last executing test programs: 2m0.279084406s ago: executing program 1 (id=170): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b22, &(0x7f0000000040)) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acc7f00001f0000000000000000000000fbffffff00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) unshare(0x20000400) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r6, 0x32, 0xc614, 0x0, &(0x7f0000000180)={[0x8, 0x7fff]}, 0x8) io_uring_enter(r6, 0x55, 0x84a23, 0xf, 0x0, 0x0) 2m0.001120698s ago: executing program 1 (id=173): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'bridge0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0)='4', 0x1) tee(r2, r1, 0x3, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000010100c0"]) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000fc0)=ANY=[@ANYRES32=r4, @ANYBLOB="9148092824bc59f07487210260eb4ab49c75d89ef698731258c72ac95850c4749163a8d6ac2be349331ba94b2711fdbd60550f87ff33e3eae19455c38a2093f6f2bd4301296ebe782103478565b0005b599ec27c5cf667a3dcd90f9e67172a48a7995418b0bd475aaf9624cfe752fb6b1cf64a4df5b2551ec44e6cbb2d5471dd78a8ae8a16609b46eb50937e8bec091b9e8b982e0e3cfc30cb53608ef947db183b7963eb5d3c878d96fb2cb690c5c53276833fe3761eee1dfcf7e1b65ade4e26f0f51774331b5072a23897da62b4e296ba25edfda4a876fec7aa614d6d7af96757029e", @ANYBLOB="c2e20c1d4e63e919088c122676a6913d04f8e3d4aaef7ecf95f749dc806008d74723232a3c0a209c1608594e8d8b946afe04171062cfa10ef7bf3df8ced4114d5c98e12711cd6f7eb4d267a73f50108327b22c0c5026757629a39b5cae076199ac2319639c62f22dbd1c128e079bf2bf6dafb24c297595780499a0093c75aa34ef09005ce71d3c2bffa6de3df2ed80556199476a4ee5918b4fe085f3f3a020d1954729696ed094c22926a9562b7ebd9570cffdbfd7ee58dabf19af5a3442795c2762", @ANYRESDEC], 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r6, &(0x7f0000000680)={'#! ', './file1', [{0x20, '\t\v\xaf\xe2\x8cd0\x99\xa1U\xcc\x9c\xce\xef%\xf2\b\xe9Ow\x98\xa7\xac\xccM\x85\xbf\x11\xb8\xe0 M\xb1:\\TD\x89\x91N\xa6h\xd8\xb1>\xa3`\x99\xc9\xbe\xb9+\xf3`\xdb\x96\x1c\bA\x1bff\xdaD\xe9_\x1b_\xdcO\xe0/\xd6\x93H\x01L-i\xc0\xd6\xec\xeb\xa1W2Ne;X\xba\xd6\x17m\x1e\xcc\xc0\x94\bmi\xd1\x18\xb6+C\xd8\xf8\xdd\x9e\naq\xe0\xb3\x00,>\x80py@\xddG-\x98\xc9!0\x11\x89(\xef\xf1\x99\x0fQ\n\xe2\xa9Y\a\xb4\n\\\xfe\xa4\xbb`u\xc0\xc5\xf6\x13\xfd\xec\xf3F\x87\xf3D\xd9\xefV\x16\x91p\xaf\xfc\xa2\xcdu\xf7<_\x13\xa3Rj\xe1\x1d\xad\xdd\xdc\x140_\x9az\xb9b\xa0\"e\x9c\x94\xd0\xc2\x05\x98\xee\x1f\x93\x8d*\x16\x94\xf1.bv{\xef\xf9\x8a\rFA\x00\xb1\x99<\xcc\xc7\xdb?[\x9b\x7fW\xa2\xfc\x94\xd8~q\xac\x98M\x1e\xe50\xe8p\xe1\x8f\xe4'}]}, 0x103) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000010000), 0x800) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000000c0)={0x2000000a, {{0xa, 0x4e22, 0xffe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}}}, 0x84) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000101c0), &(0x7f0000010200)=@md5={0x1, "082cf296a17573df4722a198e540263d"}, 0x11, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 1m59.048088301s ago: executing program 1 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r5 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) io_uring_enter(r5, 0x353, 0x3, 0x1, 0x0, 0x0) io_setup(0x401, &(0x7f0000000100)=0x0) io_destroy(r8) signalfd(r4, &(0x7f0000002340), 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m57.903304668s ago: executing program 2 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x40000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe7, 0x0, 0x8, 0x9, 0x5, 0x7, 0x2], 0x0, 0x99800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m57.902916608s ago: executing program 2 (id=192): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) (async) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) 1m57.741746186s ago: executing program 2 (id=194): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100030c100000000000224e0000", 0x58}], 0x1) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x8000) 1m57.741259432s ago: executing program 2 (id=195): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x319c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x1, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = syz_usb_connect$cdc_ncm(0x1, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c2"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x200, 0x2, 0x73}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mdlm_detail={0x2f, 0x24, 0x13, 0x6, "e14b8990dd578f16713474a6719e36f7707cf6567314ce238edceba3141d05f61f1598436daf24b7f216d1"}, @acm={0x4, 0x24, 0x2, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x6, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6b, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xd, 0x2, 0x1, 0xff, 0x2}, 0x7e, &(0x7f0000000180)={0x5, 0xf, 0x7e, 0x4, [@generic={0x3e, 0x10, 0x4, "f7ff31ed587b952528a490c9eef83267ecc9c14afb2e498c4f6c3c3f2dc4286daa19be9ddd1df1d84fc73e37047a0c3def0c90d48df85ff4da7858"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2077a2175336b5cd5d2f9a54ef4f73ed"}, @ssp_cap={0x24, 0x10, 0xa, 0x3c, 0x6, 0x753, 0xf000, 0x8, [0xff3f30, 0xff3f3f, 0x1e, 0x4a62b8d3da9c0a6b, 0xffff30, 0xf]}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000240)=@string={0x4, 0x3, "31f7"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x4e, &(0x7f00000002c0)=@string={0x4e, 0x3, "ac4325efcc8af3bf5e3cd12963ea8254115081c5e7d3e53c06e779951817eb2010ad959f5490310ccf5d2deb31389c31c9a2106d10b9eeac6c40e23dcb6bea7d0526eb47fb65e9a6f839ced2"}}, {0x7d, &(0x7f0000000340)=@string={0x7d, 0x3, "f51561cd94ccef57a80c2b2becb8ad8401493a10417dc9f73f68a74e35550e90fb5f76d9c7e0427cfe08004d82f16f0b3124f301a775950cd03da05c15a9355c06d1f8eebf04d0c83b3a1b4842321aaad890349727089eddcf3dd5778f03ddec358c418e8352980eb4e81bf1ae2f864aadabeec9db3aedfdc4a382"}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "ec37b03255d16bdd57d6c3723f83168ef5755ea18ccff5837a47610fc32ebd80334b25aea6dd21562238df8c25f57e9558072a35a8ff2f296765745fd9995064f1c497e73a0dd18012d4f7803fd888a2756ae22f751267aa0769a86b39a1ba86286ee8ae5505397a86c3b21d27cd1c05e318d689d40863a5992d405e7493a8a5db71ebf7857d2f4d336c26a4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x32, &(0x7f0000000500)=@string={0x32, 0x3, "bf9a9313f58a2f4f44a223d9d27248a7875e87b687e1b9e0eaebcc9202f1e25d54c39f141fe4152e6db646b46b5c1b04"}}]}) syz_usb_control_io(r3, &(0x7f00000008c0)={0x18, &(0x7f00000005c0)={0x0, 0x3, 0xd4, {0xd4, 0xa, "0711037d15d9221d84036347cca2f7aa7f904ea1ba0927649156c2899d89c0260bfe3f0313420c9fc84134c762e4a79989510d25860cae5249a90720abb5055ec62ed28a7ca91414473008934750e9acf2e15d5abf690ab4988a1311ae7ba93ce16e82dd378f85e7adeca55aeacf6ae7a3f5022abe90b2f2e7463e8c6ceb254618efaccabb7ca5368e554158072d8b4c7bbfcafa823f00a7de0b4525d0820a500ca6b4f0ba734e378206ff4c23a294c5dfb5f690521f97dbc30f70efab703e4f078d8c8fdd8924b9d7303e6962fbf654b2aa"}}, &(0x7f00000006c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "e4f6b40bdf41a6d47390bf53b9aa5bf058fb8681ae5e223f928e0bff9dea3c19b4b2ac9e125454d259b6f82c5c8ca339688bec81a876cbec998ebfbf887e5f14335e01cd5a87354946dfd49fdf9d1a7f012b72983e88a68a0da8fc6d4a3538350e463dd64197a08403af32876a2c58049c124e7ad05be5d04ea0f9487d620dddac3b4fcfe5638426603cf5be4a904cab9938ea2322c597979bea11f5cd8ae27e4ec3e7d9a21e8e51fc734f1aee616ec308c4522496632f5d65ca2e7ea23f1a1d310683d9bb9f683c4e7a383ffe45a8eda685ff62675eb00f30458a3c0c"}}, &(0x7f00000007c0)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x2, 0xf, 0x6, [0x80803f, 0x0, 0xc030, 0x3f00, 0x60, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x3, 0xf011, 0x18, [0xff3f30, 0xff000f, 0xff0000, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x8, 0x9}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x18, 0x2, 0x3, "2e65620e", "88152f2f"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x1, 0xe6, 0xd7, 0x5, 0x2}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000900)={0x20, 0x10, 0x25, "2a6a462f56ff14ad45cfa2f59d7faa20b868cc60ab4fbd7064606a1dc702faa5b0f7aea1d1"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x80, [0xf0f0]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "b10b"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @random="fa1fd0d1a10e"}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "93d4"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x6}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x319c, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getrusage(0x1, &(0x7f00000001c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) syz_usb_connect$cdc_ncm(0x1, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c2"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x200, 0x2, 0x73}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mdlm_detail={0x2f, 0x24, 0x13, 0x6, "e14b8990dd578f16713474a6719e36f7707cf6567314ce238edceba3141d05f61f1598436daf24b7f216d1"}, @acm={0x4, 0x24, 0x2, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x6, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6b, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xd, 0x2, 0x1, 0xff, 0x2}, 0x7e, &(0x7f0000000180)={0x5, 0xf, 0x7e, 0x4, [@generic={0x3e, 0x10, 0x4, "f7ff31ed587b952528a490c9eef83267ecc9c14afb2e498c4f6c3c3f2dc4286daa19be9ddd1df1d84fc73e37047a0c3def0c90d48df85ff4da7858"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2077a2175336b5cd5d2f9a54ef4f73ed"}, @ssp_cap={0x24, 0x10, 0xa, 0x3c, 0x6, 0x753, 0xf000, 0x8, [0xff3f30, 0xff3f3f, 0x1e, 0x4a62b8d3da9c0a6b, 0xffff30, 0xf]}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000240)=@string={0x4, 0x3, "31f7"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x4e, &(0x7f00000002c0)=@string={0x4e, 0x3, "ac4325efcc8af3bf5e3cd12963ea8254115081c5e7d3e53c06e779951817eb2010ad959f5490310ccf5d2deb31389c31c9a2106d10b9eeac6c40e23dcb6bea7d0526eb47fb65e9a6f839ced2"}}, {0x7d, &(0x7f0000000340)=@string={0x7d, 0x3, "f51561cd94ccef57a80c2b2becb8ad8401493a10417dc9f73f68a74e35550e90fb5f76d9c7e0427cfe08004d82f16f0b3124f301a775950cd03da05c15a9355c06d1f8eebf04d0c83b3a1b4842321aaad890349727089eddcf3dd5778f03ddec358c418e8352980eb4e81bf1ae2f864aadabeec9db3aedfdc4a382"}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "ec37b03255d16bdd57d6c3723f83168ef5755ea18ccff5837a47610fc32ebd80334b25aea6dd21562238df8c25f57e9558072a35a8ff2f296765745fd9995064f1c497e73a0dd18012d4f7803fd888a2756ae22f751267aa0769a86b39a1ba86286ee8ae5505397a86c3b21d27cd1c05e318d689d40863a5992d405e7493a8a5db71ebf7857d2f4d336c26a4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x32, &(0x7f0000000500)=@string={0x32, 0x3, "bf9a9313f58a2f4f44a223d9d27248a7875e87b687e1b9e0eaebcc9202f1e25d54c39f141fe4152e6db646b46b5c1b04"}}]}) (async) syz_usb_control_io(r3, &(0x7f00000008c0)={0x18, &(0x7f00000005c0)={0x0, 0x3, 0xd4, {0xd4, 0xa, "0711037d15d9221d84036347cca2f7aa7f904ea1ba0927649156c2899d89c0260bfe3f0313420c9fc84134c762e4a79989510d25860cae5249a90720abb5055ec62ed28a7ca91414473008934750e9acf2e15d5abf690ab4988a1311ae7ba93ce16e82dd378f85e7adeca55aeacf6ae7a3f5022abe90b2f2e7463e8c6ceb254618efaccabb7ca5368e554158072d8b4c7bbfcafa823f00a7de0b4525d0820a500ca6b4f0ba734e378206ff4c23a294c5dfb5f690521f97dbc30f70efab703e4f078d8c8fdd8924b9d7303e6962fbf654b2aa"}}, &(0x7f00000006c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "e4f6b40bdf41a6d47390bf53b9aa5bf058fb8681ae5e223f928e0bff9dea3c19b4b2ac9e125454d259b6f82c5c8ca339688bec81a876cbec998ebfbf887e5f14335e01cd5a87354946dfd49fdf9d1a7f012b72983e88a68a0da8fc6d4a3538350e463dd64197a08403af32876a2c58049c124e7ad05be5d04ea0f9487d620dddac3b4fcfe5638426603cf5be4a904cab9938ea2322c597979bea11f5cd8ae27e4ec3e7d9a21e8e51fc734f1aee616ec308c4522496632f5d65ca2e7ea23f1a1d310683d9bb9f683c4e7a383ffe45a8eda685ff62675eb00f30458a3c0c"}}, &(0x7f00000007c0)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x2, 0xf, 0x6, [0x80803f, 0x0, 0xc030, 0x3f00, 0x60, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x3, 0xf011, 0x18, [0xff3f30, 0xff000f, 0xff0000, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x8, 0x9}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x18, 0x2, 0x3, "2e65620e", "88152f2f"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x1, 0xe6, 0xd7, 0x5, 0x2}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000900)={0x20, 0x10, 0x25, "2a6a462f56ff14ad45cfa2f59d7faa20b868cc60ab4fbd7064606a1dc702faa5b0f7aea1d1"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x0, 0x80, [0xf0f0]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "b10b"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @random="fa1fd0d1a10e"}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "93d4"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x6}}) (async) 1m57.671598332s ago: executing program 1 (id=196): r0 = openat$cdrom(0xffffff9c, &(0x7f00000001c0), 0x4004, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) accept4$alg(r7, 0x0, 0x0, 0x0) getdents64(r3, &(0x7f0000001400)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) shutdown(r8, 0x2) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x6, 0x556, 0x2) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000000)={@lba=0x8, 0x1, 0x1, &(0x7f00000000c0)=""/1}) 1m57.320491327s ago: executing program 1 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x36, 0xf, 0x0, 0x61d8e3d6, 0x81, 0x7, 0x6, 0x5, 0x2, 0xe, 0x5, 0x0, 0x1000, 0x8, 0x5, 0x7f, 0x0, 0x1, '\x00', 0x5, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x8002080, 0x595, 0x1ff, 0x1, 0x7ff, 0x0, 0x0, 0x20}}, 0x50) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x10, 0xfffffffffffffff7, 0x6, 0x2, 0x3]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "3689f7acfc126231a8abec97f43ffa63f97d55669461e267da2148ad11a21e491411de01709bf3bd3e28ee"}, 0x40) 1m57.040330148s ago: executing program 1 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x9, 0x3, 0xffff2d37, 0x1dd0, 0x6, 0x3, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x7, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x4, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x5, 0x800, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x8], [0x7, 0x4, 0x0, 0x64e, 0xfffffffe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xc3, 0xb, 0x3, 0x0, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x3, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x28, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff, 0x45c], 0x0, 0x0, 0x2, 0x1}}, 0x3c) 1m56.995494556s ago: executing program 32 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x9, 0x3, 0xffff2d37, 0x1dd0, 0x6, 0x3, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x7, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x4, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x5, 0x800, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x8], [0x7, 0x4, 0x0, 0x64e, 0xfffffffe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xc3, 0xb, 0x3, 0x0, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x3, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x28, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff, 0x45c], 0x0, 0x0, 0x2, 0x1}}, 0x3c) 1m56.571915543s ago: executing program 2 (id=202): mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) socketpair(0x2c, 0x1, 0x3149, &(0x7f0000000080)) epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x8000}) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) (async) socketpair(0x2c, 0x1, 0x3149, &(0x7f0000000080)) (async) epoll_create1(0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x8000}) (async) 1m56.571666872s ago: executing program 33 (id=202): mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) socketpair(0x2c, 0x1, 0x3149, &(0x7f0000000080)) epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x8000}) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) (async) socketpair(0x2c, 0x1, 0x3149, &(0x7f0000000080)) (async) epoll_create1(0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x8000}) (async) 1m22.469667923s ago: executing program 0 (id=471): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad6, 0x200}, &(0x7f0000000240), &(0x7f0000000280)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000849000/0x2000)=nil, 0x2000) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x8000}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) close(0x4) (async) close(0x5) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280), 0x57, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xffffffff) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x401, 0x1, 0x3, 0x1, 0x1}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m22.270565882s ago: executing program 0 (id=472): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x202, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f71bf2f90ccef04f290a524d160f000000000000000000000000000000000000000000006c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000d1d1fddccc21354e72e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000020000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/230], 0x134}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) prlimit64(r3, 0x6, &(0x7f0000000000)={0x9c09, 0xc}, &(0x7f0000000040)) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10010, r4, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) 1m20.196611711s ago: executing program 0 (id=502): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) pwritev2(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000180)="fad4c0e4891b0b33e7058d8c026e0ee9a217f5c247f30acc2e01d601d38edf4277d2253d5c8d8ad4acdcd40c49a0877d7bb4460e092de1b97cf47434879e7fc29263f04a7292289cbcc92ee2a029de18ba7154a75ec5808edc69d15b72ae9293a096a8500fd27752a954c979bc4a65abaf1d2dafa4ea1271308883ce6dfb2da7af883eeea17864988d8e5d014db68aaf65987fed3e2eb833bc88cccf8dd008db218e22b461ff3440f8e1564ac8e75aa74bff9793fb38", 0xb6}], 0x1, 0xfba, 0x2, 0x1) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) (async) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x8004552d, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f00000190c0)={0xc0, 0x0, 0x6000}) (async) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x24, &(0x7f0000000000)=0x800, 0x4) mount$bind(&(0x7f0000019080)='./file0\x00', &(0x7f0000019140)='./file0\x00', &(0x7f0000019180), 0x2025, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) write$sndseq(r11, &(0x7f0000000300)=[{0x0, 0x0, 0x1, 0x0, @time, {}, {}, @addr}], 0x1c) 1m20.015376396s ago: executing program 0 (id=505): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80040, &(0x7f0000000000)) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8000, 0x0, 0xffffffff, 0xe6ca96d360cb9854) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffff, &(0x7f0000000040)=0x1) 1m19.301226602s ago: executing program 0 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0xa1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x509000) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x84) fchown(r3, 0x0, 0x0) 1m16.997974304s ago: executing program 0 (id=523): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x424, 0x270, 0x9403, 0x0, 0x0, 0x2c0, 0x35c, 0x3d8, 0x3d8, 0x35c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x62, 0x0, 0x4, 0x5}, 0x0, 0x250, 0x270, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pimreg1\x00', {0x0, 0xffffffff, 0x8001, 0xffffffff, 0x4, 0x2, 0x3b44, 0x18, 0x4b7c3af8fe9e769a}}}, @common=@inet=@policy={{0x154}, {[{@ipv4=@loopback, [0x245815cfc742645d, 0xffffff00, 0xffffffff, 0xff000000], @ipv6=@loopback, [0xff000000, 0xff000000, 0xff], 0x4d4, 0x3506, 0x11, 0x0, 0xa}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@multicast2, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d3, 0x34ff, 0x2, 0x0, 0x1}, {@ipv6=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x3502, 0x5e, 0x0, 0x0, 0x16}, {@ipv6=@rand_addr=' \x01\x00', [0xff, 0xff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4d2, 0x0, 0xc6, 0x1, 0x0, 0x10}], 0xb, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x480) openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 1m3.201284569s ago: executing program 4 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_IFALIAS={0x14, 0x14, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x4000) 1m3.139954759s ago: executing program 4 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000d7e4c8d5c383f37ab65bbf070000000000000000000000000000000000000000000000000000e50ed48fdb0fd3be00"/108], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000d7e4c8d5c383f37ab65bbf070000000000000000000000000000000000000000000000000000e50ed48fdb0fd3be00"/108], 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x1, "917213055ec5270589e4a1f155d69bcd645a7343bff7bde9484d0249485305b3", 0x5, 0x1000, 0x8001, 0x5, 0x10, 0x1, 0x0, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x508, 0x0, 0x368, 0x1b0, 0x0, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) ioctl$TCSBRKP(r0, 0x5425, 0xf05) (async) ioctl$TCSBRKP(r0, 0x5425, 0xf05) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c000100000000000000000204000080"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m2.976102457s ago: executing program 4 (id=629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000880)=[{&(0x7f0000000900)='14', 0x2}], 0x1, 0x3, 