last executing test programs: 6.220121056s ago: executing program 1 (id=288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x420) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='L', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="4fb46fc2be2f17f9c20dcf78b28b9f21ff9579aa530345ba043f3313059a03fdc69241182db92cd8a3552e28156c0e978d4e042a0afaf34c47324d14bf69dab7da6d121d1818942ed526e813418303704ea28f9d103a1d9c4ec27268c320a21dfde140089462c08c6454696ca2528ac7b6671f8b53c0206ef7c1da1b0bb9d46965d8fae6d362b3ce56bd99c35b1680676d31d3b7c45790e0f13404f307162339d469f54c166fd3885723077ceac37ee7a6cfc57474757456fc2444655bd5c9a9801fd0108787ffac096a838d060670c720dfff7e698361db9ee94938431da5442ba084a889165847"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3, 0x2001) r6 = userfaultfd(0x801) r7 = openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000780)=0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0xb00}, 0x4}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) close_range(r3, 0xffffffffffffffff, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000, 0x2) io_uring_setup(0x2aa1, &(0x7f0000000240)={0x0, 0x6e2a, 0x10, 0x3, 0x2f4, 0x0, r2}) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000340)={0x2, @vbi}) recvmsg$kcm(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f0000000180)=""/98, 0x62}], 0x2}, 0x12000) 4.631332193s ago: executing program 0 (id=293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r4, 0x801, 0x70bd21, 0x25ffdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x20004804) 4.550036079s ago: executing program 0 (id=294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000040)={0x0, 0x27, ""/39}) close_range(r1, r1, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x1, r1}) 4.545604551s ago: executing program 0 (id=295): syz_open_dev$media(&(0x7f0000000080), 0x6e, 0x8440) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb0, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x490, @mcast2, 0x8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x8, @local, 0xfffffff8}, @in6={0xa, 0x4e24, 0xfffffff9, @remote, 0xfffffffc}, @in6={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r4, 0xaf, "db19e1cc635d3a6fdf0df0f99bcdd45493f50b2eca804a5a9acb044482fd994d4934cebdf9963b85b6437f9b0d68e67871c659312eebf26ef172137544c20b50461a16504ac2de619f61732161b4029a83bd4c50a3ae8091e8c94746708045754f3b79abae6cd4cb8cd0e498c964516fb46d6c3521272db35d95b29639a5224b8a85bf32879a9ceef695f12405120ea504999929aa15bcce8ea71f63ecbf162d3e59c106053fcd090140c475efb76b"}, &(0x7f0000000200)=0xb7) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x4, 0x4, 0x438, 0xffffffff, 0x0, 0x154, 0x284, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 'nicvf0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x3, 0x5, 0x9}, 0x2f2, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x70, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @mcast2, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [], [0x0, 0x0, 0xff000000]}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x8, 0x7, 0x200}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0x0, 0xff], 'veth1_to_bridge\x00', 'gre0\x00', {0xff}, {}, 0x16, 0xe, 0x5, 0x2}, 0x0, 0x10c, 0x130, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'wg2\x00', 'dummy0\x00', 0x8, 0x0, 0x7, 0xfffffffd, 0x6, 0x100, {0x7fff}, {0x8}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@mcast1, @loopback, [0xffffff00, 0xffffffff, 0xff, 0xff], [0xffffff00, 0xff0000ff], 'xfrm0\x00', 'gretap0\x00', {}, {0xff}, 0x29, 0x0, 0x4, 0x4}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc214, {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x494) 4.449778899s ago: executing program 0 (id=297): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x80000000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r4) io_setup(0x7, &(0x7f0000000280)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r4, &(0x7f0000000040), 0x20000044}]) creat(0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ftruncate(0xffffffffffffffff, 0xffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 3.449948834s ago: executing program 0 (id=301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x3, 0x100, 0x5, 0x6, 0x5, 0xba, 0x7fffffff, 0x10001, 0x81, 0x100, 0x6, 0x80000000, 0x9, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8000, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x7e) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2a) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 3.4104561s ago: executing program 1 (id=302): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x49ef, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705"], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0xc000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) 2.510118262s ago: executing program 3 (id=305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f00000031c0)="84a022af3b22ace6aeeed3787c292339f7f36942bde7ee1e155c8692e9327170bb19496ead6b7e2aae5e21854218295ddbd7e103a33bc9a66171e85010b3f9d5bd3340a9b615771b901603df53fd5525527309145e42a32b76f85ac974e40b32608dd790fa0e16c5c88ffebb1a5a0d9f34487d0c66eee810bd431e1961c4bba6", 0x80}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/82, 0x52}, {&(0x7f0000000800)=""/114, 0x72}], 0x2}}], 0x1, 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000f020000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000001300)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) 2.371624411s ago: executing program 1 (id=306): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000023c0)=@newtfilter={0x114c, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x9}, {0xa, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x111c, 0x2, [@TCA_BASIC_ACT={0x1118, 0x3, [@m_police={0x1114, 0xf, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x80000001, 0x7, 0x5, {0xa, 0x1, 0x3, 0x8, 0x9, 0x5}, {0x7, 0x0, 0xaace, 0x2, 0x7, 0x2ca61935}, 0x2, 0x4, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x690a, 0xb, 0x7ff, 0x3, 0x0, 0x5, 0x42, 0x6e, 0x3, 0xed, 0x8, 0x7, 0x3ff, 0x8, 0x2, 0x8, 0xffff, 0x7, 0xa, 0xaa, 0x3, 0x4, 0x6, 0x3, 0x3, 0xd7, 0x9, 0xf, 0x29681ee0, 0x3, 0x8, 0x796, 0x3, 0xf, 0xfffffff9, 0x401, 0x6, 0x1, 0x9, 0x9c81f8ac, 0x10000, 0x7, 0x800, 0x9, 0x80000001, 0xffffff00, 0x4, 0x7, 0x3, 0x401, 0x80, 0x6, 0xfffffff8, 0x9, 0x8cbd, 0xfff, 0x80000000, 0x9, 0x5, 0x4, 0x70, 0x2, 0xff, 0x1, 0x6, 0x8f3d, 0x3, 0x3, 0x6, 0x5, 0x82ef, 0x1, 0x3, 0x112, 0x7, 0xc, 0x1, 0xf49b, 0x6b3, 0x40, 0x3, 0x6, 0xffffffff, 0xa67, 0x96, 0xfffffff7, 0x5, 0x77f, 0x0, 0xff, 0x3, 0x10001, 0x1, 0xa, 0x7fff, 0x8a, 0xfffffff9, 0x483, 0x5, 0x3, 0x57987eda, 0x6, 0x2, 0x5, 0x80, 0xce8, 0x4, 0x1b6568b2, 0x4b, 0x4, 0x2, 0x6, 0xf, 0x100, 0x2, 0x4, 0x6, 0x25, 0x10001, 0x4, 0x9, 0x4, 0x609e, 0x5, 0x2, 0xd6, 0x0, 0x4, 0x1, 0x3, 0x8, 0x4, 0x2d4645cd, 0x65, 0x6, 0x80, 0x3, 0x6, 0x2, 0x0, 0xb, 0x4, 0x1, 0x3, 0x5, 0x3, 0x5, 0xb, 0x7, 0x2, 0x7, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0x61ea, 0x5, 0x2, 0x9, 0x4, 0x0, 0x6, 0x2, 0x9, 0x3, 0x4a, 0x8, 0x3, 0x3, 0x4, 0x6, 0x8, 0x78, 0x7, 0x1ff, 0x5, 0xc, 0x2, 0x0, 0x7c, 0x6, 0xff, 0x1, 0x8, 0xaa32, 0x3, 0x8, 0xf7, 0x400, 0x80000000, 0x2, 0x4499, 0x3842, 0x8, 0x0, 0x0, 0x2, 0x9, 0x1, 0xa, 0x10001, 0xa, 0x3, 0x4, 0x8, 0x4, 0x4, 0xffff, 0x1, 0x3, 0xfffffffc, 0x1, 0x9, 0x92, 0x9713, 0xfffffffe, 0x8, 0x1ff, 0x0, 0xbbf, 0x6d, 0x70ce, 0x2, 0xa5, 0x80000001, 0x8, 0xf, 0x2, 0x5, 0x7, 0x40, 0x7, 0x3, 0xff, 0x9, 0x3, 0x6, 0x9, 0x9, 0xf2, 0x7ff, 0x194fa32b, 0x1000, 0x3a, 0xffffffff, 0xa, 0x3, 0x9, 0xa, 0x6, 0x8, 0x400, 0x1, 0x34]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x8c267e54a2291332, 0x3, 0x8001, 0x16, {0x40, 0x1, 0x182d, 0x9, 0x52a, 0x6}, {0xff, 0x0, 0xfffc, 0x1, 0x4, 0xbb57d8e}, 0x0, 0x0, 0x7ff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf0}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x0, 0x80, 0x1, 0x5, 0x81, 0x10, 0x100, 0x6, 0xcf, 0x7fff, 0x0, 0x4, 0x1, 0x1ff, 0x5, 0x4, 0x7, 0x9, 0x80, 0x6, 0x3, 0x1, 0x80000000, 0x7fff, 0xd, 0x0, 0x2, 0x5, 0x71c, 0x7, 0x203, 0x744, 0x40, 0x786, 0x7, 0x9, 0x0, 0x745, 0x6, 0x8, 0x1, 0x7fffffff, 0x9, 0x942, 0xf3a4, 0x5, 0x7, 0x4, 0x8, 0xffffff01, 0x3, 0xa, 0x7, 0x8000, 0xfffffffe, 0x7, 0x15dd, 0x4, 0x8001, 0xffffeffe, 0x7, 0x3, 0x6, 0x3, 0x81, 0x5c389f6c, 0x9, 0x17e, 0x1, 0x80000001, 0x72, 0x6, 0x1, 0x1ff, 0x200, 0xfffffffc, 0x6, 0x9, 0xa0, 0x0, 0x4, 0x81, 0x8, 0x4, 0x1, 0x5d2, 0x1, 0xffff0001, 0xd35, 0xf, 0x0, 0x34, 0x9, 0xd9, 0x6, 0x6, 0x6, 0x5, 0x81, 0x2, 0x6, 0x66f, 0x7ff, 0x4, 0x25f0, 0xa, 0x0, 0xf4, 0x2, 0x1, 0xff, 0x6, 0xff, 0xffffffff, 0x83, 0x8, 0x5, 0x3fc0, 0x1ff, 0x4, 0x3, 0x6ea, 0x4, 0x4, 0x2, 0x8, 0x7, 0x7, 0x4, 0x0, 0xfe, 0x3, 0xfffffffe, 0x3, 0x3, 0x7f, 0x623, 0xfb6a, 0xfffffff7, 0x94, 0x26a8cda3, 0x401, 0xcfc, 0x8, 0xbade, 0x4, 0xffff6747, 0x800, 0x1a9, 0x7, 0x2, 0x5, 0x8, 0xda50, 0x0, 0xff, 0x1, 0x6, 0x0, 0x6, 0x8ea, 0x2a, 0x7f, 0x2, 0x3, 0x7fff, 0x1, 0x0, 0xe, 0x2, 0x4, 0x10000, 0x80000001, 0x2, 0x3, 0xb7, 0x8, 0x4, 0x5, 0x2, 0x81, 0x9, 0x7, 0x267, 0x1, 0x80000001, 0x0, 0x6, 0x97, 0x9, 0x7fff, 0xb7, 0x3f1, 0x2, 0x9185, 0x2, 0x6, 0x101, 0x5, 0x5, 0x3, 0xfffffff7, 0x6, 0x1, 0xd86, 0x3, 0x3, 0x5f8, 0x534, 0xf5, 0x2, 0x8, 0x7fffffff, 0x0, 0xd, 0x200, 0xe, 0x0, 0x9, 0xffff, 0xfffff4a4, 0x190c, 0x5, 0x1, 0x4, 0x9, 0x5, 0xfff, 0xb, 0x1, 0x10001, 0x2, 0x4, 0x3, 0x5, 0x0, 0xea, 0x7, 0x9, 0x6, 0x5, 0x2, 0x81, 0xc34b, 0x2, 0x9, 0x0, 0x5, 0x30000000, 0x0, 0xfb, 0x200, 0x2, 0x7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4d, 0x1, 0xc231f91b, 0x800, 0x2, 0xffff8001, 0x9, 0xadea, 0x7, 0x8, 0x6, 0x4, 0x7, 0x0, 0x6, 0x2, 0x1, 0x200, 0xe, 0xaa53, 0x7, 0x3, 0x8, 0x3e, 0x1d, 0x4, 0xffffffff, 0x0, 0x2, 0x1, 0x10, 0x0, 0xd, 0x7, 0xffffff3d, 0x3, 0xeb7, 0x0, 0x97c, 0x3b, 0x8, 0x9, 0x2, 0x5, 0x5, 0x6, 0x8000, 0xffff85c7, 0x6, 0x7, 0x5, 0x5, 0x60db, 0x400, 0xdde4beef, 0x9, 0x5, 0x4, 0x2101, 0x5, 0x3b, 0x4, 0x6, 0x4, 0x9, 0x2, 0x9b4, 0x6, 0x0, 0xc464, 0x3, 0xc2, 0x0, 0x2, 0x4, 0x10, 0x6, 0x8, 0x5, 0xb, 0x0, 0xb, 0x733, 0x2964, 0x401, 0xffff, 0x5, 0x100, 0xffffff7f, 0x8001, 0xe585, 0xfffffffb, 0x5, 0x81, 0x400, 0x1fbd8a61, 0x5, 0x9, 0x1, 0x3, 0x6, 0x800, 0x1, 0x1, 0x9, 0x3093, 0x51, 0x6, 0x9, 0x80, 0xd, 0x48a, 0x4, 0x81, 0x849, 0x0, 0x5, 0x5, 0x7, 0x9, 0x10001, 0x1000, 0x5, 0x80, 0x2, 0x2, 0x5, 0x8, 0x2, 0xb, 0x3ff, 0x1, 0x401, 0x3, 0x7, 0x75, 0x8, 0xffffffff, 0x8, 0x9, 0xfffffffb, 0x2e, 0x9, 0xd, 0x4d, 0x7, 0x10, 0x7fff, 0xfffffc01, 0x3, 0x8, 0x9, 0x100, 0x2b09, 0x9, 0xb77, 0x3, 0x9, 0x9, 0x5, 0x1cff, 0x51, 0x5, 0x0, 0x58, 0xfffffff6, 0x69d8d9fa, 0x2, 0x7, 0xd0c0, 0x9, 0x4, 0x5, 0x8, 0x2, 0x80000000, 0x2, 0xb3, 0x2, 0xffb4, 0x0, 0x8, 0x4, 0x80000001, 0x6, 0x9, 0xffffffff, 0x9000, 0x3235, 0xffffffff, 0x5, 0x5, 0x80000000, 0x81, 0x1, 0xfffffffe, 0x2, 0x1, 0x9, 0x8, 0x8000, 0x6, 0xffffff7f, 0x4, 0x7f, 0x10, 0x4, 0xfffffffd, 0x9, 0x0, 0x8, 0x380, 0x6, 0x3ff, 0xd, 0xfffffff7, 0x1000, 0x2, 0x6, 0x1, 0x800, 0x9, 0x1, 0x6, 0xfffffff8, 0x8, 0x10000, 0x9, 0x4, 0x0, 0x1, 0x4, 0x8001, 0x2, 0x7fc0, 0x4300, 0xd4f, 0x8001, 0x7fffffff, 0x101, 0x5, 0x3, 0x401, 0x2, 0x5, 0x6, 0xa, 0xa6, 0x5, 0x9, 0x5, 0x3, 0x5, 0x6, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7ff, 0x5, 0x4, 0x2, 0x40, 0x40, 0x3, 0x0, 0x5, 0x295, 0x9, 0x4, 0x1, 0xfb, 0x0, 0x9, 0x1, 0xcf, 0xffffffff, 0x80000000, 0x4, 0x8, 0x3, 0x7, 0x2, 0x0, 0x9, 0x4, 0x5, 0xfff, 0x0, 0x3, 0x3, 0x8, 0x6a, 0x8, 0xb, 0x3, 0x4, 0x1, 0x5, 0x6, 0x3, 0x21cb, 0x5, 0x9, 0x4, 0x4da, 0x9, 0x9, 0x4, 0x37, 0xae59, 0x6, 0x1, 0x8, 0x2, 0x6d4, 0x4, 0x2e, 0x3, 0x3, 0x3, 0x7, 0x0, 0x10000, 0xa73, 0x3, 0x8, 0x7f, 0x4, 0x5d8990bd, 0x9, 0x4, 0x7fffffff, 0x400, 0x2, 0x1, 0x4, 0x8, 0x3, 0x8, 0x4, 0x1, 0x80000000, 0xffff, 0x0, 0x1, 0xf8b, 0x1, 0x401, 0x80000001, 0x6, 0x6, 0x3ff, 0x40, 0x7fff, 0xa0, 0x5a7, 0x4, 0x1, 0x9, 0xc91, 0x3, 0x7, 0x4b2, 0x3, 0xc, 0x3ff, 0x1, 0x2, 0x5, 0x5, 0x780, 0x8, 0x4, 0x8a6, 0xb05f, 0x3, 0xfffffffe, 0xffffffff, 0x8001, 0x7, 0xffffffff, 0x5, 0x111b8e0d, 0xfffffff1, 0x0, 0x4, 0x8, 0x0, 0x839, 0xffffa3af, 0xfffffff6, 0x8, 0x0, 0x3, 0x2c62, 0xf, 0x7, 0x3, 0x7, 0xfffff82a, 0x0, 0x1000, 0xffff, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2f5, 0x9, 0x926e, 0x9, 0x6, 0x401, 0xfb8, 0x3, 0x7f, 0xffffffff, 0xe5, 0xfffffbde, 0x1, 0x7, 0x8, 0xf, 0x4, 0xe, 0x2, 0x7fffffff, 0x7fff, 0x7, 0x40, 0xbe, 0x0, 0x3, 0x7, 0x804, 0xb9, 0xffff, 0x4, 0x9, 0x9, 0x9, 0x8, 0x1, 0xc, 0xcde000, 0x8e80, 0xffffffff, 0x0, 0x7, 0x401, 0xe76, 0x2, 0x503b, 0x7, 0x59, 0x8, 0xb7ce, 0x3, 0x250e0794, 0x3, 0x30b3e45c, 0x5, 0xb89, 0x1, 0x10001, 0x0, 0x9, 0x48, 0x9, 0x79, 0x3, 0x4, 0x7, 0xfffffff9, 0x9, 0x5, 0x10001, 0x7, 0xfffffffb, 0x8, 0x5, 0x8, 0x6, 0x8, 0xffff, 0x12, 0x8, 0xffffffff, 0xbcc9, 0xfffffffe, 0xeb6f, 0x3, 0x9, 0x401, 0xc8e, 0x0, 0x7, 0x5e, 0x4, 0x7, 0x1, 0x1ff, 0x10001, 0x1000000, 0x0, 0xd188, 0x1, 0xa, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5687}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x34d}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x114c}, 0x1, 0x0, 0x0, 0x80}, 0x240008f4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x41, 0x9, 0x70bd25, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 2.308104235s ago: executing program 2 (id=308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000006c0)={'geneve1\x00', {0x2, 0x4e20, @local}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x11, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x4c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x438, 0x3f4, 0x1, 0x70bd2a, 0x25dfdbfd, {0x4, 0x2, 0x12, [0x9, 0x2, 0xfffffffd, 0x3, 0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x7, 0x3, 0xd, 0x4, 0x365edcda, 0x3, 0x2, 0x9, 0x81, 0xce9, 0xffff, 0x97, 0x8, 0xff, 0x4, 0x1000, 0x5, 0x4, 0x51, 0xffffffaa, 0x2, 0x7, 0xfffffffb, 0x8, 0x5, 0x4, 0xffffffff, 0x3, 0xbb, 0xf, 0x3, 0x7, 0x935, 0xa54, 0x1, 0x80000001, 0x8, 0x2, 0xd8cf, 0x7f88, 0x7, 0x2157cb3b, 0x7fffffff, 0x4, 0x7, 0x3], [0x7ef1dd1f, 0x2, 0x800, 0x10001, 0x80000001, 0x5, 0x2366d323, 0x6, 0x9, 0x0, 0x1, 0x6, 0x7, 0x3, 0x9, 0xa94, 0x8, 0x0, 0x7, 0x4, 0x101, 0x9, 0x9, 0xb3a7, 0xd2, 0xf, 0x6, 0x7, 0x3d, 0x54f6, 0x5, 0x3, 0x0, 0xd, 0x91, 0x2, 0xde67, 0x1c00, 0x100, 0x1, 0x222c, 0x81, 0x10, 0x6, 0x3, 0x81, 0x5, 0x9, 0x9, 0x2, 0x3, 0x1e5260, 0xe, 0x401, 0x3, 0x6, 0x1, 0x0, 0x81, 0x4d, 0x7, 0xffffff33, 0x3, 0x9], [0xffff, 0x1, 0xcc, 0x0, 0x0, 0x51, 0x4, 0x81, 0x80000000, 0x7fff, 0x3b62, 0x2, 0x4, 0x7, 0x9, 0x6, 0x5d, 0x4, 0x5, 0x7f, 0x1, 0x3, 0x5, 0x1ff, 0xc38, 0x3c44b73e, 0x3, 0xfff, 0x0, 0x6, 0x9, 0xc81, 0x2, 0x4, 0x6744, 0x4, 0xfff, 0x2, 0xd4, 0x2, 0x7, 0x3, 0x1, 0x8, 0x9, 0x3, 0x5, 0x80000001, 0xfffffff8, 0x80000000, 0xd, 0x1, 0x660, 0x4, 0xf50, 0x7a, 0x9, 0x7ae, 0x1, 0x4, 0x4, 0x7, 0xff, 0x5], [0x2, 0x0, 0x8001, 0x8, 0xffff4da7, 0x0, 0x3, 0x0, 0x742e5dcf, 0x68d, 0x7, 0x6, 0x3, 0xfffffffc, 0x9, 0x8, 0x7fff, 0x3, 0x9, 0x7, 0xc, 0x3, 0x5, 0xffff08d8, 0x1, 0xffff, 0x6, 0x6, 0x9, 0xe, 0xe12, 0x11, 0x3, 0xfffffffb, 0xb28, 0x10, 0x6, 0x90b, 0x7f, 0x8, 0x6, 0x4, 0x8, 0xfffffff5, 0x1, 0x1ff, 0xb5, 0x7fff, 0x80000, 0x401, 0x5, 0x401, 0x8, 0x2e89, 0x5, 0x4, 0x472, 0x9, 0x9, 0x80, 0x60, 0x7, 0x0, 0x89d2], 0x17, ['NET_DM\x00', '\x00', '#]E\x00', '*(.