_partition_table(): Disk read failed. [ 1537.273953][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.276767][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.279926][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.283892][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.287730][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1537.290667][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 1537.294530][T28373] Dev loop7: unable to read RDB block 0 [ 1537.298859][T28373] loop7: unable to read partition table [ 1537.302159][T28373] loop7: partition table beyond EOD, truncated [ 1537.338635][T28373] loop_reread_partitions: partition scan of loop7 (Wj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1537.350508][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 1537.794926][ T24] usb 11-1: new high-speed USB device number 90 using dummy_hcd [ 1537.833734][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 1537.953132][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 1537.962460][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.973633][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1538.001158][ T24] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1538.011971][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.017036][ T24] usb 11-1: Product: syz [ 1538.017550][ T5979] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1538.018865][ T24] usb 11-1: Manufacturer: syz [ 1538.022870][ T24] usb 11-1: SerialNumber: syz [ 1538.039997][ T24] usb 11-1: config 0 descriptor?? [ 1538.050122][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 1538.062726][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 1538.463003][T18574] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1538.614701][T18574] usb 10-1: Using ep0 maxpacket: 16 [ 1538.618808][T18574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1538.624706][T18574] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1538.624723][T18574] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.624734][T18574] usb 10-1: Product: syz [ 1538.624742][T18574] usb 10-1: Manufacturer: syz [ 1538.624749][T18574] usb 10-1: SerialNumber: syz [ 1538.625921][T18574] usb 10-1: config 0 descriptor?? [ 1538.631650][T18574] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1538.641716][T18574] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1538.751511][T26208] udevd[26208]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1539.072042][T28397] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 1539.072058][T28397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1539.072067][T28397] netlink: 'syz.0.5407': attribute type 2 has an invalid length. [ 1539.072074][T28397] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 1539.072082][T28397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1539.178181][T28398] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1539.940158][T26208] udevd[26208]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1540.018981][T18574] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1540.029006][T28410] netlink: 'syz.7.5409': attribute type 1 has an invalid length. [ 1540.029067][T28410] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1540.029100][T28410] netlink: 'syz.7.5409': attribute type 2 has an invalid length. [ 1540.029132][T28410] netlink: 'syz.7.5409': attribute type 1 has an invalid length. [ 1540.029162][T28410] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1540.047938][T28410] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1540.443723][T18574] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1540.444361][T18574] em28xx 10-1:0.0: board has no eeprom [ 1540.699624][T19435] usb 11-1: USB disconnect, device number 90 [ 1540.744656][T18574] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1540.744698][T18574] em28xx 10-1:0.0: dvb set to bulk mode. [ 1540.788100][T25230] em28xx 10-1:0.0: Binding DVB extension [ 1541.161077][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1541.213535][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1541.915670][T25230] em28xx 10-1:0.0: Registering input extension [ 1541.925226][T25230] usb 10-1: USB disconnect, device number 86 [ 1541.928981][T25230] em28xx 10-1:0.0: Disconnecting em28xx [ 1541.931063][T25230] em28xx 10-1:0.0: Closing input extension [ 1541.940259][T25230] em28xx 10-1:0.0: Freeing device [ 1542.260030][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1542.351893][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1542.434669][ T5979] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1542.538436][ T5979] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1542.681556][T21187] udevd[21187]: symlink '../../nbd0' '/dev/disk/by-diskseq/83.tmp-b43:0' failed: Read-only file system [ 1543.333022][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1544.724389][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1545.046452][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1546.298637][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1546.337051][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1546.614313][T28521] input: syz1 as /devices/virtual/input/input273 [ 1546.992988][ T839] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1547.003433][ T5979] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1547.155350][ T839] usb 12-1: Using ep0 maxpacket: 16 [ 1547.158404][ T839] usb 12-1: config 0 has no interfaces? [ 1547.160184][ T839] usb 12-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1547.163164][ T839] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.168707][ T839] usb 12-1: config 0 descriptor?? [ 1547.461541][ T53] usb 12-1: USB disconnect, device number 5 [ 1548.428532][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1549.024983][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1549.125441][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1549.175557][T21187] udevd[21187]: symlink '../../nbd0' '/dev/disk/by-diskseq/83.tmp-b43:0' failed: Read-only file system [ 1549.376669][T28575] input: syz1 as /devices/virtual/input/input274 [ 1549.493102][T28028] usb 11-1: new high-speed USB device number 91 using dummy_hcd [ 1549.663165][T28028] usb 11-1: Using ep0 maxpacket: 16 [ 1549.666362][T28028] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1549.671100][T28028] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1549.674383][T28028] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.676978][T28028] usb 11-1: Product: syz [ 1549.678395][T28028] usb 11-1: Manufacturer: syz [ 1549.679967][T28028] usb 11-1: SerialNumber: syz [ 1549.686158][T28028] usb 11-1: config 0 descriptor?? [ 1549.689952][T28028] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1549.693443][T28028] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1549.805959][ T839] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1549.993063][ T839] usb 12-1: Using ep0 maxpacket: 16 [ 1550.004836][ T839] usb 12-1: config 0 has no interfaces? [ 1550.004868][ T839] usb 12-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1550.004888][ T839] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.013978][ T839] usb 12-1: config 0 descriptor?? [ 1550.308057][ T53] usb 12-1: USB disconnect, device number 6 [ 1550.438978][T28028] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1550.862618][T28028] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1550.865790][T28028] em28xx 11-1:0.0: board has no eeprom [ 1551.220618][T26208] udevd[26208]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1551.235154][T28028] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1551.238711][T28028] em28xx 11-1:0.0: dvb set to bulk mode. [ 1551.251700][ T5260] em28xx 11-1:0.0: Binding DVB extension [ 1551.828195][T28598] netlink: 'syz.7.5453': attribute type 1 has an invalid length. [ 1551.831026][T28598] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5453'. [ 1551.834051][T28598] netlink: 'syz.7.5453': attribute type 2 has an invalid length. [ 1551.836620][T28598] netlink: 'syz.7.5453': attribute type 1 has an invalid length. [ 1551.839087][T28598] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5453'. [ 1551.842235][T28597] netlink: 'syz.0.5460': attribute type 1 has an invalid length. [ 1551.846655][T28597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1551.850447][T28597] netlink: 'syz.0.5460': attribute type 2 has an invalid length. [ 1551.853959][T28597] netlink: 'syz.0.5460': attribute type 1 has an invalid length. [ 1551.857317][T28597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1551.862004][T28598] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1551.876965][T28597] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1552.734179][ T6067] usb 11-1: USB disconnect, device number 91 [ 1552.738755][ T6067] em28xx 11-1:0.0: Disconnecting em28xx [ 1552.745048][T22452] Bluetooth: hci4: command 0x0406 tx timeout [ 1552.748829][ T5260] em28xx 11-1:0.0: Registering input extension [ 1552.751641][ T6067] em28xx 11-1:0.0: Closing input extension [ 1552.768197][ T6067] em28xx 11-1:0.0: Freeing device [ 1552.791979][T28607] input: syz1 as /devices/virtual/input/input276 [ 1552.817547][T25231] udevd[25231]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1552.861734][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1552.877073][T28614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5457'. [ 1552.923708][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1553.843438][ T6067] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1554.081531][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1554.082960][ T6067] usb 10-1: Using ep0 maxpacket: 16 [ 1554.094791][ T6067] usb 10-1: config 0 has no interfaces? [ 1554.096785][ T6067] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1554.100330][ T6067] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.110449][ T6067] usb 10-1: config 0 descriptor?? [ 1554.673577][ T5260] usb 10-1: USB disconnect, device number 87 [ 1554.978562][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1556.319072][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1556.398703][T28653] fuse: Bad value for 'fd' [ 1556.473247][T28657] netlink: 'syz.7.5464': attribute type 1 has an invalid length. [ 1556.476214][T28657] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5464'. [ 1556.479078][T28657] netlink: 'syz.7.5464': attribute type 2 has an invalid length. [ 1556.481501][T28657] netlink: 'syz.7.5464': attribute type 1 has an invalid length. [ 1556.483996][T28657] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5464'. [ 1556.504340][T28657] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1557.416367][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1557.488137][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1558.876977][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1558.937829][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1558.949928][T28699] input: syz1 as /devices/virtual/input/input277 [ 1559.285520][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1559.352990][T19435] usb 11-1: new high-speed USB device number 92 using dummy_hcd [ 1559.520434][T19435] usb 11-1: Using ep0 maxpacket: 16 [ 1559.532514][T19435] usb 11-1: config 0 has no interfaces? [ 1559.540254][T19435] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1559.553649][T19435] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.574794][T19435] usb 11-1: config 0 descriptor?? [ 1560.276524][T27046] usb 11-1: USB disconnect, device number 92 [ 1560.418837][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1561.604617][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1561.702362][T28740] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1563.667475][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1563.903814][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1563.913032][ T6067] usb 11-1: new high-speed USB device number 93 using dummy_hcd [ 1564.053164][ T24] usb 12-1: Using ep0 maxpacket: 16 [ 1564.059221][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1564.068708][ T24] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1564.072628][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.077865][ T24] usb 12-1: Product: syz [ 1564.079737][ T24] usb 12-1: Manufacturer: syz [ 1564.081773][ T24] usb 12-1: SerialNumber: syz [ 1564.096413][ T6067] usb 11-1: Using ep0 maxpacket: 16 [ 1564.097127][ T24] usb 12-1: config 0 descriptor?? [ 1564.115263][ T6067] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1564.117662][ T24] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1564.122437][ T24] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 1564.132706][ T6067] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1564.133115][T22517] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1564.135589][ T6067] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.141416][ T6067] usb 11-1: Product: syz [ 1564.145096][ T6067] usb 11-1: Manufacturer: syz [ 1564.152048][ T6067] usb 11-1: SerialNumber: syz [ 1564.157284][T28763] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1564.164449][ T6067] usb 11-1: config 0 descriptor?? [ 1564.191603][ T6067] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1564.195408][ T6067] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1564.283151][T22517] usb 10-1: Using ep0 maxpacket: 16 [ 1564.289543][T22517] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1564.295226][T22517] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1564.298238][T22517] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.300851][T22517] usb 10-1: Product: syz [ 1564.302281][T22517] usb 10-1: Manufacturer: syz [ 1564.304449][T22517] usb 10-1: SerialNumber: syz [ 1564.310941][T22517] usb 10-1: config 0 descriptor?? [ 1564.932450][ T24] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 1565.056200][ T6067] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1565.200119][T28772] input: syz1 as /devices/virtual/input/input278 [ 1565.381130][ T24] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1565.381148][ T24] em28xx 12-1:0.0: board has no eeprom [ 1565.517132][ T6067] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1565.517149][ T6067] em28xx 11-1:0.0: board has no eeprom [ 1565.683042][ T24] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1565.683060][ T24] em28xx 12-1:0.0: dvb set to bulk mode. [ 1565.683090][ T839] em28xx 12-1:0.0: Binding DVB extension [ 1565.803048][ T6067] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1565.803066][ T6067] em28xx 11-1:0.0: dvb set to bulk mode. [ 1566.762952][ T839] em28xx 12-1:0.0: Registering input extension [ 1566.763069][T27991] em28xx 11-1:0.0: Binding DVB extension [ 1566.854413][T27046] usb 12-1: USB disconnect, device number 7 [ 1566.856963][T27046] em28xx 12-1:0.0: Disconnecting em28xx [ 1566.868352][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1566.930206][ T6067] usb 10-1: USB disconnect, device number 88 [ 1566.960120][T19435] usb 11-1: USB disconnect, device number 93 [ 1566.963775][T19435] em28xx 11-1:0.0: Disconnecting em28xx [ 1566.993780][T27991] em28xx 11-1:0.0: Registering input extension [ 1566.996558][T27046] em28xx 12-1:0.0: Closing input extension [ 1567.005501][T19435] em28xx 11-1:0.0: Closing input extension [ 1567.035538][T19435] em28xx 11-1:0.0: Freeing device [ 1567.093418][T27046] em28xx 12-1:0.0: Freeing device [ 1568.055281][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1568.103056][T22452] Bluetooth: hci0: command 0x0406 tx timeout [ 1568.582053][T28813] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1569.096500][ T24] usb 11-1: new high-speed USB device number 94 using dummy_hcd [ 1569.200384][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1569.264664][ T24] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1569.268386][ T24] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1569.276563][ T24] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1569.279846][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.296047][T28819] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1569.307444][ T24] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 1569.517258][T28819] FAULT_INJECTION: forcing a failure. [ 1569.517258][T28819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.522424][T28819] CPU: 2 UID: 0 PID: 28819 Comm: syz.6.5502 Not tainted syzkaller #0 PREEMPT(full) [ 1569.522446][T28819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1569.522455][T28819] Call Trace: [ 1569.522462][T28819] [ 1569.522469][T28819] dump_stack_lvl+0x16c/0x1f0 [ 1569.522518][T28819] should_fail_ex+0x512/0x640 [ 1569.522570][T28819] _copy_to_user+0x32/0xd0 [ 1569.522592][T28819] simple_read_from_buffer+0xcb/0x170 [ 1569.522613][T28819] proc_fail_nth_read+0x197/0x240 [ 1569.522633][T28819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1569.522660][T28819] ? rw_verify_area+0xcf/0x6c0 [ 1569.522678][T28819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1569.522697][T28819] vfs_read+0x1e1/0xcf0 [ 1569.522724][T28819] ? __pfx_vfs_read+0x10/0x10 [ 1569.522741][T28819] ? find_held_lock+0x2b/0x80 [ 1569.522767][T28819] ? __fget_files+0x20e/0x3c0 [ 1569.522795][T28819] ksys_read+0x12a/0x250 [ 1569.522816][T28819] ? __pfx_ksys_read+0x10/0x10 [ 1569.522836][T28819] ? fput+0x9b/0xd0 [ 1569.522859][T28819] ? rcu_is_watching+0x12/0xc0 [ 1569.522882][T28819] __do_fast_syscall_32+0x7c/0x300 [ 1569.522899][T28819] do_fast_syscall_32+0x32/0x80 [ 1569.522916][T28819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1569.522937][T28819] RIP: 0023:0xf7f84579 [ 1569.522950][T28819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1569.522968][T28819] RSP: 002b:00000000f5486590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1569.522985][T28819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5486620 [ 1569.522996][T28819] RDX: 000000000000000f RSI: 00000000f7414ff4 RDI: 0000000000000000 [ 1569.523006][T28819] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1569.523016][T28819] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1569.523026][T28819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.523049][T28819] [ 1569.693467][ T6067] usb 11-1: USB disconnect, device number 94 [ 1570.100288][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1570.506529][T28854] ptrace attach of "/syz-executor exec"[26790] was attempted by "/syz-executor exec"[28854] [ 1570.617594][T28854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1570.655345][T28854] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1570.664475][T28854] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1570.675209][T28854] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1570.682336][T28854] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1570.692688][T28854] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 1571.489278][T28873] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1572.115687][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1572.209149][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1572.407068][T28883] netlink: 'syz.7.5522': attribute type 1 has an invalid length. [ 1572.410054][T28883] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5522'. [ 1572.435786][T28883] blktrace: Concurrent blktraces are not allowed on nbd7 [ 1573.335145][T28886] : entered promiscuous mode [ 1573.371562][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1573.681713][T28896] nbd_handle_cmd: 2 callbacks suppressed [ 1573.681764][T28896] block nbd6: Attempted send on invalid socket [ 1573.685764][T28896] blk_print_req_error: 15 callbacks suppressed [ 1573.685796][T28896] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1573.691796][T28896] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 1574.724287][T21187] udevd[21187]: symlink '../../loop7' '/dev/disk/by-diskseq/109.tmp-b7:7' failed: Read-only file system [ 1575.053083][ T1247] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1575.056348][ T1247] ref_tracker: netdev@ffff88804da5e610 has 1/1 users at [ 1575.056348][ T1247] batadv_hard_if_event+0xbb7/0x1550 [ 1575.056348][ T1247] notifier_call_chain+0xb9/0x410 [ 1575.056348][ T1247] call_netdevice_notifiers_info+0xbe/0x140 [ 1575.056348][ T1247] register_netdevice+0x182e/0x2270 [ 1575.056348][ T1247] veth_newlink+0x446/0xa00 [ 1575.056348][ T1247] rtnl_newlink+0xc42/0x2000 [ 1575.056348][ T1247] rtnetlink_rcv_msg+0x95e/0xe90 [ 1575.056348][ T1247] netlink_rcv_skb+0x155/0x420 [ 1575.056348][ T1247] netlink_unicast+0x5aa/0x870 [ 1575.056348][ T1247] netlink_sendmsg+0x8d1/0xdd0 [ 1575.056348][ T1247] __sys_sendto+0x4a0/0x520 [ 1575.056348][ T1247] __ia32_compat_sys_socketcall+0x625/0x770 [ 1575.056348][ T1247] __do_fast_syscall_32+0x7c/0x300 [ 1575.056348][ T1247] do_fast_syscall_32+0x32/0x80 [ 1575.056348][ T1247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1575.056348][ T1247] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1575.204031][T22452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.214348][T22452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.224262][T22452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.231070][T22452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.235333][T22452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 VM DIAGNOSIS: 16:53:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561e555 RDI=ffffffff9b1027c0 RBP=ffffffff9b102780 RSP=ffffc900070a7280 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b102780 R15=ffffffff8561e4f0 RIP=ffffffff8561e57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffe07a44 CR3=0000000066edc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff91f6c74a RBX=ffffffff9135e7ec RCX=dffffc0000000000 RDX=0000000000000005 RSI=000000000000000a RDI=ffffffff9135e7d8 RBP=ffffffff9135e7d8 RSP=ffffc900036d7098 R8 =ffffffff91f6c7d4 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a9198 R12=ffffffff9135e800 R13=ffffffff8b91986b R14=ffffffff9135e7d8 R15=ffffffff9135e7d8 RIP=ffffffff816aab15 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f38f6141300 ffffffff 00c00000 GS =0000 ffff8880975ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556494f80f40 CR3=0000000047a90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=202d39622605405f 73caa1436afc706d 202d39622605405f 73caa1436afc706d 202d39622605405f 73caa1436afc706d 202d39622605405f 73caa1436afc706d ZMM18=f4cf825678902783 2c4c05146ed957b3 f4cf825678902783 2c4c05146ed957b3 f4cf825678902783 2c4c05146ed957b3 f4cf825678902783 2c4c05146ed957b3 ZMM19=0027000000000000 0000000000000004 0027000000000000 0000000000000003 0027000000000000 0000000000000002 0027000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001592030002 0015900300080015 8803000400158403 0040a08082001582 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300408080820015 8203300200158003 1580040390030608 0003880322080003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000400000800 000201c708000801 49fc00786d74702f 7665642f01ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408000108000108 00060103f0208008 000e0800040176d4 01a008000c800200 ZMM25=2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 2c4c05142c4c0514 ZMM26=7890278378902783 7890278378902783 7890278378902783 7890278378902783 7890278378902783 7890278378902783 7890278378902783 7890278378902783 ZMM27=f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 f4cf8256f4cf8256 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ff260000ff260000 ff260000ff260000 ff260000ff260000 ff260000ff260000 ff260000ff260000 ff260000ff260000 ff260000ff260000 ff260000ff260000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff92000f3df35 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8de2a045 RDI=ffffffff8c163780 RBP=0000000000000000 RSP=ffffc900079ef998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8c15a8a0 R13=00000000000000a2 R14=ffffc900079efb50 R15=000000008009e160 RIP=ffffffff8187b30a RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008009e018 CR3=0000000079662000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000010102 RBX=ffff888044038000 RCX=ffffffff866a6e09 RDX=ffff88804fe08000 RSI=ffffffff866a6e12 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900005e8a18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000100000 R11=0000000000000000 R12=ffffc90000415100 R13=ffff888044042028 R14=0000000000000000 R15=ffff888042695028 RIP=ffffffff866a6e17 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008004b018 CR3=00000000636a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000002000020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557c14d84320 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f563f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffff00 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 f0cb8c6c73737363 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c8c8c8c73737372 7373260f67a6aa63 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00326963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f362e6463685f79 6d6d75642f6d726f 6674616c702f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557c14d67810 0000557c14d6a070 0000000000000031 0000000000307069 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000