0x0) syz_emit_ethernet(0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa810040000806032388b506050004aaaaaaaaaaaa9c4dbd1b19aaaaaaaaaa"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m2.060333496s ago: executing program 4 (id=635): openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000000c0)={0x0, "9048d8d5d59be87d48b421df09030b734bbd3767161ed499223689aa39646fd5", 0x2, 0x10, 0xffffffff, 0x40000000, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32=r2, @ANYRES16, @ANYRESHEX=r1, @ANYRES16, @ANYRES16=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) write$binfmt_script(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4c810) write$proc_mixer(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 1m1.84003034s ago: executing program 34 (id=523): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x424, 0x270, 0x9403, 0x0, 0x0, 0x2c0, 0x35c, 0x3d8, 0x3d8, 0x35c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x62, 0x0, 0x4, 0x5}, 0x0, 0x250, 0x270, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pimreg1\x00', {0x0, 0xffffffff, 0x8001, 0xffffffff, 0x4, 0x2, 0x3b44, 0x18, 0x4b7c3af8fe9e769a}}}, @common=@inet=@policy={{0x154}, {[{@ipv4=@loopback, [0x245815cfc742645d, 0xffffff00, 0xffffffff, 0xff000000], @ipv6=@loopback, [0xff000000, 0xff000000, 0xff], 0x4d4, 0x3506, 0x11, 0x0, 0xa}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@multicast2, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d3, 0x34ff, 0x2, 0x0, 0x1}, {@ipv6=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x3502, 0x5e, 0x0, 0x0, 0x16}, {@ipv6=@rand_addr=' \x01\x00', [0xff, 0xff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4d2, 0x0, 0xc6, 0x1, 0x0, 0x10}], 0xb, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x480) openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 1m1.539557037s ago: executing program 4 (id=638): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000080)={0x15, 0x5, 0xc}) 1m1.30941366s ago: executing program 4 (id=639): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x83e, 0x20, 0x0) 46.340887255s ago: executing program 35 (id=639): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x83e, 0x20, 0x0) 40.425468255s ago: executing program 5 (id=793): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', r3, 0x7800, 0x80, 0x0, 0x0, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x3c, [@multicast2]}, @ssrr={0x89, 0x7, 0x17, [@empty]}, @generic={0x44, 0x2}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000440), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) recvfrom$unix(r4, &(0x7f0000000600)=""/205, 0x1b6441c3, 0x40020042, 0x0, 0x0) 40.350833357s ago: executing program 5 (id=794): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@local, 0x1}, 0x0, 0x1, 0x9}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000240)={0x0, 0x6, 0x0, 0xe}) r3 = dup(r0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x82fa, 0x0, "0911000000000300"}) 40.260672096s ago: executing program 5 (id=795): mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1e0062, 0x0) 40.260177897s ago: executing program 5 (id=796): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x8) ptrace$peeksig(0x4211, r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0x6}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x9, 0x0, 0x7fffffff, 0x5}}}}]}, 0x4c}}, 0x842) shutdown(r0, 0x2) 40.111119602s ago: executing program 5 (id=797): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x2, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xdac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3d60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r4 = syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) lseek(r4, 0x0, 0x4) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl']) 40.060637018s ago: executing program 5 (id=799): r0 = socket(0x22, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='xprtrdma_prepsend_failed\x00', r4, 0x0, 0x6}, 0x18) sendfile(r6, r5, 0x0, 0x3ffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r8, 0x2282, &(0x7f0000003f80)) r9 = getpgrp(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000751000038533000090637adf0033263a48", @ANYRES32=0x0, @ANYBLOB="c486070000000000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 40.018334945s ago: executing program 36 (id=799): r0 = socket(0x22, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='xprtrdma_prepsend_failed\x00', r4, 0x0, 0x6}, 0x18) sendfile(r6, r5, 0x0, 0x3ffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r8, 0x2282, &(0x7f0000003f80)) r9 = getpgrp(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000751000038533000090637adf0033263a48", @ANYRES32=0x0, @ANYBLOB="c486070000000000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 39.559644705s ago: executing program 7 (id=805): mkdir(&(0x7f0000000000)='.\x00', 0x4) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x2, 0x5, 0xc, 0x80}, 0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSETATTR(r4, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) r5 = openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r6 = openat$incfs(r1, &(0x7f0000000200)='.pending_reads\x00', 0xc2100, 0x183) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x3, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x1f, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8000}, [@generic={0xc0, 0x3, 0x9, 0x7, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b35c2d6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @generic={0x22, 0x5, 0x5, 0x200, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x5b5c, 0x47, &(0x7f0000000380)=""/71, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x1, 0x1c0}, 0x10, r7, r2, 0x5, &(0x7f00000004c0)=[r1, r1], &(0x7f0000000500)=[{0x5, 0x3, 0x0, 0x7}, {0x5, 0x3, 0x0, 0xa}, {0x2, 0x1, 0x4, 0x7}, {0x5, 0x2, 0xb, 0x7}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x1, @void, @value}, 0x94) bind$inet6(r5, &(0x7f0000000640)={0xa, 0x4e22, 0x4000, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000680)={0x0, 0x7cf2, 0x6, 0x9, 0xa, 0x0, [{0x8000000000000001, 0xca, 0x4, '\x00', 0x3804}, {0x9, 0x5, 0x6, '\x00', 0x2}, {0x4, 0x400, 0x7, '\x00', 0x489}, {0x6, 0x10, 0x9, '\x00', 0x188a}, {0x1, 0x0, 0xbf0, '\x00', 0xa00}, {0xa1b5, 0x200, 0x1, '\x00', 0x2108}, {0xfffffffffffffff4, 0x1, 0x8, '\x00', 0x328d}, {0xffff, 0x1, 0x0, '\x00', 0x2008}, {0x3, 0xc00000000, 0x2, '\x00', 0x9}, {0x3, 0x8, 0x9, '\x00', 0x400}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x7fff, 0x4e21, 0xb1, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {0x7fff, 0xfffffffffffffff7, 0x7, 0x8, 0x3f4, 0x4, 0x5}, {0x2, 0x2, 0xffffffffffffffff, 0x971e}, 0x3, 0x6e6bc0, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x0, 0x2, 0x4, 0x5, 0x0, 0xd}}, 0xe4) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f0000000a00)) r9 = openat$cdrom(0xffffff9c, &(0x7f0000000a80), 0x200401, 0x0) ioctl$CDROMMULTISESSION(r9, 0x5310, &(0x7f0000000ac0)={@msf={0x8, 0x5, 0x8}, 0x1, 0x2}) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000bc0)={0x3, @bcast, r10}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r12 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x1ff, 0x101900) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000c80)={0x0, r12}) r13 = add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x3}, &(0x7f0000000d40)={0x4, 0x0, @a}, 0x48, r13) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r14 = msgget$private(0x0, 0x108) msgrcv(r14, &(0x7f0000000e40)={0x0, ""/185}, 0xbd, 0x2, 0x2000) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040042}, 0x0) 38.671152367s ago: executing program 7 (id=813): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2}, {0x0, 0x0, 0x0, 0x40000000000000}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x1c) openat$dlm_plock(0xffffff9c, &(0x7f0000000640), 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES16=r4], 0x1c}}, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x63, &(0x7f0000000380)=""/99, 0xa3928ef65e8b437d, 0x2c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x10000007, 0x38}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x10, 0xd44, @void, @value}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xfffffffffffffe56}}, 0x8000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="2c7e15543eb3209ae1f74e0110cfa7c08c614b61b01cc8f032d24c09df44fba6a76dc15028120e4ecf", @ANYBLOB="0000000000000000b702000014000000000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0xfca804a0, 0x18, 0x8, &(0x7f0000000340)="aa0000860df9ff0000000000eaffef4a620500c098000000", &(0x7f0000000300)=""/8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4c) r9 = openat$udambuf(0xffffff9c, &(0x7f00000000c0), 0x2) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24040053}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r12, &(0x7f0000000480), 0x2e9, 0x0) io_submit(r11, 0x3f, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}]) r13 = dup(r3) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000080)) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34524742}}) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000100)={r13, 0x1, 0x1000, 0x4000}) 37.686953992s ago: executing program 7 (id=818): sendmsg$key(0xffffffffffffffff, 0x0, 0x4004010) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/xfrm_stat\x00') pread64(r4, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={0x0, &(0x7f0000000500), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x8, 0x80000001, 0xfffffffc, 0xdf}) mount$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x2209000, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000030000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',defau', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="39001d0127095c8a367a65bf58b7f7954f2b7e934566c35fa92795cb1b58fae21df594177cfd36ae834c46b6795a780e0073cf52614b359aa477551b7151c04798ee14637350bbd85089e25750f8afc901edaa49d050d63406aab7e703002d42715ff0cf5b1d67f3d30e60b4dcbfaf617e71e55156708f"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat$zero(0xffffff9c, &(0x7f0000000240), 0x664d82, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x7) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) 36.745051381s ago: executing program 7 (id=825): ioperm(0xe, 0x8000, 0x80072de) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x1, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2}}, {@stats}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, 0x0, &(0x7f0000000140), 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21, 0x0, @private, @multicast1}, "200022ebffff0000"}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c) ioperm(0x7ff, 0xe89, 0xff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 35.938283542s ago: executing program 7 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffff8, 0x1000000) socket(0x200000100000011, 0x3, 0x20) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x33c, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x208, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'geneve1\x00', {0x9, 0x3, 0x13, 0x3ff, 0x8, 0x6, 0x80000001, 0x80, 0x8}, {0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x96a}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x398) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000760000000000000000006500000000000000970001000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8, @ANYBLOB="211e45d791e338c757283b48626c71f95272dfe6"], 0x3c}}, 0x0) 35.669720659s ago: executing program 7 (id=831): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001000)=ANY=[]) socket(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000400)='0', 0x1) openat$vsock(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3c28, &(0x7f0000000380)={0x0, 0x7a0a, 0x2000, 0x2, 0x1a9}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="31422204ad516ed82baf14a2facbb31e4d222c00"]) (async) io_uring_enter(r2, 0x2ded, 0x4000, 0x10, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffffb8, &(0x7f00000000c0)=[{0x11}, {0x4, 0x8}, {0x5cec, 0xc616}, {0xfffe, 0x929}]}) (async) syz_emit_ethernet(0x7a, 0x0, 0x0) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc005, 0x0, 0x4, 0x0) (rerun: 64) 19.905766168s ago: executing program 37 (id=831): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001000)=ANY=[]) socket(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000400)='0', 0x1) openat$vsock(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3c28, &(0x7f0000000380)={0x0, 0x7a0a, 0x2000, 0x2, 0x1a9}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="31422204ad516ed82baf14a2facbb31e4d222c00"]) (async) io_uring_enter(r2, 0x2ded, 0x4000, 0x10, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffffb8, &(0x7f00000000c0)=[{0x11}, {0x4, 0x8}, {0x5cec, 0xc616}, {0xfffe, 0x929}]}) (async) syz_emit_ethernet(0x7a, 0x0, 0x0) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc005, 0x0, 0x4, 0x0) (rerun: 64) 3.700658922s ago: executing program 9 (id=1001): r0 = syz_clone(0x28208000, 0x0, 0x9, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x40202, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x7, 0xab, 0x8, 0xfffffffb, 0x0, "b39b21573c3294d0d45182c319c1095822a3f4", 0x4, 0x1}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffff9c, &(0x7f0000000100), 0x149880, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a00000a0000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001c427d8ba8c7a849e0dd9d666e3faaab192e557d78f0c3dc74bd872cb056be98892eb80e816e1ad664fe86b56f3aa97c435e11d43476ba27f9640712e33d32bffa1b0dd4e67d6ee34beddbfa9847c335afb3b5c127cebe8525fe21c59e8a7057f723f78bc8d1f0ecfe3c90b6244f9913b07e63bffbf1a2542553b"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c0000001c0a05000080000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x200048c1}, 0x440c8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000305000080000000870004000000688b1e3a1c0878d0bb5078abbec33bdaca5633864bf2b648c163aa0ee2e700abae64b8802dde489379d9f02603ed854a9deac3bab102bee55aa9adbfd2159625d30d6d3d1aff29717c5f284447ba829f9d07cc41b4c96145394145da5be3cb4ae8042d052f92a4b3c1", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001f47276bf1c7b8e0069706970000000000c", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./bus\x00', 0xcc) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000003c0)={0x0, 0x80000000}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 3.470421701s ago: executing program 9 (id=1003): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x7, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8f1a185548e344c69b67f7a0526e29d440220f", @ANYRESDEC=r1], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000180)={0x1, 'A'}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000380)) 3.159752577s ago: executing program 8 (id=1009): r0 = socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x14abbda93201bb5f, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c3163ee5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffe28}}, 0xffffffffffffff01) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000100000000000000000000000000000000000000000000000000000a000000000000"], 0x134}}, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000016c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r3, @ANYRES32=r1, @ANYRESOCT=r4], 0x0, 0x2a, 0x0, 0x1, 0x800, 0x10000, @value}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x4}, @restrict={0xa}, @enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xd, 0x6, 0x7}, {0xd, 0x7f, 0xfffff1ab}, {0xe, 0x10, 0x7}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0xe, 0x9, 0x0, 0x13, 0x1, 0xb, [{0x10, 0x8, 0x1}, {0x8, 0x7ff, 0x3}, {0x7, 0xd34f, 0x6}, {0xa, 0x4, 0x7fff}, {0xe, 0x0, 0x2}, {0x6, 0x1, 0x10001}, {0x5, 0x2, 0x6}, {0xf, 0x5, 0x3}, {0x3, 0x6, 0x200}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xc}}]}, {0x0, [0x1e, 0x2e]}}, &(0x7f00000018c0)=""/244, 0x104, 0xf4, 0x1, 0x10, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a40)={0x2, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1d, 0x18, &(0x7f0000001a80)=@raw=[@ldst={0x1, 0x2, 0x1, 0xa, 0x4, 0xc6c48112bd7bb771, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001b40)='GPL\x00', 0x1, 0x83, &(0x7f0000001b80)=""/131, 0x40f00, 0x32, '\x00', 0x0, @lsm=0x1b, r1, 0x8, &(0x7f0000001c40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x7, 0x46a, 0x1f8c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000001cc0)=[r1, r1], &(0x7f0000001d00)=[{0x2, 0x1, 0xb, 0x2}, {0x4, 0x3, 0x0, 0x7}, {0x2, 0x5, 0x2, 0xb}, {0x4, 0x3, 0xb, 0xc}, {0x0, 0x1, 0xe, 0xc}, {0x0, 0x5, 0x9, 0x8}, {0x1, 0x4, 0x10, 0x5}, {0x2, 0x3, 0xb}, {0x1, 0x3, 0xa, 0x9}, {0x4, 0x5, 0x10, 0x2}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x1a, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x38bf, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x5e, &(0x7f00000005c0)=""/94, 0x40f00, 0x50, '\x00', 0x0, @tracing=0x1a, r5, 0x8, &(0x7f00000019c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0x40, 0x9, 0x8}, 0x10, r6, r7, 0x9, &(0x7f0000001e80)=[r1, r1, 0xffffffffffffffff], &(0x7f0000001ec0)=[{0x4, 0x3, 0xd, 0xa}, {0x4, 0x4, 0xd, 0x6}, {0x4, 0x3, 0xc, 0x9}, {0x3, 0x5, 0xc, 0x5}, {0x2, 0x5, 0x5, 0xa}, {0x1, 0x4, 0xe, 0xc}, {0x1, 0x3, 0x10, 0x4}, {0x4, 0x5, 0xf, 0x4}, {0x0, 0x2, 0xa, 0xa}], 0x10, 0x5dc6, @void, @value}, 0x94) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4000810, r8, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000480)='sample_threshold\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) 2.667872338s ago: executing program 8 (id=1012): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000640)=""/206, &(0x7f0000000200)=0xce) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x7ffffffc, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r2}, 0x14) 1.760264557s ago: executing program 8 (id=1015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f00000002c0)=[{0x5, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000380)=""/164, 0xa4}], &(0x7f0000000240)=[0x4, 0x3ff, 0x51a, 0x5]}], 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6(0xa, 0x8000000000080001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000002540)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039b13930ea8a4c6bc7b9275cc98f0b86a0f34dc36be882a704f7b41acd399dfb352a19a9987c5888f4ef57713695f19e6a13e2e9c3ddca5c8b5584b93db550e6bb2c04ab68cf6a70a4e293fef38436fbb76c68f5b879f8aef348927cb4b4178817acf9d1fb39abc96d6518d1da9e"], 0x54) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.453312659s ago: executing program 6 (id=1019): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @multicast2}, 0x2}}, 0x2e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r4 = open(0x0, 0x105c42, 0x5) unlink(&(0x7f0000000000)='./file0\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x342) mmap(&(0x7f00005b1000/0x1000)=nil, 0x1000, 0x1000000, 0x11012, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) r7 = dup(r6) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@my=0x0}) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x12a, 0x1}}, 0x20) iopl(0x3) acct(&(0x7f0000000140)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) 1.328393975s ago: executing program 8 (id=1021): socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nf_conntrack_expect\x00') read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r5}, 0x18) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1.100732206s ago: executing program 3 (id=1022): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x10000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000400)="3aba", 0x2) 1.049746794s ago: executing program 3 (id=1023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x80000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x400000}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r8, 0x2284, &(0x7f0000000080)=@disckey={0x2, 0x1, "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"}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000200)={0x1d, r10}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x3c, 0x2, 0x0, 0x0, "cd80e60f6d45b456075978fd570500000015f772fe212ca5d3397d166d65a074614b26babc9c0571504e6ccc5c1cdc83f31daba3680d85314bdae1eafbcf6ac6"}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040), 0x224b) 990.70907ms ago: executing program 3 (id=1024): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{}, {}], 0x4000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x2, @void, @value, @void, @value}, 0x50) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 990.281029ms ago: executing program 3 (id=1025): r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x80086601, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"}) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone(0x21124500, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x5, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 461.195975ms ago: executing program 9 (id=1026): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) ioperm(0x0, 0xbea, 0x4) (async) set_thread_area(&(0x7f0000000180)={0x1, 0x20101000, 0x2000}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6, @broadcast}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 457.737548ms ago: executing program 3 (id=1027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000013c0)={0x3, 0x76856179d05a8278, 0x8000, 0x100, 0x6, 0x7, 0xe}) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000100202010100000040000073299f78f76f738a93ea39cebd9300000400028000"/46], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3402b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000280)='%!