{/\xf9{%$[\x00']}, ["", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 2.307910464s ago: executing program 1 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000a00030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0xbc, 0x25, 0x200, 0x70bd2a, 0x0, "", [@generic="18510c4da6f953ea9bd7b00300000055c2bf5a614f0ec85765a5e404d7c71be4fa874481edc83cc8bb51330b422a82ceefe42011eb55a5630911bcda011fac743a5a64f4af526d1f8a64bbd0abe3abe460ff1de62b81716b8f68aefd30ffd22165841b6031f00b1df0291c9ca88ed0e1a3f650da3556bb7f1a72df0467010cce9eb67f5ac328677deca6d123951156800fcba9efc3a847297bcf702df88f51d15bca791b9a5a98f6077ff5fe"]}, 0xbc}], 0x1}, 0x2000c805) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000007c0)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2.189971357s ago: executing program 2 (id=310): r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x20401, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000080)="58006654240fc96d4c19f3766a3a41b441c9") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) r4 = dup3(r1, r2, 0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) r5 = openat$vcs(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) statx(r4, &(0x7f0000000280)='./file0\x00', 0x400, 0x80, &(0x7f00000002c0)) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e20, 0xa98, @remote, 0x1}, 0x1c) r6 = openat$bsg(0xffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0xdd2a8bf7be643a55, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x41) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r6) r10 = syz_open_pts(r2, 0x200802) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000640)={0x9, 0x75, 0x9, 0x1, 0xa, "0ceb363ddc92b148bc3243c89eed7473a7c556"}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r4, 0x20, &(0x7f0000000980)={&(0x7f0000000840)=""/105, 0x69, 0x0, &(0x7f00000008c0)=""/146, 0x92}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xb17e, 0x0, 0x0, 0x41100, 0x5c, '\x00', r11, @fallback=0x29, r4, 0x8, &(0x7f00000007c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x4, 0x2, 0x5b}, 0x10, r12, 0xffffffffffffffff, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x4, 0x3, 0x4, 0x7}, {0x5, 0x2, 0x7, 0xc}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x11}, 0x4040000) bind$x25(r5, &(0x7f0000000cc0), 0x12) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000d00)=0x148, 0x4) syz_open_procfs(r7, &(0x7f0000000d40)='attr/prev\x00') readahead(r10, 0x6, 0x8889) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x141) 2.189396748s ago: executing program 2 (id=311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000380)={0x0, 0x1e7fff, 0x8, 0x0, 0xe8}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0xfffffff8, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "97e46e2921705cb9", "7eb560b5f7b2d2ab1b423d28b6417d7decab8a498df2072dce8cadadf5008f08", "270d3203", "035f8b690ff31ffd"}, 0x38) recvmsg(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c030000100013070000000000000000fe8000000000000000000000000000bbac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000048000200656362286369706865725f6c756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="03000000000000000400000000000000050000000000000000000000000000800800000000000000c6df551a00000000b100000000000000040000000000000004000000000000000500000000000000d5e7000000000000a2ffffffffffffff25000000bd6b6e0002010301", @ANYRESHEX=r7, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES8=r2], 0x31c}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TCXONC(r10, 0x540a, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc0) 2.103787946s ago: executing program 1 (id=312): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306010200000000000000000000000005000100070000000900020073797a32", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfdfb}) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0xff88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 1.689892077s ago: executing program 0 (id=313): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2023d, &(0x7f00000002c0)={0x0, 0x8a0, 0x1, 0x2, 0x0, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000240)=0x10043a) ioctl$EVIOCGNAME(r7, 0x40044590, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="a4058d352731c79b852a1533e0dac6584ab50a83deef0e0f5d98146b56a59cbddadae928101a8aab431e4a5cc8250f66a3498f582c9bb7b26193fb8b6e47ec7dba8c2fee3129bb386a01811537c5ffe305bfb97b19e9d7577679d8617de19494a75d2c1b22113712cc8b1bab0d58db5de6083d"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) socket(0x23, 0x800, 0x7fffffff) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = dup(r1) connect$802154_dgram(r11, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) write$P9_RSTATu(r11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="fd87190010"]) 1.609669514s ago: executing program 3 (id=314): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffffff71, 0x80000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) r1 = socket(0x2a, 0xa, 0xfc6) getsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f00000000c0)=""/179, &(0x7f0000000180)=0xb3) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = openat$vimc0(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x7fff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r3, 0x3, 'z<<', "91b1abb3e66c5751c42e03182c1e9a25afba6a7ebbe144230b88c0eac29f682eba692011098966a3a6e9e4cd0541e4b5184495dd09fdbb32abeee02f2fc5b0859e1da4dac8fa7a815e370dfcae8e052a95951d16847bf1ca2f34274078ef833a9a9fe853ed562fce09aed997663eb7018818fa4c911a40a3652bec29a2808e48d2cfd3338e0bfd89dcda4c553cae8d1cca03c66f1699a0f16f5d51bfa0e05108912b90e49130451de65eb69bd794bf850b626341b642ab574660b7e8074fc350dc4c8e442782c27b776f81a0e5669b8f56efb1c7b2b747ac92a9624762a3128667485435ddadfdb9b4e2466a73b12d240dfcd4680ad9abb95f891f2e7398df05"}}, 0x110) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000440)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x1f, 0x10, 0x70bd28, 0x25dfdbfb, {0x7}, [@nested={0x8, 0x138, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0x8}, @nested={0xc, 0x113, 0x0, 0x1, [@nested={0x4, 0x4c}, @nested={0x4, 0x92}]}, @nested={0x8, 0xb1, 0x0, 0x1, [@nested={0x4, 0x108}]}, @generic="bd7feb47eb9d9260ade38aa233dfe7e5d8f61822772f161c658b5b7e1ca1c0"]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20040010) write$binfmt_elf64(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0x5, 0xc, 0x9, 0x2, 0x3e, 0x3, 0xd1, 0x40, 0x181, 0x4, 0x0, 0x38, 0x3, 0x3, 0xa}, [{0x4, 0xfffffffc, 0x10000, 0x3, 0x7, 0x10001, 0x2, 0x1}, {0x1, 0xffffa392, 0x4, 0x0, 0xffffffff858412f7, 0x4, 0x7, 0x2}, {0x6474e551, 0x1, 0xa1, 0x4, 0x0, 0x800, 0x1, 0x100000000}], "34ba4b9c87f152d4eaecb41288638d159a488372f5203516b3e2a4f1bade6ecd1deda355caadbc009f68694d448f7ee867daf3a9e8f0be0c6fe72761b502e89bb99d59d2b6d81eb91c5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa32) capset(&(0x7f0000001000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001040)={0xfffffff7, 0x80000000, 0x6, 0x5a6, 0x3, 0x8}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000001080)) r4 = syz_open_dev$MSR(&(0x7f00000010c0), 0x6, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000001100)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001500)={0x0, r4, 0x80000}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001540)={&(0x7f0000001140)="3e54300b0d25c0b79a0ce89a6845db0c6b72448fbb7d271ac7e9224a1754f474104cb06060131468d2f7df7955dd1fe331e8985a6be2c4b867bca12f1ad41d93cfac2234e031b0802e17c88dd49d190ebd9b8f66c92a6b2f7ed1ce9c857d96ef6837f870258fad4278f5205da240f332d9e7c91cecb559288c34769021d5d5587b83e647cb029b8a914e722c4b639d0ab1606ba98ce8f267e967e5e1b5707debb003a1e7ad24a1fb0b0d51390ec5a999f8db3907a4318e469a9129d753c3512bf96682bb60d6e15d153dd8f652d0fc2946e4", &(0x7f0000001240)=""/135, &(0x7f0000001300)="627ad5fa17a7c73f9b035bf4f4844fa6e0cc82a86bb9513c3886d61947c8d7b2887e86867e9c514fabcc606839075d7af9066d0367ca5bacd564f490954a49ae8b21056f87f5bb276f87c1d787180fb92795f03da572359942d0d022d640ce23878bc87f4c9ea482960aeb6adcdc6eb19f99f78952e239c70a7b3129c62333dc64e0abecc61ff6bbfb74fd58107f37262707ca7b0536c67a80dc65a0a2bf7ef45e6cccb0f00af12b21e489460ed77a3f31e29640a50b31c1217977a0bf8265853ffa475cd0872ee207e8b0", &(0x7f0000001400)="955d3bc8ef00016cb64c68f2a66c6c6ecf6e463fc79dd695b6fb6ee2c8ed1a2c951b5b35d9ad4a48e48741ac4827ad1bb44f2a332a7c4b1c7db829e54d7408cb7c93b4c954c9a4ff98864c0aeb8255aa8638429a69dc7b22916ff655e31d0afb02bbf8d52f16f9c2b0dedb4f0bbe19800035c794d9215dd0143c782ed1f3a8078ebc60b0834a84b9aab3354d1b80ed1f5a08e6c4bae709c880ce86bc23fff793832d452babe27354c41ae20397d083c9c0accdabd82d46deb4771c3b873f4f86dbcee94c7b1432a12c612d4003b8d63799fe104a51e2d0f9abd6c6313cc5", 0x4, r5, 0x4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) mount_setattr(r5, &(0x7f00000015c0)='./file0\x00', 0x8000, &(0x7f0000001600)={0x84, 0x0, 0x0, {r5}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001700)=@buf={0xa6, &(0x7f0000001640)="f6a5924594d378a225bc894b2f5d884f98419c4c22ad82d94aeda9445e0a6b95fbde1673a08a2cf15af95a2082e959dfbdd3f03735aa9bf24cf845b790410f043cc63ad4696d26a05a05b8555cd56bc7cf450babccb22a7fc4a470e7426bd0d7e144b9b23aae3ff7a18a89dc10cc1d89983566efeebc0309edc89be9ef178bd1e5f1c1940187f7550593eea79753120582daafdcb4bc31bf3293842dff241bd198852f7bf35b"}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vimc0(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) fallocate(r6, 0x18, 0xfffffff7, 0x2) openat$iommufd(0xffffff9c, &(0x7f0000001780), 0x10003, 0x0) memfd_create(&(0x7f00000017c0)='*]\x00', 0x0) 1.549764557s ago: executing program 3 (id=315): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x0) (async, rerun: 32) listen(r0, 0xfffffffd) (rerun: 32) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x61, 0xba, 0x7, 0x22, @loopback, @mcast2, 0x10, 0x700, 0xffffffff, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, 0x5, 0x3ff, 0x0, 0x500, 0x287933cb, 0x40000100, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x9, 0x0, 0x30, 0x0, @ib={0x1b, 0x5, 0x3, {"89a2afaad074d4df11bafc6159ca61e6"}, 0x59ae, 0x7, 0x8}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x3}}}, 0x118) (async) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x10, 0x6, 0x4ec, 0x190, 0x33c, 0x190, 0x190, 0xc8, 0x424, 0x424, 0x424, 0x424, 0x424, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [], 'sit0\x00', 'gretap0\x00', {}, {0xff}, 0x67, 0x0, 0x1, 0x40}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x548) (async, rerun: 32) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x2, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1.547126325s ago: executing program 3 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0xc0, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xac, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_xt={0x50, 0x17, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000065c750c8e1ddb21e2c8c9f839baebf6040da9c0230d8429adb5f", @ANYRES16=r3, @ANYBLOB="000028bd7000fedbdf255200000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000400000043000000050089001000000005008800090000000800cb00018000000800cb00720600002600060008021100000000000500880001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x2000000b) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$rds(r7, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) read(r6, 0x0, 0x0) close(r6) close(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40585414, &(0x7f0000000040)={{0x0, 0x0, 0x4fe, 0x3, 0x6}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.013648577s ago: executing program 1 (id=316): r0 = io_uring_setup(0x346e, &(0x7f0000000000)={0x0, 0xa8b8, 0x400, 0x2, 0x278}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000100)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000040)="05996a2de85e5e6bc225b35bd223551a35fc56d88814979a6fdae8e6438e293ea14eb81e3321e66a4a74c9bda8742c77acfd1d68ff2d2fd41581b6f9f5d7b56437d33b427ee3f436e48622d4f3aa", 