last executing test programs: 9m2.455724904s ago: executing program 32 (id=3207): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}], 0x1, 0x0) 8m21.260325502s ago: executing program 33 (id=3308): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r6, 0x540a, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 8m14.42996399s ago: executing program 34 (id=3326): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 7m58.536753445s ago: executing program 5 (id=3365): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) getpid() sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x30}}, 0x40) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 7m57.997657391s ago: executing program 5 (id=3367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2042, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x5, @multicast}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x3, 0x7}, &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) gettid() syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) 7m57.775593375s ago: executing program 35 (id=3367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2042, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x5, @multicast}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x3, 0x7}, &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) gettid() syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) 7m51.676391315s ago: executing program 36 (id=3381): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7m3.008267733s ago: executing program 37 (id=3523): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) mount$fuse(0x0, 0x0, 0x0, 0x1801, &(0x7f0000000480)=ANY=[@ANYBLOB="4c643dc7fcfdad9dfa0009689579a44d1398cabd9c50890790dceafe2b550518af873094513cc39f2b0a284a0dfaa1b7e96636ad605005dd3069d8dfec30c1ab88b0c57364a6dedba5936cd40de9dd9147d66aaf37c22f0ed8fb25566a84e78b", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) 6m23.389744976s ago: executing program 38 (id=3637): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r2 = getpid() sched_setparam(r2, &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x30}}, 0x40) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 6m4.863996464s ago: executing program 39 (id=3680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[], 0x94}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) write(r4, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f", 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x10, 0x0) 5m31.615038781s ago: executing program 40 (id=3774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[], 0x94}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) write(r4, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r6}, 0x18) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x10, 0x0) 5m23.86111513s ago: executing program 0 (id=3799): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getegid() fchown(r0, 0x0, r2) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 5m22.786935826s ago: executing program 0 (id=3795): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}], 0x1, 0x0) 5m22.594475559s ago: executing program 0 (id=3796): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m21.203801775s ago: executing program 0 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 5m20.975436945s ago: executing program 0 (id=3802): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getegid() fchown(r0, 0x0, r1) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r4, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 5m19.756460191s ago: executing program 0 (id=3805): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m19.616870967s ago: executing program 41 (id=3805): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m6.820736055s ago: executing program 7 (id=3825): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getegid() prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m6.635845801s ago: executing program 5 (id=3806): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5m5.908863597s ago: executing program 5 (id=3826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 5m4.95101149s ago: executing program 5 (id=3829): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m4.937902582s ago: executing program 7 (id=3831): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x30}}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 5m3.946515959s ago: executing program 7 (id=3834): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getegid() fchown(r0, 0x0, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m2.728349523s ago: executing program 7 (id=3837): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 5m2.162706633s ago: executing program 5 (id=3838): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5m2.112054463s ago: executing program 42 (id=3838): clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5m2.002780228s ago: executing program 7 (id=3841): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getegid() fchown(r0, 0x0, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m1.661054933s ago: executing program 7 (id=3842): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 5m1.490901487s ago: executing program 43 (id=3842): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 4m51.834354317s ago: executing program 1 (id=3858): io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x11}, &(0x7f0000000000)) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}}) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x7f, 0xe3, 0x100, 0x6, 0x80, 0x10000, 0x3}, 0x9c) 4m49.318244273s ago: executing program 1 (id=3863): io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x11}, &(0x7f0000000000)) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}}) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x7f, 0xe3, 0x100, 0x6, 0x80, 0x10000, 0x3}, 0x9c) 4m48.195357863s ago: executing program 1 (id=3867): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getegid() fchown(r0, 0x0, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 4m45.983141585s ago: executing program 1 (id=3872): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 4m45.812018977s ago: executing program 1 (id=3873): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0) pipe(&(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) kexec_load(0x1, 0x0, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 4m45.044105728s ago: executing program 1 (id=3875): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 4m44.931381601s ago: executing program 44 (id=3875): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9, 0x7}}}, 0x24}}, 0x0) 4m31.050185124s ago: executing program 2 (id=3912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 4m29.05269886s ago: executing program 2 (id=3917): io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x11}, &(0x7f0000000000)) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}}) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x7f, 0xe3, 0x100, 0x6, 0x80, 0x10000, 0x3}, 0x9c) 4m27.412400055s ago: executing program 2 (id=3922): r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a300000000009"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8}, 0x94) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}], 0x1, 0x0) 4m26.3138761s ago: executing program 2 (id=3923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33", 0x4b, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x35, 0x88) bind$rds(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0xee00) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6b46, 0x80000000, 0x0, 0x0, 0x8, 0xc, "a2bba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100", [0x3]}}) 4m26.167388489s ago: executing program 2 (id=3926): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) 4m25.806340124s ago: executing program 2 (id=3932): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000500)="ab", 0x1, 0x11, 0x0, 0x0) 4m25.68141282s ago: executing program 45 (id=3932): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000500)="ab", 0x1, 0x11, 0x0, 0x0) 1m37.378053786s ago: executing program 8 (id=7101): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1m37.32784626s ago: executing program 8 (id=7104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m37.118241233s ago: executing program 8 (id=7115): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010301"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1m37.05841513s ago: executing program 8 (id=7119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000e000000200000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="07000000000000009c00110000000000000000000000000000000001ffffffff000000000000000000000000640101010000000000000000000000000a0101000000000000000000000000006c0000000000000002000a0000000000000000000000000000000001ffffffff00000000000000000000000000000000000000000000000000000000fe8800000000000000000000000000016c000000000080"], 0xec}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) 1m36.986455852s ago: executing program 8 (id=7123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1m34.868740352s ago: executing program 8 (id=7146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1m19.892663809s ago: executing program 46 (id=7146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1.250480118s ago: executing program 4 (id=9893): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='b'}) 1.250284455s ago: executing program 4 (id=9894): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) 1.179223354s ago: executing program 4 (id=9895): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) eventfd2(0x8, 0x80801) 1.179021223s ago: executing program 4 (id=9896): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x14b20000}, 0x1c) 1.090174901s ago: executing program 4 (id=9898): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) fcntl$setstatus(r5, 0x4, 0x2000) 1.089829933s ago: executing program 4 (id=9900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 179.921928ms ago: executing program 3 (id=9936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x1e, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c010000100013072abd70000000000064010100000000000000000000000000200100000000000000000000000000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff02000000000000000000000000000100000000000000000000000000000000fffffeffffffffff000000000000000004000000000000000000000000000002000000000000000002000000000000000000000000000000d105000000000000000000000000000007000000000000000900000002000000030000002dbd70000635000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x16c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 179.737887ms ago: executing program 9 (id=9937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048851}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 179.634077ms ago: executing program 6 (id=9938): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='upperdir', 0x0) 130.565507ms ago: executing program 3 (id=9939): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) 130.425092ms ago: executing program 9 (id=9940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x6}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x2c}}, 0x8) 130.357303ms ago: executing program 6 (id=9941): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000140)={0x70, 0x2d, 0x10006, 0xa, 0x2000009, 0x2c}, 0x48) 130.265088ms ago: executing program 3 (id=9942): syz_emit_ethernet(0x3b6, &(0x7f0000001c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x18, "fe90000005dc9393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 130.16537ms ago: executing program 9 (id=9943): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60182325001f2c01fe9a750000000000d34449fe04319a40cbc8f40000bbfe80000000000000000000798600000000aa"], 0x0) 128.226945ms ago: executing program 6 (id=9944): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x138}}, 0x4000040) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 60.608561ms ago: executing program 3 (id=9945): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000005000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 60.459038ms ago: executing program 6 (id=9946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}]}, 0x24}}, 0x0) 60.366136ms ago: executing program 9 (id=9947): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = fanotify_init(0x1, 0x101000) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, 0x0) 60.320323ms ago: executing program 3 (id=9948): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x300, 0x0, 0x1, 0x0, 0x808}, 0x20) 60.197413ms ago: executing program 6 (id=9949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf3308f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 506.899µs ago: executing program 3 (id=9950): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) 329.482µs ago: executing program 9 (id=9951): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000540)={0xc, 0x8, [0x401, 0x7]}) 187.346µs ago: executing program 6 (id=9952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x5) write$tun(r0, &(0x7f0000000040)={@void, @val={0x1, 0x0, 0xfa4a, 0x2, 0xb4c, 0xb}, @mpls}, 0xa) 0s ago: executing program 9 (id=9953): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f4e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x108, r7}, 0x0) landlock_restrict_self(r8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 83 comm="syz.3.6382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1238.154654][ T40] audit: type=1326 audit(1763383913.474:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.3.6382" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1238.161689][ T40] audit: type=1326 audit(1763383913.474:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.3.6382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1238.213418][ T7987] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6383'. [ 1238.216821][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6383'. [ 1239.100020][ T8010] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1239.126422][ T7621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1239.146939][ T7621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1239.153377][ T7621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1239.157302][ T7621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1239.160164][ T7621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1239.292675][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 1239.416079][ T3727] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.453893][ T8034] netem: change failed [ 1239.456153][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.459013][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.461935][ T8013] bridge_slave_0: entered allmulticast mode [ 1239.477093][ T8013] bridge_slave_0: entered promiscuous mode [ 1239.494629][ T3727] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.503409][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.506194][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.509073][ T8013] bridge_slave_1: entered allmulticast mode [ 1239.513884][ T8013] bridge_slave_1: entered promiscuous mode [ 1239.593529][ T3727] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.603518][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.610744][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.651940][ T8013] team0: Port device team_slave_0 added [ 1239.658148][ T8013] team0: Port device team_slave_1 added [ 1239.705026][ T3727] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.735059][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.741969][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.752983][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.762456][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.765199][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.774338][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.827761][ T8013] hsr_slave_0: entered promiscuous mode [ 1239.830175][ T8013] hsr_slave_1: entered promiscuous mode [ 1240.585896][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.590611][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.595890][ T3727] bond0 (unregistering): Released all slaves [ 1240.683343][ T3727] tipc: Disabling bearer [ 1240.696295][ T3727] tipc: Left network mode [ 1240.977979][ T3727] hsr_slave_0: left promiscuous mode [ 1240.981212][ T3727] hsr_slave_1: left promiscuous mode [ 1240.984293][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.987476][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.991938][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.995171][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.017667][ T3727] veth1_macvtap: left promiscuous mode [ 1241.019823][ T3727] veth0_macvtap: left promiscuous mode [ 1241.021882][ T3727] veth1_vlan: left promiscuous mode [ 1241.027269][ T3727] veth0_vlan: left promiscuous mode [ 1241.246868][ T7621] Bluetooth: hci1: command tx timeout [ 1241.934860][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 1242.029720][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 1242.852864][ T8013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1242.865864][ T8013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1242.877654][ T8013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1242.895904][ T8013] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1242.961359][ T8013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.987390][ T8013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.017525][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.019815][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.033534][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.035901][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.203692][ T8013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.292420][ T3727] IPVS: stop unused estimator thread 0... [ 1243.312275][ T7621] Bluetooth: hci1: command tx timeout [ 1243.379105][ T8013] veth0_vlan: entered promiscuous mode [ 1243.390004][ T8013] veth1_vlan: entered promiscuous mode [ 1243.409536][ T8013] veth0_macvtap: entered promiscuous mode [ 1243.414456][ T8013] veth1_macvtap: entered promiscuous mode [ 1243.422610][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.428713][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.434920][ T3727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.437977][ T3727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.441418][ T3727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.445222][ T3725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.479488][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.482440][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.496670][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.499469][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.512219][ T8930] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1243.554632][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.556764][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.573914][ T8151] kvm: user requested TSC rate below hardware speed [ 1243.674482][ T8930] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1243.679452][ T8930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.684721][ T8930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.689163][ T8930] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1243.696646][ T8930] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1243.700875][ T8930] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1243.712303][ T8930] usb 8-1: Manufacturer: syz [ 1243.742520][ T8930] usb 8-1: config 0 descriptor?? [ 1244.153827][ T8930] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 1244.174224][ T8930] appleir 0003:05AC:8243.000F: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1244.190975][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6434'. [ 1244.197632][ T8162] bridge_slave_1: left allmulticast mode [ 1244.199691][ T8162] bridge_slave_1: left promiscuous mode [ 1244.201904][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.215164][ T8162] bridge_slave_0: left allmulticast mode [ 1244.217662][ T8162] bridge_slave_0: left promiscuous mode [ 1244.220310][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.659244][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.664643][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.392273][ T7621] Bluetooth: hci1: command tx timeout [ 1245.503469][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 1245.503479][ T40] audit: type=1326 audit(1763383920.904:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.8.6445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.513221][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6446'. [ 1245.517721][ T40] audit: type=1326 audit(1763383920.914:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.8.6445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.526585][ T40] audit: type=1326 audit(1763383920.914:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.8.6445" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.535129][ T40] audit: type=1326 audit(1763383920.914:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.8.6445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.543729][ T40] audit: type=1326 audit(1763383920.914:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.8.6445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.701901][ T40] audit: type=1326 audit(1763383921.094:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.6452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.710470][ T40] audit: type=1326 audit(1763383921.094:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.6452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.718776][ T40] audit: type=1326 audit(1763383921.094:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.6452" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.726004][ T40] audit: type=1326 audit(1763383921.094:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.6452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1245.732625][ T40] audit: type=1326 audit(1763383921.094:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.6452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1246.121440][ T8239] netlink: 'syz.8.6469': attribute type 4 has an invalid length. [ 1246.217246][ T8844] usb 8-1: USB disconnect, device number 17 [ 1246.572004][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1247.482239][ T7621] Bluetooth: hci1: command tx timeout [ 1248.568094][ T8396] 9pnet_fd: Insufficient options for proto=fd [ 1249.718111][ T8457] netlink: 'syz.8.6554': attribute type 13 has an invalid length. [ 1250.420707][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6580'. [ 1252.127106][ T8572] netlink: 'syz.9.6604': attribute type 4 has an invalid length. [ 1252.137934][ T8572] netlink: 'syz.9.6604': attribute type 4 has an invalid length. [ 1252.191002][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 1252.191013][ T40] audit: type=1326 audit(1763383927.584:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.204283][ T40] audit: type=1326 audit(1763383927.604:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.215171][ T40] audit: type=1326 audit(1763383927.604:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.226949][ T40] audit: type=1326 audit(1763383927.604:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.239050][ T40] audit: type=1326 audit(1763383927.604:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.248235][ T40] audit: type=1326 audit(1763383927.604:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.282245][ T40] audit: type=1326 audit(1763383927.604:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.289034][ T40] audit: type=1326 audit(1763383927.604:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.6.6605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.508480][ T40] audit: type=1326 audit(1763383927.911:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.6.6617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.520676][ T40] audit: type=1326 audit(1763383927.911:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.6.6617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 1252.582573][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6608'. [ 1253.187816][ T8644] overlayfs: missing 'lowerdir' [ 1255.036194][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6667'. [ 1255.077830][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6667'. [ 1255.232941][ T8743] sch_fq: defrate 0 ignored. [ 1255.281933][ T8747] binder: Unknown parameter 'context' [ 1255.555850][ T8844] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 1255.664289][ T8774] binder: 8773:8774 ioctl c0306201 80000080 returned -14 [ 1255.726618][ T8844] usb 13-1: Using ep0 maxpacket: 16 [ 1255.730665][ T8844] usb 13-1: config 1 has an invalid interface number: 64 but max is 0 [ 1255.735286][ T8844] usb 13-1: config 1 has no interface number 0 [ 1255.738107][ T8844] usb 13-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 1255.745445][ T8844] usb 13-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 1255.749429][ T8844] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.753362][ T8844] usb 13-1: Product: syz [ 1255.755285][ T8844] usb 13-1: Manufacturer: syz [ 1255.757406][ T8844] usb 13-1: SerialNumber: syz [ 1255.973278][ T8844] option 13-1:1.64: GSM modem (1-port) converter detected [ 1255.979527][ T8844] usb 13-1: USB disconnect, device number 7 [ 1255.982977][ T8844] option 13-1:1.64: device disconnected [ 1256.180542][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1256.185714][ T8820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1256.189182][ T8820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1256.367272][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1257.449472][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.453022][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.525503][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.534407][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.615928][ T8896] XFS (nbd3): SB validate failed with error -5. [ 1257.696848][ T3725] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.701615][ T3769] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.705261][ T3769] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.709095][ T3769] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.810328][ T40] kauditd_printk_skb: 795 callbacks suppressed [ 1257.810344][ T40] audit: type=1326 audit(1763383933.211:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.9.6743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.820263][ T40] audit: type=1326 audit(1763383933.211:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.9.6743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.827966][ T40] audit: type=1326 audit(1763383933.211:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.9.6743" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.836845][ T40] audit: type=1326 audit(1763383933.211:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.9.6743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.847194][ T40] audit: type=1326 audit(1763383933.211:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.9.6743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.860287][ T40] audit: type=1326 audit(1763383933.261:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.9.6744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.869584][ T40] audit: type=1326 audit(1763383933.261:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.9.6744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.878286][ T40] audit: type=1326 audit(1763383933.271:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.9.6744" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.886850][ T40] audit: type=1326 audit(1763383933.271:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.9.6744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1257.896144][ T40] audit: type=1326 audit(1763383933.271:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.9.6744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1258.044837][ T8932] overlayfs: overlapping lowerdir path [ 1258.098661][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6754'. [ 1258.495715][ T8965] netlink: 'syz.9.6766': attribute type 4 has an invalid length. [ 1258.501314][ T8965] netlink: 'syz.9.6766': attribute type 4 has an invalid length. [ 1258.563766][ T7716] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 1258.723995][ T7716] usb 13-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1258.729083][ T7716] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1258.739190][ T7716] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1258.745937][ T7716] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1258.749951][ T7716] usb 13-1: SerialNumber: syz [ 1258.795417][ T8989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1258.912581][T16051] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1258.959170][ T7716] usb 13-1: USB disconnect, device number 8 [ 1259.073998][T16051] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.078763][T16051] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.083265][T16051] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1259.088875][T16051] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1259.092941][T16051] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.097981][T16051] usb 11-1: config 0 descriptor?? [ 1259.509698][T16051] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 1259.522717][T16051] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1259.989432][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1260.402189][ T9029] netlink: 'syz.9.6793': attribute type 4 has an invalid length. [ 1260.505165][ T9041] netlink: 'syz.8.6798': attribute type 4 has an invalid length. [ 1260.508569][ T9041] netlink: 'syz.8.6798': attribute type 5 has an invalid length. [ 1260.511957][ T9041] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.6798'. [ 1260.576047][ T9048] lo: Caught tx_queue_len zero misconfig [ 1260.774283][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6813'. [ 1260.777506][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.835699][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.839996][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6815'. [ 1261.379272][ T9094] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1261.513655][ T9097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1261.593466][T16051] usb 11-1: USB disconnect, device number 7 [ 1262.470421][ T9115] netlink: 'syz.6.6829': attribute type 3 has an invalid length. [ 1263.220703][ T9132] loop5: detected capacity change from 0 to 7 [ 1263.351490][ T9132] Dev loop5: unable to read RDB block 7 [ 1263.353914][ T9132] loop5: unable to read partition table [ 1263.356603][ T9132] loop5: partition table beyond EOD, truncated [ 1263.359669][ T9132] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1263.435770][ T9136] tunl0: Caught tx_queue_len zero misconfig [ 1263.469282][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 1263.469297][ T40] audit: type=1326 audit(1763383938.871:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.8.6840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1263.482011][ T40] audit: type=1326 audit(1763383938.871:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.8.6840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1263.492044][ T40] audit: type=1326 audit(1763383938.871:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.8.6840" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1263.501969][ T40] audit: type=1326 audit(1763383938.871:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.8.6840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1263.509724][ T40] audit: type=1326 audit(1763383938.871:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.8.6840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 1263.720373][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6845'. [ 1263.731522][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6845'. [ 1263.737621][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6845'. [ 1263.761196][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6845'. [ 1264.649389][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6851'. [ 1264.663044][ T9175] bridge_slave_1: left allmulticast mode [ 1264.666078][ T9175] bridge_slave_1: left promiscuous mode [ 1264.668799][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.696181][ T9175] bridge_slave_0: left allmulticast mode [ 1264.698776][ T9175] bridge_slave_0: left promiscuous mode [ 1264.715304][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.483021][ T9202] syzkaller0: entered promiscuous mode [ 1265.485237][ T9202] syzkaller0: entered allmulticast mode [ 1265.571998][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6867'. [ 1265.665035][ T9211] overlayfs: missing 'lowerdir' [ 1265.678753][ T40] audit: type=1326 audit(1763383943.073:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.3.6870" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1265.714282][ T9207] team0 (unregistering): Port device team_slave_0 removed [ 1265.727693][ T9207] team0 (unregistering): Port device team_slave_1 removed [ 1265.733201][ T40] audit: type=1326 audit(1763383943.123:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.3.6870" exe="/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7fd4579 code=0x0 [ 1266.514866][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1266.835490][ T9239] overlayfs: failed to resolve './bus': -2 [ 1266.923161][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.926839][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.191493][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.202499][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.273823][ T9257] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6887'. [ 1267.277817][ T9257] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6887'. [ 1267.281391][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6887'. [ 1267.287116][ T3725] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.290287][ T3725] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.293430][ T3725] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.296771][ T3725] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.779697][ T40] audit: type=1326 audit(1763383946.176:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.6890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1267.791370][ T40] audit: type=1326 audit(1763383946.176:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.6890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1267.800541][ T40] audit: type=1326 audit(1763383946.176:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.6890" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1268.211215][ T9296] cgroup: Invalid name [ 1268.886990][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6917'. [ 1268.996314][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 1268.996330][ T40] audit: type=1326 audit(1763383947.396:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.008127][ T40] audit: type=1326 audit(1763383947.396:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.018897][ T40] audit: type=1326 audit(1763383947.396:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.029778][ T40] audit: type=1326 audit(1763383947.396:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.039448][ T40] audit: type=1326 audit(1763383947.396:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.049306][ T40] audit: type=1326 audit(1763383947.396:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.059786][ T40] audit: type=1326 audit(1763383947.396:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.069887][ T40] audit: type=1326 audit(1763383947.396:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.080437][ T40] audit: type=1326 audit(1763383947.396:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.091346][ T40] audit: type=1326 audit(1763383947.396:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.6924" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1269.677714][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6940'. [ 1269.683085][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6940'. [ 1270.330507][ T9428] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6956'. [ 1270.451458][ T9439] netlink: 'syz.8.6964': attribute type 6 has an invalid length. [ 1270.483923][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6957'. [ 1271.071177][ T9495] netlink: 'syz.3.6989': attribute type 4 has an invalid length. [ 1271.185775][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1271.215164][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.218598][ T9501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.223617][ T9501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.490762][ T9612] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7039'. [ 1274.018312][ T40] kauditd_printk_skb: 333 callbacks suppressed [ 1274.018324][ T40] audit: type=1326 audit(1763383952.416:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.028401][ T40] audit: type=1326 audit(1763383952.416:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.036364][ T40] audit: type=1326 audit(1763383952.416:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.043854][ T40] audit: type=1326 audit(1763383952.426:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.050854][ T40] audit: type=1326 audit(1763383952.426:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.058325][ T40] audit: type=1326 audit(1763383952.426:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.065565][ T40] audit: type=1326 audit(1763383952.426:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.072787][ T40] audit: type=1326 audit(1763383952.426:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.079440][ T40] audit: type=1326 audit(1763383952.426:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1274.087575][ T40] audit: type=1326 audit(1763383952.426:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.7056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1275.452991][ T9721] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1275.501081][ T9726] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1276.142786][ T9774] overlayfs: failed to resolve './file0': -2 [ 1276.193323][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7115'. [ 1276.203849][ T9782] netlink: 392 bytes leftover after parsing attributes in process `syz.6.7116'. [ 1276.252994][ T9790] overlayfs: missing 'lowerdir' [ 1276.296424][ T3777] Bluetooth: hci2: Frame reassembly failed (-84) [ 1276.369065][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7124'. [ 1276.398551][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.403074][ T9802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.410362][ T9802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1277.540550][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7143'. [ 1277.639849][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.694779][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.698992][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.352845][ T5946] Bluetooth: hci2: command 0x1003 tx timeout [ 1278.352858][ T7621] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1280.715814][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7161'. [ 1280.813052][ T9913] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7166'. [ 1281.085762][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 1281.085773][ T40] audit: type=1326 audit(1763383959.486:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.9.7171" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d579 code=0x0 [ 1281.100382][ T9919] infiniband syz1: set active [ 1281.113213][ T9919] infiniband syz1: added syz_tun [ 1281.164147][ T9919] RDS/IB: syz1: added [ 1281.166665][ T9919] smc: adding ib device syz1 with port count 1 [ 1281.169612][ T9919] smc: ib device syz1 port 1 has no pnetid [ 1281.555182][ T9932] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1281.610320][ T9934] netlink: 500 bytes leftover after parsing attributes in process `syz.6.7174'. [ 1281.862063][ T9945] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7178'. [ 1282.077372][ T9951] fuse: Unknown parameter 'r' [ 1282.141131][ T9950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1282.143838][ T9950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1282.151856][ T9950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1282.156749][ T9950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1282.158772][ T9950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1282.162501][ T9950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1282.178272][ T9950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1282.180870][ T9950] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1282.187394][ T9950] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1283.002362][ T8930] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1283.087073][ T9995] : renamed from team_slave_1 [ 1283.153903][ T8930] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1283.156915][ T8930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.160737][ T8930] usb 8-1: config 0 descriptor?? [ 1283.164105][ T8930] asix 8-1:0.0: probe with driver asix failed with error -22 [ 1283.815564][T10000] overlayfs: missing 'lowerdir' [ 1284.122943][ T7621] Bluetooth: hci4: command 0x0c1a tx timeout [ 1284.192216][ T7621] Bluetooth: hci1: command 0x0405 tx timeout [ 1284.192564][ T6950] Bluetooth: hci3: command 0x0c1a tx timeout [ 1285.771269][ T8930] usb 8-1: USB disconnect, device number 18 [ 1286.130469][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7238'. [ 1286.183429][T10088] netlink: 'syz.9.7241': attribute type 11 has an invalid length. [ 1286.192255][ T6950] Bluetooth: hci4: command 0x0c1a tx timeout [ 1286.272362][ T6950] Bluetooth: hci1: command 0x0405 tx timeout [ 1286.272416][ T7621] Bluetooth: hci3: command 0x0c1a tx timeout [ 1286.359292][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7255'. [ 1286.651699][T10147] fuse: Bad value for 'fd' [ 1286.687099][T10149] fuse: Bad value for 'fd' [ 1286.772620][T10156] netlink: 208 bytes leftover after parsing attributes in process `syz.6.7274'. [ 1287.065153][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7287'. [ 1287.525759][T10215] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7302'. [ 1287.529418][T10215] netlink: 'syz.6.7302': attribute type 2 has an invalid length. [ 1287.534255][T10215] netlink: 'syz.6.7302': attribute type 2 has an invalid length. [ 1287.536974][T10215] netlink: 'syz.6.7302': attribute type 1 has an invalid length. [ 1287.539879][T10215] netlink: 'syz.6.7302': attribute type 1 has an invalid length. [ 1287.542675][T10215] netlink: 'syz.6.7302': attribute type 1 has an invalid length. [ 1288.282459][ T7621] Bluetooth: hci4: command 0x0c1a tx timeout [ 1288.352394][ T7621] Bluetooth: hci3: command 0x0c1a tx timeout [ 1288.364696][ T7621] Bluetooth: hci1: command 0x0405 tx timeout [ 1288.602400][T14548] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 1288.648368][T10255] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1288.763527][T14548] usb 14-1: Using ep0 maxpacket: 16 [ 1288.770551][T14548] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.776000][T14548] usb 14-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1288.780599][T14548] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.786670][T14548] usb 14-1: config 0 descriptor?? [ 1289.039136][T10276] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.7329'. [ 1289.145994][ T40] audit: type=1326 audit(1763383967.546:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.6.7332" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 1289.916885][T26819] usb 14-1: USB disconnect, device number 14 [ 1290.436769][T10327] pim6reg1: entered promiscuous mode [ 1290.439204][T10327] pim6reg1: entered allmulticast mode [ 1293.613154][ T6950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.617116][ T6950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.620283][ T6950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.625681][ T6950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1293.629805][ T6950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1293.875649][T10488] chnl_net:caif_netlink_parms(): no params data found [ 1293.973371][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.976285][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.979670][T10488] bridge_slave_0: entered allmulticast mode [ 1293.984553][T10488] bridge_slave_0: entered promiscuous mode [ 1293.989320][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.992695][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.996085][T10488] bridge_slave_1: entered allmulticast mode [ 1294.000686][T10488] bridge_slave_1: entered promiscuous mode [ 1294.061042][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.070601][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.131937][T10488] team0: Port device team_slave_0 added [ 1294.137285][T10488] team0: Port device team_slave_1 added [ 1294.191346][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.194095][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.204925][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.210177][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.213217][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.225818][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.295220][T10488] hsr_slave_0: entered promiscuous mode [ 1294.297766][T10488] hsr_slave_1: entered promiscuous mode [ 1294.299953][T10488] debugfs: 'hsr0' already exists in 'hsr' [ 1294.301877][T10488] Cannot create hsr debugfs directory [ 1294.880757][T10488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1294.892690][T10488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1294.898936][T10488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1294.903918][T10488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1294.970157][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.981578][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.986952][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.989728][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.997975][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.000716][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.121756][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.172208][ T8930] usb 14-1: new full-speed USB device number 15 using dummy_hcd [ 1295.294311][T10488] veth0_vlan: entered promiscuous mode [ 1295.302007][T10488] veth1_vlan: entered promiscuous mode [ 1295.324235][T10488] veth0_macvtap: entered promiscuous mode [ 1295.330327][T10488] veth1_macvtap: entered promiscuous mode [ 1295.338279][ T8930] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1295.342564][ T8930] usb 14-1: not running at top speed; connect to a high speed hub [ 1295.347061][ T8930] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.351451][ T8930] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1295.353314][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.356170][ T8930] usb 14-1: config 1 has no interface number 1 [ 1295.360075][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.360595][ T8930] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1295.369515][ T8930] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.372435][ T3777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.377699][ T8930] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1295.378663][ T3777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.381992][ T8930] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.389413][ T8930] usb 14-1: Product: syz [ 1295.390253][ T3777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.391281][ T8930] usb 14-1: Manufacturer: syz [ 1295.396583][ T8930] usb 14-1: SerialNumber: syz [ 1295.399441][ T3777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.445903][ T3756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.448856][ T3756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.467319][ T8207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.470165][ T8207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.573071][T10645] binder: 10643:10645 ioctl 4018620d 0 returned -22 [ 1295.650378][ T8930] usb 14-1: USB disconnect, device number 15 [ 1295.690435][ T825] udevd[825]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1295.712428][ T7621] Bluetooth: hci2: command tx timeout [ 1296.094797][T10695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7485'. [ 1296.204426][T10711] netlink: 'syz.9.7491': attribute type 16 has an invalid length. [ 1296.207225][T10711] netlink: 63874 bytes leftover after parsing attributes in process `syz.9.7491'. [ 1296.361722][T10727] netlink: 328 bytes leftover after parsing attributes in process `syz.3.7498'. [ 1296.553839][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1297.792385][ T7621] Bluetooth: hci2: command tx timeout [ 1299.287371][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7603'. [ 1299.302608][T10961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7603'. [ 1299.306337][T10961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7603'. [ 1299.308918][T10957] netlink: 'syz.9.7601': attribute type 1 has an invalid length. [ 1299.390280][T10968] bpf: Bad value for 'mode' [ 1299.606940][T10997] usb 1-1: USB disconnect, device number 2 [ 1299.626219][T10994] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1299.872590][ T7621] Bluetooth: hci2: command tx timeout [ 1299.893044][ T40] audit: type=1326 audit(1763383978.296:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.4.7633" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x0 [ 1299.916133][T11026] wg1: entered promiscuous mode [ 1299.917797][T11026] wg1: entered allmulticast mode [ 1300.078831][T11048] loop2: detected capacity change from 0 to 7 [ 1300.084814][ T825] Dev loop2: unable to read RDB block 7 [ 1300.086866][ T825] loop2: AHDI p1 p2 p3 [ 1300.095874][ T825] loop2: partition table partially beyond EOD, truncated [ 1300.098329][ T825] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1300.100581][ T825] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1300.122272][T11048] Dev loop2: unable to read RDB block 7 [ 1300.124846][T11048] loop2: AHDI p1 p2 p3 [ 1300.126739][T11048] loop2: partition table partially beyond EOD, truncated [ 1300.137600][T11048] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1300.140882][T11048] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1300.504802][T11096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1301.859880][T11191] Bluetooth: MGMT ver 1.23 [ 1301.952329][ T7621] Bluetooth: hci2: command tx timeout [ 1301.972831][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7716'. [ 1302.312388][T21869] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1302.463046][T21869] usb 8-1: Using ep0 maxpacket: 16 [ 1302.467515][T21869] usb 8-1: config index 0 descriptor too short (expected 292, got 36) [ 1302.471063][T21869] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 1302.474644][T21869] usb 8-1: config 0 has no interface number 0 [ 1302.477347][T21869] usb 8-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1302.482548][T21869] usb 8-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1302.489970][T21869] usb 8-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1302.494202][T21869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.498366][T21869] usb 8-1: Product: syz [ 1302.500328][T21869] usb 8-1: Manufacturer: syz [ 1302.502676][T21869] usb 8-1: SerialNumber: syz [ 1302.507527][T21869] usb 8-1: config 0 descriptor?? [ 1302.511191][T11204] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1303.080908][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7757'. [ 1303.085630][T11284] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7757'. [ 1303.088775][T11284] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7757'. [ 1305.004797][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.006896][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.099694][T26819] usb 8-1: USB disconnect, device number 19 [ 1305.112320][ T40] audit: type=1326 audit(1763383983.506:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.9.7816" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 1305.428353][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1305.493354][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7836'. [ 1305.769318][T11495] loop2: detected capacity change from 0 to 7 [ 1305.772541][T11495] Dev loop2: unable to read RDB block 7 [ 1305.774879][T11495] loop2: unable to read partition table [ 1305.777290][T11495] loop2: partition table beyond EOD, truncated [ 1305.780441][T11495] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1305.950562][T11516] netlink: 392 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1306.606740][T11556] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7878'. [ 1306.610667][T11556] gretap0: entered promiscuous mode [ 1306.615752][T11556] netlink: 'syz.9.7878': attribute type 1 has an invalid length. [ 1306.618642][T11556] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7878'. [ 1306.752534][T21869] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1306.861340][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7887'. [ 1306.902945][T21869] usb 9-1: Using ep0 maxpacket: 8 [ 1306.907349][T21869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.910741][T21869] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1306.915226][T21869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.921439][T21869] usb 9-1: config 0 descriptor?? [ 1307.078123][T11594] bridge0: entered allmulticast mode [ 1307.084161][T11594] bridge_slave_1: left allmulticast mode [ 1307.086891][T11594] bridge_slave_1: left promiscuous mode [ 1307.091262][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.101523][T11594] bridge_slave_0: left allmulticast mode [ 1307.104491][T11594] bridge_slave_0: left promiscuous mode [ 1307.107222][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.129035][T21869] usb 9-1: USB disconnect, device number 2 [ 1307.268781][T11597] batadv_slave_1: entered promiscuous mode [ 1307.272367][T11597] __nla_validate_parse: 2 callbacks suppressed [ 1307.272382][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7898'. [ 1307.320826][T11597] batadv_slave_1 (unregistering): left promiscuous mode [ 1307.323308][T11597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.705348][T11615] loop2: detected capacity change from 0 to 7 [ 1307.710092][ T825] Dev loop2: unable to read RDB block 7 [ 1307.713389][ T825] loop2: unable to read partition table [ 1307.716571][ T825] loop2: partition table beyond EOD, truncated [ 1307.721703][T11615] Dev loop2: unable to read RDB block 7 [ 1307.725952][T11615] loop2: unable to read partition table [ 1307.728617][T11615] loop2: partition table beyond EOD, truncated [ 1307.733703][T11615] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1308.004152][T11645] bpf: Bad value for 'mode' [ 1308.098233][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7927'. [ 1308.133774][T11662] loop2: detected capacity change from 0 to 7 [ 1308.137649][T11662] Dev loop2: unable to read RDB block 7 [ 1308.139625][T11662] loop2: unable to read partition table [ 1308.142327][T11662] loop2: partition table beyond EOD, truncated [ 1308.145548][T11662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1308.151618][T11666] Illegal XDP return value 4294967274 on prog (id 1433) dev syz_tun, expect packet loss! [ 1308.264403][T11680] netlink: 304 bytes leftover after parsing attributes in process `syz.6.7938'. [ 1308.893801][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7972'. [ 1308.899893][T11754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1309.064680][T11762] fuse: Unknown parameter '00000000000000000000' [ 1309.334849][T11817] dns_resolver: Unsupported content type (6) [ 1310.177508][T11887] loop2: detected capacity change from 0 to 7 [ 1310.181104][T11887] Dev loop2: unable to read RDB block 7 [ 1310.183168][T11887] loop2: unable to read partition table [ 1310.185812][T11887] loop2: partition table beyond EOD, truncated [ 1310.188001][T11887] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1310.238066][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 1310.241962][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8033'. [ 1311.228185][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1311.591478][T11967] netlink: 'syz.3.8070': attribute type 1 has an invalid length. [ 1311.750726][T11965] fuse: Bad value for 'fd' [ 1311.757913][T11982] loop2: detected capacity change from 0 to 7 [ 1311.761052][T11982] Dev loop2: unable to read RDB block 7 [ 1311.763190][T11982] loop2: unable to read partition table [ 1311.765466][T11982] loop2: partition table beyond EOD, truncated [ 1311.767753][T11982] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1312.461631][T12053] loop2: detected capacity change from 0 to 7 [ 1312.465890][T12053] Dev loop2: unable to read RDB block 7 [ 1312.468512][T12053] loop2: unable to read partition table [ 1312.471533][T12053] loop2: partition table beyond EOD, truncated [ 1312.475914][T12053] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1312.517891][T12056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8112'. [ 1312.598229][ T40] audit: type=1326 audit(1763383991.996:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.606658][ T40] audit: type=1326 audit(1763383991.996:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.615608][ T40] audit: type=1326 audit(1763383991.996:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.626278][ T40] audit: type=1326 audit(1763383991.996:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.633877][ T40] audit: type=1326 audit(1763383992.006:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.648130][ T40] audit: type=1326 audit(1763383992.046:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.655506][ T40] audit: type=1326 audit(1763383992.046:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.664867][ T40] audit: type=1326 audit(1763383992.046:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.674724][ T40] audit: type=1326 audit(1763383992.056:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.684360][ T40] audit: type=1326 audit(1763383992.056:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.3.8117" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1312.794740][T12078] loop2: detected capacity change from 0 to 7 [ 1312.797327][T12078] Dev loop2: unable to read RDB block 7 [ 1312.799164][T12078] loop2: unable to read partition table [ 1312.802953][T12078] loop2: partition table beyond EOD, truncated [ 1312.806196][T12078] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1313.878655][T12209] loop2: detected capacity change from 0 to 7 [ 1313.882256][T12209] Dev loop2: unable to read RDB block 7 [ 1313.884294][T12209] loop2: unable to read partition table [ 1313.886354][T12209] loop2: partition table beyond EOD, truncated [ 1313.897341][T12209] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1313.905419][ T5349] Dev loop2: unable to read RDB block 7 [ 1313.916464][ T5349] loop2: unable to read partition table [ 1313.918479][ T5349] loop2: partition table beyond EOD, truncated [ 1314.259304][T12245] netlink: 'syz.9.8198': attribute type 4 has an invalid length. [ 1314.262820][T12245] netlink: 'syz.9.8198': attribute type 5 has an invalid length. [ 1314.266172][T12245] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8198'. [ 1314.585990][T12268] netlink: 27 bytes leftover after parsing attributes in process `syz.9.8208'. [ 1314.749954][T12276] loop2: detected capacity change from 0 to 7 [ 1314.754060][ T825] Dev loop2: unable to read RDB block 7 [ 1314.755966][ T825] loop2: unable to read partition table [ 1314.758135][ T825] loop2: partition table beyond EOD, truncated [ 1314.762058][T12276] Dev loop2: unable to read RDB block 7 [ 1314.764403][T12276] loop2: unable to read partition table [ 1314.766334][T12276] loop2: partition table beyond EOD, truncated [ 1314.768619][T12276] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1315.041893][T21869] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1315.099321][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8217'. [ 1315.199649][T21869] usb 8-1: Using ep0 maxpacket: 8 [ 1315.205156][T21869] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1315.208704][T21869] usb 8-1: config 0 has no interface number 0 [ 1315.210155][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8222'. [ 1315.214197][T21869] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1315.220518][T21869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.223971][T21869] usb 8-1: Product: syz [ 1315.225732][T21869] usb 8-1: Manufacturer: syz [ 1315.227526][T21869] usb 8-1: SerialNumber: syz [ 1315.234421][T21869] usb 8-1: config 0 descriptor?? [ 1315.239548][T26819] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1315.357034][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8227'. [ 1315.399509][T26819] usb 9-1: Using ep0 maxpacket: 16 [ 1315.403556][T26819] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.407048][T26819] usb 9-1: config 0 has no interfaces? [ 1315.410805][T26819] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1315.413819][T26819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.416415][T26819] usb 9-1: Product: syz [ 1315.417801][T26819] usb 9-1: Manufacturer: syz [ 1315.419469][T26819] usb 9-1: SerialNumber: syz [ 1315.422681][T26819] usb 9-1: config 0 descriptor?? [ 1315.445040][T21869] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1315.448301][T21869] uvcvideo 8-1:0.31: No valid video chain found. [ 1315.454259][T21869] usb 8-1: USB disconnect, device number 20 [ 1315.528027][T12318] fuse: Invalid rootmode [ 1315.628397][T26819] usb 9-1: USB disconnect, device number 3 [ 1315.841861][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8238'. [ 