*\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x8808, &(0x7f0000000400)={[{'veth0_vlan\x00'}, {'++#['}, {'/dev/mixer\x00'}, {'\x00'}, {}, {'-'}, {'ct\x00'}, {'ct\x00'}], [{@flag='dirsync'}, {@subj_user}, {@uid_eq={'uid', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio}]}) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) (async) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000080)=0x3ff) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000180)=0xef) (async) socket$pppoe(0x18, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) 445.844192ms ago: executing program 8 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8004700b, &(0x7f0000000140)) r4 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x81) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x82, 0x40000009, 'syz1\x00', 0xf26b}, 0x4, 0x1, 0x2, r7, 0x0, 0x0, 'syz0\x00', 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 442.371952ms ago: executing program 9 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008576000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240), 0x80005, 0x0) r8 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) bind$llc(r8, &(0x7f0000000540)={0x1a, 0x33a, 0x0, 0x9, 0x9, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000006d00040026bd7000fedbdf2500000000", @ANYRESOCT=r7, @ANYBLOB="00400000001000000a0002007b5f4cdf9a120000050010000300000020000e00040000000000c3649ed7ffffffffff7fff0100000000000002003701"], 0x54}, 0x1, 0x0, 0x0, 0x4000114}, 0xc800) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@ipv4_getnexthop={0x54, 0x6a, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000840}, 0x90) getsockopt$inet_mreqn(r9, 0x0, 0x50, 0x0, &(0x7f0000000440)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06c90007000a00"], 0xe) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2780550b751f05b5589cd8de", @ANYRES16=r11, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d3000000000000005000300000000000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xff}) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) socket$key(0xf, 0x3, 0x2) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010053b5235106000000000000000000007e00000000000000000043ce793e91ae0bede767b565ceffc900000000e00000010000000000000000000000000000000000000000000000e500000000", @ANYRESDEC=r4, @ANYRES32=r12, @ANYBLOB="200100000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400010000000000000020010000000000000000000000000001"], 0x154}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 430.494676ms ago: executing program 6 (id=1030): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x30, 0x76, 0x20, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x4) 380.575977ms ago: executing program 3 (id=1031): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x3a, &(0x7f0000000680)={0x6}) 379.964326ms ago: executing program 9 (id=1032): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010227bd700004000000050000000800091b0200000008000c00a80a000006000100050000c3415a0048000afe04000000bd68dc761e13744e4b3375dd218fd036858d76f4ebcb385b60a016da7fb2a4570e4279112e35376d2b08854052168b4d01748d4b08eaeaa267ceef1be7501df1fb0fb24f80d312a78769046c163a1b0d80a220c0b7a09344b5d4c0160dac56cd23dbc5febb49bd9ad56a4c59dac2ef6928e649c8b8256f946cef"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001500)}, 0x0) 378.789904ms ago: executing program 8 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = epoll_create1(0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10800, 0x3}, 0x18, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x4, 0x5, 0x1, 0x0, 0x3f0, 0x2, 0xf7, 0x81, 0x1, 0x1, 0x8c, 0x8, 0x0, 0xc42, 0x5, 0x4, 0xd8, 0x1, 0x27, '\x00', 0xa}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x3, 0x91}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r8, 0x3}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 310.612064ms ago: executing program 9 (id=1034): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000080)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) listen(r0, 0xda8c) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r1, 0x0, 0xc, 0x0, &(0x7f0000000640)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000140)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x3e00, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e300000000000000000000000050053"], 0x138}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x9) getpid() socket$kcm(0xa, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f00006fa000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000040)={0xfffffffc, 0xd, 0x2, {0xb, @pix={0x9625, 0x9ac1, 0x32314752, 0x6, 0x3, 0x101, 0x2, 0xe2, 0x0, 0x0, 0x1, 0x1}}, 0x1}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) userfaultfd(0x80802) accept4(r1, &(0x7f0000000200)=@nfc, 0x0, 0x800) 309.102391ms ago: executing program 6 (id=1035): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x101) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@empty, @local, 0x0, 0x2, [@rand_addr=0x64010101, @local]}, 0x18) (async) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x6, 0x201}, 0x14}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) (async) sendto$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000880), 0x0, 0x2) (async, rerun: 64) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r11) 110.553238ms ago: executing program 6 (id=1036): socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x5, 0x200a, 0xb}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300050000000000000000000700d1d1", @ANYRES32, @ANYBLOB="00000000000000001c001a8018000504140007800800010000000000080002"], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600e1", 0x2c, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}, @routing={0x88, 0x2, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1000007f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0xa19b, @void, @value}, 0x94) 486.865µs ago: executing program 6 (id=1037): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x14) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001280)={'#! ', './file0', [{0x20, '#! '}, {0x20, ':'}, {0x20, '@@^h\x1d-,/'}, {0x20, 'keyring\x00'}, {0x20, '#! '}], 0xa, "621e5e0debc1040000ff30cbfd8e04eaccc159b5fcd8be06e4055f04f6571870eb03520106c4e116c9c821224c68f567e83a0cdb3fbdeffa37f7d1ba1feeac40d62e410000000059e85b948b86cb86ed4cf3905fca46cc1b7a0669e4cc1ed005a8a816f251702704ee49c92ca831c950c8f8db3f07b90255167e097fbe01b5a58e07ecbf36127685600a06aa1fd1e0a7a14b555e00000000003a5c8414709f5566c2a85fb105b7567b0c35ffc56b53717624ec3d23493b1435730e271461da4b44bcd5f426abf8931af1c294e2fc2e4fec4fdc87a3b1d0a34920fbcb26722f73cce8c97d9b2b"}, 0x10d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x20, &(0x7f0000001240)={'lo\x00', @ifru_map={0x10000, 0xfffffffc, 0xfff3, 0x9b, 0x6, 0x8c}}}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, r2) keyctl$clear(0x7, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$kcm(0x11, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f00002d0000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xf3f90000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r9 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, r9) 0s ago: executing program 6 (id=1038): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x1, 0x2}, @fd, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x3) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) r9 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) kernel console output (not intermixed with test programs): 281105][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.283771][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.286613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.290883][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.293897][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.298434][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.301036][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.305174][ T8121] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 101.308494][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.311287][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.315040][ T6419] loop: Write error at byte offset 1, length 4096. [ 101.317047][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 101.319598][ T8120] Dev loop6: unable to read RDB block 8 [ 101.331715][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 101.334294][ T8120] loop6: unable to read partition table [ 101.335996][ T8120] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 101.346672][ T8120] openvswitch: netlink: IPv4 tunnel dst address is zero [ 101.369901][ T5359] ldm_validate_partition_table(): Disk read failed. [ 101.374826][ T5359] Dev loop6: unable to read RDB block 0 [ 101.384463][ T5359] loop6: unable to read partition table [ 101.671555][ T6773] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 101.766199][ T8145] lo speed is unknown, defaulting to 1000 [ 101.786215][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 101.788761][ T8145] macsec0: entered promiscuous mode [ 101.821352][ T6773] usb 10-1: Using ep0 maxpacket: 8 [ 101.825031][ T6773] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 101.828511][ T6773] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 101.833348][ T6773] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.837234][ T6773] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.841773][ T6773] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.846985][ T6773] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.850617][ T6773] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.944286][ T8121] syz.4.453 (8121) used greatest stack depth: 20512 bytes left [ 102.067752][ T6773] usb 10-1: GET_CAPABILITIES returned 0 [ 102.069430][ T6773] usbtmc 10-1:16.0: can't read capabilities [ 102.098206][ T8150] xt_hashlimit: size too large, truncated to 1048576 [ 102.278043][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 102.281766][ T8112] usbtmc 10-1:16.0: Unable to send data, error -71 [ 102.472695][ T1321] usb 10-1: USB disconnect, device number 7 [ 102.635332][ T8166] netlink: 'syz.3.469': attribute type 2 has an invalid length. [ 102.637784][ T8166] netlink: 'syz.3.469': attribute type 8 has an invalid length. [ 102.640057][ T8166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.469'. [ 103.205881][ T8181] netlink: 72 bytes leftover after parsing attributes in process `syz.0.472'. [ 103.243017][ T8185] netlink: 6 bytes leftover after parsing attributes in process `syz.5.474'. [ 103.337235][ T8188] overlay: Unknown parameter 'func' [ 103.341848][ T8188] trusted_key: encrypted_key: insufficient parameters specified [ 103.478300][ T8202] IPVS: set_ctl: invalid protocol: 59 172.20.20.63:20001 [ 103.482421][ T8202] xt_hashlimit: size too large, truncated to 1048576 [ 103.647454][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 103.728013][ T8237] gfs2: gfs2 mount does not exist [ 103.733130][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 103.736759][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 103.781250][ T8244] FAULT_INJECTION: forcing a failure. [ 103.781250][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.785213][ T8244] CPU: 0 UID: 0 PID: 8244 Comm: syz.5.487 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 103.787979][ T8246] xt_hashlimit: size too large, truncated to 1048576 [ 103.788307][ T8244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.788316][ T8244] Call Trace: [ 103.795100][ T8244] [ 103.796013][ T8244] dump_stack_lvl+0x16c/0x1f0 [ 103.797500][ T8244] should_fail_ex+0x497/0x5b0 [ 103.798946][ T8244] _copy_from_user+0x2e/0xd0 [ 103.800322][ T8244] compat_do_replace+0x2a0/0x500 [ 103.801980][ T8244] ? __pfx_compat_do_replace+0x10/0x10 [ 103.803788][ T8244] ? aa_get_newest_label+0x376/0x680 [ 103.805487][ T8244] ? __pfx_aa_get_newest_label+0x10/0x10 [ 103.807334][ T8244] ? bpf_lsm_capable+0x9/0x10 [ 103.807348][ T8244] ? security_capable+0x7e/0x260 [ 103.807364][ T8244] do_ip6t_set_ctl+0x686/0xc20 [ 103.812421][ T8244] ? __mutex_lock+0x1cc/0xa60 [ 103.813809][ T8244] ? aa_label_sk_perm+0x19d/0x5a0 [ 103.815354][ T8244] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 103.816936][ T8244] ? __mutex_unlock_slowpath+0x164/0x690 [ 103.818591][ T8244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.820387][ T8244] ? find_held_lock+0x2d/0x110 [ 103.821809][ T8244] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 103.824034][ T8244] nf_setsockopt+0x8a/0xf0 [ 103.825853][ T8244] ipv6_setsockopt+0x135/0x170 [ 103.827790][ T8244] dccp_setsockopt+0x108/0xb20 [ 103.829712][ T8244] ? ksys_write+0x191/0x250 [ 103.831576][ T8244] ? __pfx_dccp_setsockopt+0x10/0x10 [ 103.833728][ T8244] ? sock_common_setsockopt+0x2e/0xf0 [ 103.835895][ T8244] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.838233][ T8244] do_sock_setsockopt+0x222/0x480 [ 103.840246][ T8244] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 103.842102][ T8244] ? lock_acquire+0x2f/0xb0 [ 103.843416][ T8244] __sys_setsockopt+0x1a0/0x230 [ 103.844833][ T8244] __ia32_sys_setsockopt+0xbc/0x160 [ 103.846353][ T8244] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.847856][ T8244] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 103.849736][ T8244] __do_fast_syscall_32+0x73/0x120 [ 103.851120][ T8244] do_fast_syscall_32+0x32/0x80 [ 103.852508][ T8244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.854331][ T8244] RIP: 0023:0xf712e579 [ 103.855512][ T8244] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.861129][ T8244] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 103.863730][ T8244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 103.865957][ T8244] RDX: 0000000000000040 RSI: 0000000020000480 RDI: 0000000000000480 [ 103.868206][ T8244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.868215][ T8244] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.868221][ T8244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.868234][ T8244] [ 103.887458][ T8251] bio_check_eod: 2 callbacks suppressed [ 103.887467][ T8251] syz.3.488: attempt to access beyond end of device [ 103.887467][ T8251] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 103.894811][ T8251] syz.3.488: attempt to access beyond end of device [ 103.894811][ T8251] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 103.974548][ T8256] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 103.977387][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 104.683339][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 104.913725][ T8283] FAULT_INJECTION: forcing a failure. [ 104.913725][ T8283] name failslab, interval 1, probability 0, space 0, times 1 [ 104.919204][ T8283] CPU: 3 UID: 0 PID: 8283 Comm: syz.5.500 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 104.923518][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.927780][ T8283] Call Trace: [ 104.929154][ T8283] [ 104.930362][ T8283] dump_stack_lvl+0x16c/0x1f0 [ 104.932196][ T8283] should_fail_ex+0x497/0x5b0 [ 104.934146][ T8283] ? fs_reclaim_acquire+0xae/0x150 [ 104.936240][ T8283] should_failslab+0xc2/0x120 [ 104.938243][ T8283] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 104.940559][ T8283] ? __get_vm_area_node+0x101/0x2f0 [ 104.942681][ T8283] __get_vm_area_node+0x101/0x2f0 [ 104.944826][ T8283] __vmalloc_node_range_noprof+0x26a/0x1530 [ 104.947240][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 104.949428][ T8283] ? rcu_is_watching+0x12/0xc0 [ 104.951323][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 104.953555][ T8283] ? __kasan_kmalloc+0xaa/0xb0 [ 104.955536][ T8283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.957750][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 104.959461][ T8283] vmalloc_noprof+0x6b/0x90 [ 104.960934][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 104.963159][ T8283] xt_compat_init_offsets+0xe1/0x1f0 [ 104.964830][ T8283] translate_compat_table+0x1f0/0x18e0 [ 104.966400][ T8283] ? __pfx_translate_compat_table+0x10/0x10 [ 104.968183][ T8283] ? __might_fault+0x13b/0x190 [ 104.969823][ T8283] ? trace_lock_acquire+0x14e/0x1f0 [ 104.971559][ T8283] compat_do_replace+0x35d/0x500 [ 104.972991][ T8283] ? __pfx_compat_do_replace+0x10/0x10 [ 104.974871][ T8283] ? aa_get_newest_label+0x376/0x680 [ 104.976760][ T8283] ? __pfx_aa_get_newest_label+0x10/0x10 [ 104.978313][ T8283] ? bpf_lsm_capable+0x9/0x10 [ 104.979711][ T8283] ? security_capable+0x7e/0x260 [ 104.981216][ T8283] do_ip6t_set_ctl+0x686/0xc20 [ 104.982652][ T8283] ? __mutex_lock+0x1cc/0xa60 [ 104.984394][ T8283] ? aa_label_sk_perm+0x19d/0x5a0 [ 104.986464][ T8283] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 104.988247][ T8283] ? __mutex_unlock_slowpath+0x164/0x690 [ 104.989904][ T8283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.992298][ T8283] ? find_held_lock+0x2d/0x110 [ 104.994269][ T8283] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 104.996549][ T8283] nf_setsockopt+0x8a/0xf0 [ 104.998374][ T8283] ipv6_setsockopt+0x135/0x170 [ 105.000351][ T8283] dccp_setsockopt+0x108/0xb20 [ 105.002321][ T8283] ? ksys_write+0x191/0x250 [ 105.004234][ T8283] ? __pfx_dccp_setsockopt+0x10/0x10 [ 105.006373][ T8283] ? sock_common_setsockopt+0x2e/0xf0 [ 105.008568][ T8283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.010976][ T8283] do_sock_setsockopt+0x222/0x480 [ 105.013041][ T8283] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.015276][ T8283] ? lock_acquire+0x2f/0xb0 [ 105.017052][ T8283] __sys_setsockopt+0x1a0/0x230 [ 105.019018][ T8283] __ia32_sys_setsockopt+0xbc/0x160 [ 105.021055][ T8283] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.022518][ T8283] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 105.024329][ T8283] __do_fast_syscall_32+0x73/0x120 [ 105.025758][ T8283] do_fast_syscall_32+0x32/0x80 [ 105.027148][ T8283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.028997][ T8283] RIP: 0023:0xf712e579 [ 105.030167][ T8283] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.036010][ T8283] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 105.038936][ T8283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 105.042002][ T8283] RDX: 0000000000000040 RSI: 0000000020000480 RDI: 0000000000000480 [ 105.044938][ T8283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.047790][ T8283] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.050734][ T8283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.053587][ T8283] [ 105.060036][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 105.068849][ T8283] syz.5.500: vmalloc error: size 24, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 105.074055][ T8283] CPU: 2 UID: 0 PID: 8283 Comm: syz.5.500 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 105.078134][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.082424][ T8283] Call Trace: [ 105.083777][ T8283] [ 105.084942][ T8283] dump_stack_lvl+0x16c/0x1f0 [ 105.086791][ T8283] warn_alloc+0x24d/0x3a0 [ 105.088499][ T8283] ? __pfx_warn_alloc+0x10/0x10 [ 105.090433][ T8283] ? rcu_is_watching+0x12/0xc0 [ 105.092344][ T8283] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 105.094490][ T8283] ? __kasan_kmalloc+0x8a/0xb0 [ 105.096509][ T8283] ? __get_vm_area_node+0x1dc/0x2f0 [ 105.098545][ T8283] __vmalloc_node_range_noprof+0xd27/0x1530 [ 105.100942][ T8283] ? rcu_is_watching+0x12/0xc0 [ 105.102657][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 105.104259][ T8283] ? __kasan_kmalloc+0xaa/0xb0 [ 105.105686][ T8283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.107553][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 105.109309][ T8283] vmalloc_noprof+0x6b/0x90 [ 105.111026][ T8283] ? xt_compat_init_offsets+0xe1/0x1f0 [ 105.112902][ T8283] xt_compat_init_offsets+0xe1/0x1f0 [ 105.114448][ T8283] translate_compat_table+0x1f0/0x18e0 [ 105.116356][ T8283] ? __pfx_translate_compat_table+0x10/0x10 [ 105.118718][ T8283] ? __might_fault+0x13b/0x190 [ 105.120684][ T8283] ? trace_lock_acquire+0x14e/0x1f0 [ 105.122764][ T8283] compat_do_replace+0x35d/0x500 [ 105.124662][ T8283] ? __pfx_compat_do_replace+0x10/0x10 [ 105.126221][ T8283] ? aa_get_newest_label+0x376/0x680 [ 105.127793][ T8283] ? __pfx_aa_get_newest_label+0x10/0x10 [ 105.129580][ T8283] ? bpf_lsm_capable+0x9/0x10 [ 105.131056][ T8283] ? security_capable+0x7e/0x260 [ 105.132684][ T8283] do_ip6t_set_ctl+0x686/0xc20 [ 105.134249][ T8283] ? __mutex_lock+0x1cc/0xa60 [ 105.135606][ T8283] ? aa_label_sk_perm+0x19d/0x5a0 [ 