0x4e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.012753181s ago: executing program 2 (id=317): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000100)={0x2, {0x2, 0xffff, 0x0, 0x0, 0xffff, 0x1}}) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000400), 0x8000, 0x0) mq_open(&(0x7f0000000000)='\xe7s\xf3\x84\xd1\xad\x92\xe3b\x0f\n1\rA\xf6c76\xf9\x946\x13\xc0\xdf\x15\xa9\x0e0j!F:)Y\xbf\xc3~\xc7D^\x96H\x00\x00\x00\x00\x00\x00\x00T\xd4\xe9\xfc&', 0x2, 0x110, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x608040, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xcb82, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8a000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x2, @multicast2}, {0x20000010304, @dev}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000500)) 1.010957095s ago: executing program 3 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(r0) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r8, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 890.110686ms ago: executing program 3 (id=319): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_collapse_huge_page_isolate\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='W', 0x1}], 0x1}}], 0x1, 0x40000) syz_usb_disconnect(r0) fcntl$setstatus(r1, 0x4, 0x0) 99.562862ms ago: executing program 2 (id=320): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553f", 0x1f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 0s ago: executing program 2 (id=321): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff10c}]}, 0x8) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x3}) clock_getres(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000340)={'vcan0\x00', {0x2, 0x0, @local}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x9a, 0x1, 0x6, 0xa, @private1, @mcast2, 0x7, 0x700, 0x10000, 0xa}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0xc, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0xfffffffffffffedc, 0x0, 0x0, 0x10, 0xb7, @void, @value}, 0x94) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r8, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) r9 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48926' (ED25519) to the list of known hosts. [ 41.064671][ T5936] cgroup: Unknown subsys name 'net' [ 41.185624][ T5936] cgroup: Unknown subsys name 'cpuset' [ 41.189006][ T5936] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.060426][ T5936] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.146794][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.151237][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.151987][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.153504][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.153912][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.154671][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.154864][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.155209][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.155320][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.156330][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.156753][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.157078][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.157828][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.158008][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.158051][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.159164][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.159424][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.159471][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.160228][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.160540][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.162658][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.164867][ T5956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.166916][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.169331][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.383032][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 44.414887][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 44.500329][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 44.581105][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.586799][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.589932][ T5947] bridge_slave_0: entered allmulticast mode [ 44.593419][ T5947] bridge_slave_0: entered promiscuous mode [ 44.596978][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 44.635240][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.638023][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.640735][ T5947] bridge_slave_1: entered allmulticast mode [ 44.644113][ T5947] bridge_slave_1: entered promiscuous mode [ 44.694602][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.711477][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.713796][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.715895][ T5951] bridge_slave_0: entered allmulticast mode [ 44.718059][ T5951] bridge_slave_0: entered promiscuous mode [ 44.722536][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.756317][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.758505][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.760585][ T5951] bridge_slave_1: entered allmulticast mode [ 44.762846][ T5951] bridge_slave_1: entered promiscuous mode [ 44.798837][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.800932][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.803217][ T5959] bridge_slave_0: entered allmulticast mode [ 44.805683][ T5959] bridge_slave_0: entered promiscuous mode [ 44.816619][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.820973][ T5947] team0: Port device team_slave_0 added [ 44.823732][ T5947] team0: Port device team_slave_1 added [ 44.833249][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.835435][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.838285][ T5950] bridge_slave_0: entered allmulticast mode [ 44.840786][ T5950] bridge_slave_0: entered promiscuous mode [ 44.844330][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.846706][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.849081][ T5959] bridge_slave_1: entered allmulticast mode [ 44.852752][ T5959] bridge_slave_1: entered promiscuous mode [ 44.856316][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.866918][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.869022][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.871250][ T5950] bridge_slave_1: entered allmulticast mode [ 44.875663][ T5950] bridge_slave_1: entered promiscuous mode [ 44.925676][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.929254][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.933505][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.943932][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.946088][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.954663][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.959263][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.973764][ T5951] team0: Port device team_slave_0 added [ 44.976104][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.978157][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.986334][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.007619][ T5959] team0: Port device team_slave_0 added [ 45.010671][ T5951] team0: Port device team_slave_1 added [ 45.035825][ T5959] team0: Port device team_slave_1 added [ 45.049709][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.052748][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.060306][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.065192][ T5950] team0: Port device team_slave_0 added [ 45.084124][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.087020][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.097581][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.103150][ T5950] team0: Port device team_slave_1 added [ 45.120140][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.123508][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.131458][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.154700][ T5947] hsr_slave_0: entered promiscuous mode [ 45.156844][ T5947] hsr_slave_1: entered promiscuous mode [ 45.169024][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.171085][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.180523][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.189429][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.191471][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.198998][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.205508][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.207638][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.216682][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.259469][ T5951] hsr_slave_0: entered promiscuous mode [ 45.262590][ T5951] hsr_slave_1: entered promiscuous mode [ 45.265385][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.268756][ T5951] Cannot create hsr debugfs directory [ 45.299673][ T5959] hsr_slave_0: entered promiscuous mode [ 45.302728][ T5959] hsr_slave_1: entered promiscuous mode [ 45.305318][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.308180][ T5959] Cannot create hsr debugfs directory [ 45.368391][ T5950] hsr_slave_0: entered promiscuous mode [ 45.370834][ T5950] hsr_slave_1: entered promiscuous mode [ 45.375344][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.377937][ T5950] Cannot create hsr debugfs directory [ 45.533986][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.549458][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.556016][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.562814][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.567932][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.573360][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.578505][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.586637][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.603438][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.615266][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.626489][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.643749][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.664310][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.673094][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.677498][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.691378][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.713403][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.733676][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.750731][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.753043][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.766431][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.768587][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.782469][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.804055][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.813293][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.818172][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.821096][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.832853][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.835538][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.859810][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.868859][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.880975][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.884009][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.896136][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.899632][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.901924][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.916876][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.919201][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.929971][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.932208][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.995211][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.014204][ T5947] veth0_vlan: entered promiscuous mode [ 46.024146][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.028337][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.035152][ T5947] veth1_vlan: entered promiscuous mode [ 46.061672][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.066881][ T5959] veth0_vlan: entered promiscuous mode [ 46.075669][ T5959] veth1_vlan: entered promiscuous mode [ 46.079755][ T5951] veth0_vlan: entered promiscuous mode [ 46.081954][ T5947] veth0_macvtap: entered promiscuous mode [ 46.089117][ T5947] veth1_macvtap: entered promiscuous mode [ 46.095876][ T5951] veth1_vlan: entered promiscuous mode [ 46.106698][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.114696][ T5959] veth0_macvtap: entered promiscuous mode [ 46.117772][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.127011][ T5950] veth0_vlan: entered promiscuous mode [ 46.130182][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.133869][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.136515][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.139252][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.143030][ T5959] veth1_macvtap: entered promiscuous mode [ 