1316.210383][T12360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1316.213450][T12360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1316.216295][T12360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1316.221145][T12360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1316.223669][T12360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1316.227561][T12360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1316.851072][T12400] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1316.853349][T12400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1316.855616][T12400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1316.857836][T12400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1317.409669][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8289'. [ 1317.762777][T12486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1317.882638][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 1317.882655][ T40] audit: type=1326 audit(1763383997.286:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.9.8309" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 1317.939572][T13787] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1317.952651][T12502] loop2: detected capacity change from 0 to 7 [ 1317.955332][T12502] Dev loop2: unable to read RDB block 7 [ 1317.957221][T12502] loop2: unable to read partition table [ 1317.959151][T12502] loop2: partition table beyond EOD, truncated [ 1317.962820][T12502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1318.090037][T13787] usb 9-1: Using ep0 maxpacket: 16 [ 1318.098714][T13787] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1318.101773][T13787] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.105122][T13787] usb 9-1: config 0 has no interface number 0 [ 1318.108749][T13787] usb 9-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1318.112221][T13787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.115149][T13787] usb 9-1: Product: syz [ 1318.116579][T13787] usb 9-1: Manufacturer: syz [ 1318.118255][T13787] usb 9-1: SerialNumber: syz [ 1318.122760][T13787] usb 9-1: config 0 descriptor?? [ 1318.127205][T13787] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1318.129861][T13787] uvcvideo 9-1:0.105: No valid video chain found. [ 1318.333100][ T6383] usb 9-1: USB disconnect, device number 4 [ 1318.435060][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8331'. [ 1318.885443][T12577] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1318.910642][ T7621] Bluetooth: hci2: command 0x0405 tx timeout [ 1318.913334][ T7621] Bluetooth: hci1: command 0x0405 tx timeout [ 1318.915831][ T7621] Bluetooth: hci3: command 0x0c1a tx timeout [ 1318.918391][ T7621] Bluetooth: hci4: command 0x0c1a tx timeout [ 1318.962266][T12581] netlink: 'syz.9.8346': attribute type 13 has an invalid length. [ 1320.022343][T12641] 9pnet_fd: Insufficient options for proto=fd [ 1320.555428][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8400'. [ 1320.685168][T12715] netlink: 392 bytes leftover after parsing attributes in process `syz.3.8407'. [ 1320.824103][T12731] loop5: detected capacity change from 0 to 7 [ 1320.922551][T12740] loop2: detected capacity change from 0 to 7 [ 1320.926045][T12740] Dev loop2: unable to read RDB block 7 [ 1320.928374][T12740] loop2: unable to read partition table [ 1320.930481][T12740] loop2: partition table beyond EOD, truncated [ 1320.932589][T12740] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1320.953279][T12731] Dev loop5: unable to read RDB block 7 [ 1320.955867][T12731] loop5: unable to read partition table [ 1320.958543][T12731] loop5: partition table beyond EOD, truncated [ 1320.961499][T12731] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1320.990981][ T7621] Bluetooth: hci2: command 0x0405 tx timeout [ 1321.008479][ T40] audit: type=1326 audit(1763384000.406:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.3.8423" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1321.238115][T12761] netlink: 'syz.6.8429': attribute type 4 has an invalid length. [ 1321.241872][T12761] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8429'. [ 1321.833335][ T40] audit: type=1326 audit(1763384001.236:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.4.8434" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x0 [ 1322.507385][T12870] 9pnet_fd: Insufficient options for proto=fd [ 1322.878129][ T4838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1322.885626][ T4838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1322.889767][ T4838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1322.893775][ T4838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1322.901681][ T4838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1322.979449][T12913] futex_wake_op: syz.4.8496 tries to shift op by 32; fix this program [ 1323.069504][ T6950] Bluetooth: hci2: command 0x0405 tx timeout [ 1323.173627][T12929] 9pnet_fd: Insufficient options for proto=fd [ 1323.177225][ T3777] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.194766][T12931] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8505'. [ 1323.277415][ T3777] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.361000][ T3777] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.378990][T12903] chnl_net:caif_netlink_parms(): no params data found [ 1323.397967][T12960] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8517'. [ 1323.454484][ T3777] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.489779][T12974] lo: Caught tx_queue_len zero misconfig [ 1323.546970][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.550615][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.554018][T12903] bridge_slave_0: entered allmulticast mode [ 1323.558582][T12903] bridge_slave_0: entered promiscuous mode [ 1323.569686][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.572443][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.574877][T12903] bridge_slave_1: entered allmulticast mode [ 1323.577734][T12903] bridge_slave_1: entered promiscuous mode [ 1323.622115][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.641648][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.708858][T12903] team0: Port device team_slave_0 added [ 1323.713152][T12903] team0: Port device team_slave_1 added [ 1324.046446][ T3777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.051405][ T3777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.056540][ T3777] bond0 (unregistering): Released all slaves [ 1324.147966][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.151311][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.165296][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.205352][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.208473][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.219792][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.289570][T12903] hsr_slave_0: entered promiscuous mode [ 1324.292003][T12903] hsr_slave_1: entered promiscuous mode [ 1324.294293][T12903] debugfs: 'hsr0' already exists in 'hsr' [ 1324.296876][T12903] Cannot create hsr debugfs directory [ 1324.478166][ T3777] hsr_slave_0: left promiscuous mode [ 1324.485593][ T3777] hsr_slave_1: left promiscuous mode [ 1324.487820][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.491465][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.495348][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.498385][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.531556][ T3777] veth1_macvtap: left promiscuous mode [ 1324.533417][ T3777] veth0_macvtap: left promiscuous mode [ 1324.535713][ T3777] veth1_vlan: left promiscuous mode [ 1324.538050][ T3777] veth0_vlan: left promiscuous mode [ 1324.989541][ T7621] Bluetooth: hci5: command tx timeout [ 1325.154529][ T7621] Bluetooth: hci2: command 0x0405 tx timeout [ 1325.455760][T13045] dns_resolver: Unsupported content type (6) [ 1326.163820][T13065] loop2: detected capacity change from 0 to 7 [ 1326.167851][T13065] Dev loop2: unable to read RDB block 7 [ 1326.171606][T13065] loop2: unable to read partition table [ 1326.174729][T13065] loop2: partition table beyond EOD, truncated [ 1326.177581][T13065] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1327.079683][ T7621] Bluetooth: hci5: command tx timeout [ 1327.224347][T12903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1327.235884][T12903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1327.244286][T12903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1327.256304][T12903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1327.327453][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.368178][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.373508][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.375886][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.383414][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.386327][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.532409][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.675763][T13160] netlink: 'syz.9.8588': attribute type 13 has an invalid length. [ 1327.678355][T13160] netlink: 'syz.9.8588': attribute type 17 has an invalid length. [ 1327.795283][T13160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1327.819648][T13165] netlink: 'syz.3.8584': attribute type 12 has an invalid length. [ 1327.835151][T12903] veth0_vlan: entered promiscuous mode [ 1327.845255][T12903] veth1_vlan: entered promiscuous mode [ 1327.871953][T12903] veth0_macvtap: entered promiscuous mode [ 1327.883177][T12903] veth1_macvtap: entered promiscuous mode [ 1327.895314][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.900425][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.913130][ T3739] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.916545][ T3739] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.933443][ T3739] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.937185][ T3739] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.971579][ T3756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.974306][ T3756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.987684][ T3756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.991219][ T3756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.307677][ T6950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1328.314775][ T6950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1328.318832][ T6950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1328.322064][ T6950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1328.328503][ T6950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1328.711920][T13186] chnl_net:caif_netlink_parms(): no params data found [ 1328.820467][T13217] 9pnet_fd: Insufficient options for proto=fd [ 1328.892891][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.903639][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.906783][T13186] bridge_slave_0: entered allmulticast mode [ 1328.911037][T13186] bridge_slave_0: entered promiscuous mode [ 1328.917235][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.921379][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.924528][T13186] bridge_slave_1: entered allmulticast mode [ 1328.928395][T13186] bridge_slave_1: entered promiscuous mode [ 1328.973520][ T7716] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1329.042016][T13232] loop2: detected capacity change from 0 to 7 [ 1329.045280][T13232] Dev loop2: unable to read RDB block 7 [ 1329.047211][T13186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.049278][T13232] loop2: AHDI p1 p2 p3 [ 1329.057810][T13232] loop2: partition table partially beyond EOD, truncated [ 1329.061256][T13232] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1329.063008][T13186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.063498][T13232] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1329.138591][T13186] team0: Port device team_slave_0 added [ 1329.139502][ T7716] usb 9-1: Using ep0 maxpacket: 16 [ 1329.142594][T13186] team0: Port device team_slave_1 added [ 1329.143254][ T7716] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 1329.146905][ T7716] usb 9-1: config 0 has no interface number 0 [ 1329.152432][ T7716] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1329.158751][ T7716] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1329.161493][ T6950] Bluetooth: hci5: command tx timeout [ 1329.163449][ T7716] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1329.172366][ T7716] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1329.176869][ T7716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.185591][ T7716] usb 9-1: Product: syz [ 1329.187043][ T7716] usb 9-1: Manufacturer: syz [ 1329.188584][ T7716] usb 9-1: SerialNumber: syz [ 1329.197080][ T7716] usb 9-1: config 0 descriptor?? [ 1329.199223][T13211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1329.204248][T13211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1329.213732][T13186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.217049][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.228321][T13186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.237220][T13186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.240525][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.251383][T13186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.335187][T13186] hsr_slave_0: entered promiscuous mode [ 1329.338489][T13186] hsr_slave_1: entered promiscuous mode [ 1329.688132][T13264] dns_resolver: Unsupported content type (6) [ 1330.269252][ T3725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.273958][ T3725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.278010][ T3725] bond0 (unregistering): Released all slaves [ 1330.311969][T13186] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1330.316356][T13186] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1330.321293][T13186] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1330.325892][T13186] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1330.359630][ T6950] Bluetooth: hci1: command tx timeout [ 1330.374944][T13186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.384490][T13186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.389429][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.391874][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.400542][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.402865][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.535382][T13186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.697469][ T3725] hsr_slave_0: left promiscuous mode [ 1330.701923][ T3725] hsr_slave_1: left promiscuous mode [ 1330.704529][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.707613][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.234575][ T6950] Bluetooth: hci5: command tx timeout [ 1331.657662][ T3725] team0 (unregistering): Port device 26 removed [ 1331.756188][ T3725] team0 (unregistering): Port device team_slave_0 removed [ 1331.769509][ T8930] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1331.855389][T16438] usb 9-1: USB disconnect, device number 5 [ 1331.929478][ T8930] usb 11-1: Using ep0 maxpacket: 16 [ 1331.933643][ T8930] usb 11-1: config 0 has an invalid interface number: 41 but max is 0 [ 1331.937279][ T8930] usb 11-1: config 0 has no interface number 0 [ 1331.940492][ T8930] usb 11-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1331.944906][ T8930] usb 11-1: config 0 interface 41 has no altsetting 0 [ 1331.949276][ T8930] usb 11-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1331.952555][ T8930] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.955252][ T8930] usb 11-1: Product: syz [ 1331.956668][ T8930] usb 11-1: Manufacturer: syz [ 1331.958722][ T8930] usb 11-1: SerialNumber: syz [ 1331.963183][ T8930] usb 11-1: config 0 descriptor?? [ 1331.965863][T13367] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1331.970496][ T8930] CoreChips 11-1:0.41: probe with driver CoreChips failed with