105.137195][ T8283] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 105.139056][ T8283] ? __mutex_unlock_slowpath+0x164/0x690 [ 105.141208][ T8283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.143446][ T8283] ? find_held_lock+0x2d/0x110 [ 105.145293][ T8283] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 105.147633][ T8283] nf_setsockopt+0x8a/0xf0 [ 105.149398][ T8283] ipv6_setsockopt+0x135/0x170 [ 105.151295][ T8283] dccp_setsockopt+0x108/0xb20 [ 105.153200][ T8283] ? ksys_write+0x191/0x250 [ 105.155060][ T8283] ? __pfx_dccp_setsockopt+0x10/0x10 [ 105.157147][ T8283] ? sock_common_setsockopt+0x2e/0xf0 [ 105.159254][ T8283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.161412][ T8283] do_sock_setsockopt+0x222/0x480 [ 105.163269][ T8283] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.165328][ T8283] ? lock_acquire+0x2f/0xb0 [ 105.167080][ T8283] __sys_setsockopt+0x1a0/0x230 [ 105.168886][ T8283] __ia32_sys_setsockopt+0xbc/0x160 [ 105.170952][ T8283] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.172941][ T8283] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 105.175483][ T8283] __do_fast_syscall_32+0x73/0x120 [ 105.177482][ T8283] do_fast_syscall_32+0x32/0x80 [ 105.179432][ T8283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.181789][ T8283] RIP: 0023:0xf712e579 [ 105.183325][ T8283] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.190495][ T8283] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 105.193666][ T8283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 105.196710][ T8283] RDX: 0000000000000040 RSI: 0000000020000480 RDI: 0000000000000480 [ 105.199807][ T8283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.202837][ T8283] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.205882][ T8283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.208977][ T8283] [ 105.210329][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.217061][ T8283] Mem-Info: [ 105.219361][ T8283] active_anon:8311 inactive_anon:0 isolated_anon:0 [ 105.219361][ T8283] active_file:11166 inactive_file:2610 isolated_file:0 [ 105.219361][ T8283] unevictable:1768 dirty:329 writeback:0 [ 105.219361][ T8283] slab_reclaimable:9874 slab_unreclaimable:57514 [ 105.219361][ T8283] mapped:24172 shmem:4520 pagetables:927 [ 105.219361][ T8283] sec_pagetables:298 bounce:0 [ 105.219361][ T8283] kernel_misc_reclaimable:0 [ 105.219361][ T8283] free:84750 free_pcp:3855 free_cma:0 [ 105.234546][ T8283] Node 0 active_anon:3204kB inactive_anon:0kB active_file:916kB inactive_file:7364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7528kB dirty:52kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9712kB pagetables:924kB sec_pagetables:1128kB all_unreclaimable? yes [ 105.247041][ T8283] Node 1 active_anon:29936kB inactive_anon:0kB active_file:43748kB inactive_file:3076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89008kB dirty:1264kB writeback:0kB shmem:13868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3600kB pagetables:2664kB sec_pagetables:64kB all_unreclaimable? no [ 105.258862][ T8283] Node 0 DMA free:2976kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:268kB inactive_anon:0kB active_file:244kB inactive_file:1060kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:368kB local_pcp:108kB free_cma:0kB [ 105.269364][ T8283] lowmem_reserve[]: 0 273 0 0 0 [ 105.271560][ T8283] Node 0 DMA32 free:26536kB boost:8192kB min:22096kB low:25572kB high:29048kB reserved_highatomic:4096KB active_anon:2936kB inactive_anon:0kB active_file:672kB inactive_file:6304kB unevictable:3536kB writepending:52kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:4676kB local_pcp:572kB free_cma:0kB [ 105.282758][ T8283] lowmem_reserve[]: 0 0 0 0 0 [ 105.284427][ T8283] Node 1 DMA32 free:309772kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:29936kB inactive_anon:0kB active_file:43748kB inactive_file:3076kB unevictable:3536kB writepending:1264kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:10872kB local_pcp:96kB free_cma:0kB [ 105.293419][ T8283] lowmem_reserve[]: 0 0 0 0 0 [ 105.294810][ T8283] Node 0 DMA: 116*4kB (U) 86*8kB (U) 114*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2976kB [ 105.298503][ T8283] Node 0 DMA32: 840*4kB (UEH) 269*8kB (UEH) 44*16kB (UH) 41*32kB (UMEH) 109*64kB (UMEH) 24*128kB (UM) 11*256kB (UME) 6*512kB (UM) 3*1024kB (ME) 0*2048kB 0*4096kB = 26536kB [ 105.303688][ T8283] Node 1 DMA32: 213*4kB (UME) 365*8kB (UE) 922*16kB (UME) 590*32kB (UME) 555*64kB (UME) 170*128kB (UME) 72*256kB (UME) 42*512kB (UM) 23*1024kB (UM) 16*2048kB (UM) 29*4096kB (UM) = 309724kB [ 105.308949][ T8283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.311670][ T8283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.314212][ T8283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.316875][ T8283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.319497][ T8283] 18300 total pagecache pages [ 105.321236][ T8283] 0 pages in swap cache [ 105.322934][ T8283] Free swap = 124304kB [ 105.324481][ T8283] Total swap = 124996kB [ 105.325904][ T8283] 524155 pages RAM [ 105.327314][ T8283] 0 pages HighMem/MovableOnly [ 105.329076][ T8283] 206675 pages reserved [ 105.330626][ T8283] 0 pages cma reserved [ 105.333235][ T8286] xt_hashlimit: size too large, truncated to 1048576 [ 105.479997][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 106.259814][ T8312] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 106.284943][ T8312] syzkaller0: entered promiscuous mode [ 106.287037][ T8312] syzkaller0: entered allmulticast mode [ 106.435441][ T8323] FAULT_INJECTION: forcing a failure. [ 106.435441][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 106.440325][ T8323] CPU: 2 UID: 0 PID: 8323 Comm: syz.4.511 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 106.444549][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.448573][ T8323] Call Trace: [ 106.449871][ T8323] [ 106.451045][ T8323] dump_stack_lvl+0x16c/0x1f0 [ 106.452869][ T8323] should_fail_ex+0x497/0x5b0 [ 106.454704][ T8323] ? fs_reclaim_acquire+0xae/0x150 [ 106.456723][ T8323] should_failslab+0xc2/0x120 [ 106.458549][ T8323] __kmalloc_node_noprof+0xd1/0x520 [ 106.460666][ T8323] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 106.463082][ T8323] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 106.465370][ T8323] ? xt_compat_init_offsets+0xe1/0x1f0 [ 106.467500][ T8323] ? __kasan_kmalloc+0xaa/0xb0 [ 106.469310][ T8323] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.471734][ T8323] ? xt_compat_init_offsets+0xe1/0x1f0 [ 106.473791][ T8323] vmalloc_noprof+0x6b/0x90 [ 106.475519][ T8323] ? xt_compat_init_offsets+0xe1/0x1f0 [ 106.477748][ T8323] xt_compat_init_offsets+0xe1/0x1f0 [ 106.479820][ T8323] translate_compat_table+0x1f0/0x18e0 [ 106.481993][ T8323] ? __pfx_translate_compat_table+0x10/0x10 [ 106.484378][ T8323] ? __might_fault+0x13b/0x190 [ 106.486310][ T8323] ? trace_lock_acquire+0x14e/0x1f0 [ 106.488434][ T8323] compat_do_replace+0x35d/0x500 [ 106.490387][ T8323] ? __pfx_compat_do_replace+0x10/0x10 [ 106.492554][ T8323] ? aa_get_newest_label+0x376/0x680 [ 106.494699][ T8323] ? __pfx_aa_get_newest_label+0x10/0x10 [ 106.496979][ T8323] ? bpf_lsm_capable+0x9/0x10 [ 106.498894][ T8323] ? security_capable+0x7e/0x260 [ 106.500907][ T8323] do_ip6t_set_ctl+0x686/0xc20 [ 106.502767][ T8323] ? __mutex_lock+0x1cc/0xa60 [ 106.504635][ T8323] ? aa_label_sk_perm+0x19d/0x5a0 [ 106.506683][ T8323] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 106.508816][ T8323] ? __mutex_unlock_slowpath+0x164/0x690 [ 106.511072][ T8323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.513389][ T8323] ? find_held_lock+0x2d/0x110 [ 106.515362][ T8323] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 106.517799][ T8323] nf_setsockopt+0x8a/0xf0 [ 106.519622][ T8323] ipv6_setsockopt+0x135/0x170 [ 106.521552][ T8323] dccp_setsockopt+0x108/0xb20 [ 106.523477][ T8323] ? ksys_write+0x191/0x250 [ 106.525361][ T8323] ? __pfx_dccp_setsockopt+0x10/0x10 [ 106.527489][ T8323] ? sock_common_setsockopt+0x2e/0xf0 [ 106.529651][ T8323] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.532032][ T8323] do_sock_setsockopt+0x222/0x480 [ 106.534055][ T8323] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.536272][ T8323] ? lock_acquire+0x2f/0xb0 [ 106.538086][ T8323] __sys_setsockopt+0x1a0/0x230 [ 106.540054][ T8323] __ia32_sys_setsockopt+0xbc/0x160 [ 106.542071][ T8323] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.543841][ T8323] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 106.545715][ T8323] __do_fast_syscall_32+0x73/0x120 [ 106.547156][ T8323] do_fast_syscall_32+0x32/0x80 [ 106.548545][ T8323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.550351][ T8323] RIP: 0023:0xf7f00579 [ 106.551531][ T8323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.556993][ T8323] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 106.559331][ T8323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 106.561534][ T8323] RDX: 0000000000000040 RSI: 0000000020000480 RDI: 0000000000000480 [ 106.563752][ T8323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.565971][ T8323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.568218][ T8323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.570482][ T8323] [ 106.571413][ C2] vkms_vblank_simulate: vblank timer overrun [ 107.089965][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.792199][ T8314] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 107.796182][ T8318] lo speed is unknown, defaulting to 1000 [ 107.948644][ T8339] ata1.00: non-matching transfer count (1530558389/0) [ 108.248037][ T8335] lo speed is unknown, defaulting to 1000 [ 108.440359][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 109.286738][ T8388] tmpfs: Cannot change global quota limit on remount [ 109.354784][ T8393] fuse: Bad value for 'rootmode' [ 109.496473][ T8400] Process accounting resumed [ 109.947337][ T8409] netlink: 'syz.4.532': attribute type 12 has an invalid length. [ 110.278495][ T8411] tipc: Started in network mode [ 110.280409][ T8411] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 110.291774][ T8411] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 110.295354][ T8411] tipc: Enabled bearer , priority 10 [ 110.343598][ T39] audit: type=1326 audit(1735204109.391:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.352662][ T39] audit: type=1326 audit(1735204109.391:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.360844][ T39] audit: type=1326 audit(1735204109.391:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.368808][ T39] audit: type=1326 audit(1735204109.391:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.376729][ T39] audit: type=1326 audit(1735204109.391:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.384672][ T39] audit: type=1326 audit(1735204109.391:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.389994][ T39] audit: type=1326 audit(1735204109.391:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.395820][ T39] audit: type=1326 audit(1735204109.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.401559][ T39] audit: type=1326 audit(1735204109.391:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.463738][ T39] audit: type=1326 audit(1735204109.511:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.4.534" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f00579 code=0x7ffc0000 [ 110.601213][ T5826] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.011273][ T5826] usb 9-1: Using ep0 maxpacket: 32 [ 111.014137][ T5826] usb 9-1: config 0 has no interfaces? [ 111.015799][ T5826] usb 9-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 111.018354][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.022007][ T5826] usb 9-1: config 0 descriptor?? [ 111.228454][ T8413] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 111.247317][ T8413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.262461][ T8413] bond1: (slave veth3): Enslaving as an active interface with a down link [ 111.269841][ T56] usb 9-1: USB disconnect, device number 4 [ 111.322632][ T25] tipc: Node number set to 1 [ 112.132413][ T8446] lo speed is unknown, defaulting to 1000 [ 112.359481][ T8447] sp0: Synchronizing with TNC [ 112.393783][ T8450] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 112.465632][ T8455] 9pnet_fd: Insufficient options for proto=fd [ 112.467453][ T8454] 9pnet_fd: Insufficient options for proto=fd [ 112.469815][ T8454] trusted_key: encrypted_key: insufficient parameters specified [ 112.476066][ T8455] trusted_key: encrypted_key: insufficient parameters specified [ 112.811638][ T8444] [U] è [ 112.931790][ T8468] random: crng reseeded on system resumption [ 112.968047][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.552'. [ 113.552466][ T8483] Restarting kernel threads ... done. [ 113.804473][ T8497] lo speed is unknown, defaulting to 1000 [ 113.912040][ T8506] netlink: 45 bytes leftover after parsing attributes in process `syz.4.560'. [ 113.917272][ T8506] binder: 8498:8506 ioctl c0502100 20000700 returned -22 [ 114.090817][ T8515] block nbd3: shutting down sockets [ 114.168544][ T8520] program syz.5.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.696753][ T6773] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 114.841313][ T6773] usb 10-1: Using ep0 maxpacket: 16 [ 114.843978][ T6773] usb 10-1: config 0 has no interfaces? [ 114.846963][ T6773] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 114.849563][ T6773] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.852318][ T6773] usb 10-1: Product: syz [ 114.853565][ T6773] usb 10-1: Manufacturer: syz [ 114.854972][ T6773] usb 10-1: SerialNumber: syz [ 114.860102][ T6773] usb 10-1: config 0 descriptor?? [ 115.079045][ T6773] usb 10-1: USB disconnect, device number 8 [ 115.239106][ T8540] 9pnet_fd: Insufficient options for proto=fd [ 115.681813][ T8546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.570'. [ 115.685831][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 115.838627][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'. [ 115.913642][ T8554] netlink: 'syz.5.572': attribute type 11 has an invalid length. [ 115.917917][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 117.287114][ T8606] macvlan2: entered promiscuous mode [ 117.288682][ T8606] macvlan2: entered allmulticast mode [ 117.318167][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 118.312816][ T8625] 9pnet_fd: Insufficient options for proto=fd [ 118.379817][ T8625] vti0: entered promiscuous mode [ 118.425394][ T8633] IPVS: Error joining to the multicast group [ 118.558543][ T39] kauditd_printk_skb: 46 callbacks suppressed [ 118.558558][ T39] audit: type=1326 audit(1735204117.601:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.577518][ T39] audit: type=1326 audit(1735204117.621:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.597200][ T39] audit: type=1326 audit(1735204117.621:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.606474][ T39] audit: type=1326 audit(1735204117.621:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.613223][ T8642] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.620275][ T39] audit: type=1326 audit(1735204117.631:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.628821][ T39] audit: type=1326 audit(1735204117.631:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.637461][ T39] audit: type=1326 audit(1735204117.631:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.644158][ T39] audit: type=1326 audit(1735204117.641:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.650152][ T39] audit: type=1326 audit(1735204117.641:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.656559][ T39] audit: type=1326 audit(1735204117.641:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.5.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 118.960004][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 119.663774][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 119.728609][ T8677] random: crng reseeded on system resumption [ 119.792936][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 120.440214][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.613'. [ 120.604124][ T8703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.161323][ T6773] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 121.321527][ T6773] usb 8-1: Using ep0 maxpacket: 32 [ 121.325058][ T6773] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 121.343730][ T6773] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 121.350290][ T6773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 121.353241][ T6773] usb 8-1: config 1 has no interface number 0 [ 121.355329][ T6773] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.358706][ T6773] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 121.373226][ T6773] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 121.376764][ T6773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.381193][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.617'. [ 121.390874][ T6773] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 121.930840][ T8724] netlink: 'syz.5.620': attribute type 4 has an invalid length. [ 121.934767][ T8724] sctp: [Deprecated]: syz.5.620 (pid 8724) Use of int in max_burst socket option. [ 121.934767][ T8724] Use struct sctp_assoc_value instead [ 121.936176][ T6773] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 122.009742][ T8728] netlink: 116 bytes leftover after parsing attributes in process `syz.5.621'. [ 122.153816][ T8732] Process accounting resumed [ 122.154280][ T6773] usb 8-1: USB disconnect, device number 4 [ 122.160220][ T6773] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 122.225273][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 122.241237][ T8739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.276624][ T8742] overlay: ./file0 is not a directory [ 122.292374][ T8742] overlayfs: invalid origin (0000) [ 122.310789][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 122.316899][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 122.320361][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 122.511934][ T8757] can0: slcan on pts0. [ 122.611547][ T8757] can0 (unregistered): slcan off pts0. [ 122.714211][ T8773] netlink: 'syz.5.631': attribute type 3 has an invalid length. [ 122.817157][ T8791] netlink: 'syz.5.633': attribute type 10 has an invalid length. [ 122.820003][ T8791] bond0: (slave wlan1): Opening slave failed [ 123.223231][ T8791] syz.5.633 (8791): drop_caches: 2 [ 123.291670][ T8797] fuse: Unknown parameter 'fì÷ù¢UÙýó [ 123.291670][ T8797] \‹ÜÄIžPq7ëíD [ 123.291670][ T8797] áK˜šGé²D!2ƒZ' [ 123.860308][ T5299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.868171][ T5299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.871441][ T5299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.874807][ T5299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.877183][ T5299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.879399][ T5299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.886256][ T8810] warn_alloc: 1 callbacks suppressed [ 123.886266][ T8810] syz.3.637: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.900202][ T8810] CPU: 3 UID: 0 PID: 8810 Comm: syz.3.637 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 123.903239][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.906309][ T8810] Call Trace: [ 123.907281][ T8810] [ 123.908141][ T8810] dump_stack_lvl+0x16c/0x1f0 [ 123.909506][ T8810] warn_alloc+0x24d/0x3a0 [ 123.910762][ T8810] ? __pfx_warn_alloc+0x10/0x10 [ 123.912173][ T8810] ? __pfx_stack_trace_save+0x10/0x10 [ 123.913714][ T8810] ? kasan_save_stack+0x42/0x60 [ 123.914993][ T8817] lo speed is unknown, defaulting to 1000 [ 123.915121][ T8810] ? kasan_save_stack+0x33/0x60 [ 123.918222][ T8810] ? kasan_save_track+0x14/0x30 [ 123.919638][ T8810] ? __kasan_kmalloc+0xaa/0xb0 [ 123.921017][ T8810] ? xskq_create+0x52/0x1d0 [ 123.922421][ T8810] ? do_sock_setsockopt+0x222/0x480 [ 123.923908][ T8810] ? __sys_setsockopt+0x1a0/0x230 [ 123.925353][ T8810] ? __ia32_sys_setsockopt+0xbc/0x160 [ 123.926908][ T8810] __vmalloc_node_range_noprof+0x10df/0x1530 [ 123.928606][ T8810] ? xskq_create+0xfb/0x1d0 [ 123.929929][ T8810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.931757][ T8810] ? xskq_create+0xfb/0x1d0 [ 123.933070][ T8810] vmalloc_user_noprof+0x6b/0x90 [ 123.934502][ T8810] ? xskq_create+0xfb/0x1d0 [ 123.935820][ T8810] xskq_create+0xfb/0x1d0 [ 123.937074][ T8810] xsk_setsockopt+0x869/0xac0 [ 123.938455][ T8810] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.939973][ T8810] ? find_held_lock+0x2d/0x110 [ 123.941362][ T8810] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.942887][ T8810] do_sock_setsockopt+0x222/0x480 [ 123.944364][ T8810] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.945882][ T8810] ? lock_acquire+0x2f/0xb0 [ 123.947179][ T8810] __sys_setsockopt+0x1a0/0x230 [ 123.948600][ T8810] __ia32_sys_setsockopt+0xbc/0x160 [ 