46.146469][ T5951] veth0_macvtap: entered promiscuous mode [ 46.150567][ T5950] veth1_vlan: entered promiscuous mode [ 46.153417][ T5951] veth1_macvtap: entered promiscuous mode [ 46.159367][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.164422][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.167934][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.173724][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.176876][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.180304][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.182888][ T5956] Bluetooth: hci3: command tx timeout [ 46.182893][ T5948] Bluetooth: hci2: command tx timeout [ 46.182897][ T66] Bluetooth: hci0: command tx timeout [ 46.201388][ T5950] veth0_macvtap: entered promiscuous mode [ 46.205792][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.209075][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.212244][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.215399][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.219109][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.224123][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.227378][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.230613][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.234975][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.259021][ T5950] veth1_macvtap: entered promiscuous mode [ 46.262194][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.262261][ T5948] Bluetooth: hci1: command tx timeout [ 46.265568][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.265585][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.274796][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.278389][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.285231][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.288074][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.297746][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.300363][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.303532][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.306235][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.312577][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.315714][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.318658][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.321995][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.324793][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.327815][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.331372][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.335568][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.339503][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.343523][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.347691][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.351468][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.354865][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.359195][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.373403][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.376826][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.380228][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.384995][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.394436][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.396949][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.406421][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.409448][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.435737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.437105][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.438008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.439077][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.448218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.458722][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.459624][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.461040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.464022][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.477915][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.480945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.525966][ T6012] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 46.561702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.567368][ T5948] Bluetooth: hci2: SCO packet for unknown connection handle 100 [ 46.571752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.582198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.585288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 46.631308][ T6030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 46.633368][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 46.637845][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 46.688811][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 46.691212][ T6030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 46.743131][ T6036] /dev/nbd1: Can't open blockdev [ 46.902431][ T56] usb 38-1: SetAddress Request (2) to port 0 [ 46.905025][ T56] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 47.046554][ T6032] vhci_hcd: connection reset by peer [ 47.049923][ T39] vhci_hcd: stop threads [ 47.051486][ T39] vhci_hcd: release socket [ 47.053676][ T39] vhci_hcd: disconnect device [ 47.081616][ T5990] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 47.233224][ T5990] usb 8-1: not running at top speed; connect to a high speed hub [ 47.235598][ T5990] usb 8-1: too many configurations: 93, using maximum allowed: 8 [ 47.241202][ T5990] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 47.243752][ T5990] usb 8-1: can't read configurations, error -61 [ 47.371762][ T5990] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 47.523622][ T5990] usb 8-1: not running at top speed; connect to a high speed hub [ 47.526052][ T5990] usb 8-1: too many configurations: 93, using maximum allowed: 8 [ 47.529469][ T5990] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 47.531944][ T5990] usb 8-1: can't read configurations, error -61 [ 47.532450][ T6058] 9pnet_virtio: no channels available for device syz [ 47.533932][ T5990] usb usb8-port1: attempt power cycle [ 47.721856][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 47.871875][ T5990] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 47.896409][ T5990] usb 8-1: not running at top speed; connect to a high speed hub [ 47.899341][ T5990] usb 8-1: too many configurations: 93, using maximum allowed: 8 [ 47.904243][ T5990] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 47.906716][ T5990] usb 8-1: can't read configurations, error -61 [ 47.914094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.051780][ T5990] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 48.092245][ T5990] usb 8-1: not running at top speed; connect to a high speed hub [ 48.095475][ T5990] usb 8-1: too many configurations: 93, using maximum allowed: 8 [ 48.280301][ T5948] Bluetooth: hci3: command tx timeout [ 48.282878][ T5956] Bluetooth: hci0: command tx timeout [ 48.317183][ T5990] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 48.323345][ T5990] usb 8-1: can't read configurations, error -61 [ 48.327871][ T5990] usb usb8-port1: unable to enumerate USB device [ 48.351818][ T5948] Bluetooth: hci1: command tx timeout [ 48.528479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.591695][ T5948] Bluetooth: hci2: command tx timeout [ 48.665215][ T6060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.210473][ T6101] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 49.468534][ T6108] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 49.477693][ T6108] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 49.481357][ T6108] syz_tun: entered promiscuous mode [ 49.486858][ T6108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.610773][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 49.613758][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 49.801807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.811882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.892886][ T6133] xt_hashlimit: size too large, truncated to 1048576 [ 49.901982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.250885][ T40] audit: type=1800 audit(1735495790.252:2): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.33" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 50.267655][ T6152] serio: Serial port pts0 [ 50.351681][ T5948] Bluetooth: hci3: command tx timeout [ 50.351710][ T5956] Bluetooth: hci0: command tx timeout [ 50.432059][ T5956] Bluetooth: hci1: command tx timeout [ 50.536172][ T6160] syz.3.34: attempt to access beyond end of device [ 50.536172][ T6160] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 50.544010][ T6160] syz.3.34: attempt to access beyond end of device [ 50.544010][ T6160] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 50.549693][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 50.555422][ T6160] syz.3.34: attempt to access beyond end of device [ 50.555422][ T6160] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 50.561286][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 50.574746][ T6160] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 50.578552][ T6160] UDF-fs: Scanning with blocksize 512 failed [ 50.584774][ T6160] syz.3.34: attempt to access beyond end of device [ 50.584774][ T6160] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 50.590837][ T6160] syz.3.34: attempt to access beyond end of device [ 50.590837][ T6160] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 50.596582][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 50.601396][ T6160] syz.3.34: attempt to access beyond end of device [ 50.601396][ T6160] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 50.607044][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 50.611403][ T6160] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 50.615464][ T6160] UDF-fs: Scanning with blocksize 1024 failed [ 50.631702][ T6160] syz.3.34: attempt to access beyond end of device [ 50.631702][ T6160] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 50.643840][ T6160] syz.3.34: attempt to access beyond end of device [ 50.643840][ T6160] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 50.649973][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 50.655617][ T6160] syz.3.34: attempt to access beyond end of device [ 50.655617][ T6160] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 50.659804][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 50.661660][ T5956] Bluetooth: hci2: command tx timeout [ 50.666439][ T6160] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 50.668858][ T6160] UDF-fs: Scanning with blocksize 2048 failed [ 50.671516][ T6160] syz.3.34: attempt to access beyond end of device [ 50.671516][ T6160] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 50.675807][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 50.679399][ T6160] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 50.682561][ T6160] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 50.684849][ T6160] UDF-fs: Scanning with blocksize 4096 failed [ 50.686776][ T6160] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 51.161751][ T833] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 51.246487][ T6170] process 'syz.1.36' launched './file2' with NULL argv: empty string added [ 51.311775][ T6170] binder: 6168:6170 ioctl c0306201 20000680 returned -14 [ 51.353300][ T833] usb 8-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 51.357088][ T833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.360556][ T833] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 35 [ 51.365222][ T833] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.371785][ T833] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.375057][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.377482][ T833] usb 8-1: Product: syz [ 51.378761][ T833] usb 8-1: Manufacturer: syz [ 51.380194][ T833] usb 8-1: SerialNumber: syz [ 51.492803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 51.494268][ T40] audit: type=1326 audit(1735495791.502:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.0.38" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 51.909029][ T6208] 9pnet_fd: Insufficient options for proto=fd [ 51.944616][ T56] usb 38-1: device descriptor read/8, error -110 [ 52.103758][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 52.342714][ T56] usb usb38-port1: attempt power cycle [ 52.422015][ T5948] Bluetooth: hci3: command tx timeout [ 52.425104][ T5956] Bluetooth: hci0: command tx timeout [ 52.511718][ T5956] Bluetooth: hci1: command tx timeout [ 52.593301][ T40] audit: type=1326 audit(1735495792.602:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.601283][ T40] audit: type=1326 audit(1735495792.602:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.609544][ T40] audit: type=1326 audit(1735495792.602:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.617983][ T40] audit: type=1326 audit(1735495792.602:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.624745][ T40] audit: type=1326 audit(1735495792.602:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.632603][ T40] audit: type=1326 audit(1735495792.602:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.639138][ T40] audit: type=1326 audit(1735495792.602:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.645917][ T40] audit: type=1326 audit(1735495792.602:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.40" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 52.706460][ T6230] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 52.711967][ T6230] netlink: 'syz.0.52': attribute type 5 has an invalid length. [ 52.922642][ T56] usb usb38-port1: unable to enumerate USB device [ 53.084310][ T6247] [U] [ 53.085337][ T6247] [U] [ 53.086247][ T6247] [U] [ 53.087123][ T6247] [U] [ 53.088707][ T6247] [U] [ 53.089596][ T6247] [U] [ 53.090450][ T6247] [U] [ 53.091302][ T6247] [U] [ 53.092458][ T6247] [U] [ 53.093324][ T6247] [U] [ 53.094216][ T6247] [U] [ 53.095068][ T6247] [U] [ 53.096161][ T6247] [U] [ 53.097027][ T6247] [U] [ 53.097940][ T6247] [U] [ 53.098789][ T6247] [U] [ 53.099819][ T6247] [U] [ 53.100674][ T6247] [U] [ 53.101552][ T6247] [U] [ 53.102399][ T6247] [U] [ 53.103476][ T6247] [U] [ 53.104349][ T6247] [U] [ 53.105209][ T6247] [U] [ 53.106098][ T6247] [U] [ 53.107938][ T6247] [U] [ 53.108800][ T6247] [U] [ 53.109654][ T6247] [U] [ 53.110501][ T6247] [U] [ 53.111737][ T6247] [U] [ 53.112602][ T6247] [U] [ 53.113498][ T6247] [U] [ 53.114355][ T6247] [U] [ 53.115317][ T6247] [U] [ 53.116205][ T6247] [U] [ 53.117155][ T6247] [U] [ 53.118004][ T6247] [U] [ 53.118904][ T6247] [U] [ 53.119750][ T6247] [U] [ 53.120600][ T6247] [U] [ 53.121516][ T6247] [U] [ 53.122647][ T6247] [U] [ 53.123504][ T6247] [U] [ 53.124385][ T6247] [U] [ 53.125256][ T6247] [U] [ 53.126343][ T6247] [U] [ 53.127202][ T6247] [U] [ 53.128044][ T6247] [U] [ 53.128923][ T6247] [U] [ 53.129949][ T6247] [U] [ 53.130794][ T6247] [U] [ 53.131658][ T6247] [U] [ 53.132498][ T6247] [U] [ 53.133590][ T6247] [U] [ 53.134649][ T6247] [U] [ 53.135565][ T6247] [U] [ 53.136440][ T6247] [U] [ 53.137661][ T6247] [U] [ 53.138526][ T6247] [U] [ 53.139376][ T6247] [U] [ 53.140219][ T6247] [U] [ 53.141221][ T6247] [U] [ 53.142088][ T6247] [U] [ 53.142935][ T6247] [U] [ 53.143780][ T6247] [U] [ 53.144906][ T6247] [U] [ 53.145356][ T6248] netlink: 'syz.1.57': attribute type 27 has an invalid length. [ 53.145772][ T6247] [U] [ 53.149895][ T6247] [U] [ 53.150739][ T6247] [U] [ 53.152064][ T6247] [U] [ 53.152929][ T6247] [U] [ 53.153766][ T6247] [U] [ 53.154611][ T6247] [U] [ 53.155612][ T6247] [U] [ 53.156614][ T6247] [U] [ 53.157837][ T6247] [U] [ 53.159018][ T6247] [U] [ 53.160374][ T6247] [U] [ 53.161467][ T6247] [U] [ 53.162646][ T6247] [U] [ 53.163873][ T6247] [U] [ 53.166271][ T6247] [U] [ 53.167486][ T6247] [U] [ 53.168674][ T6247] [U] [ 53.169869][ T6247] [U] [ 53.171665][ T6247] [U] [ 53.172877][ T6247] [U] [ 53.174060][ T6247] [U] [ 53.175242][ T6247] [U] [ 53.177145][ T6247] [U] [ 53.178366][ T6247] [U] [ 53.179593][ T6247] [U] [ 53.180784][ T6247] [U] [ 53.182492][ T6247] [U] [ 53.183704][ T6247] [U] [ 53.184947][ T6247] [U] [ 53.186121][ T6247] [U] [ 53.201666][ T6247] [U] [ 53.202914][ T6247] [U] [ 53.204111][ T6247] [U] [ 53.205309][ T6247] [U] [ 53.206871][ T6247] [U] [ 53.208078][ T6247] [U] [ 53.209280][ T6247] [U] [ 53.210515][ T6247] [U] [ 53.216368][ T6247] [U] [ 53.217270][ T6247] [U] [ 53.218119][ T6247] [U] [ 53.218988][ T6247] [U] [ 53.220108][ T6247] [U] [ 53.221000][ T6247] [U] [ 53.221837][ T6247] [U] [ 53.222647][ T6247] [U] [ 53.223802][ T6247] [U] [ 53.224680][ T6247] [U] [ 53.225551][ T6247] [U] [ 53.226395][ T6247] [U] [ 53.227320][ T6247] [U] [ 53.228037][ T6248] syz_tun: left promiscuous mode [ 53.228157][ T6247] [U] [ 53.228171][ T6247] [U] [ 53.228183][ T6247] [U] [ 53.232470][ T6247] [U] [ 53.233377][ T6247] [U] [ 53.234260][ T6247] [U] [ 53.235078][ T6247] [U] [ 53.236070][ T6247] [U] [ 53.236893][ T6247] [U] [ 53.237722][ T6247] [U] [ 53.244918][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.247808][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.336943][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.344701][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.395991][ T6248] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.399742][ T6248] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.403566][ T6248] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.407264][ T6248] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.444175][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.876803][ T5956] block nbd0: Receive control failed (result -32) [ 53.907723][ T6246] [U] [ 53.973561][ T6268] block nbd0: shutting down sockets [ 54.059189][ T833] usb 8-1: 0:2 : does not exist [ 54.075912][ T833] usb 8-1: USB disconnect, device number 6 [ 54.201766][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.253316][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 54.359250][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.363449][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.366597][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.370510][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.371712][ T6009] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.374061][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.383456][ T56] usb 6-1: config 0 descriptor?? [ 54.523763][ T6009] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.527355][ T6009] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 54.531831][ T6009] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.535053][ T6009] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 54.539003][ T6009] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 54.551716][ T6009] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.555503][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.558394][ T6009] usb 5-1: Product: syz [ 54.559648][ T6009] usb 5-1: Manufacturer: syz [ 54.566499][ T6009] cdc_wdm 5-1:1.0: skipping garbage [ 54.568179][ T6009] cdc_wdm 5-1:1.0: skipping garbage [ 54.573471][ T6009] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 54.575364][ T6009] cdc_wdm 5-1:1.0: Unknown control protocol [ 54.794082][ T56] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 54.797061][ T56] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 54.809947][ T56] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 54.829382][ T6300] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 54.931631][ T5963] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 54.998391][ T6009] usb 6-1: USB disconnect, device number 2 [ 55.047289][ T6303] syz.0.64 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.081999][ T5963] usb 8-1: Using ep0 maxpacket: 8 [ 55.084726][ T5963] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 55.086974][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 55.090286][ T5963] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.094014][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.097301][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 55.102118][ T5963] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 55.104363][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 55.107702][ T5963] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.111184][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.115172][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 55.119488][ T5963] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 55.122509][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 55.125871][ T5963] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.129357][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.132869][ T5963] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 55.138414][ T5963] usb 8-1: string descriptor 0 read error: -22 [ 55.140321][ T5963] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 55.143206][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.148524][ T5963] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 55.402353][ T5988] usb 8-1: USB disconnect, device number 7 [ 55.940567][ T6333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.990491][ T56] libceph: connect (1)[c::]:6789 error -101 [ 55.992590][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 56.033589][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 56.035651][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 56.252658][ T56] libceph: connect (1)[c::]:6789 error -101 [ 56.254569][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 56.291880][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 56.293832][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 56.763917][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 56.766078][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 56.802798][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 56.803696][ T6337] ceph: No mds server is up or the cluster is laggy [ 56.803878][ T6345] ceph: No mds server is up or the cluster is laggy [ 56.804776][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 57.207572][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 57.210492][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 57.215512][ T6009] usb 5-1: USB disconnect, device number 2 [ 57.779017][ T6382] ALSA: mixer_oss: invalid OSS volume '' [ 57.927945][ T6391] evm: overlay not supported [ 57.980431][ T6376] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.985387][ T6376] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 57.990186][ T6376] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.056966][ T40] kauditd_printk_skb: 1257 callbacks suppressed [ 58.057026][ T40] audit: type=1326 audit(1735495798.062:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.065785][ T40] audit: type=1326 audit(1735495798.072:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.073890][ T40] audit: type=1326 audit(1735495798.072:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.080789][ T40] audit: type=1326 audit(1735495798.072:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.090404][ T40] audit: type=1326 audit(1735495798.072:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.098077][ T40] audit: type=1326 audit(1735495798.072:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 58.105152][ T40] audit: type=1326 audit(1735495798.072:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.91" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 59.028670][ T6460] 9pnet_virtio: no channels available for device syz [ 59.802859][ T6494] netlink: 'syz.3.114': attribute type 10 has an invalid length. [ 59.814949][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.830579][ T6494] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.835163][ T6495] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 60.149890][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 60.152541][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 60.250666][ T6516] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 60.255120][ T6512] ceph: No mds server is up or the cluster is laggy [ 60.633666][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.636102][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.638365][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.640575][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.642974][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.645222][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.647438][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.649886][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.652213][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.654434][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.656808][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.658994][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.661214][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.664551][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.666891][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.669263][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.671452][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.673726][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.675884][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.678096][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.680258][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.682592][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.684782][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.686982][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.690255][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.692597][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.694841][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.697267][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.702381][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.704718][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.707057][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.709330][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.711403][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.713585][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.715956][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.718190][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.720576][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.723062][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.725312][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.727585][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.730254][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.732515][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.734739][ T5963] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.740509][ T5963] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 60.799181][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.804045][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.807321][ T6519] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 60.810037][ T6519] bond0 (unregistering): Released all slaves [ 60.826987][ T6522] atomic_op ffff88804bb1c198 conn xmit_atomic 0000000000000000 [ 60.849629][ T6520] No such timeout policy "syz1" [ 60.885735][ T6519] overlay: ./file1 is not a directory [ 61.132646][ T6537] Zero length message leads to an empty skb [ 61.267001][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.271404][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.274305][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.464631][ T5956] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 61.471632][ T5956] Bluetooth: hci3: Injecting HCI hardware error event [ 61.474431][ T5956] Bluetooth: hci3: hardware error 0x00 [ 61.579480][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 61.586878][ T6564] xt_ecn: cannot match TCP bits for non-tcp packets [ 61.682549][ T6571] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 62.626678][ T6607] ipt_REJECT: TCP_RESET invalid for non-tcp [ 62.769399][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 62.896595][ T6617] hfs: can't find a HFS filesystem on dev sr0 [ 63.023100][ T6609] hsr_slave_1 (unregistering): left promiscuous mode [ 63.242378][ T6628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.457915][ T6633] trusted_key: encrypted_key: keylen parameter is missing [ 63.541676][ T5956] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 63.685176][ T6638] Cannot find add_set index 0 as target [ 63.687852][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 64.336561][ T6663] netlink: 'syz.0.161': attribute type 21 has an invalid length. [ 64.581887][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 64.741652][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 64.744499][ T56] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 64.747574][ T56] usb 8-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.750702][ T56] usb 8-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.753571][ T56] usb 8-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.757280][ T56] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 64.759943][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.057970][ T6688] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.172237][ T56] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 65.174271][ T56] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 65.176256][ T56] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 65.178273][ T56] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 65.180296][ T56] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 65.184780][ T56] ntrig 0003:1B96:000A.0004: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 65.219396][ T6701] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 65.224601][ T6701] netlink: 224 bytes leftover after parsing attributes in process `syz.2.172'. [ 65.259402][ T6704] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.429097][ T56] usb 8-1: USB disconnect, device number 8 [ 65.625663][ T6664] hid-generic 0003:0627:0001.0001: pid 6664 passed too short report [ 65.633349][ T6664] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 65.635294][ T6664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.641952][ T6664] vhci_hcd vhci_hcd.0: Device attached [ 65.645767][ T6726] vhci_hcd: cannot find a urb of seqnum 256 max seqnum 0 [ 65.652853][ T64] vhci_hcd: stop threads [ 65.654175][ T64] vhci_hcd: release socket [ 65.655745][ T64] vhci_hcd: disconnect device [ 65.666236][ T6728] syzkaller0: entered promiscuous mode [ 65.668226][ T6728] syzkaller0: entered allmulticast mode [ 66.585040][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.209304][ T6769] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 67.990926][ T6789] ptrace attach of "/syz-executor exec"[6792] was attempted by "/syz-executor exec"[6789] [ 68.259037][ T6805] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 68.304907][ T6813] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 68.306885][ T6813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.309697][ T6813] vhci_hcd vhci_hcd.0: Device attached [ 68.330957][ T6819] binder: BINDER_SET_CONTEXT_MGR already set [ 68.333267][ T6819] binder: 6810:6819 ioctl 4018620d 20000300 returned -16 [ 68.335710][ T6819] binder: 6810:6819 ioctl c0306201 20000080 returned -14 [ 68.343427][ T6817] binder: 6810:6817 ioctl c0306201 20000080 returned -14 [ 68.346221][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.203'. [ 68.350629][ T6817] binder: BINDER_SET_CONTEXT_MGR already set [ 68.353641][ T6817] binder: 6810:6817 ioctl 4018620d 20000040 returned -16 [ 68.353981][ T6814] vhci_hcd: connection closed [ 68.356659][ T1232] vhci_hcd: stop threads [ 68.359370][ T1232] vhci_hcd: release socket [ 68.360733][ T1232] vhci_hcd: disconnect device [ 68.640170][ T6832] macsec1: entered promiscuous mode [ 68.656467][ T6847] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 69.353196][ T6914] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.626289][ T6940] Bluetooth: MGMT ver 1.23 [ 69.846828][ T6960] @ÿ: renamed from veth0_vlan (while UP) [ 69.852792][ T6960] ======================================================= [ 69.852792][ T6960] WARNING: The mand mount option has been deprecated and [ 69.852792][ T6960] and is ignored by this kernel. Remove the mand [ 69.852792][ T6960] option from the mount to silence this warning. [ 69.852792][ T6960] ======================================================= [ 69.990925][ T6964] netlink: 'syz.2.233': attribute type 3 has an invalid length. [ 69.994882][ T6964] netlink: 3 bytes leftover after parsing attributes in process `syz.2.233'. [ 70.098853][ T6955] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.671660][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.825462][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 70.825963][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.831448][ T56] usb 7-1: config 0 has no interfaces? [ 70.835758][ T56] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 70.839165][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.843410][ T56] usb 7-1: Product: syz [ 70.844784][ T56] usb 7-1: Manufacturer: syz [ 70.846276][ T56] usb 7-1: SerialNumber: syz [ 70.850085][ T56] usb 7-1: config 0 descriptor?? [ 71.064855][ T56] usb 7-1: USB disconnect, device number 2 [ 71.118934][ T40] audit: type=1326 audit(1735495811.122:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.127600][ T40] audit: type=1326 audit(1735495811.132:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.155364][ T40] audit: type=1326 audit(1735495811.162:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.161902][ T7008] TCP: out of memory -- consider tuning tcp_mem [ 71.165006][ T40] audit: type=1326 audit(1735495811.162:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.172388][ T40] audit: type=1326 audit(1735495811.162:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.181412][ T40] audit: type=1326 audit(1735495811.162:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.191947][ T40] audit: type=1326 audit(1735495811.162:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.200128][ T40] audit: type=1326 audit(1735495811.162:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.200228][ T7010] veth0_to_team: entered promiscuous mode [ 71.210532][ T7010] veth0_to_team: entered allmulticast mode [ 71.210532][ T40] audit: type=1326 audit(1735495811.162:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.210568][ T40] audit: type=1326 audit(1735495811.162:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 71.497389][ T7023] netlink: 'syz.3.242': attribute type 27 has an invalid length. [ 71.528992][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.532147][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.595134][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.602568][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.619610][ T7023] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 71.650349][ T7023] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.653224][ T7023] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.655867][ T7023] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.658517][ T7023] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.693976][ T7043] binder: 7042:7043 ioctl c0306201 20000140 returned -14 [ 73.203078][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.464522][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.891666][ T833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.127116][ T833] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.130418][ T833] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.133412][ T833] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.136191][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.142113][ T7083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.146587][ T833] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.404913][ T7113] netlink: 72 bytes leftover after parsing attributes in process `syz.2.262'. [ 75.408356][ T57] usb 7-1: USB disconnect, device number 3 [ 76.065906][ T7111] syz.3.269 (7111): drop_caches: 2 [ 76.185498][ T7130] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 76.267090][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 76.293647][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.310047][ T7137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.431159][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 76.868882][ T7145] bpf: Bad value for 'uid' [ 77.106408][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.302331][ T7149] 9pnet_fd: Insufficient options for proto=fd [ 77.598354][ T7161] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20002 [ 77.664754][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 77.664765][ T40] audit: type=1400 audit(1735495817.672:1319): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7165 comm="syz.2.285" [ 77.706284][ T7168] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 77.708638][ T7168] syzkaller0: owner set to 823 [ 77.781714][ T6056] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.951733][ T6056] usb 5-1: Using ep0 maxpacket: 8 [ 77.954647][ T6056] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.956881][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.960237][ T6056] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.963953][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.967440][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.971615][ T6056] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.973882][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.977191][ T6056] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.980633][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.984058][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.988075][ T6056] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.990315][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.991661][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.993763][ T6056] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.999578][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.002947][ T6056] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.008327][ T6056] usb 5-1: string descriptor 0 read error: -22 [ 78.010240][ T6056] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.013046][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.018653][ T6056] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 78.097211][ T7172] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.103528][ T7172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.163679][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.167081][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.170134][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.173500][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.177308][ T7168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.180874][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.277712][ T833] usb 5-1: USB disconnect, device number 3 [ 78.382747][ T40] audit: type=1326 audit(1735495818.392:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 78.389373][ T40] audit: type=1326 audit(1735495818.392:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd15a7 code=0x7ffc0000 [ 78.396014][ T40] audit: type=1326 audit(1735495818.392:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 78.402520][ T40] audit: type=1326 audit(1735495818.392:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd15a7 code=0x7ffc0000 [ 78.409048][ T40] audit: type=1326 audit(1735495818.392:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 78.415544][ T40] audit: type=1326 audit(1735495818.392:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd15a7 code=0x7ffc0000 [ 78.422006][ T40] audit: type=1326 audit(1735495818.392:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 78.428614][ T40] audit: type=1326 audit(1735495818.392:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd15a7 code=0x7ffc0000 [ 78.435257][ T40] audit: type=1326 audit(1735495818.392:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 78.451663][ T6056] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.481213][ T9] usb 7-1: USB disconnect, device number 4 [ 78.612368][ T6056] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 78.616678][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.619780][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.624282][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.628001][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.630842][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.635566][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.638855][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.641760][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.645115][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.647812][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.650656][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.654132][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.656839][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.659541][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.663086][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.667177][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.669883][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.673321][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.676266][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.678972][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.682442][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.685760][ T6056] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.689018][ T6056] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.693465][ T6056] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.697717][ T6056] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 78.701220][ T6056] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 78.704458][ T6056] usb 6-1: Product: syz [ 78.705732][ T6056] usb 6-1: Manufacturer: syz [ 78.707132][ T6056] usb 6-1: SerialNumber: syz [ 78.709616][ T6056] usb 6-1: config 0 descriptor?? [ 78.714668][ T6056] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.484117][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 79.484852][ T9] usb 6-1: USB disconnect, device number 3 [ 79.490987][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 79.842426][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.027906][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 80.039535][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.046691][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.055583][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.065403][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.068081][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.071337][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.092425][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.095213][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.098456][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.104529][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.107225][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.110491][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.119009][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.121810][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.143280][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.146803][ T7214] netlink: 'syz.0.297': attribute type 4 has an invalid length. [ 80.150361][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.153316][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.156646][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.159878][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.165318][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.170407][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.174568][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.177257][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.182229][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.194681][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.197390][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.199892][ T9] usb 6-1: Product: syz [ 80.201169][ T9] usb 6-1: Manufacturer: syz [ 80.209762][ T9] usb 6-1: SerialNumber: syz [ 80.212258][ T9] usb 6-1: config 0 descriptor?? [ 80.216689][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 80.397128][ T7224] usb 2-1: USB disconnect, device number 2 [ 80.434522][ T57] usb 6-1: USB disconnect, device number 4 [ 80.457170][ T57] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 80.468403][ T7225] hub 2-0:1.0: USB hub found [ 80.470909][ T7225] hub 2-0:1.0: 6 ports detected [ 80.561648][ T6056] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.671716][ T9] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 80.711806][ T6056] usb 7-1: Using ep0 maxpacket: 8 [ 80.717288][ T6056] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.719533][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.726905][ T6056] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.730384][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.733829][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.738488][ T6056] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.740733][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.744802][ T6056] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.751379][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.761873][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.766485][ T6056] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.768703][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.772475][ T6056] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.776019][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.779314][ T6056] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.787071][ T6056] usb 7-1: string descriptor 0 read error: -22 [ 80.788994][ T6056] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.792776][ T6056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.798813][ T6056] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 80.866832][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 80.870828][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 80.873940][ T9] usb 2-1: Product: QEMU USB Tablet [ 80.876913][ T9] usb 2-1: Manufacturer: QEMU [ 80.879591][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 80.911148][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input6 [ 80.996326][ T9] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 81.070716][ T30] cfg80211: failed to load regulatory.db [ 81.120448][ T6056] usb 7-1: USB disconnect, device number 5 [ 81.161709][ T833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.208824][ T7233] syz.1.302[7233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.209007][ T7233] syz.1.302[7233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.212636][ T7233] syz.1.302[7233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.311697][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 81.318152][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.322452][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.325825][ T833] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 81.328773][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.352602][ T833] usb 5-1: config 0 descriptor?? [ 81.763645][ T833] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 82.010863][ T7249] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 82.013359][ T7249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.306'. [ 82.016130][ T7249] netlink: 'syz.1.306': attribute type 5 has an invalid length. [ 82.018429][ T7249] netlink: 3 bytes leftover after parsing attributes in process `syz.1.306'. [ 82.084497][ T7260] netlink: 9 bytes leftover after parsing attributes in process `syz.1.309'. [ 82.089355][ T7260] 0·X: renamed from hsr0 [ 82.099794][ T7260] 0·X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.107731][ T7260] 0·X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.114933][ T7260] 0·X: entered allmulticast mode [ 82.116917][ T7260] hsr_slave_0: entered allmulticast mode [ 82.119172][ T7260] hsr_slave_1: entered allmulticast mode [ 82.122769][ T7260] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 82.141410][ T6056] usb 5-1: USB disconnect, device number 4 [ 82.461991][ T7286] usb 2-1: USB disconnect, device number 3 [ 82.515006][ T7280] netlink: 560 bytes leftover after parsing attributes in process `syz.2.311'. [ 82.542847][ T7277] hub 2-0:1.0: USB hub found [ 82.546288][ T7277] hub 2-0:1.0: 6 ports detected [ 82.732437][ T6056] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 82.761673][ T7294] capability: warning: `syz.3.314' uses 32-bit capabilities (legacy support in use) [ 82.915585][ T7301] atomic_op ffff8880128c9998 conn xmit_atomic 0000000000000000 [ 82.916934][ T6056] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 82.920726][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 82.925726][ T6056] usb 2-1: Product: QEMU USB Tablet [ 82.927914][ T6056] usb 2-1: Manufacturer: QEMU [ 82.929655][ T6056] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 82.955817][ T6056] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input7 [ 82.991871][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.027364][ T6056] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 83.133826][ T30] usb 5-1: device descriptor read/64, error -71 [ 83.381638][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.531637][ T30] usb 5-1: device descriptor read/64, error -71 [ 83.611672][ T7314] nbd2: detected capacity change from 0 to 20 [ 83.617845][ T7096] block nbd2: Send control failed (result -89) [ 83.620290][ T7096] block nbd2: Request send failed, requeueing [ 83.624452][ T5956] block nbd2: Receive control failed (result -32) [ 83.628410][ T1160] block nbd2: Dead connection, failed to find a fallback [ 83.631160][ T1160] block nbd2: shutting down sockets [ 83.633664][ T6056] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.636981][ T1160] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.641202][ T1160] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.645109][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.649122][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.651936][ T30] usb usb5-port1: attempt power cycle [ 83.655894][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.659652][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.662418][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.665132][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.667482][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.670182][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.672725][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.675430][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.677812][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.680504][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.682985][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.685713][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.688046][ T7096] ldm_validate_partition_table(): Disk read failed. [ 83.690287][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.693128][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.695551][ T7096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.698266][ T7096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 83.701035][ T7096] Dev nbd2: unable to read RDB block 0 [ 83.702891][ T7096] nbd2: unable to read partition table [ 83.704693][ T7096] nbd2: partition table beyond EOD, truncated [ 83.710090][ T7096] ldm_validate_partition_table(): Disk read failed. [ 83.712427][ T7096] Dev nbd2: unable to read RDB block 0 [ 83.714300][ T7096] nbd2: unable to read partition table [ 83.716029][ T7096] nbd2: partition table beyond EOD, truncated [ 83.731651][ T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 83.791774][ T6056] usb 6-1: Using ep0 maxpacket: 8 [ 83.795805][ T6056] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 83.799005][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.803836][ T6056] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.808708][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.813487][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.819180][ T6056] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 83.822415][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.827024][ T6056] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.831976][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.836447][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.841528][ T6056] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 83.844672][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.848984][ T6056] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.853919][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.858477][ T6056] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.866385][ T6056] usb 6-1: string descriptor 0 read error: -22 [ 83.869061][ T6056] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.872840][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.881350][ T6056] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 