error -22 [ 1332.172172][ T7716] usb 11-1: USB disconnect, device number 8 [ 1332.433538][ T6950] Bluetooth: hci1: command tx timeout [ 1332.537310][T13186] veth0_vlan: entered promiscuous mode [ 1332.549154][T13186] veth1_vlan: entered promiscuous mode [ 1332.573420][T13186] veth0_macvtap: entered promiscuous mode [ 1332.579000][T13186] veth1_macvtap: entered promiscuous mode [ 1332.596221][T13186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.604542][T13186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.615264][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.618195][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.622281][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.625799][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.696162][ T3777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.700801][ T3777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.731475][ T3777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.736685][ T3777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.907779][T13417] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8690'. [ 1333.170550][T13447] bridge: RTM_NEWNEIGH with invalid ether address [ 1333.266201][ T7621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1333.272022][ T7621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1333.276420][ T7621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1333.283991][ T7621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1333.295362][ T7621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1333.320788][T13457] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1333.341627][T16052] syz1: Port: 1 Link DOWN [ 1333.537223][T13478] overlayfs: missing 'lowerdir' [ 1333.625131][ T3777] smc: removing ib device syz1 [ 1333.777615][T13488] loop2: detected capacity change from 0 to 7 [ 1333.783502][ T825] Dev loop2: unable to read RDB block 7 [ 1333.785460][ T825] loop2: unable to read partition table [ 1333.787434][ T825] loop2: partition table beyond EOD, truncated [ 1333.792369][T13488] Dev loop2: unable to read RDB block 7 [ 1333.794618][T13488] loop2: unable to read partition table [ 1333.796514][T13488] loop2: partition table beyond EOD, truncated [ 1333.798990][T13488] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1334.055553][T13511] binder: 13510:13511 ioctl c018620b 0 returned -14 [ 1334.182929][T13454] chnl_net:caif_netlink_parms(): no params data found [ 1334.466987][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.474149][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8744'. [ 1334.478607][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.483427][T13454] bridge_slave_0: entered allmulticast mode [ 1334.502378][T13454] bridge_slave_0: entered promiscuous mode [ 1334.516682][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.519715][ T6950] Bluetooth: hci1: command tx timeout [ 1334.519912][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.525010][T13454] bridge_slave_1: entered allmulticast mode [ 1334.540021][T13454] bridge_slave_1: entered promiscuous mode [ 1334.605004][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.621699][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.670014][T13454] team0: Port device team_slave_0 added [ 1334.674661][T13454] team0: Port device team_slave_1 added [ 1334.712347][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.714795][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.725088][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.731734][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.734829][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.739510][T26819] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1334.745965][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.844072][T13454] hsr_slave_0: entered promiscuous mode [ 1334.847398][T13454] hsr_slave_1: entered promiscuous mode [ 1334.850879][T13454] debugfs: 'hsr0' already exists in 'hsr' [ 1334.853367][T13454] Cannot create hsr debugfs directory [ 1334.911204][T26819] usb 9-1: config 0 has an invalid interface number: 176 but max is 0 [ 1334.914169][T26819] usb 9-1: config 0 has no interface number 0 [ 1334.916274][T26819] usb 9-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 1334.922112][T26819] usb 9-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 1334.925239][T26819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.928052][T26819] usb 9-1: Product: syz [ 1334.929676][T26819] usb 9-1: Manufacturer: syz [ 1334.931292][T26819] usb 9-1: SerialNumber: syz [ 1334.934060][T26819] usb 9-1: config 0 descriptor?? [ 1334.936320][T13558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1334.938833][T13558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1335.147740][T26819] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1335.166135][T26819] usb 9-1: USB disconnect, device number 6 [ 1335.184193][T13577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.192871][ T4000] udevd[4000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.389612][ T6950] Bluetooth: hci0: command tx timeout [ 1335.648010][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.660880][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.664372][ T3756] bond0 (unregistering): Released all slaves [ 1335.756779][T13454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1335.768440][T13454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1335.784061][T13454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1335.807915][T13454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1335.860221][T13454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.914929][T13454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.920497][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.922866][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.932418][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.934954][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.977455][ T3756] hsr_slave_0: left promiscuous mode [ 1335.981385][ T3756] hsr_slave_1: left promiscuous mode [ 1335.983422][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.055480][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8771'. [ 1336.221810][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8777'. [ 1336.589716][ T6950] Bluetooth: hci1: command tx timeout [ 1336.835143][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 1336.957596][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 1337.470565][ T6950] Bluetooth: hci0: command tx timeout [ 1337.699684][T13631] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8777'. [ 1337.747512][T13660] loop2: detected capacity change from 0 to 7 [ 1337.754536][ T825] Dev loop2: unable to read RDB block 7 [ 1337.757002][ T825] loop2: unable to read partition table [ 1337.764178][ T825] loop2: partition table beyond EOD, truncated [ 1337.773411][T13660] Dev loop2: unable to read RDB block 7 [ 1337.776260][T13660] loop2: unable to read partition table [ 1337.788376][T13660] loop2: partition table beyond EOD, truncated [ 1337.791777][T13660] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1337.920425][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.976978][T13454] veth0_vlan: entered promiscuous mode [ 1337.983367][T13454] veth1_vlan: entered promiscuous mode [ 1338.007170][T13454] veth0_macvtap: entered promiscuous mode [ 1338.013852][T13454] veth1_macvtap: entered promiscuous mode [ 1338.024955][T13454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.031515][T13454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.037979][ T8207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.043026][ T8207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.046111][ T8207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.048965][ T8207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.094949][ T8207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.100669][ T8207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.117057][ T3769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.121381][ T3769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.315519][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8809'. [ 1339.054578][ T40] audit: type=1326 audit(1763384018.456:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.063043][ T40] audit: type=1326 audit(1763384018.456:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.071460][ T40] audit: type=1326 audit(1763384018.456:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.078913][ T40] audit: type=1326 audit(1763384018.456:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.086738][ T40] audit: type=1326 audit(1763384018.456:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.094056][ T40] audit: type=1326 audit(1763384018.456:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.101026][ T40] audit: type=1326 audit(1763384018.456:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.107773][ T40] audit: type=1326 audit(1763384018.466:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.114726][ T40] audit: type=1326 audit(1763384018.466:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.122759][ T40] audit: type=1326 audit(1763384018.466:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.9.8838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1339.271687][T13780] loop2: detected capacity change from 0 to 7 [ 1339.275350][T13780] Dev loop2: unable to read RDB block 7 [ 1339.277434][T13780] loop2: unable to read partition table [ 1339.280397][T13780] loop2: partition table beyond EOD, truncated [ 1339.289862][T13780] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1339.306855][ T5349] Dev loop2: unable to read RDB block 7 [ 1339.309145][ T5349] loop2: unable to read partition table [ 1339.311737][ T5349] loop2: partition table beyond EOD, truncated [ 1339.415427][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8847'. [ 1339.549937][ T6950] Bluetooth: hci0: command tx timeout [ 1339.613242][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8845'. [ 1339.849492][T16438] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1340.002349][T16438] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1340.007298][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1340.007952][T16438] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1340.012067][T13809] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1340.016779][T16438] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1340.016809][T16438] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1340.016832][T16438] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1340.036431][T16438] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.040504][T16438] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1340.047391][T16438] usb 9-1: SerialNumber: syz [ 1340.052943][T13805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.055370][T13805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.262598][T26819] usb 9-1: USB disconnect, device number 7 [ 1340.373045][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8864'. [ 1340.779509][T16052] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1340.899878][T13875] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8885'. [ 1340.939487][T16052] usb 8-1: Using ep0 maxpacket: 32 [ 1340.942654][T16052] usb 8-1: config 0 has an invalid interface number: 164 but max is 0 [ 1340.945601][T16052] usb 8-1: config 0 has no interface number 0 [ 1340.947607][T16052] usb 8-1: config 0 interface 164 has no altsetting 0 [ 1340.953449][T16052] usb 8-1: New USB device found, idVendor=045e, idProduct=0448, bcdDevice=fb.fc [ 1340.956758][T16052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.959805][T16052] usb 8-1: Product: syz [ 1340.961423][T16052] usb 8-1: Manufacturer: syz [ 1340.963064][T16052] usb 8-1: SerialNumber: syz [ 1340.969726][T16052] usb 8-1: config 0 descriptor?? [ 1341.174672][ T6383] usb 8-1: USB disconnect, device number 21 [ 1341.299471][T16438] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 1341.449470][T16438] usb 14-1: Using ep0 maxpacket: 8 [ 1341.453615][T16438] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 1341.457232][T16438] usb 14-1: config 179 has no interface number 0 [ 1341.461884][T16438] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1341.466943][T16438] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1341.473264][T16438] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1341.478720][T16438] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26223, setting to 1024 [ 1341.484476][T16438] usb 14-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1341.490806][T16438] usb 14-1: config 179 interface 65 has no altsetting 0 [ 1341.493833][T16438] usb 14-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1341.497831][T16438] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.504497][T13889] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1341.523675][T16438] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:179.65/input/input43 [ 1341.581561][ T5334] input input43: unable to receive magic message: -110 [ 1341.587227][ T5334] input input43: unable to receive magic message: -32 [ 1341.594405][ T5334] input input43: unable to receive magic message: -32 [ 1341.597358][ C1] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1341.604607][ T5334] input input43: unable to receive magic message: -32 [ 1341.614318][ T825] input input43: unable to receive magic message: -32 [ 1341.627028][ T5334] input input43: unable to receive magic message: -32 [ 1341.633968][ T5334] input input43: unable to receive magic message: -32 [ 1341.637890][ C1] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1341.639584][ T6950] Bluetooth: hci0: command tx timeout [ 1341.720756][T16052] usb 14-1: USB disconnect, device number 16 [ 1341.720837][ C1] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1341.800698][T13930] netlink: 392 bytes leftover after parsing attributes in process `syz.3.8909'. [ 1341.830528][T13787] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1341.989448][T13787] usb 9-1: Using ep0 maxpacket: 16 [ 1341.992714][T13787] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 1341.995506][T13787] usb 9-1: config 0 has no interface number 0 [ 1342.000499][T13787] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1342.003653][T13787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.006345][T13787] usb 9-1: Product: syz [ 1342.007803][T13787] usb 9-1: Manufacturer: syz [ 1342.009704][T13787] usb 9-1: SerialNumber: syz [ 1342.012612][T13787] usb 9-1: config 0 descriptor?? [ 1342.221284][ T53] usb 9-1: USB disconnect, device number 8 [ 1343.069917][ T8844] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1343.242024][ T8844] usb 8-1: config index 0 descriptor too short (expected 27, got 10) [ 1343.244857][ T8844] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 1343.248121][ T8844] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1343.254525][ T8844] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7 [ 1343.258190][ T8844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.263143][ T8844] usb 8-1: config 0 descriptor?? [ 1343.463200][T14025] veth1_to_team: entered promiscuous mode [ 1343.467985][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8952'. [ 1343.468662][T14025] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1343.470957][ T8844] usb 8-1: USB disconnect, device number 22 [ 1343.817198][T14056] Bluetooth: MGMT ver 1.23 [ 1345.622417][T14171] fuse: Bad value for 'fd' [ 1345.779700][T14191] IPv6: addrconf: prefix option has invalid lifetime [ 1345.877937][T14204] overlayfs: missing 'lowerdir' [ 1345.934779][T14212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1345.935220][T14210] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1345.937653][T14212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1345.937754][T14212] vhci_hcd vhci_hcd.0: Device attached [ 1345.965485][T14215] vhci_hcd: connection closed [ 1345.965788][ T3725] vhci_hcd: stop threads [ 1345.969137][ T3725] vhci_hcd: release socket [ 1345.983276][ T3725] vhci_hcd: disconnect device [ 1346.510262][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9057'. [ 1346.639462][T17793] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1346.800156][T17793] usb 9-1: Using ep0 maxpacket: 8 [ 1346.804075][T17793] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1346.807530][T17793] usb 9-1: config 179 has no interface number 0 [ 1346.810569][T17793] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1346.815463][T17793] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1346.820673][T17793] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1346.825499][T17793] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1346.829743][T17793] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1346.834982][T17793] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1346.838050][T17793] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1346.842243][T17793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.854121][T17793] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input44 [ 1346.859642][T13787] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1347.009461][T13787] usb 8-1: Using ep0 maxpacket: 16 [ 1347.015314][T13787] usb 8-1: config 0 has no interfaces? [ 1347.021908][T13787] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1347.025774][T13787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.028995][T13787] usb 8-1: Product: syz [ 1347.030885][T13787] usb 8-1: Manufacturer: syz [ 1347.032965][T13787] usb 8-1: SerialNumber: syz [ 1347.038085][T13787] usb 8-1: config 0 descriptor?? [ 1347.051840][ T5600] usb 9-1: USB disconnect, device number 9 [ 1347.422476][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.9.9072'. [ 1347.458061][T14265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.461957][T14265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.465902][T13787] usb 8-1: USB disconnect, device number 23 [ 1347.603597][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1347.610718][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1347.615581][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1347.810633][T14332] 9pnet: Could not find request transport: f [ 1347.950754][T16052] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 1348.020109][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1348.112209][T16052] usb 14-1: Using ep0 maxpacket: 8 [ 1348.122259][T16052] usb 14-1: config 254 has an invalid interface number: 240 but max is 0 [ 1348.127782][T16052] usb 14-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.135172][T16052] usb 14-1: config 254 has no interface number 0 [ 1348.138476][T16052] usb 14-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.147305][T16052] usb 14-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 1348.152124][T16052] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.155695][T16052] usb 14-1: Product: syz [ 1348.157547][T16052] usb 14-1: Manufacturer: syz [ 1348.160365][T16052] usb 14-1: SerialNumber: syz [ 1348.171102][T16052] r8152-cfgselector 14-1: Unknown version 0x0000 [ 1348.343767][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9112'. [ 1348.383324][ T9702] r8152-cfgselector 14-1: USB disconnect, device number 17 [ 1348.405510][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1348.575246][T16052] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1348.583190][T16052] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1348.760509][T14409] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 1348.763708][T14409] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 1348.772492][T14409] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1348.862925][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1348.912384][T14417] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1349.217753][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 1349.217764][ T40] audit: type=1326 audit(1763384028.616:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.228619][ T40] audit: type=1326 audit(1763384028.616:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.237112][ T40] audit: type=1326 audit(1763384028.616:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.245300][ T40] audit: type=1326 audit(1763384028.616:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.252755][ T40] audit: type=1326 audit(1763384028.626:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.259747][ T40] audit: type=1326 audit(1763384028.626:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.267298][ T40] audit: type=1326 audit(1763384028.626:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.276805][ T40] audit: type=1326 audit(1763384028.626:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.285770][ T40] audit: type=1326 audit(1763384028.626:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.295415][ T40] audit: type=1326 audit(1763384028.626:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.3.9144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 1349.417394][T14475] netlink: 120 bytes leftover after parsing attributes in process `syz.6.9156'. [ 1349.422481][T14475] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9156'. [ 1349.641506][T14504] netlink: 'syz.3.9170': attribute type 12 has an invalid length. [ 1349.889124][T14531] dns_resolver: Unsupported content type (6) [ 1349.925875][T14525] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 1350.397750][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9209'. [ 1350.749648][T16052] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 1350.920111][T16052] usb 14-1: Using ep0 maxpacket: 16 [ 1350.923553][T16052] usb 14-1: config 0 has an invalid interface number: 147 but max is 0 [ 1350.926508][T16052] usb 14-1: config 0 has no interface number 0 [ 1350.928577][T16052] usb 14-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1350.934009][T16052] usb 14-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1350.937880][T16052] usb 14-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1350.943422][T16052] usb 14-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1350.946496][T16052] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.949337][T16052] usb 14-1: Product: syz [ 1350.951102][T16052] usb 14-1: Manufacturer: syz [ 1350.952709][T16052] usb 14-1: SerialNumber: syz [ 1350.953583][T14616] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1350.956955][T16052] usb 14-1: config 0 descriptor?? [ 1350.962575][T14597] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1350.965172][T14597] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1351.148694][T14636] 9pnet_fd: Insufficient options for proto=fd [ 1351.175643][T14597] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1351.178281][T14597] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1351.193699][T16052] net1080 14-1:0.147 usb0: register 'net1080' at usb-dummy_hcd.9-1, NetChip TurboCONNECT, 3a:04:67:49:2f:22 [ 1351.397794][T16438] usb 14-1: USB disconnect, device number 18 [ 1351.402833][T16438] net1080 14-1:0.147 usb0: unregister 'net1080' usb-dummy_hcd.9-1, NetChip TurboCONNECT [ 1352.666583][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9258'. [ 1353.379214][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9275'. [ 1353.604563][T14775] input: syz0 as /devices/virtual/input/input45 [ 1353.679209][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9293'. [ 1353.797470][T14795] input: syz0 as /devices/virtual/input/input46 [ 1353.884154][T14800] bpf: Bad value for 'uid' [ 1354.371525][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1354.899491][T16052] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 1355.049597][T16052] usb 14-1: Using ep0 maxpacket: 16 [ 1355.053729][T16052] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.058533][T16052] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.062964][T16052] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1355.068531][T16052] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1355.072816][T16052] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.078991][T16052] usb 14-1: config 0 descriptor?? [ 1355.488453][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.491718][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.496110][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.498645][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.503264][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.506327][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.511507][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.514449][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.516917][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.519289][T16052] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1355.541023][T16052] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1355.544747][T16052] microsoft 0003:045E:07DA.0013: no inputs found [ 1355.546816][T16052] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 1355.689096][ T6383] usb 14-1: USB disconnect, device number 19 [ 1356.959610][ T7716] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1357.055948][T14954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.153705][ T7716] usb 8-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1357.158682][ T7716] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1357.164019][ T7716] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 1357.168791][ T7716] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 19514, setting to 64 [ 1357.173598][ T7716] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1357.177442][ T7716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.184130][T14945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1357.187218][T14945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1357.195171][ T7716] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.244444][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9371'. [ 1357.395636][ T8844] usb 8-1: USB disconnect, device number 24 [ 1357.506303][T14972] netlink: 52 bytes leftover after parsing attributes in process `syz.9.9378'. [ 1357.555049][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9380'. [ 1357.866294][T15004] netlink: 328 bytes leftover after parsing attributes in process `syz.6.9393'. [ 1358.009496][T13787] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 1358.118007][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1358.170223][T13787] usb 14-1: Using ep0 maxpacket: 16 [ 1358.175439][T13787] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.177531][T15037] 9pnet_fd: Insufficient options for proto=fd [ 1358.180744][T13787] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1358.186271][T13787] usb 14-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1358.196572][T13787] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1358.201025][T13787] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.204652][T13787] usb 14-1: Manufacturer: Ч [ 1358.206640][T13787] usb 14-1: SerialNumber: 겦﫲贜궏츴 [ 1358.326713][T15054] netlink: 'syz.6.9417': attribute type 4 has an invalid length. [ 1358.329460][T15054] netlink: 'syz.6.9417': attribute type 5 has an invalid length. [ 1358.332004][T15054] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.9417'. [ 1358.351214][T15061] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9420'. [ 1358.354286][T15061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9420'. [ 1358.422082][T13787] cdc_ncm 14-1:1.0: CDC Union missing and no IAD found [ 1358.425126][T13787] cdc_ncm 14-1:1.0: bind() failure [ 1358.434669][T13787] usb 14-1: USB disconnect, device number 20 [ 1359.579513][T16438] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 1359.745237][T16438] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1359.748900][T16438] usb 11-1: not running at top speed; connect to a high speed hub [ 1359.753591][T16438] usb 11-1: config 136 has an invalid interface number: 30 but max is 0 [ 1359.756693][T16438] usb 11-1: config 136 has no interface number 0 [ 1359.759549][T16438] usb 11-1: config 136 interface 30 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1359.765981][T16438] usb 11-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 1359.770009][T16438] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.773413][T16438] usb 11-1: Product: syz [ 1359.774774][T16438] usb 11-1: Manufacturer: syz [ 1359.776701][T16438] usb 11-1: SerialNumber: syz [ 1359.782009][T15109] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1359.819575][ T9702] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 1359.969475][ T9702] usb 14-1: Using ep0 maxpacket: 32 [ 1359.973118][ T9702] usb 14-1: config 0 has an invalid interface number: 184 but max is 0 [ 1359.976629][ T9702] usb 14-1: config 0 has no interface number 0 [ 1359.979316][ T9702] usb 14-1: config 0 interface 184 has no altsetting 0 [ 1359.985361][ T9702] usb 14-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1359.989007][ T9702] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.992530][ T9702] usb 14-1: Product: syz [ 1359.994420][ T9702] usb 14-1: Manufacturer: syz [ 1359.997135][ T9702] usb 14-1: SerialNumber: syz [ 1359.997177][T16438] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.001367][ T9702] usb 14-1: config 0 descriptor?? [ 1360.002302][T16438] usb 11-1: invalid MIDI in EP 0 [ 1360.006226][ T9702] smsc75xx v1.0.0 [ 1360.007994][ T9702] smsc75xx 14-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1360.014459][ T9702] smsc75xx 14-1:0.184: probe with driver smsc75xx failed with error -22 [ 1360.030700][T16438] snd-usb-audio 11-1:136.30: probe with driver snd-usb-audio failed with error -22 [ 1360.036285][T16438] usb 11-1: USB disconnect, device number 9 [ 1360.052265][ T4000] udevd[4000]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1360.206030][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9458'. [ 1360.210040][ T9702] usb 14-1: USB disconnect, device number 21 [ 1360.385750][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1360.392403][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1360.397245][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1360.878883][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9480'. [ 1361.016250][T15201] syzkaller0: entered promiscuous mode [ 1361.018742][T15201] syzkaller0: entered allmulticast mode [ 1361.170288][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1361.566196][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9515'. [ 1361.591114][T15260] veth3: entered promiscuous mode [ 1361.847662][T15289] netlink: 'syz.4.9528': attribute type 8 has an invalid length. [ 1361.927903][T15296] netlink: 'syz.4.9532': attribute type 16 has an invalid length. [ 1361.931641][T15296] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.9532'. [ 1363.285251][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9575'. [ 1363.288464][T15387] ip6_vti0: entered promiscuous mode [ 1363.291014][T15387] ip6_vti0: entered allmulticast mode [ 1363.489932][T15399] 9pnet_fd: Insufficient options for proto=fd [ 1363.565073][T15412] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.567209][T15412] binder: 15411:15412 ioctl 40046207 0 returned -16 [ 1363.619620][T15423] futex_wake_op: syz.4.9592 tries to shift op by -1; fix this program [ 1363.808282][T15450] trusted_key: encrypted_key: insufficient parameters specified [ 1363.822319][T15452] netem: incorrect ge model size [ 1363.824681][T15452] netem: change failed [ 1364.038323][T15480] dns_resolver: Unsupported server list version (0) [ 1364.277395][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9633'. [ 1364.580222][ T7716] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1364.616405][T15538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1364.730719][ T7716] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.734472][ T7716] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1364.737644][ T7716] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1364.742043][ T7716] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.747536][ T7716] usb 11-1: config 0 descriptor?? [ 1364.954019][ T7716] usb 11-1: USB disconnect, device number 10 [ 1365.254656][T15571] netlink: 'syz.4.9662': attribute type 4 has an invalid length. [ 1365.257526][T15571] netlink: 'syz.4.9662': attribute type 5 has an invalid length. [ 1365.261416][T15571] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1365.592517][T15600] netlink: 'syz.4.9676': attribute type 4 has an invalid length. [ 1365.901727][T15642] netlink: 45 bytes leftover after parsing attributes in process `syz.6.9695'. [ 1366.056523][T15662] netlink: 'syz.4.9705': attribute type 4 has an invalid length. [ 1366.157542][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 1366.157554][ T40] audit: type=1326 audit(1763384045.556:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.9.9709" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 1366.384381][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9716'. [ 1366.428749][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9719'. [ 1366.442641][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.445137][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.912443][T15750] netlink: 'syz.6.9742': attribute type 11 has an invalid length. [ 1366.915152][T15750] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.9742'. [ 1367.101294][T15775] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1367.250227][T15798] 9pnet_fd: Insufficient options for proto=fd [ 1367.579470][T17793] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1367.739656][T17793] usb 8-1: Using ep0 maxpacket: 16 [ 1367.743434][T17793] usb 8-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.748135][T17793] usb 8-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1367.753289][T17793] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1367.756151][T17793] usb 8-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 1367.760152][T17793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.765534][T17793] usb 8-1: config 0 descriptor?? [ 1367.975368][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9769'. [ 1367.980139][T17793] usbhid 8-1:0.0: can't add hid device: -71 [ 1367.982221][T17793] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1367.988651][T17793] usb 8-1: USB disconnect, device number 25 [ 1368.864263][T15848] 9pnet_fd: Insufficient options for proto=fd [ 1369.399480][ T8844] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1369.561513][ T8844] usb 8-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 1369.565080][ T8844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.570550][ T8844] usb 8-1: config 0 descriptor?? [ 1369.574664][ T8844] usb 8-1: NDI device with a latency value of 1 [ 1369.776831][ T8844] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1369.780137][ T8844] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 1369.783464][ T8844] usb 8-1: USB disconnect, device number 26 [ 1369.786288][ T8844] ftdi_sio 8-1:0.0: device disconnected [ 1370.197286][T15926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9824'. [ 1370.910446][T16003] netlink: 328 bytes leftover after parsing attributes in process `syz.3.9859'. [ 1370.991555][ T40] audit: type=1326 audit(1763384050.396:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16005 comm="syz.9.9862" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 1371.424445][T16031] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9871'. [ 1371.897647][T16072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9890'. [ 1372.479509][ T7716] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1372.629448][ T7716] usb 9-1: Using ep0 maxpacket: 8 [ 1372.632519][ T7716] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1372.635214][ T7716] usb 9-1: config 179 has no interface number 0 [ 1372.637281][ T7716] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1372.641158][ T7716] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1372.644829][ T7716] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1372.648059][ T7716] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1372.652636][ T7716] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1372.654924][ T7716] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1372.657872][ T7716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.865762][ T7716] usb 9-1: USB disconnect, device number 10 [ 1373.125001][T16175] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9936'. [ 1373.140943][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9937'. [ 1373.178442][T16187] IPv6: addrconf: prefix option has invalid lifetime [ 1373.345405][T16209] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 1373.348523][T16209] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16209, name: syz.9.9953 [ 1373.353276][T16209] preempt_count: 1, expected: 0 SYZFAIL: failed to recv rpc [ 1373.355239][T16209] RCU nest depth: 0, expected: 0 [ 1373.357010][T16209] 2 locks held by syz.9.9953/16209: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1373.358778][T16209] #0: ffff88807597c0e0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1373.362951][T16209] #1: ffff88807597c998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x11c/0xbd0 [ 1373.366501][T16209] Preemption disabled at: [ 1373.366508][T16209] [<0000000000000000>] 0x0 [ 1373.369653][T16209] CPU: 1 UID: 0 PID: 16209 Comm: syz.9.9953 Not tainted syzkaller #0 PREEMPT(full) [ 1373.369674][T16209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1373.369687][T16209] Call Trace: [ 1373.369693][T16209] [ 1373.369700][T16209] dump_stack_lvl+0x16c/0x1f0 [ 1373.369739][T16209] __might_resched+0x3c0/0x5e0 [ 1373.369753][T16209] ? find_held_lock+0x2b/0x80 [ 1373.369765][T16209] ? __pfx___might_resched+0x10/0x10 [ 1373.369776][T16209] ? hook_sb_delete+0x829/0xbd0 [ 1373.369791][T16209] iput+0x1e/0x40 [ 1373.369805][T16209] hook_sb_delete+0x8bb/0xbd0 [ 1373.369825][T16209] ? __pfx_hook_sb_delete+0x10/0x10 [ 1373.369837][T16209] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 1373.369851][T16209] ? __pfx_evict_inodes+0x10/0x10 [ 1373.369868][T16209] security_sb_delete+0x6d/0x110 [ 1373.369883][T16209] generic_shutdown_super+0xc2/0x390 [ 1373.369901][T16209] kill_litter_super+0x70/0xa0 [ 1373.369918][T16209] deactivate_locked_super+0xc1/0x1a0 [ 1373.369929][T16209] deactivate_super+0xde/0x100 [ 1373.369940][T16209] cleanup_mnt+0x225/0x450 [ 1373.369951][T16209] task_work_run+0x150/0x240 [ 1373.369970][T16209] ? __pfx_task_work_run+0x10/0x10 [ 1373.369987][T16209] ? do_raw_spin_unlock+0x172/0x230 [ 1373.370000][T16209] do_exit+0x86f/0x2bf0 [ 1373.370025][T16209] ? __pfx_do_exit+0x10/0x10 [ 1373.370046][T16209] ? do_raw_spin_lock+0x12c/0x2b0 [ 1373.370071][T16209] ? find_held_lock+0x2b/0x80 [ 1373.370090][T16209] do_group_exit+0xd3/0x2a0 [ 1373.370112][T16209] get_signal+0x2671/0x26d0 [ 1373.370139][T16209] ? __pfx_get_signal+0x10/0x10 [ 1373.370158][T16209] ? do_futex+0x122/0x350 [ 1373.370181][T16209] ? __pfx_do_futex+0x10/0x10 [ 1373.370206][T16209] arch_do_signal_or_restart+0x8f/0x790 [ 1373.370229][T16209] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1373.370257][T16209] ? getname_flags.part.0+0x1c5/0x550 [ 1373.370289][T16209] exit_to_user_mode_loop+0x85/0x130 [ 1373.370316][T16209] __do_fast_syscall_32+0x240/0x300 [ 1373.370340][T16209] do_fast_syscall_32+0x32/0x80 [ 1373.370360][T16209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1373.370380][T16209] RIP: 0023:0xf705d579 [ 1373.370393][T16209] Code: Unable to access opcode bytes at 0xf705d54f. [ 1373.370401][T16209] RSP: 002b:00000000f544d60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 1373.370417][T16209] RAX: fffffffffffffe00 RBX: 00000000f7424f88 RCX: 0000000000000080 [ 1373.370428][T16209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 1373.370437][T16209] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1373.370447][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.370458][T16209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.370483][T16209] [ 1373.549511][ T9702] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1373.897973][ T8207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.044848][ T8207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.121267][ T8207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.191387][ T8207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.298832][ T8207] bridge_slave_1: left allmulticast mode [ 1374.301145][ T8207] bridge_slave_1: left promiscuous mode [ 1374.303078][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.307060][ T8207] bridge_slave_0: left allmulticast mode [ 1374.308945][ T8207] bridge_slave_0: left promiscuous mode [ 1374.311661][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.613086][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.618489][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.625085][ T8207] bond0 (unregistering): Released all slaves [ 1374.917826][ T8207] hsr_slave_0: left promiscuous mode [ 1374.921754][ T8207] hsr_slave_1: left promiscuous mode [ 1374.924684][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.927903][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.931802][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.935034][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.970958][ T8207] veth1_macvtap: left promiscuous mode [ 1374.972841][ T8207] veth0_macvtap: left promiscuous mode [ 1374.975257][ T8207] veth1_vlan: left promiscuous mode [ 1374.977612][ T8207] veth0_vlan: left promiscuous mode [ 1375.809086][ T8207] team0 (unregistering): Port device team_slave_1 removed [ 1375.927417][ T8207] team0 (unregistering): Port device team_slave_0 removed [ 1376.987811][ T8207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.083250][ T8207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.190773][ T8207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.269994][ T8207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.394901][ T8207] bridge_slave_1: left allmulticast mode [ 1377.397415][ T8207] bridge_slave_1: left promiscuous mode [ 1377.399963][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.404944][ T8207] bridge_slave_0: left allmulticast mode [ 1377.406799][ T8207] bridge_slave_0: left promiscuous mode [ 1377.408745][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.725706][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.730641][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.735003][ T8207] bond0 (unregistering): Released all slaves [ 1378.114598][ T8207] hsr_slave_0: left promiscuous mode [ 1378.116899][ T8207] hsr_slave_1: left promiscuous mode [ 1378.119058][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.121787][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.124633][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.127043][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.151346][ T8207] veth1_macvtap: left promiscuous mode [ 1378.153273][ T8207] veth0_macvtap: left promiscuous mode [ 1378.155609][ T8207] veth1_vlan: left promiscuous mode [ 1378.157382][ T8207] veth0_vlan: left promiscuous mode [ 1378.958486][ T8207] team0 (unregistering): Port device team_slave_1 removed [ 1379.066018][ T8207] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 12:06:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000002b416c5 RBX=0000000000000000 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da28d30 RDI=ffffffff8bf075c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034923ffc CR3=000000005286f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85269750 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90002e9f3a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35b8c0e R15=dffffc0000000000 RIP=ffffffff85269777 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c24787f CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000400000 RBX=ffff888026eb9620 RCX=0000000000000016 RDX=ffff88802480c900 RSI=ffffffff862f8d8a RDI=0000000000000005 RBP=0000000000000016 RSP=ffffc9000383f070 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000016 R11=0000000000000001 R12=ffffc90000415138 R13=ffff888026eb967c R14=ffff888026eb9628 R15=0000000000000000 RIP=ffffffff862f8d97 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9b85c3c300 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f15a7f4f40 CR3=000000004f010000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=763da6b38e0ed01c abbb91aa30310944 763da6b38e0ed01c abbb91aa30310944 763da6b38e0ed01c abbb91aa30310944 763da6b38e0ed01c abbb91aa30310944 ZMM18=57f2ee2b72fd2444 c61ee7876ccb1105 57f2ee2b72fd2444 c61ee7876ccb1105 57f2ee2b72fd2444 c61ee7876ccb1105 57f2ee2b72fd2444 c61ee7876ccb1105 ZMM19=2a3e000000000000 0000000000000004 2a3e000000000000 0000000000000003 2a3e000000000000 0000000000000002 2a3e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70ec0c8002100800 0fffffffff020680 021a08000a01578e 00080006a0030408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000698030fffffff ff0206900308c080 80880800068803df 632020c1c59903e1 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22c41ec00ff06f46 f2fa0a4eae0fdee2 0f4066c86e19ef41 c4d100ca4a080003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 c61ee787c61ee787 ZMM26=72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 72fd244472fd2444 ZMM27=57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b 57f2ee2b57f2ee2b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=293e0000293e0000 293e0000293e0000 293e0000293e0000 293e0000293e0000 293e0000293e0000 293e0000293e0000 293e0000293e0000 293e0000293e0000 info registers vcpu 3 CPU#3 RAX=00000000014758d7 RBX=0000000000000003 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da28d30 RDI=ffffffff8bf075c0 RBP=ffffed10037e5000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf28000 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f544be80 CR3=0000000063a54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1748d51e0269afd 6f6e3a555050656b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2cc6efb9eb51370c db1478663f173850 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf1b58ab55e9df8c cd2131fe6cb23fd8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8fd80d471105c4a7 b094f50aadc34ab7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001b4c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dfb39400e4bb3200 0003409ff6beca00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 8001000012cc7e00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003409f80010000 e22542000003409f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000000340a0 0003409f80010000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8643cebfaa124c2a ea4157ddc1e1224c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 054016e6bc4e4626 1e49a5ef1380bc35 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000