123.950052][ T8810] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.951473][ T8810] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 123.953282][ T8810] __do_fast_syscall_32+0x73/0x120 [ 123.954695][ T8810] do_fast_syscall_32+0x32/0x80 [ 123.956049][ T8810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.957769][ T8810] RIP: 0023:0xf711e579 [ 123.958905][ T8810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.964166][ T8810] RSP: 002b:00000000f50ef55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 123.966498][ T8810] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 123.968722][ T8810] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 123.970914][ T8810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.973050][ T8810] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 123.975299][ T8810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.975399][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 123.977524][ T8810] [ 123.982926][ T8810] Mem-Info: [ 123.983874][ T8810] active_anon:11299 inactive_anon:0 isolated_anon:0 [ 123.983874][ T8810] active_file:15609 inactive_file:2743 isolated_file:0 [ 123.983874][ T8810] unevictable:1768 dirty:121 writeback:0 [ 123.983874][ T8810] slab_reclaimable:8040 slab_unreclaimable:59053 [ 123.983874][ T8810] mapped:28149 shmem:7403 pagetables:920 [ 123.983874][ T8810] sec_pagetables:301 bounce:0 [ 123.983874][ T8810] kernel_misc_reclaimable:0 [ 123.983874][ T8810] free:70580 free_pcp:6901 free_cma:0 [ 123.999055][ T8810] Node 0 active_anon:6080kB inactive_anon:0kB active_file:1828kB inactive_file:7572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10452kB dirty:12kB writeback:0kB shmem:7068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9756kB pagetables:776kB sec_pagetables:1132kB all_unreclaimable? yes [ 124.011041][ T8810] Node 1 active_anon:39116kB inactive_anon:0kB active_file:60608kB inactive_file:3400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102144kB dirty:472kB writeback:0kB shmem:22544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3928kB pagetables:2904kB sec_pagetables:72kB all_unreclaimable? no [ 124.023639][ T8810] Node 0 DMA free:3048kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:544kB inactive_anon:0kB active_file:332kB inactive_file:1072kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:36kB free_cma:0kB [ 124.034956][ T8810] lowmem_reserve[]: 0 273 0 0 0 [ 124.038604][ T8810] Node 0 DMA32 free:26600kB boost:8192kB min:22096kB low:25572kB high:29048kB reserved_highatomic:4096KB active_anon:5564kB inactive_anon:0kB active_file:1496kB inactive_file:6500kB unevictable:3536kB writepending:12kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:1268kB local_pcp:124kB free_cma:0kB [ 124.050971][ T8810] lowmem_reserve[]: 0 0 0 0 0 [ 124.053195][ T8810] Node 1 DMA32 free:252404kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:39048kB inactive_anon:0kB active_file:60608kB inactive_file:3404kB unevictable:3536kB writepending:472kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:25764kB local_pcp:18952kB free_cma:0kB [ 124.064225][ T8810] lowmem_reserve[]: 0 0 0 0 0 [ 124.066428][ T8810] Node 0 DMA: 13*4kB (U) 82*8kB (U) 99*16kB (U) 21*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2964kB [ 124.072844][ T8810] Node 0 DMA32: 604*4kB (UMEH) 300*8kB (UMEH) 30*16kB (UMEH) 67*32kB (MEH) 73*64kB (UEH) 18*128kB (UME) 10*256kB (UME) 5*512kB (UM) 5*1024kB (ME) 1*2048kB (M) 0*4096kB = 26704kB [ 124.083903][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.085989][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.088011][ T8817] bridge_slave_0: entered allmulticast mode [ 124.090065][ T8817] bridge_slave_0: entered promiscuous mode [ 124.092953][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.095077][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.097096][ T8817] bridge_slave_1: entered allmulticast mode [ 124.099246][ T8817] bridge_slave_1: entered promiscuous mode [ 124.105142][ T8810] Node 1 DMA32: 280*4kB (UME) 88*8kB (UME) 636*16kB (UME) 375*32kB (UME) 372*64kB (UME) 132*128kB (UME) 61*256kB (UME) 25*512kB (UM) 19*1024kB (UM) 21*2048kB (UM) 28*4096kB (UM) = 270272kB [ 124.116120][ T8810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.121250][ T8810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.124107][ T8810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.127433][ T8810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.136689][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.140317][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.165462][ T8817] team0: Port device team_slave_0 added [ 124.166589][ T8810] 22905 total pagecache pages [ 124.168798][ T8810] 0 pages in swap cache [ 124.169993][ T8810] Free swap = 124048kB [ 124.171265][ T8810] Total swap = 124996kB [ 124.172403][ T8817] team0: Port device team_slave_1 added [ 124.172461][ T8810] 524155 pages RAM [ 124.175277][ T8810] 0 pages HighMem/MovableOnly [ 124.176642][ T8810] 206675 pages reserved [ 124.177857][ T8810] 0 pages cma reserved [ 124.209869][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.221174][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.239253][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.244049][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.246067][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.262804][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.307111][ T8817] hsr_slave_0: entered promiscuous mode [ 124.309738][ T8817] hsr_slave_1: entered promiscuous mode [ 124.312801][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.315613][ T8817] Cannot create hsr debugfs directory [ 124.413147][ T8817] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.422383][ T8817] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.431756][ T8817] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.436350][ T8817] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.475189][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.477432][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.479759][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.481876][ T8817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.514929][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.526680][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.823914][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.074145][ T8817] veth0_vlan: entered promiscuous mode [ 125.111549][ T8817] veth1_vlan: entered promiscuous mode [ 125.201362][ T8817] veth0_macvtap: entered promiscuous mode [ 125.220153][ T8817] veth1_macvtap: entered promiscuous mode [ 125.276791][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.279977][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.283272][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.286362][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.295836][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.350084][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.357707][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.362363][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.366339][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.370786][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.383670][ T8817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.386863][ T8817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.389810][ T8817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.393202][ T8817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.526712][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.528859][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.603233][ T8861] AppArmor: change_hat: Invalid input '0' [ 125.603509][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.608069][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.855801][ T8873] __nla_validate_parse: 3 callbacks suppressed [ 125.855811][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.647'. [ 125.941408][ T5953] Bluetooth: hci1: command tx timeout [ 126.045995][ T8876] binder: 8875:8876 unknown command 0 [ 126.047616][ T8876] binder: 8875:8876 ioctl c0306201 200001c0 returned -22 [ 126.298895][ T8886] dlm: non-version read from control device 8224 [ 126.367454][ T8895] netlink: 'syz.5.651': attribute type 1 has an invalid length. [ 126.369716][ T8895] netlink: 224 bytes leftover after parsing attributes in process `syz.5.651'. [ 126.403790][ T8892] fuse: Unknown parameter '' [ 126.568910][ T8895] vivid-001: disconnect [ 126.576396][ T8895] vivid-001: reconnect [ 126.837915][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.878565][ T832] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 126.882438][ T832] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 126.894320][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.897574][ T6423] wlan1: authenticated [ 126.901822][ T1175] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 126.948208][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.961420][ T1175] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 126.964996][ T1175] wlan1: associated [ 127.121413][ T8965] dccp_close: ABORT with 32 bytes unread [ 127.596323][ T8978] Device name cannot be null; rc = [-22] [ 127.709352][ T8982] netlink: 96 bytes leftover after parsing attributes in process `syz.6.668'. [ 128.549672][ T8994] lo speed is unknown, defaulting to 1000 [ 128.581365][ T8984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.584201][ T8984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.592163][ T8984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.138417][ T9023] sctp: [Deprecated]: syz.3.679 (pid 9023) Use of int in max_burst socket option. [ 129.138417][ T9023] Use struct sctp_assoc_value instead [ 129.259307][ T9026] netlink: 'syz.3.680': attribute type 39 has an invalid length. [ 129.321345][ T35] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 129.471237][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 129.474473][ T35] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.477908][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.480897][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.483997][ T35] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.488326][ T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.491235][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.699269][ T35] usb 11-1: GET_CAPABILITIES returned 0 [ 129.700900][ T35] usbtmc 11-1:16.0: can't read capabilities [ 129.944335][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 130.873504][ T9032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.875813][ T25] usb 11-1: USB disconnect, device number 2 [ 131.238261][ T9045] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 131.682403][ T9058] block device autoloading is deprecated and will be removed. [ 131.731069][ T9060] binder: BC_ATTEMPT_ACQUIRE not supported [ 131.733991][ T9061] binder: BC_ATTEMPT_ACQUIRE not supported [ 131.735763][ T9061] binder: 9059:9061 ioctl c0306201 200003c0 returned -22 [ 131.737835][ T9060] binder: 9059:9060 ioctl c0306201 200003c0 returned -22 [ 131.944859][ T9074] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 131.980234][ T9085] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.693'. [ 132.034923][ T9071] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 132.034923][ T9071] program syz.3.690 not setting count and/or reply_len properly [ 132.048903][ T9071] lo speed is unknown, defaulting to 1000 [ 132.127488][ T9101] xt_hashlimit: size too large, truncated to 1048576 [ 132.158282][ T9106] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.286126][ T9106] ipip0: entered promiscuous mode [ 132.901251][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 133.039159][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 133.039175][ T39] audit: type=1326 audit(1735204132.081:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.047781][ T39] audit: type=1326 audit(1735204132.081:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.055153][ T39] audit: type=1326 audit(1735204132.081:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.055173][ T39] audit: type=1326 audit(1735204132.081:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.055188][ T39] audit: type=1326 audit(1735204132.081:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.055203][ T39] audit: type=1326 audit(1735204132.081:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.055219][ T39] audit: type=1326 audit(1735204132.081:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.089038][ T39] audit: type=1326 audit(1735204132.081:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.095568][ T39] audit: type=1326 audit(1735204132.081:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.102349][ T39] audit: type=1326 audit(1735204132.081:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.700" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 133.205489][ T9129] infiniband syz0: set active [ 133.209053][ T9129] infiniband syz0: added bond0 [ 133.228065][ T9129] RDS/IB: syz0: added [ 133.229884][ T9129] smc: adding ib device syz0 with port count 1 [ 133.232253][ T9129] smc: ib device syz0 port 1 has pnetid [ 133.654856][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.707'. [ 133.691788][ T9153] random: crng reseeded on system resumption [ 133.921378][ T35] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 134.073772][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.079134][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.085848][ T35] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 134.088835][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.101063][ T35] usb 8-1: config 0 descriptor?? [ 134.106676][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 134.109124][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 134.125120][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.129219][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 134.134247][ T35] usb 8-1: media controller created [ 134.137080][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.142048][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 134.145123][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 134.149609][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input10 [ 134.159235][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 134.162025][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 134.307724][ T831] usb 8-1: USB disconnect, device number 5 [ 134.321499][ T831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 134.991341][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 135.231889][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.6.715'. [ 135.241524][ T9173] veth0_to_batadv: entered promiscuous mode [ 135.445046][ T9188] No control pipe specified [ 135.462912][ T9190] input: syz0 as /devices/virtual/input/input11 [ 135.542817][ T9191] netlink: 256 bytes leftover after parsing attributes in process `syz.6.718'. [ 136.698246][ T9237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.815715][ T9241] Sensor A: ================= START STATUS ================= [ 136.818677][ T9241] Sensor A: Test Pattern: 75% Colorbar [ 136.822122][ T9241] Sensor A: Show Information: All [ 136.824044][ T9241] Sensor A: Vertical Flip: false [ 136.825538][ T9241] Sensor A: Horizontal Flip: false [ 136.827112][ T9241] Sensor A: Brightness: 128 [ 136.828488][ T9241] Sensor A: Contrast: 128 [ 136.829777][ T9241] Sensor A: Hue: 0 [ 136.830945][ T9241] Sensor A: Saturation: 128 [ 136.833532][ T9241] Sensor A: ================== END STATUS ================== [ 137.061255][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 137.116373][ T9267] evm: overlay not supported [ 137.262074][ T9270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.279268][ T9270] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 137.282702][ T9270] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 137.285952][ T9270] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 137.289134][ T9270] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 137.919639][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.923334][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.925932][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.928465][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.931033][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.936268][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.938831][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.944379][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.947106][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 137.949715][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 138.490209][ T9293] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 138.532570][ T9301] JFS: charset not found [ 139.141258][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 139.185553][ T5299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.189507][ T5299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.193925][ T5299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.196819][ T5299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.199251][ T5299] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.201441][ T5299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.218078][ T9324] lo speed is unknown, defaulting to 1000 [ 139.241108][ T9318] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 139.308873][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 139.376471][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.379546][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.383107][ T9324] bridge_slave_0: entered allmulticast mode [ 139.386404][ T9324] bridge_slave_0: entered promiscuous mode [ 139.389346][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.391806][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.394086][ T9324] bridge_slave_1: entered allmulticast mode [ 139.397252][ T9324] bridge_slave_1: entered promiscuous mode [ 139.420691][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.425166][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.453288][ T9324] team0: Port device team_slave_0 added [ 139.457833][ T9324] team0: Port device team_slave_1 added [ 139.477923][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.479945][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.487627][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.491592][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.493645][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.500856][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.541338][ T9324] hsr_slave_0: entered promiscuous mode [ 139.543536][ T9324] hsr_slave_1: entered promiscuous mode [ 139.545875][ T9324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.548732][ T9324] Cannot create hsr debugfs directory [ 139.616085][ T9343] could not allocate digest TFM handle blake2s-128 [ 139.623184][ T9324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 139.628300][ T9324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 139.633514][ T9324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 139.637458][ T9324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 139.649987][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.652874][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.655700][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.658523][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.689464][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.699119][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.703331][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.721236][ T5987] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 139.731253][ T9324] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.738559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.740911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.753776][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.755882][ T6423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.873452][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.877871][ T5987] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 139.881101][ T5987] usb 11-1: config 0 has no interface number 0 [ 139.891332][ T5987] usb 11-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.896530][ T5987] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.900758][ T5987] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.904766][ T5987] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 139.907903][ T5987] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.912598][ T5987] usb 11-1: config 0 descriptor?? [ 139.914977][ T9341] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 139.919481][ T5987] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input12 [ 139.922262][ T9365] binder: 9364:9365 ioctl c0306201 20000380 returned -14 [ 139.950964][ T9372] netlink: 'syz.3.753': attribute type 9 has an invalid length. [ 139.953947][ T9371] netlink: 'syz.3.753': attribute type 9 has an invalid length. [ 139.959761][ C0] usbtouchscreen 11-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 140.004781][ T9324] veth0_vlan: entered promiscuous mode [ 140.010629][ T9324] veth1_vlan: entered promiscuous mode [ 140.030988][ T9324] veth0_macvtap: entered promiscuous mode [ 140.042555][ T9324] veth1_macvtap: entered promiscuous mode [ 140.057158][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.060730][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.063864][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.066957][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.070174][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.073752][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.077261][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.086944][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.090033][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.093322][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.096296][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.099046][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.102338][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.105869][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.113503][ T9324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.115911][ T9324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.118388][ T9324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.120839][ T9324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.142474][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.145698][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.153626][ T8218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.158881][ T8218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.163059][ T5826] usb 11-1: USB disconnect, device number 3 [ 140.701308][ T9401] bond0: entered promiscuous mode [ 140.702847][ T9401] bond_slave_0: entered promiscuous mode [ 140.704569][ T9401] bond_slave_1: entered promiscuous mode [ 141.014735][ T9413] syzkaller0: entered promiscuous mode [ 141.016492][ T9413] syzkaller0: entered allmulticast mode [ 141.221306][ T5953] Bluetooth: hci2: command tx timeout [ 142.885557][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.955591][ T9445] lo speed is unknown, defaulting to 1000 [ 143.100341][ T9457] netlink: 'syz.6.773': attribute type 10 has an invalid length. [ 143.102679][ T9457] __nla_validate_parse: 42 callbacks suppressed [ 143.102686][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.6.773'. [ 143.111255][ T9457] bridge0: port 3(batadv0) entered blocking state [ 143.117380][ T9457] bridge0: port 3(batadv0) entered disabled state [ 143.119864][ T9457] batadv0: entered allmulticast mode [ 143.141656][ T9457] batadv0: entered promiscuous mode [ 143.143484][ T9457] bridge0: port 3(batadv0) entered blocking state [ 143.145378][ T9457] bridge0: port 3(batadv0) entered forwarding state [ 143.301451][ T5953] Bluetooth: hci2: command tx timeout [ 143.469717][ T9466] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 143.483296][ T9467] lo speed is unknown, defaulting to 1000 [ 143.578616][ T1050] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.581860][ T1050] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 143.733753][ T9490] overlayfs: failed to resolve './file1': -2 [ 143.845708][ T9503] i2c i2c-1: Invalid block write size 34 [ 144.188697][ T9524] syz.3.782 (9524): /proc/9523/oom_adj is deprecated, please use /proc/9523/oom_score_adj instead. [ 144.262142][ T9535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.335589][ T9535] netlink: 6233 bytes leftover after parsing attributes in process `syz.3.785'. [ 144.690517][ T9580] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 144.791458][ T9590] netlink: 'syz.7.789': attribute type 12 has an invalid length. [ 144.991526][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 145.151585][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 145.158845][ T9] usb 11-1: unable to get BOS descriptor or descriptor too short [ 145.162025][ T9] usb 11-1: config 255 has an invalid interface number: 81 but max is 0 [ 145.164442][ T9] usb 11-1: config 255 has no interface number 0 [ 145.166274][ T9] usb 11-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 145.169636][ T9] usb 11-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 150, changing to 7 [ 145.176245][ T9] usb 11-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8859, setting to 1024 [ 145.179634][ T9] usb 11-1: config 255 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.184110][ T9] usb 11-1: config 255 interface 81 has no altsetting 0 [ 145.188253][ T9] usb 11-1: string descriptor 0 read error: -22 [ 145.190095][ T9] usb 11-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 145.196013][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.203473][ T9] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:255.81/input/input13 [ 145.215251][ T9] input: failed to attach handler mousedev to device input13, error: -5 [ 145.351063][ T8210] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.355490][ T8210] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 145.392860][ T5953] Bluetooth: hci2: command tx timeout [ 145.404394][ T25] usb 11-1: USB disconnect, device number 4 [ 145.445815][ T8210] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.448776][ T8210] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 145.486082][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.490270][ T5299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.497782][ T5299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.513025][ T5299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.515705][ T5299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.518007][ T5299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.521943][ T8210] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.524908][ T8210] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 145.544340][ T9618] lo speed is unknown, defaulting to 1000 [ 145.591265][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.597846][ T8210] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.600671][ T8210] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 145.668965][ T9618] chnl_net:caif_netlink_parms(): no params data found [ 145.751324][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 145.756184][ T35] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 145.758753][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.761064][ T35] usb 8-1: Product: syz [ 145.762614][ T35] usb 8-1: Manufacturer: syz [ 145.764239][ T35] usb 8-1: SerialNumber: syz [ 145.767549][ T35] usb 8-1: config 0 descriptor?? [ 145.774258][ T8210] bridge_slave_1: left allmulticast mode [ 145.775877][ T8210] bridge_slave_1: left promiscuous mode [ 145.777482][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.782806][ T8210] bridge_slave_0: left allmulticast mode [ 145.784457][ T8210] bridge_slave_0: left promiscuous mode [ 145.786113][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.819070][ T8210] infiniband syz0: set down [ 145.972552][ T35] airspy 8-1:0.0: usb_control_msg() failed -71 request 09 [ 145.975408][ T35] airspy 8-1:0.0: Could not detect board [ 145.977637][ T35] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 145.985785][ T35] usb 8-1: USB disconnect, device number 6 [ 146.114767][ T8234] smc: removing ib device syz0 [ 146.117546][ T8210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.124088][ T8210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.128341][ T8210] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 146.135307][ T8210] dummy0: left promiscuous mode [ 146.137567][ T8210] bond0 (unregistering): Released all slaves [ 146.141705][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.143786][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.145854][ T9618] bridge_slave_0: entered allmulticast mode [ 146.148001][ T9618] bridge_slave_0: entered promiscuous mode [ 146.150940][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.153267][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.157128][ T9618] bridge_slave_1: entered allmulticast mode [ 146.159454][ T9618] bridge_slave_1: entered promiscuous mode [ 146.195628][ T9672] netlink: 'syz.6.809': attribute type 1 has an invalid length. [ 146.213209][ T9670] binder: Bad value for 'max' [ 146.213652][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.218651][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.262405][ T9618] team0: Port device team_slave_0 added [ 146.265763][ T9618] team0: Port device team_slave_1 added [ 146.290350][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.292729][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.300000][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.305336][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.309726][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.317172][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.388362][ T9618] hsr_slave_0: entered promiscuous mode [ 146.390590][ T9618] hsr_slave_1: entered promiscuous mode [ 146.392720][ T9618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.394992][ T9618] Cannot create hsr debugfs directory [ 146.550665][ T8210] tipc: Disabling bearer [ 146.581729][ T8210] tipc: Left network mode [ 146.630406][ T8210] IPVS: stopping master sync thread 8450 ... [ 146.719918][ T9618] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.729697][ T9618] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.734046][ T9618] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.743878][ T9618] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.792037][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.849388][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.856455][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.858511][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.863705][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.865788][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.884529][ T8210] hsr_slave_0: left promiscuous mode [ 146.886418][ T8210] hsr_slave_1: left promiscuous mode [ 146.888336][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.890458][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.895356][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.897504][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.925588][ T8210] veth1_macvtap: left promiscuous mode [ 146.927208][ T8210] veth0_macvtap: left promiscuous mode [ 146.928810][ T8210] veth1_vlan: left promiscuous mode [ 146.930343][ T8210] veth0_vlan: left promiscuous mode [ 147.461301][ T5953] Bluetooth: hci2: command tx timeout [ 147.542017][ T5953] Bluetooth: hci0: command tx timeout [ 147.654396][ T8210] team0 (unregistering): Port device team_slave_1 removed [ 147.746761][ T8210] team0 (unregistering): Port device team_slave_0 removed [ 147.763340][ T9721] netlink: 'syz.7.818': attribute type 39 has an invalid length. [ 148.458896][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.498323][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 148.569228][ T9618] veth0_vlan: entered promiscuous mode [ 148.573667][ T9618] veth1_vlan: entered promiscuous mode [ 148.588600][ T9618] veth0_macvtap: entered promiscuous mode [ 148.604789][ T9618] veth1_macvtap: entered promiscuous mode [ 148.617189][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.620235][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.627550][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.630533][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.634552][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.637508][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.640766][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.655480][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.658515][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.664252][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.667387][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.670306][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.673536][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.676794][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.683148][ T9618] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.685709][ T9618] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.688205][ T9618] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.690693][ T9618] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.707209][ T9764] binder: Unknown parameter 'fscontext' [ 148.813243][ T9770] netlink: 'syz.6.823': attribute type 10 has an invalid length. [ 148.988766][ T9770] team0: Port device netdevsim0 added [ 149.010728][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.012996][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.081669][ T8234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.083981][ T8234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.250369][ T9771] syz.3.826 (9771): drop_caches: 2 [ 149.464547][ T9798] bridge_slave_0: left allmulticast mode [ 149.466224][ T9798] bridge_slave_0: left promiscuous mode [ 149.467948][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.504944][ T9798] bridge_slave_1: left allmulticast mode [ 149.506625][ T9798] bridge_slave_1: left promiscuous mode [ 149.508294][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.517334][ T9798] bond0: (slave bond_slave_0): Releasing backup interface [ 149.524264][ T9798] bond0: (slave bond_slave_1): Releasing backup interface [ 149.564107][ T9798] team0: Port device team_slave_0 removed [ 149.579339][ T9798] team0: Port device team_slave_1 removed [ 149.590169][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.593072][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.597615][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.599785][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.624130][ T5953] Bluetooth: hci0: command tx timeout [ 149.626198][ T9802] geneve2: entered promiscuous mode [ 149.628082][ T9802] geneve2: entered allmulticast mode [ 149.653398][ T9802] batman_adv: batadv0: Adding interface: geneve2 [ 149.657705][ T9802] batman_adv: batadv0: Interface activated: geneve2 [ 149.801321][ T9819] nbd6: detected capacity change from 0 to 67108884 [ 149.805348][ T9824] block nbd6: Send control failed (result -89) [ 149.807314][ T9824] block nbd6: Request send failed, requeueing [ 149.810943][ T5953] block nbd6: Receive control failed (result -32) [ 149.812290][ T1277] block nbd6: Dead connection, failed to find a fallback [ 149.815757][ T1277] block nbd6: shutting down sockets [ 149.817303][ T1277] blk_print_req_error: 148 callbacks suppressed [ 149.817310][ T1277] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.821891][ T1277] buffer_io_error: 145 callbacks suppressed [ 149.821897][ T1277] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.826835][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.829959][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.832413][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.836820][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.842038][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.848948][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.851562][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.857603][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.864287][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.870569][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.875337][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.879968][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.887259][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.890686][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.896599][ T9824] ldm_validate_partition_table(): Disk read failed. [ 149.898947][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.902461][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.904785][ T9824] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.907059][ T9824] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.909135][ T9824] Dev nbd6: unable to read RDB block 0 [ 149.912231][ T9824] nbd6: unable to read partition table [ 149.914334][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 149.916010][ T5958] ldm_validate_partition_table(): Disk read failed. [ 149.916950][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554441, location=33554441 [ 149.919189][ T5958] Dev nbd6: unable to read RDB block 0 [ 149.921836][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554185, location=33554185 [ 149.924259][ T5958] nbd6: unable to read partition table [ 149.925678][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554440, location=33554440 [ 149.930150][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554184, location=33554184 [ 149.931510][ T5958] ldm_validate_partition_table(): Disk read failed. [ 149.933280][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554439, location=33554439 [ 149.935250][ T5958] Dev nbd6: unable to read RDB block 0 [ 149.937473][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554183, location=33554183 [ 149.939513][ T5958] nbd6: unable to read partition table [ 149.944932][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554291, location=33554291 [ 149.947704][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554035, location=33554035 [ 149.947965][ T9831] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 149.950382][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554289, location=33554289 [ 149.950429][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=33554033, location=33554033 [ 149.953690][ T9831] netlink: 2 bytes leftover after parsing attributes in process `syz.3.830'. [ 149.955694][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 149.962032][ T9831] team0: entered promiscuous mode [ 149.969094][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 149.972115][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777220, location=16777220 [ 149.974862][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776964, location=16776964 [ 149.977609][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777219, location=16777219 [ 149.980326][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776963, location=16776963 [ 149.985670][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777218, location=16777218 [ 149.988467][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776962, location=16776962 [ 149.991563][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777070, location=16777070 [ 149.995011][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776814, location=16776814 [ 149.997711][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777068, location=16777068 [ 150.000457][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776812, location=16776812 [ 150.005867][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 150.008753][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 150.014966][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388609, location=8388609 [ 150.017814][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388353, location=8388353 [ 150.020483][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388608, location=8388608 [ 150.025090][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388352, location=8388352 [ 150.027769][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388607, location=8388607 [ 150.030424][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388351, location=8388351 [ 150.033383][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388459, location=8388459 [ 150.036149][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388203, location=8388203 [ 150.038823][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388457, location=8388457 [ 150.045293][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388201, location=8388201 [ 150.049628][ T9824] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 150.052291][ T9824] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 150.298422][ T9857] netlink: 'syz.6.834': attribute type 10 has an invalid length. [ 150.304532][ T9857] macvlan0: entered promiscuous mode [ 150.306114][ T9857] macvlan0: entered allmulticast mode [ 150.312143][ T9857] veth1_vlan: entered allmulticast mode [ 150.317125][ T9857] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 150.347633][ T9857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3738224872 (478492783616 ns) > initial count (91121186304 ns). Using initial count to start timer. [ 150.369121][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.834'. [ 150.916678][ T5953] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 151.147205][ T9900] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 151.147205][ T9900] program syz.8.841 not setting count and/or reply_len properly [ 151.340899][ T9903] syz.6.842: attempt to