83.903110][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.906801][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.909794][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.912794][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.917282][ T7318] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.921111][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.001696][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.022197][ T30] usb 5-1: device descriptor read/8, error -71 [ 84.136311][ T6056] usb 6-1: USB disconnect, device number 5 [ 84.184266][ T56] usb 8-1: USB disconnect, device number 9 [ 84.261201][ T40] kauditd_printk_skb: 1634 callbacks suppressed [ 84.261216][ T40] audit: type=1326 audit(1735495824.262:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.262554][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.265506][ T40] audit: type=1326 audit(1735495824.262:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.282638][ T40] audit: type=1326 audit(1735495824.272:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.291287][ T40] audit: type=1326 audit(1735495824.272:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.297156][ T30] usb 5-1: device descriptor read/8, error -71 [ 84.300337][ T40] audit: type=1326 audit(1735495824.272:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.308126][ T40] audit: type=1326 audit(1735495824.272:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.314640][ T40] audit: type=1326 audit(1735495824.302:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.321052][ T40] audit: type=1326 audit(1735495824.302:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.327522][ T40] audit: type=1326 audit(1735495824.302:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.334133][ T40] audit: type=1326 audit(1735495824.302:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 84.412128][ T30] usb usb5-port1: unable to enumerate USB device [ 84.483530][ T7330] [ 84.484350][ T7330] ====================================================== [ 84.486473][ T7330] WARNING: possible circular locking dependency detected [ 84.488606][ T7330] 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 Not tainted [ 84.492159][ T7330] ------------------------------------------------------ [ 84.494266][ T7330] syz.2.321/7330 is trying to acquire lock: [ 84.496040][ T7330] ffff888023acc088 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.499125][ T7330] [ 84.499125][ T7330] but task is already holding lock: [ 84.501362][ T7330] ffff888023acbb58 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 84.504794][ T7330] [ 84.504794][ T7330] which lock already depends on the new lock. [ 84.504794][ T7330] [ 84.507880][ T7330] [ 84.507880][ T7330] the existing dependency chain (in reverse order) is: [ 84.510587][ T7330] [ 84.510587][ T7330] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 84.513218][ T7330] blk_mq_submit_bio+0x1fb6/0x24c0 [ 84.514894][ T7330] __submit_bio+0x384/0x540 [ 84.516414][ T7330] submit_bio_noacct_nocheck+0x698/0xd70 [ 84.518284][ T7330] submit_bio_noacct+0x93a/0x1e20 [ 84.519976][ T7330] block_read_full_folio+0x812/0xa50 [ 84.521756][ T7330] filemap_read_folio+0xc6/0x2a0 [ 84.523401][ T7330] filemap_get_pages+0x155f/0x1be0 [ 84.525117][ T7330] filemap_read+0x3ca/0xd70 [ 84.526642][ T7330] blkdev_read_iter+0x187/0x480 [ 84.528270][ T7330] vfs_read+0x87f/0xbe0 [ 84.529718][ T7330] ksys_read+0x12b/0x250 [ 84.531188][ T7330] do_syscall_64+0xcd/0x250 [ 84.532723][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.534686][ T7330] [ 84.534686][ T7330] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 84.537240][ T7330] down_read+0x9a/0x330 [ 84.538685][ T7330] filemap_fault+0x2e0/0x2820 [ 84.540271][ T7330] __do_fault+0x10a/0x490 [ 84.541753][ T7330] do_pte_missing+0x1a8/0x3e00 [ 84.543355][ T7330] __handle_mm_fault+0x103c/0x2a40 [ 84.545064][ T7330] handle_mm_fault+0x3fa/0xaa0 [ 84.546672][ T7330] __get_user_pages+0x8d9/0x3b50 [ 84.548321][ T7330] faultin_page_range+0x24a/0x980 [ 84.550010][ T7330] do_madvise+0x504/0x770 [ 84.551506][ T7330] __ia32_sys_madvise+0xa7/0x110 [ 84.553150][ T7330] __do_fast_syscall_32+0x73/0x120 [ 84.554854][ T7330] do_fast_syscall_32+0x32/0x80 [ 84.556485][ T7330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.558553][ T7330] [ 84.558553][ T7330] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 84.560843][ T7330] __might_fault+0x11b/0x190 [ 84.562396][ T7330] _copy_from_user+0x29/0xd0 [ 84.563971][ T7330] __blk_trace_setup+0xa8/0x180 [ 84.565604][ T7330] blk_trace_setup+0x47/0x70 [ 84.567173][ T7330] sg_ioctl+0x7a3/0x26b0 [ 84.568647][ T7330] compat_ptr_ioctl+0x6b/0xa0 [ 84.570247][ T7330] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 84.572017][ T7330] __do_fast_syscall_32+0x73/0x120 [ 84.573746][ T7330] do_fast_syscall_32+0x32/0x80 [ 84.575372][ T7330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.577445][ T7330] [ 84.577445][ T7330] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 84.579803][ T7330] __mutex_lock+0x19b/0xa60 [ 84.581330][ T7330] blk_register_queue+0x13c/0x4f0 [ 84.582990][ T7330] add_disk_fwnode+0x785/0x1300 [ 84.584649][ T7330] brd_alloc.isra.0+0x50a/0x7c0 [ 84.586263][ T7330] brd_init+0x12b/0x1d0 [ 84.587679][ T7330] do_one_initcall+0x128/0x630 [ 84.589293][ T7330] kernel_init_freeable+0x58f/0x8b0 [ 84.591021][ T7330] kernel_init+0x1c/0x2b0 [ 84.592513][ T7330] ret_from_fork+0x45/0x80 [ 84.594056][ T7330] ret_from_fork_asm+0x1a/0x30 [ 84.595669][ T7330] [ 84.595669][ T7330] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 84.597957][ T7330] __lock_acquire+0x249e/0x3c40 [ 84.599595][ T7330] lock_acquire.part.0+0x11b/0x380 [ 84.601299][ T7330] __mutex_lock+0x19b/0xa60 [ 84.602831][ T7330] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.604818][ T7330] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 84.606656][ T7330] nbd_start_device+0x15b/0xd70 [ 84.608290][ T7330] nbd_ioctl+0x21a/0xfd0 [ 84.609768][ T7330] compat_blkdev_ioctl+0x2f7/0x750 [ 84.611481][ T7330] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 84.613246][ T7330] __do_fast_syscall_32+0x73/0x120 [ 84.614946][ T7330] do_fast_syscall_32+0x32/0x80 [ 84.616582][ T7330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.618649][ T7330] [ 84.618649][ T7330] other info that might help us debug this: [ 84.618649][ T7330] [ 84.621706][ T7330] Chain exists of: [ 84.621706][ T7330] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51 [ 84.621706][ T7330] [ 84.626070][ T7330] Possible unsafe locking scenario: [ 84.626070][ T7330] [ 84.628365][ T7330] CPU0 CPU1 [ 84.630009][ T7330] ---- ---- [ 84.631638][ T7330] lock(&q->q_usage_counter(io)#51); [ 84.633265][ T7330] lock(mapping.invalidate_lock#2); [ 84.635622][ T7330] lock(&q->q_usage_counter(io)#51); [ 84.637967][ T7330] lock(&q->sysfs_lock); [ 84.639291][ T7330] [ 84.639291][ T7330] *** DEADLOCK *** [ 84.639291][ T7330] [ 84.641726][ T7330] 4 locks held by syz.2.321/7330: [ 84.643245][ T7330] #0: ffff88802401c198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 84.646055][ T7330] #1: ffff88802401c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 84.649285][ T7330] #2: ffff888023acbb58 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 84.652823][ T7330] #3: ffff888023acbb90 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 84.656441][ T7330] [ 84.656441][ T7330] stack backtrace: [ 84.658214][ T7330] CPU: 1 UID: 0 PID: 7330 Comm: syz.2.321 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 84.661389][ T7330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.664626][ T7330] Call Trace: [ 84.665645][ T7330] [ 84.666548][ T7330] dump_stack_lvl+0x116/0x1f0 [ 84.667981][ T7330] print_circular_bug+0x41c/0x610 [ 84.669541][ T7330] check_noncircular+0x31a/0x400 [ 84.671053][ T7330] ? __pfx_check_noncircular+0x10/0x10 [ 84.672732][ T7330] ? save_trace+0x42/0xa10 [ 84.674115][ T7330] ? add_lock_to_list+0x17d/0x390 [ 84.675631][ T7330] __lock_acquire+0x249e/0x3c40 [ 84.677122][ T7330] ? __pfx___lock_acquire+0x10/0x10 [ 84.678695][ T7330] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.680466][ T7330] ? stack_depot_save_flags+0x36d/0x9e0 [ 84.682135][ T7330] lock_acquire.part.0+0x11b/0x380 [ 84.683675][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.685575][ T7330] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.687265][ T7330] ? rcu_is_watching+0x12/0xc0 [ 84.688729][ T7330] ? trace_lock_acquire+0x14e/0x1f0 [ 84.690310][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.692173][ T7330] ? lock_acquire+0x2f/0xb0 [ 84.693554][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.695429][ T7330] __mutex_lock+0x19b/0xa60 [ 84.696816][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.698670][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.700539][ T7330] ? __pfx___mutex_lock+0x10/0x10 [ 84.702053][ T7330] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.703914][ T7330] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 84.705739][ T7330] ? lock_acquire.part.0+0x11b/0x380 [ 84.707334][ T7330] ? __mutex_trylock_common+0xea/0x250 [ 84.708983][ T7330] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.710780][ T7330] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 84.712499][ T7330] ? rcu_is_watching+0x12/0xc0 [ 84.713977][ T7330] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 84.715903][ T7330] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.717690][ T7330] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 84.719434][ T7330] ? __pfx___mutex_lock+0x10/0x10 [ 84.720949][ T7330] ? trace_contention_end+0xee/0x140 [ 84.722535][ T7330] ? __mutex_lock+0x1cc/0xa60 [ 84.723978][ T7330] ? nbd_ioctl+0x151/0xfd0 [ 84.725337][ T7330] ? __pfx___mutex_lock+0x10/0x10 [ 84.726852][ T7330] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 84.728509][ T7330] nbd_start_device+0x15b/0xd70 [ 84.730006][ T7330] ? bpf_lsm_capable+0x9/0x10 [ 84.731434][ T7330] nbd_ioctl+0x21a/0xfd0 [ 84.732726][ T7330] ? __pfx_nbd_ioctl+0x10/0x10 [ 84.734192][ T7330] ? __pfx_lock_release+0x10/0x10 [ 84.735717][ T7330] ? trace_lock_acquire+0x14e/0x1f0 [ 84.737294][ T7330] ? __pfx_nbd_ioctl+0x10/0x10 [ 84.738745][ T7330] compat_blkdev_ioctl+0x2f7/0x750 [ 84.740304][ T7330] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 84.742000][ T7330] ? __fget_files+0x206/0x3a0 [ 84.743428][ T7330] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 84.745126][ T7330] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 84.746721][ T7330] __do_fast_syscall_32+0x73/0x120 [ 84.748265][ T7330] do_fast_syscall_32+0x32/0x80 [ 84.749759][ T7330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.751686][ T7330] RIP: 0023:0xf7fd1579 [ 84.752933][ T7330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.758722][ T7330] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 84.761235][ T7330] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ab03 [ 84.763597][ T7330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.765974][ T7330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.768332][ T7330] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 84.770716][ T7330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.773092][ T7330] [ 84.853587][ T7331] block nbd2: shutting down sockets VM DIAGNOSIS: 18:10:24 Registers: info registers vcpu 0 CPU#0 RAX=00000000001e482c RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce4d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c398763 CR3=0000000012bfc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142ed5 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc9000397f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000064 R14=ffffffff85142e70 R15=0000000000000000 RIP=ffffffff85142eff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f457b2c10be CR3=0000000021812000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d303c RBX=0000000000000002 RCX=ffffffff8b1a3819 RDX=ffffed10056c6fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702e79 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce4d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564009cce3d8 CR3=000000004b920000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e7200038e7200038 e7200038e7200038 e7200038e7200038 e7200038e7200038 e7200038e7200038 e7200038e7200038 e7200038e7200038 e7200038e7200038 ZMM22=0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 0b3de5390b3de539 ZMM23=3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e 3c4f8b6e3c4f8b6e ZMM24=fba9539afba9539a fba9539afba9539a fba9539afba9539a fba9539afba9539a fba9539afba9539a fba9539afba9539a fba9539afba9539a fba9539afba9539a ZMM25=2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 2c2483e02c2483e0 ZMM26=dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade dcc9aadedcc9aade ZMM27=ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ae41a29fae41a29f ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4f0300004f030000 4f0300004f030000 4f0300004f030000 4f0300004f030000 4f0300004f030000 4f0300004f030000 4f0300004f030000 4f0300004f030000 info registers vcpu 3 CPU#3 RAX=00000000000a4584 RBX=0000000000000003 RCX=ffffffff8b1a3819 RDX=ffffed10056e6fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702e79 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce4d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006a2cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000