access beyond end of device [ 151.340899][ T9903] loop6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 151.344757][ T9903] XFS (loop6): SB validate failed with error -5. [ 151.469716][ T9919] openvswitch: netlink: Missing key (keys=40, expected=100) [ 151.487011][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 151.701291][ T5953] Bluetooth: hci0: command tx timeout [ 151.771263][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 151.771928][ T39] audit: type=1326 audit(1735204150.731:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.845" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 151.954133][ T39] audit: type=1326 audit(1735204151.001:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.8.841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 152.618933][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 152.626709][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 153.354585][ T9960] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.854'. [ 153.357383][ T9960] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 153.781460][ T5953] Bluetooth: hci0: command tx timeout [ 153.819752][ T9966] sp0: Synchronizing with TNC [ 154.351446][ T9927] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 154.517371][ T9927] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.521592][ T9927] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.525238][ T9927] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.528615][ T9927] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.534710][ T9969] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 154.540115][ T9927] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.803329][ T6773] usb 13-1: USB disconnect, device number 2 [ 155.043297][ T9996] 9pnet_virtio: no channels available for device syz [ 155.122026][ T9998] overlayfs: overlapping lowerdir path [ 155.398588][T10017] syz.8.866[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.398668][T10017] syz.8.866[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.402133][T10017] syz.8.866[10017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.407643][T10041] Scaler: ================= START STATUS ================= [ 156.413548][T10041] Scaler: ================== END STATUS ================== [ 156.622781][ T35] IPVS: starting estimator thread 0... [ 156.625849][T10047] tipc: Started in network mode [ 156.627582][T10047] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.628608][T10047] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.632718][T10047] tipc: Enabled bearer , priority 10 [ 156.693598][T10057] loop6: detected capacity change from 0 to 524287999 [ 156.711801][T10048] IPVS: using max 20 ests per chain, 48000 per kthread [ 156.771510][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.862694][T10077] netlink: 'syz.8.882': attribute type 3 has an invalid length. [ 156.865358][T10077] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.882'. [ 156.911276][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.051211][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.092179][ T39] audit: type=1326 audit(1735204156.141:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.8.889" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 157.201224][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.341242][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.491201][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.632778][ T35] tipc: Node number set to 2886997162 [ 157.771245][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.831259][ T1454] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 157.981263][ T1454] usb 11-1: Using ep0 maxpacket: 8 [ 157.984999][ T1454] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 157.988914][ T1454] usb 11-1: config 246 descriptor has 1 excess byte, ignoring [ 157.991940][ T1454] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 157.995617][ T1454] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 158.000154][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 158.004624][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 158.008859][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.014490][ T1454] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 158.018137][ T1454] usb 11-1: config 246 descriptor has 1 excess byte, ignoring [ 158.021309][ T1454] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 158.024946][ T1454] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 158.029420][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 158.033766][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 158.037969][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.042743][ T1454] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 158.046259][ T1454] usb 11-1: config 246 descriptor has 1 excess byte, ignoring [ 158.048976][ T1454] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 158.051285][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.052085][ T1454] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 158.057183][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 158.060343][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 158.063530][ T1454] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.068980][ T1454] usb 11-1: string descriptor 0 read error: -22 [ 158.070917][ T1454] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.073626][ T1454] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.079167][ T1454] adutux 11-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 158.274815][T10126] syzkaller0: entered promiscuous mode [ 158.276628][T10126] syzkaller0: entered allmulticast mode [ 158.385090][T10128] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.581302][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.720577][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 158.846249][T10135] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 158.955951][T10141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.027918][T10141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.353745][ T35] usb 11-1: USB disconnect, device number 5 [ 160.391431][T10141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.500373][T10141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.564155][T10141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.568972][T10141] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.574990][T10141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.579703][T10141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.312589][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 161.421380][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 161.424136][T10225] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 161.426808][T10225] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 161.592055][T10233] netlink: 'syz.3.913': attribute type 58 has an invalid length. [ 161.594868][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 161.643878][T10235] netlink: 'syz.3.913': attribute type 58 has an invalid length. [ 161.646158][T10235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 161.711320][ C3] net_ratelimit: 2 callbacks suppressed [ 161.711338][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.800027][ T39] audit: type=1326 audit(1735204160.841:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.806296][ T39] audit: type=1326 audit(1735204160.841:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.813440][ T39] audit: type=1326 audit(1735204160.851:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.817591][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 161.823943][T10240] batman_adv: batadv0: Interface deactivated: geneve2 [ 161.826793][T10240] batman_adv: batadv0: Removing interface: geneve2 [ 161.829604][ T39] audit: type=1326 audit(1735204160.851:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.837734][ T39] audit: type=1326 audit(1735204160.851:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.848670][ T39] audit: type=1326 audit(1735204160.851:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.855889][ T39] audit: type=1326 audit(1735204160.851:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.864578][ T39] audit: type=1326 audit(1735204160.851:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.869065][T10240] batadv0 (unregistering): left promiscuous mode [ 161.872870][ T39] audit: type=1326 audit(1735204160.851:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.8.915" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 161.884293][T10241] 9pnet_virtio: no channels available for device syz [ 162.441249][ T56] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 162.592724][ T56] usb 13-1: config 0 has no interfaces? [ 162.595935][ T56] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.599012][ T56] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.603197][ T56] usb 13-1: Product: syz [ 162.604570][ T56] usb 13-1: Manufacturer: syz [ 162.606017][ T56] usb 13-1: SerialNumber: syz [ 162.608422][ T56] usb 13-1: config 0 descriptor?? [ 162.751190][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.819370][ T832] usb 13-1: USB disconnect, device number 3 [ 162.955200][T10272] block nbd6: shutting down sockets [ 163.231325][ T9927] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 163.361276][ T9927] usb 11-1: device descriptor read/64, error -71 [ 163.526935][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.8.924'. [ 163.529669][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.924'. [ 163.601222][ T9927] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 163.741305][ T9927] usb 11-1: device descriptor read/64, error -71 [ 163.791184][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.853556][ T9927] usb usb11-port1: attempt power cycle [ 164.111349][ T5299] Bluetooth: hci0: command 0x0405 tx timeout [ 164.221251][ T9927] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 164.241594][ T9927] usb 11-1: device descriptor read/8, error -71 [ 164.491292][ T9927] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 164.511666][ T9927] usb 11-1: device descriptor read/8, error -71 [ 164.631483][ T9927] usb usb11-port1: unable to enumerate USB device [ 164.821353][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.609128][ T5299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.613413][ T5299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.617524][ T5299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.623683][ T5299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.626157][ T5299] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.628511][ T5299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.655016][T10306] lo speed is unknown, defaulting to 1000 [ 165.750151][T10306] chnl_net:caif_netlink_parms(): no params data found [ 165.812096][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.814281][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.817120][T10306] bridge_slave_0: entered allmulticast mode [ 165.820100][T10306] bridge_slave_0: entered promiscuous mode [ 165.825347][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.828103][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.830832][T10306] bridge_slave_1: entered allmulticast mode [ 165.833900][T10306] bridge_slave_1: entered promiscuous mode [ 165.861220][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.863692][T10306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.869124][T10306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.891381][T10306] team0: Port device team_slave_0 added [ 165.894551][T10306] team0: Port device team_slave_1 added [ 165.911505][T10306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.913485][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.920641][T10306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.926454][T10306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.928440][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.935766][T10306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.959196][T10306] hsr_slave_0: entered promiscuous mode [ 165.961440][T10306] hsr_slave_1: entered promiscuous mode [ 166.901410][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.001420][T10301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.011090][T10306] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 167.016405][T10306] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 167.027900][T10306] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 167.048033][T10306] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 167.082499][T10306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.091557][T10306] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.098318][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.101076][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.118520][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.120643][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.252840][T10306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.331206][ T9927] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 167.348067][T10306] veth0_vlan: entered promiscuous mode [ 167.351849][T10306] veth1_vlan: entered promiscuous mode [ 167.372614][T10306] veth0_macvtap: entered promiscuous mode [ 167.380717][T10306] veth1_macvtap: entered promiscuous mode [ 167.392640][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.396540][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.400362][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.401486][ T30] libceph: connect (1)[c::]:6789 error -101 [ 167.404338][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.409251][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.409513][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 167.413180][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.421447][T10306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.426233][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.430186][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.433937][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.437784][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.441489][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.445318][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.449484][T10306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.454565][T10306] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.457801][T10306] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.461007][T10306] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.464502][T10306] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.499726][ T8227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.505326][ T8227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.505385][ T9927] usb 11-1: unable to get BOS descriptor or descriptor too short [ 167.510919][ T9927] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.513319][ T8227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.517027][ T9927] usb 11-1: string descriptor 0 read error: -22 [ 167.517571][ T8227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.518884][ T9927] usb 11-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.40 [ 167.524037][ T9927] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.533379][ T9927] usbhid 11-1:1.0: can't add hid device: -22 [ 167.535195][ T9927] usbhid 11-1:1.0: probe with driver usbhid failed with error -22 [ 167.554911][T10346] ceph: No mds server is up or the cluster is laggy [ 167.613828][T10353] input: syz1 as /devices/virtual/input/input15 [ 167.635443][T10353] lo speed is unknown, defaulting to 1000 [ 167.701259][ T5953] Bluetooth: hci4: command tx timeout [ 167.742813][ T9927] usb 11-1: USB disconnect, device number 10 [ 167.814267][T10353] block nbd9: shutting down sockets [ 167.816399][T10353] block nbd9: server does not support multiple connections per device. [ 167.819637][T10353] block nbd9: NBD_DISCONNECT [ 167.821560][T10353] block nbd9: Send disconnect failed -32 [ 167.824019][T10353] block nbd9: Send disconnect failed -32 [ 167.896361][T10361] bond0: Device is already in use. [ 167.941405][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.141692][ T30] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 168.286098][T10373] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 168.440766][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 168.452619][ T9927] e1000 0000:00:06.0 eth0: Reset adapter [ 168.487316][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.496824][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.499897][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.508413][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 168.529454][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.533305][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.537019][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.541113][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 168.544247][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.547904][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.551285][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.581769][ T9927] e1000 0000:00:06.0 eth0: Reset adapter [ 168.586904][ T30] usb 8-1: string descriptor 0 read error: -22 [ 168.588589][ T30] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.591203][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.609939][ T30] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 168.681527][ T9927] e1000 0000:00:06.0 eth0: Reset adapter [ 168.856741][T10386] overlayfs: missing 'lowerdir' [ 168.858228][ T832] usb 8-1: USB disconnect, device number 7 [ 168.981362][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.172997][T10405] Cannot find del_set index 4 as target [ 169.175241][T10405] openvswitch: netlink: nsh attr 35 is out of range max 3 [ 169.177431][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.781242][ T5953] Bluetooth: hci4: command tx timeout [ 170.031277][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.822211][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 171.061313][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.861351][ T5953] Bluetooth: hci4: command tx timeout [ 172.101334][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.146078][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.941329][ T5953] Bluetooth: hci4: command tx timeout [ 174.181387][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.221335][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.261465][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.052556][T10434] ax25_connect(): syz.8.953 uses autobind, please contact jreuter@yaina.de [ 177.126608][T10444] [U] [ 177.127876][T10444] [U] [ 177.128745][T10444] [U] [ 177.129587][T10444] [U] [ 177.130650][T10444] [U] [ 177.131493][T10444] [U] [ 177.132333][T10444] [U] [ 177.133163][T10444] [U] [ 177.135124][T10444] [U] [ 177.135958][T10444] [U] [ 177.136805][T10444] [U] [ 177.137636][T10444] [U] [ 177.138524][T10444] [U] [ 177.139323][T10444] [U] [ 177.140164][T10444] [U] [ 177.141023][T10444] [U] [ 177.142433][T10444] [U] [ 177.143294][T10444] [U] [ 177.144149][T10444] [U] [ 177.145061][T10444] [U] [ 177.145900][T10444] [U] [ 177.146747][T10444] [U] [ 177.147579][T10444] [U] [ 177.148479][T10444] [U] [ 177.149610][T10444] [U] [ 177.150760][T10444] [U] [ 177.151655][T10444] [U] [ 177.152493][T10444] [U] [ 177.154211][T10444] [U] [ 177.155104][T10444] [U] [ 177.155941][T10444] [U] [ 177.156782][T10444] [U] [ 177.157602][T10444] [U] [ 177.158521][T10444] [U] [ 177.159471][T10444] [U] [ 177.160305][T10444] [U] [ 177.161114][T10444] [U] [ 177.161955][T10444] [U] [ 177.162801][T10444] [U] [ 177.163651][T10444] [U] [ 177.165277][T10444] [U] [ 177.166135][T10444] [U] [ 177.166997][T10444] [U] [ 177.167812][T10444] [U] [ 177.168703][T10444] [U] [ 177.169540][T10444] [U] [ 177.170384][T10444] [U] [ 177.171194][T10444] [U] [ 177.172621][T10444] [U] [ 177.173447][T10444] [U] [ 177.174305][T10444] [U] [ 177.175154][T10444] [U] [ 177.176050][T10444] [U] [ 177.176870][T10444] [U] [ 177.177702][T10444] [U] [ 177.178642][T10444] [U] [ 177.179492][T10444] [U] [ 177.180297][T10444] [U] [ 177.181139][T10444] [U] [ 177.181974][T10444] [U] [ 177.182058][T10448] netlink: 'syz.9.952': attribute type 27 has an invalid length. [ 177.183428][T10444] [U] [ 177.186409][T10444] [U] [ 177.187238][T10444] [U] [ 177.188074][T10444] [U] [ 177.190739][T10444] [U] [ 177.191584][T10444] [U] [ 177.192394][T10444] [U] [ 177.193203][T10444] [U] [ 177.194137][T10444] [U] [ 177.194967][T10444] [U] [ 177.195763][T10444] [U] [ 177.196561][T10444] [U] [ 177.197421][T10444] [U] [ 177.198224][T10444] [U] [ 177.199051][T10444] [U] [ 177.199850][T10444] [U] [ 177.202586][T10444] [U] [ 177.203438][T10444] [U] [ 177.204260][T10444] [U] [ 177.204276][T10444] [U] [ 177.204305][T10444] [U] [ 177.206722][T10444] [U] [ 177.207524][T10444] [U] [ 177.208324][T10444] [U] [ 177.209617][T10444] [U] [ 177.210468][T10444] [U] [ 177.211286][T10444] [U] [ 177.212084][T10444] [U] [ 177.213089][T10444] [U] [ 177.213909][T10444] [U] [ 177.214724][T10444] [U] [ 177.215521][T10444] [U] [ 177.216349][T10444] [U] [ 177.217167][T10444] [U] [ 177.217970][T10444] [U] [ 177.218787][T10444] [U] [ 177.219616][T10444] [U] [ 177.220419][T10444] [U] [ 177.221234][T10444] [U] [ 177.222037][T10444] [U] [ 177.222949][T10444] [U] [ 177.223772][T10444] [U] [ 177.224573][T10444] [U] [ 177.225375][T10444] [U] [ 177.226187][T10444] [U] [ 177.227009][T10444] [U] [ 177.227804][T10444] [U] [ 177.228602][T10444] [U] [ 177.229403][T10444] [U] [ 177.230204][T10444] [U] [ 177.231038][T10444] [U] [ 177.231840][T10444] [U] [ 177.235954][T10444] [U] [ 177.236794][T10444] [U] [ 177.237597][T10444] [U] [ 177.238422][T10444] [U] [ 177.241434][T10444] [U] [ 177.242295][T10444] [U] [ 177.243100][T10444] [U] [ 177.243933][T10444] [U] [ 177.244766][T10444] [U] [ 177.245566][T10444] [U] [ 177.246374][T10444] [U] [ 177.247168][T10444] [U] [ 177.248574][T10444] [U] [ 177.249390][T10444] [U] [ 177.250189][T10444] [U] [ 177.273378][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.275645][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.279673][T10453] netlink: 'syz.3.957': attribute type 33 has an invalid length. [ 177.301242][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.383508][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.394180][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.488585][T10448] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.492288][T10448] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.495212][T10448] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.498103][T10448] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.542504][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.9.952'. [ 177.547863][T10453] team0: left promiscuous mode [ 177.647965][T10469] netlink: 100 bytes leftover after parsing attributes in process `syz.3.959'. [ 177.887150][T10435] [U] [ 178.278264][T10502] lo speed is unknown, defaulting to 1000 [ 178.341295][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.759008][T10526] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.027195][T10553] lo speed is unknown, defaulting to 1000 [ 179.072054][T10550] random: crng reseeded on system resumption [ 179.095889][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 179.098832][T10550] Restarting kernel threads ... done. [ 179.344802][T10566] mkiss: ax0: crc mode is auto. [ 179.381216][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.531450][T10569] input: syz0 as /devices/virtual/input/input16 [ 179.547385][T10569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.689535][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 180.178172][T10609] lo speed is unknown, defaulting to 1000 [ 180.421197][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.045957][T10647] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.048626][T10647] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 181.051417][T10647] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.461278][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.641969][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 181.641983][ T39] audit: type=1326 audit(1735204180.691:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.651465][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1000'. [ 181.659066][ T39] audit: type=1326 audit(1735204180.691:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.669853][ T39] audit: type=1326 audit(1735204180.701:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.676467][ T39] audit: type=1326 audit(1735204180.701:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.682668][ T39] audit: type=1326 audit(1735204180.701:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.688880][ T39] audit: type=1326 audit(1735204180.701:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.695384][ T39] audit: type=1326 audit(1735204180.701:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.9.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x7ffc0000 [ 181.703708][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1001'. [ 181.849598][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1001'. [ 181.932962][T10678] overlayfs: failed to resolve './file0:/': -2 [ 182.165766][ T6773] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 182.194987][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1006'. [ 182.291302][ T6773] usb 14-1: device descriptor read/64, error -71 [ 182.501202][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.551444][ T6773] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 182.681239][ T6773] usb 14-1: device descriptor read/64, error -71 [ 182.775215][ T39] audit: type=1804 audit(1735204181.821:256): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1012" name="/newroot/67/file0/bus" dev="9p" ino=36575044 res=1 errno=0 [ 182.793347][ T6773] usb usb14-port1: attempt power cycle [ 183.131458][ T6773] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 183.154234][ T6773] usb 14-1: device descriptor read/8, error -71 [ 183.391285][ T6773] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 183.412665][ T6773] usb 14-1: device descriptor read/8, error -71 [ 183.437865][T10712] lo speed is unknown, defaulting to 1000 [ 183.524288][ T6773] usb usb14-port1: unable to enumerate USB device [ 183.544284][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.591224][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.894957][T10732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.897014][T10732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.898841][T10732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 184.906426][T10732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 184.908739][T10732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.911074][T10732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.914809][T10732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.022315][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1032'. [ 185.119310][T10784] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1034'. [ 185.132320][ T5953] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 185.571601][T10793] [ 185.572357][T10793] ====================================================== [ 185.574343][T10793] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.576274][T10793] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted [ 185.579669][T10793] ------------------------------------------------------ [ 185.582390][T10793] syz.6.1038/10793 is trying to acquire lock: [ 185.584013][T10793] ffff888040f985d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.587190][T10793] [ 185.587190][T10793] but task is already holding lock: [ 185.589304][T10793] ffff888040f980a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 185.592551][T10793] [ 185.592551][T10793] which lock already depends on the new lock. [ 185.592551][T10793] [ 185.595889][T10793] [ 185.595889][T10793] the existing dependency chain (in reverse order) is: [ 185.598568][T10793] [ 185.598568][T10793] -> #4 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 185.601744][T10793] blk_mq_submit_bio+0x1fb6/0x24c0 [ 185.603387][T10793] __submit_bio+0x384/0x540 [ 185.604833][T10793] submit_bio_noacct_nocheck+0x698/0xd70 [ 185.606606][T10793] submit_bio_noacct+0x93a/0x1e20 [ 185.608221][T10793] mpage_readahead+0x41d/0x590 [ 185.609735][T10793] read_pages+0x1a8/0xdc0 [ 185.611217][T10793] page_cache_ra_unbounded+0x3dc/0x750 [ 185.612930][T10793] force_page_cache_ra+0x24b/0x340 [ 185.614521][T10793] page_cache_sync_ra+0x110/0x9c0 [ 185.616133][T10793] filemap_get_pages+0xd7b/0x1be0 [ 185.617740][T10793] filemap_read+0x3ca/0xd70 [ 185.619651][T10793] blkdev_read_iter+0x187/0x480 [ 185.621210][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.621625][T10793] vfs_read+0x87f/0xbe0 [ 185.625341][T10793] ksys_read+0x12b/0x250 [ 185.626732][T10793] do_syscall_64+0xcd/0x250 [ 185.628169][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.629957][T10793] [ 185.629957][T10793] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 185.632281][T10793] down_read+0x9a/0x330 [ 185.633610][T10793] filemap_fault+0x62c/0x2820 [ 185.635050][T10793] __do_fault+0x10a/0x490 [ 185.636461][T10793] do_pte_missing+0xebd/0x3e00 [ 185.637986][T10793] __handle_mm_fault+0x103c/0x2a40 [ 185.639594][T10793] handle_mm_fault+0x3fa/0xaa0 [ 185.641055][T10793] __get_user_pages+0x8d9/0x3b50 [ 185.642638][T10793] populate_vma_page_range+0x27f/0x3a0 [ 185.644381][T10793] __mm_populate+0x1d6/0x380 [ 185.645851][T10793] do_mlock+0x40a/0x7d0 [ 185.647227][T10793] __ia32_sys_mlock+0x57/0x80 [ 185.648722][T10793] __do_fast_syscall_32+0x73/0x120 [ 185.650346][T10793] do_fast_syscall_32+0x32/0x80 [ 185.651880][T10793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.653820][T10793] [ 185.653820][T10793] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 185.655988][T10793] __might_fault+0x11b/0x190 [ 185.657466][T10793] _copy_from_user+0x29/0xd0 [ 185.659125][T10793] __blk_trace_setup+0xa8/0x180 [ 185.660660][T10793] blk_trace_setup+0x47/0x70 [ 185.662123][T10793] sg_ioctl+0x7a3/0x26b0 [ 185.663565][T10793] compat_ptr_ioctl+0x6b/0xa0 [ 185.665053][T10793] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 185.666698][T10793] __do_fast_syscall_32+0x73/0x120 [ 185.668314][T10793] do_fast_syscall_32+0x32/0x80 [ 185.669853][T10793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.671804][T10793] [ 185.671804][T10793] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 185.674046][T10793] __mutex_lock+0x19b/0xa60 [ 185.675487][T10793] blk_register_queue+0x13c/0x4f0 [ 185.677074][T10793] add_disk_fwnode+0x785/0x1300 [ 185.678687][T10793] brd_alloc.isra.0+0x50a/0x7c0 [ 185.680216][T10793] brd_init+0x12b/0x1d0 [ 185.681556][T10793] do_one_initcall+0x128/0x630 [ 185.683081][T10793] kernel_init_freeable+0x58f/0x8b0 [ 185.684717][T10793] kernel_init+0x1c/0x2b0 [ 185.686113][T10793] ret_from_fork+0x45/0x80 [ 185.687538][T10793] ret_from_fork_asm+0x1a/0x30 [ 185.689056][T10793] [ 185.689056][T10793] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 185.691197][T10793] __lock_acquire+0x249e/0x3c40 [ 185.692721][T10793] lock_acquire.part.0+0x11b/0x380 [ 185.694337][T10793] __mutex_lock+0x19b/0xa60 [ 185.695786][T10793] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.697638][T10793] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 185.699378][T10793] nbd_start_device+0x15b/0xd70 [ 185.700915][T10793] nbd_ioctl+0x21a/0xfd0 [ 185.702292][T10793] compat_blkdev_ioctl+0x2f7/0x750 [ 185.703902][T10793] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 185.705548][T10793] __do_fast_syscall_32+0x73/0x120 [ 185.707143][T10793] do_fast_syscall_32+0x32/0x80 [ 185.708650][T10793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.710648][T10793] [ 185.710648][T10793] other info that might help us debug this: [ 185.710648][T10793] [ 185.713524][T10793] Chain exists of: [ 185.713524][T10793] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#55 [ 185.713524][T10793] [ 185.717661][T10793] Possible unsafe locking scenario: [ 185.717661][T10793] [ 185.719766][T10793] CPU0 CPU1 [ 185.721262][T10793] ---- ---- [ 185.722784][T10793] lock(&q->q_usage_counter(io)#55); [ 185.724183][T10793] lock(mapping.invalidate_lock#2); [ 185.726365][T10793] lock(&q->q_usage_counter(io)#55); [ 185.728596][T10793] lock(&q->sysfs_lock); [ 185.729840][T10793] [ 185.729840][T10793] *** DEADLOCK *** [ 185.729840][T10793] [ 185.732139][T10793] 4 locks held by syz.6.1038/10793: [ 185.733632][T10793] #0: ffff888024212198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 185.736276][T10793] #1: ffff8880242120d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 185.739338][T10793] #2: ffff888040f980a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 185.742679][T10793] #3: ffff888040f980e0 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 185.746099][T10793] [ 185.746099][T10793] stack backtrace: [ 185.747792][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.6.1038 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 185.750824][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.753896][T10793] Call Trace: [ 185.754871][T10793] [ 185.755723][T10793] dump_stack_lvl+0x116/0x1f0 [ 185.757088][T10793] print_circular_bug+0x41c/0x610 [ 185.758543][T10793] check_noncircular+0x31a/0x400 [ 185.759971][T10793] ? __pfx_check_noncircular+0x10/0x10 [ 185.761537][T10793] ? save_trace+0x42/0xa10 [ 185.762830][T10793] ? add_lock_to_list+0x17d/0x390 [ 185.764278][T10793] __lock_acquire+0x249e/0x3c40 [ 185.765659][T10793] ? __pfx___lock_acquire+0x10/0x10 [ 185.767159][T10793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 185.768929][T10793] ? stack_depot_save_flags+0x36d/0x9e0 [ 185.770518][T10793] lock_acquire.part.0+0x11b/0x380 [ 185.771982][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.773731][T10793] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 185.775343][T10793] ? rcu_is_watching+0x12/0xc0 [ 185.776723][T10793] ? trace_lock_acquire+0x14e/0x1f0 [ 185.778212][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.779957][T10793] ? lock_acquire+0x2f/0xb0 [ 185.781253][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.783015][T10793] __mutex_lock+0x19b/0xa60 [ 185.784339][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.786073][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.787833][T10793] ? __pfx___mutex_lock+0x10/0x10 [ 185.789279][T10793] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.791039][T10793] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 185.792750][T10793] ? lock_acquire.part.0+0x11b/0x380 [ 185.794274][T10793] ? __mutex_trylock_common+0xea/0x250 [ 185.795823][T10793] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.797509][T10793] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 185.799132][T10793] ? rcu_is_watching+0x12/0xc0 [ 185.800500][T10793] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 185.802324][T10793] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.804015][T10793] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 185.805630][T10793] ? __pfx___mutex_lock+0x10/0x10 [ 185.807075][T10793] ? trace_contention_end+0xee/0x140 [ 185.808612][T10793] ? __mutex_lock+0x1cc/0xa60 [ 185.810002][T10793] ? nbd_ioctl+0x151/0xfd0 [ 185.811299][T10793] ? __pfx___mutex_lock+0x10/0x10 [ 185.812745][T10793] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 185.814354][T10793] nbd_start_device+0x15b/0xd70 [ 185.815753][T10793] ? bpf_lsm_capable+0x9/0x10 [ 185.817124][T10793] nbd_ioctl+0x21a/0xfd0 [ 185.818349][T10793] ? __pfx_nbd_ioctl+0x10/0x10 [ 185.819730][T10793] ? __pfx_lock_release+0x10/0x10 [ 185.821176][T10793] ? trace_lock_acquire+0x14e/0x1f0 [ 185.822680][T10793] ? __pfx_nbd_ioctl+0x10/0x10 [ 185.824062][T10793] compat_blkdev_ioctl+0x2f7/0x750 [ 185.825539][T10793] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 185.827173][T10793] ? __fget_files+0x206/0x3a0 [ 185.828533][T10793] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 185.830159][T10793] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 185.831675][T10793] __do_fast_syscall_32+0x73/0x120 [ 185.833156][T10793] do_fast_syscall_32+0x32/0x80 [ 185.834569][T10793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.836346][T10793] RIP: 0023:0xf7fa5579 [ 185.837527][T10793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.842988][T10793] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 185.845357][T10793] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ab03 [ 185.847633][T10793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.849894][T10793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.852157][T10793] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 185.854430][T10793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.856701][T10793] [ 185.961502][T10793] block nbd6: shutting down sockets [ 186.074448][ T6420] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.211865][ T6420] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.273389][ T6420] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.322959][ T6420] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.655169][ T6420] bond0 (unregistering): left promiscuous mode [ 186.663548][ T6420] bond0 (unregistering): Released all slaves [ 186.666670][ T6420] bond1 (unregistering): Released all slaves [ 186.671229][ C3] blackhole_netdev_xmit(): Dropping skb. [ 186.672897][ C3] blackhole_netdev_xmit(): Dropping skb. [ 186.804670][ T6420] hsr_slave_0: left promiscuous mode [ 186.808639][ T6420] hsr_slave_1: left allmulticast mode [ 186.810216][ T6420] hsr_slave_1: left promiscuous mode [ 186.811958][ T6420] veth1_macvtap: left promiscuous mode [ 186.813565][ T6420] veth0_macvtap: left promiscuous mode [ 186.815221][ T6420] veth1_vlan: left promiscuous mode [ 186.816830][ T6420] veth0_vlan: left promiscuous mode [ 187.711211][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.724664][ T6420] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.784480][ T6420] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.853481][ T6420] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.923467][ T6420] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.320975][ T6420] bridge_slave_1: left allmulticast mode [ 188.323841][ T6420] bridge_slave_1: left promiscuous mode [ 188.326200][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.332392][ T6420] bridge_slave_0: left allmulticast mode [ 188.334668][ T6420] bridge_slave_0: left promiscuous mode [ 188.336967][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.342954][ T6420] bridge_slave_1: left allmulticast mode [ 188.344643][ T6420] bridge_slave_1: left promiscuous mode [ 188.346301][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.349003][ T6420] bridge_slave_0: left allmulticast mode [ 188.350661][ T6420] bridge_slave_0: left promiscuous mode [ 188.353443][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.653838][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.657460][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.660369][ T6420] bond0 (unregistering): Released all slaves [ 188.748008][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.751213][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.754519][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.757165][ T6420] bond0 (unregistering): Released all slaves [ 189.214307][ T6420] hsr_slave_0: left promiscuous mode [ 189.216625][ T6420] hsr_slave_1: left promiscuous mode [ 189.219038][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.222156][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.225389][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.228160][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.232337][ T6420] hsr_slave_0: left promiscuous mode [ 189.234684][ T6420] hsr_slave_1: left promiscuous mode [ 189.236976][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.239867][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.246178][ T6420] veth1_macvtap: left promiscuous mode [ 189.248396][ T6420] veth0_macvtap: left promiscuous mode [ 189.250609][ T6420] veth1_vlan: left promiscuous mode [ 189.252884][ T6420] veth0_vlan: left promiscuous mode [ 189.437491][ T6420] team0 (unregistering): Port device team_slave_1 removed [ 189.485195][ T6420] team0 (unregistering): Port device team_slave_0 removed [ 189.781518][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.298513][ T6420] team0 (unregistering): Port device team_slave_1 removed [ 190.380100][ T6420] team0 (unregistering): Port device team_slave_0 removed [ 190.821197][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.861309][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.911206][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.941240][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.991192][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 09:09:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000437e3c RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004c252000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142d25 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc90003b8f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000069 R14=ffffffff85142cc0 R15=0000000000000000 RIP=ffffffff85142d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056f504c0 CR3=000000004ebb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000019143c RBX=0000000000000002 RCX=ffffffff8b1a3819 RDX=ffffed10056c6fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffb36f4f18 CR3=000000002977c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000f4d2a000 RCX=ffffffff81e2a224 RDX=00000000f4d29000 RSI=00000000f4d29000 RDI=00000000f4d2a000 RBP=0000000000000000 RSP=ffffc90003a5f870 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=00000000f4d29000 R15=ffffc90003a5fcb8 RIP=ffffffff8199510b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000